Error: rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft
File:                     3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft (raw, json)
Hash identifier:          r2PMYcka1YT3AEv34enmkzZIaMeLlz5s3jEoJroUApo=
Subject key identifier:   EC:4E:3F:5F:43:25:80:2E:87:0C:BD:43:86:E1:6E:31:2C:44:49:83
Authority key identifier: 3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0
Certificate issuer:       /CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
Certificate serial:       29F0C45B8AE615973528F64B25A21723D7CB596D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft
Manifest number:          0478
Signing time:             Sun 23 Aug 2026 00:17:26 +0000
Manifest this update:     Sun 23 Aug 2026 00:12:25 +0000
Manifest next update:     Mon 24 Aug 2026 03:01:25 +0000
Files and hashes:         1: 323830343a363031383a3a2f33332d3333203d3e20323639313435.roa (hash: QNu3N4Q6fO05gIGJMeAaG22Ov/LtiCeuvFBnnuXQaow=)
                          2: 323830343a363031383a383030303a3a2f33332d3333203d3e20323639313435.roa (hash: KivaW3ZlK69l+y9q+bdg0FUrxGdXfuK1ZNEbBCDZre4=)
                          3: 34352e3138302e3138342e302f32322d3232203d3e20323639313435.roa (hash: 3EpRMfCJQ/oplvoRy8WV3jeX247HTwGAj4R/48Hj6x4=)
                          4: 323830343a363031383a3a2f33322d3332203d3e20323639313435.roa (hash: GEfn4Bl00zdhGTYrW9jbA0jPa3LwMFFlV00DI8uLXIg=)
                          5: 34352e3138302e3138342e302f32332d3233203d3e20323639313435.roa (hash: a8haySQUKnVEPYwnbcI28rS2mFG3JY2FDkGLXbuMBEw=)
                          6: 34352e3138302e3138362e302f32332d3233203d3e20323639313435.roa (hash: boYO6tOGQgroLgW6ULNmJAn4NcrWCrbNrFuebeCiBpM=)
                          7: 323830343a363031383a3a2f33322d3334203d3e20323639313435.roa (hash: M0LcOOmMZo8QOyi2wAEmMI1eLKe5vGXnwQKZCmnT6zo=)
                          8: 3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl (hash: k+F+3X3AbHv5wb3s0C8V1Uu+NxdU2ywzDcS/lgqfsEU=)
                          9: 34352e3138302e3138342e302f32322d3234203d3e20323639313435.roa (hash: oiE0Qu8gWI7bULJP3gSoQxHTCyZGoiRgn0Zt7+FNk6M=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl
                          rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 03:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f0:c4:5b:8a:e6:15:97:35:28:f6:4b:25:a2:17:23:d7:cb:59:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
        Validity
            Not Before: Aug 23 00:12:25 2026 GMT
            Not After : Aug 24 03:01:25 2026 GMT
        Subject: CN=EC4E3F5F4325802E870CBD4386E16E312C444983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e9:fe:aa:09:86:3a:ce:de:c8:60:d4:47:cd:
                    94:56:09:7e:e7:74:64:d3:53:f7:0b:dc:f7:fb:4f:
                    4d:df:85:7f:88:5b:d0:72:d8:72:e5:22:4b:8a:b5:
                    2c:ce:6d:0a:fb:aa:57:e1:e3:53:5f:73:e2:d5:82:
                    5a:9f:65:33:ff:54:7c:e4:b2:18:85:4a:d9:bb:5b:
                    b1:5b:76:ea:e4:87:eb:0e:f0:af:32:a8:70:1f:94:
                    68:7e:25:d3:54:41:f7:5b:dc:6f:ad:cf:73:a9:d0:
                    22:ad:5e:3c:c6:a6:0b:aa:b9:e3:89:71:9c:ee:0f:
                    cc:e5:06:09:ba:81:3e:d3:1e:0e:12:96:19:4b:0b:
                    0e:dd:61:90:b8:c2:1e:02:72:70:21:ea:d1:12:6a:
                    11:d9:3d:d3:34:d1:14:15:fa:8c:75:4b:97:76:35:
                    49:50:17:5d:ec:19:db:78:51:bf:0e:cf:fc:29:bc:
                    3d:e8:37:2b:75:cb:bc:7d:c2:c7:ae:7e:31:e7:e1:
                    d7:c6:c0:2f:67:05:66:aa:52:fe:d1:ef:c9:9c:f8:
                    d0:59:27:c5:f3:88:8f:fd:58:95:a4:6c:38:25:54:
                    2c:78:37:4b:8a:0c:95:d7:ac:fe:e0:ba:ae:f9:c6:
                    5e:c1:48:52:70:55:ba:a7:14:06:4e:11:8a:e3:da:
                    8a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:4E:3F:5F:43:25:80:2E:87:0C:BD:43:86:E1:6E:31:2C:44:49:83
            X509v3 Authority Key Identifier:
                keyid:3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:43:4f:c3:2a:1b:1f:bc:9c:2b:b4:f0:18:ba:1d:e2:4b:da:
         cd:cf:8e:f8:54:05:4c:62:60:b1:1b:47:71:81:8e:c6:60:32:
         49:2d:3d:67:5c:34:9a:23:77:24:ae:de:44:e4:cf:6e:d2:bb:
         fd:b5:6f:21:d2:8b:e0:b0:ad:93:7e:8a:87:ae:bf:44:dc:7d:
         7a:c8:eb:de:19:9e:f8:ce:58:72:4d:b1:95:77:37:ac:91:91:
         36:f1:3f:2b:50:cc:b8:7f:5c:ec:6f:cd:c3:85:b0:ae:f3:fa:
         8c:15:e0:4e:47:7f:57:8d:a5:af:07:6e:f1:95:5a:8e:47:99:
         d1:6d:c3:21:f7:68:dc:2a:90:8b:ce:c3:33:00:8d:2a:f4:93:
         a0:05:15:94:f6:19:e9:ae:ec:fa:23:e1:f8:94:5e:e9:10:a1:
         e2:dc:c4:61:ec:b3:c4:75:8c:ce:6f:e7:ec:35:82:21:9b:6a:
         10:e0:47:7c:3f:3f:61:df:79:8d:45:7c:2c:10:77:53:89:45:
         69:3a:2d:86:0e:9e:0f:85:1a:ab:d0:e9:cd:8c:44:38:05:76:
         ff:18:b2:b6:6d:6a:4c:73:97:bb:d5:d4:4b:94:6a:f7:d4:85:
         1f:71:a3:35:fe:f4:49:1e:46:74:06:33:2b:bb:99:b7:85:82:
         34:b6:10:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:19:18 2026 by rpki-client