Error: rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.mft
File:                     46435C07BDEF9EF66EA3F9AC516B398FE487AF17.mft (raw, json)
Hash identifier:          DUQeNl10AIeg3sRRJlQ4U5PGoCY7UTCqPxKdF+hSDYs=
Subject key identifier:   4C:64:9A:8E:38:F2:00:8E:FE:90:0A:F2:0E:CA:AD:50:52:7E:87:C0
Authority key identifier: 46:43:5C:07:BD:EF:9E:F6:6E:A3:F9:AC:51:6B:39:8F:E4:87:AF:17
Certificate issuer:       /CN=46435C07BDEF9EF66EA3F9AC516B398FE487AF17
Certificate serial:       72BF3DA134C545CF916E2E21F69C7CFC442F4D55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.mft
Manifest number:          0477
Signing time:             Mon 24 Aug 2026 02:25:28 +0000
Manifest this update:     Mon 24 Aug 2026 02:20:28 +0000
Manifest next update:     Tue 25 Aug 2026 04:21:28 +0000
Files and hashes:         1: 3137372e39332e3138342e302f32322d3234203d3e203532383639.roa (hash: eE7Q0OD7F5xMUEU7LWhkf8npt2OMJAjI8Sl0qnqPWEw=)
                          2: 323830343a313733343a3a2f33322d3438203d3e203532383639.roa (hash: B1qj5H95iAFViQXKUAZBh1CF0OK++m7Hb8x8x8RW7oM=)
                          3: 46435C07BDEF9EF66EA3F9AC516B398FE487AF17.crl (hash: rvU627Y15tMhUAM/ABFCmdDdFBLP79AhLPbWycfCxLE=)
                          4: 3137372e3132382e36342e302f32312d3234203d3e203532383639.roa (hash: a+s2eCS1Qi9XdN+0NGZcybpvGXeVSYAA51idoewPqEg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.crl
                          rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 04:21:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:bf:3d:a1:34:c5:45:cf:91:6e:2e:21:f6:9c:7c:fc:44:2f:4d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46435C07BDEF9EF66EA3F9AC516B398FE487AF17
        Validity
            Not Before: Aug 24 02:20:28 2026 GMT
            Not After : Aug 25 04:21:28 2026 GMT
        Subject: CN=4C649A8E38F2008EFE900AF20ECAAD50527E87C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:63:05:29:cf:ef:3d:f5:c9:37:37:00:e3:62:
                    59:ff:02:20:e2:d2:44:03:34:c7:e5:41:b9:1d:90:
                    0f:c4:02:b0:77:e8:67:d2:ce:7c:f7:26:f8:33:b4:
                    9d:41:1d:fa:77:d8:38:62:59:df:d0:19:fb:84:0f:
                    65:bc:8a:60:b7:41:32:29:a2:13:07:47:ec:f8:f0:
                    f9:ee:6b:bb:ea:45:4c:59:16:75:3e:b7:58:d8:73:
                    fe:aa:cb:2a:83:d5:a7:45:af:76:a9:d7:39:8f:1a:
                    97:e5:7b:46:99:3a:22:33:d3:52:74:a0:1f:45:de:
                    b5:2b:eb:30:c0:8f:bf:b0:11:f8:12:61:be:3f:ec:
                    8b:df:d3:29:cf:9a:f7:b2:90:97:ee:7b:5c:26:04:
                    05:1d:75:66:95:9a:27:8e:f5:fc:ff:30:d3:df:e5:
                    7b:59:56:9c:ba:94:a1:68:77:b0:7f:16:ab:7a:47:
                    53:e4:d3:b3:67:b2:38:75:a0:6d:64:ec:5d:dd:22:
                    ec:34:bf:d6:6b:4d:33:50:f9:d4:0d:ca:ff:4f:fb:
                    3f:86:bd:c9:41:b7:33:a6:0c:fb:1a:8c:a9:82:d5:
                    19:bb:fe:b9:05:90:a5:2f:7c:7e:d9:57:da:41:1f:
                    55:05:d8:74:cd:9e:82:fe:4b:fb:41:13:11:cd:4a:
                    da:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:64:9A:8E:38:F2:00:8E:FE:90:0A:F2:0E:CA:AD:50:52:7E:87:C0
            X509v3 Authority Key Identifier:
                keyid:46:43:5C:07:BD:EF:9E:F6:6E:A3:F9:AC:51:6B:39:8F:E4:87:AF:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:24:39:15:53:4c:8a:ed:30:10:30:8e:9a:e4:a2:a5:53:01:
         a4:08:10:54:7f:b2:89:f5:63:eb:75:27:cc:39:9a:e1:1b:fa:
         41:24:3f:35:b3:78:54:68:6d:9d:2e:11:d5:c9:88:3a:2a:10:
         f0:dd:9f:ca:46:50:8d:c0:a1:f4:7b:ce:b5:30:af:bd:3f:f1:
         b3:02:cc:ca:88:33:eb:64:22:2d:72:0e:8c:31:96:63:39:e5:
         36:2a:fc:4b:7f:e7:74:03:53:2c:03:9b:f6:64:ac:a7:c9:49:
         c1:2b:7a:2d:cf:92:43:11:38:a4:84:e2:21:46:e0:3e:f6:f9:
         ac:b2:94:a1:7b:d8:b2:56:03:1f:01:9f:d9:5b:a0:4d:bf:fe:
         fb:01:68:ee:14:99:ca:77:4f:db:67:b3:72:e7:76:e0:21:8c:
         74:1c:1d:bb:13:00:30:b5:c1:e9:f3:84:cf:b2:13:b5:ae:e7:
         1c:3e:51:ff:dd:2c:08:25:b2:ed:1c:f7:d0:73:96:90:47:3c:
         79:ff:d1:26:85:64:59:7c:80:9d:e4:4d:3c:47:c9:69:bd:ce:
         2c:ad:26:bc:33:b0:11:cb:53:6c:bd:65:68:66:5f:68:cf:6b:
         1b:29:78:42:d3:92:36:07:b1:70:1c:f3:3c:b4:f2:f0:80:38:
         c5:71:4f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:45:11 2026 by rpki-client