
Error: rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft
File: B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft (raw, json)
Hash identifier: Ff4DGcDKGCL5j2XC2m9laL8qNFYCFd94XlAE6efeR14=
Subject key identifier: 31:5F:EB:7B:77:08:13:92:B8:34:F5:7F:14:CA:0D:07:04:16:81:7E
Authority key identifier: B5:FC:5F:08:B8:C4:86:40:13:DC:3A:4C:A4:7C:22:00:B3:C2:B8:19
Certificate issuer: /CN=B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819
Certificate serial: 430F8E57D99C1582B0C5A041BCA414A6734E7830
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft
Manifest number: 04EA
Signing time: Sun 01 Nov 2026 22:30:02 +0000
Manifest this update: Sun 01 Nov 2026 22:25:02 +0000
Manifest next update: Tue 03 Nov 2026 02:10:02 +0000
Files and hashes: 1: B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl (hash: PNk49Iff/s6PEQoVkT3n3a/ZsmwFHYvZPbjplUVj26M=)
2: 323830343a333264343a34313a3a2f34382d3438203d3e20323635313030.roa (hash: Cp3dbohJVcqt37sfTUoMJ3E+bdUhg84eKNROBpdrawk=)
3: 323830343a333264343a383030303a3a2f33332d3333203d3e20323635313030.roa (hash: zQQXjp3mj9Ro+jtHpOapxa4PEYrJqPPs6DpcZJN+5E4=)
4: 323830343a333264343a3a2f33332d3436203d3e20323635313030.roa (hash: DP7VMVTULVPm/t4uYReoBaIU42700EU4VYLJ72yqCDM=)
5: 323830343a333264343a34303a3a2f34382d3438203d3e20323635313030.roa (hash: c9x/IixrLA46R9oqOnvvu1Jek/n6fhR07K83yyiVRus=)
6: 323830343a333264343a3a2f33322d3332203d3e20323635313030.roa (hash: Q9KP5wCh+ZPDTItZbChYfaToBd4KkV1aPEf2axonbTk=)
7: 3137302e3235342e38302e302f32322d3234203d3e20323635313030.roa (hash: rjzLK3OVuqaSmw/wNvoff+GpB+z6iVTAM2YCsZN8qSY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl
rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Nov 2026 02:10:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:0f:8e:57:d9:9c:15:82:b0:c5:a0:41:bc:a4:14:a6:73:4e:78:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819
Validity
Not Before: Nov 1 22:25:02 2026 GMT
Not After : Nov 3 02:10:02 2026 GMT
Subject: CN=315FEB7B77081392B834F57F14CA0D070416817E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:db:3c:e5:a2:b7:02:16:01:84:1d:c3:e1:22:
4e:91:c9:b4:b8:77:66:0f:a4:9c:38:00:48:77:e1:
5e:e9:65:b8:e8:44:8f:a3:6d:5b:38:8c:e6:15:b6:
4e:da:20:bc:c5:6f:25:8e:ff:13:cb:5d:5d:f6:04:
64:f4:f2:13:98:31:17:c6:fe:a9:5f:e8:f9:58:63:
3f:8e:76:a3:47:77:1d:4c:30:87:f3:28:75:b9:f7:
ad:72:5e:8d:09:7b:21:0e:10:cb:4e:4d:20:ee:dc:
7d:89:16:28:25:36:e3:f3:8b:64:21:ca:af:40:17:
da:1c:45:97:a9:8e:5d:9f:ab:6f:08:2f:e0:3b:e1:
c7:e5:87:71:46:75:d2:9f:a3:17:3d:0b:79:3a:61:
e5:02:42:a6:ab:0e:45:f0:16:11:f3:d1:94:68:e2:
f7:f9:47:b2:b8:1f:11:39:d2:02:70:f0:5e:3a:35:
88:bf:5b:ea:61:51:d5:15:d1:bc:61:08:6a:30:89:
dd:69:5c:8b:85:26:cf:f3:c8:6c:1c:78:63:9d:78:
36:6c:c8:00:8d:86:76:fd:ed:25:6b:29:5b:ca:a0:
6b:bb:4d:43:e9:e7:6e:c9:84:fa:20:92:67:a9:b1:
39:90:ec:29:88:33:a1:41:87:d2:35:8a:b8:37:23:
17:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5F:EB:7B:77:08:13:92:B8:34:F5:7F:14:CA:0D:07:04:16:81:7E
X509v3 Authority Key Identifier:
keyid:B5:FC:5F:08:B8:C4:86:40:13:DC:3A:4C:A4:7C:22:00:B3:C2:B8:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:65:72:76:40:38:90:c9:ec:57:f2:f4:0c:9c:65:b1:5f:c2:
50:9e:51:a9:f4:7b:38:8b:77:89:67:2c:ac:3a:20:d1:3c:23:
a1:b8:9f:df:2e:7e:b7:f3:da:a9:01:e0:80:98:fa:cc:ac:fe:
9b:7e:f0:e3:60:9a:d0:c9:66:89:13:2c:3c:d3:55:76:61:32:
99:23:e0:49:19:64:84:88:58:46:00:13:c2:a6:d0:57:2e:79:
7b:89:fb:f1:91:41:22:c3:9b:3c:f5:a2:35:a5:ab:0e:98:fd:
36:94:44:38:f0:6e:be:90:3f:e6:b0:ee:02:b6:ba:86:d1:bf:
1a:21:3d:6a:3c:5c:e9:09:0c:77:ab:3a:4c:ae:c8:ff:5a:39:
54:06:5f:17:90:11:20:7f:50:e8:d1:51:59:f8:e8:ba:43:2d:
1d:2b:e0:3b:90:41:5a:7f:38:34:4c:91:a8:9d:a2:a6:d5:d6:
05:14:99:52:ee:2a:ce:e5:ac:58:f1:23:51:7f:b6:ed:26:1b:
a3:44:3d:85:f8:d8:97:16:06:84:0c:33:28:b3:8c:44:6f:8f:
57:4d:27:ac:48:d3:fe:24:d6:5b:a3:a6:c3:91:f3:46:32:29:
d9:82:27:5e:5b:f5:00:f1:ad:95:4a:a1:39:9c:fd:88:ad:6f:
55:8b:76:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 10:01:55 2026 by rpki-client