Error: rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.mft
File:                     46435C07BDEF9EF66EA3F9AC516B398FE487AF17.mft (raw, json)
Hash identifier:          aTaqIRt3i4fLCZ9bsTD7xfksWS7mqvWog3GEAxawzns=
Subject key identifier:   A7:32:61:DB:87:CF:A8:DB:42:9E:73:66:B0:6A:27:41:40:7B:43:1F
Authority key identifier: 46:43:5C:07:BD:EF:9E:F6:6E:A3:F9:AC:51:6B:39:8F:E4:87:AF:17
Certificate issuer:       /CN=46435C07BDEF9EF66EA3F9AC516B398FE487AF17
Certificate serial:       33707C389E31E34CE43F44263318BE52DFD6A9C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.mft
Manifest number:          04CB
Signing time:             Mon 26 Oct 2026 12:41:51 +0000
Manifest this update:     Mon 26 Oct 2026 12:36:51 +0000
Manifest next update:     Tue 27 Oct 2026 14:04:51 +0000
Files and hashes:         1: 46435C07BDEF9EF66EA3F9AC516B398FE487AF17.crl (hash: nnSqB0KEOIPyqpp9noOZcoM4uTAWNY3Nt3ctmrQ2y7M=)
                          2: 3137372e39332e3138342e302f32322d3234203d3e203532383639.roa (hash: eE7Q0OD7F5xMUEU7LWhkf8npt2OMJAjI8Sl0qnqPWEw=)
                          3: 3137372e3132382e36342e302f32312d3234203d3e203532383639.roa (hash: a+s2eCS1Qi9XdN+0NGZcybpvGXeVSYAA51idoewPqEg=)
                          4: 323830343a313733343a3a2f33322d3438203d3e203532383639.roa (hash: B1qj5H95iAFViQXKUAZBh1CF0OK++m7Hb8x8x8RW7oM=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:70:7c:38:9e:31:e3:4c:e4:3f:44:26:33:18:be:52:df:d6:a9:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46435C07BDEF9EF66EA3F9AC516B398FE487AF17
        Validity
            Not Before: Oct 26 12:36:51 2026 GMT
            Not After : Oct 27 14:04:51 2026 GMT
        Subject: CN=A73261DB87CFA8DB429E7366B06A2741407B431F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d3:2f:0c:7f:a5:89:fe:92:0e:92:b4:2d:e9:
                    41:fd:5f:2a:f6:d1:80:c4:db:bd:de:89:c6:de:73:
                    e6:78:e2:a7:47:73:17:38:ec:41:3d:1b:ed:9e:14:
                    f0:6c:64:b5:46:0c:00:2a:5f:f4:b4:e6:5c:9d:14:
                    6d:0a:20:10:1d:0e:14:56:8c:ed:bb:d9:50:95:85:
                    f7:1d:7a:1c:78:e1:19:ab:9b:89:7a:33:9a:8f:57:
                    05:1a:cd:72:98:db:70:e3:c6:28:0c:2d:81:54:42:
                    cb:f1:f1:8c:fd:02:4a:1b:b9:6f:a3:96:2a:3f:f4:
                    b1:2d:6f:26:67:c2:bf:92:a2:f4:de:e4:f4:8c:02:
                    88:2a:64:67:09:f4:09:84:10:90:a7:60:65:52:a5:
                    e0:3c:ae:a8:02:d2:e2:df:fa:0e:c0:40:5d:ba:1d:
                    8a:5f:07:6c:68:15:37:0e:45:16:39:db:bb:cb:2a:
                    e9:e6:6f:0b:85:23:d8:12:20:09:c6:1a:13:c1:51:
                    c6:4f:8a:73:ae:f2:98:e4:5a:7c:25:27:c3:b8:8e:
                    6e:25:bb:bc:c6:f9:17:6c:ef:80:49:68:7b:65:98:
                    67:e1:74:c5:b6:ab:1a:10:60:a2:2d:aa:6f:8f:c7:
                    54:41:d2:43:0f:43:da:04:ba:b6:5f:f8:1e:50:2b:
                    17:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:32:61:DB:87:CF:A8:DB:42:9E:73:66:B0:6A:27:41:40:7B:43:1F
            X509v3 Authority Key Identifier:
                keyid:46:43:5C:07:BD:EF:9E:F6:6E:A3:F9:AC:51:6B:39:8F:E4:87:AF:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:37:b7:f1:68:3b:5b:6a:96:06:55:e1:f1:98:29:e2:df:d7:
         af:91:90:df:62:65:46:72:6c:44:bf:29:e4:7e:00:16:23:8d:
         9b:8d:ca:83:68:82:67:04:3d:a0:e0:c5:b5:0e:a2:6b:70:0e:
         2a:1a:dd:73:e5:29:6a:dd:cb:55:f4:79:e0:95:a8:70:ce:45:
         e0:5d:27:b6:bc:c6:b8:8c:49:48:08:25:41:cd:4c:38:34:c5:
         42:f1:38:b5:9a:e9:19:1d:3f:72:a2:0d:c3:f8:06:e1:42:e8:
         02:e1:b6:49:b4:93:b5:66:a3:ec:52:70:0a:31:cf:09:f4:17:
         59:b5:7e:a3:7b:24:2c:ad:0e:08:39:61:04:e1:a2:a5:12:32:
         fb:3e:23:22:6e:37:90:21:f6:0c:20:f3:fa:e8:69:b3:88:c1:
         a6:1f:09:c5:f2:45:16:26:ee:21:6c:89:ee:3f:5b:45:df:5b:
         6c:e1:f2:1e:c4:25:41:bd:4d:68:0c:ca:d7:9a:7f:48:19:ab:
         aa:16:39:01:fd:75:05:ff:59:e7:d1:ea:62:62:86:50:51:00:
         ca:e2:16:22:51:02:91:10:49:85:dc:22:54:51:27:6a:be:8b:
         0a:35:e8:50:cd:ed:2e:64:48:a6:b6:c1:e8:37:02:98:d1:0c:
         ae:3a:00:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:52:46 2026 by rpki-client