Error: rpki-repo.registro.br/repo/2r9xwJhVpyjBT5fmCXnyxNCVPLexMtVWF4QqprDRkbZK/1/618318A8B569DF2B0A94521CDE2EC6E4D671AFF8.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2r9xwJhVpyjBT5fmCXnyxNCVPLexMtVWF4QqprDRkbZK/1/618318A8B569DF2B0A94521CDE2EC6E4D671AFF8.mft
File:                     618318A8B569DF2B0A94521CDE2EC6E4D671AFF8.mft (raw, json)
Hash identifier:          Ou3llhGIrgJuKEOr5evwczXbUpQhT16RJZoEe4OXjCQ=
Subject key identifier:   EF:25:A7:10:AE:7D:C1:2A:4B:24:59:31:EF:87:EB:E8:F6:7E:4E:A5
Authority key identifier: 61:83:18:A8:B5:69:DF:2B:0A:94:52:1C:DE:2E:C6:E4:D6:71:AF:F8
Certificate issuer:       /CN=618318A8B569DF2B0A94521CDE2EC6E4D671AFF8
Certificate serial:       20810AE24723F8EADB15B445FF716F352B07E40D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/618318A8B569DF2B0A94521CDE2EC6E4D671AFF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2r9xwJhVpyjBT5fmCXnyxNCVPLexMtVWF4QqprDRkbZK/1/618318A8B569DF2B0A94521CDE2EC6E4D671AFF8.mft
Manifest number:          C3
Signing time:             Wed 19 Aug 2026 03:39:24 +0000
Manifest this update:     Wed 19 Aug 2026 03:34:24 +0000
Manifest next update:     Thu 20 Aug 2026 06:43:24 +0000
Files and hashes:         1: 3230302e392e31362e302f32322d3332203d3e20323636323234.roa (hash: WYPewnHeSgtlRTMlfzS9PeJHN4f4V+LYpTN26OHrybU=)
                          2: 323830343a336339633a3a2f33322d313238203d3e20323636323234.roa (hash: oGU4CHBkNp20GUbnyClbtHDzkVSLI5ZS8QD4kxDiw34=)
                          3: 618318A8B569DF2B0A94521CDE2EC6E4D671AFF8.crl (hash: LtIQD/v8CoKtDEc8WI2mJc8Nx5f7E5ojL3CVbszC99Q=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:81:0a:e2:47:23:f8:ea:db:15:b4:45:ff:71:6f:35:2b:07:e4:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618318A8B569DF2B0A94521CDE2EC6E4D671AFF8
        Validity
            Not Before: Aug 19 03:34:24 2026 GMT
            Not After : Aug 20 06:43:24 2026 GMT
        Subject: CN=EF25A710AE7DC12A4B245931EF87EBE8F67E4EA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0c:c5:28:66:cd:20:03:18:36:60:79:84:e7:
                    a2:8f:ac:75:15:78:97:89:96:ed:82:96:1f:44:ac:
                    be:5e:72:f7:03:66:6f:fe:c0:6f:cf:b8:2a:d6:ad:
                    44:d7:25:08:97:01:99:92:dd:be:89:09:9d:ca:32:
                    ac:f9:c7:80:37:1b:9e:08:ee:48:cc:90:d8:2b:10:
                    f7:2f:4e:53:45:4f:6d:2a:0f:d8:41:a1:5e:7f:1c:
                    8d:7e:7c:ed:f5:34:f0:70:af:ae:08:05:6f:22:4c:
                    c5:b0:b7:20:b6:df:c0:b6:9a:1e:8a:3e:de:d5:65:
                    86:e9:5d:7f:ba:86:a4:13:59:26:8a:d8:3e:ef:02:
                    38:e7:85:1d:23:7a:e8:a0:2b:6f:0a:58:63:9a:e7:
                    58:eb:3f:fe:54:06:7c:48:c2:fd:19:ee:c2:56:08:
                    3c:b8:4c:b9:70:6b:7e:8d:6e:f2:1d:95:e9:64:98:
                    36:b8:04:04:4b:1c:95:bd:76:e2:62:8b:55:a4:b5:
                    37:28:c1:d1:13:a8:9a:c7:20:ca:be:05:4b:a3:85:
                    b3:55:8c:b3:bf:b8:bd:f0:c9:cb:31:34:0e:1d:0c:
                    36:bb:44:87:6f:cf:23:cb:69:af:78:d8:91:68:a6:
                    5c:98:fc:db:d4:5f:04:d2:0b:a0:fd:a7:31:c7:78:
                    f5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:25:A7:10:AE:7D:C1:2A:4B:24:59:31:EF:87:EB:E8:F6:7E:4E:A5
            X509v3 Authority Key Identifier:
                keyid:61:83:18:A8:B5:69:DF:2B:0A:94:52:1C:DE:2E:C6:E4:D6:71:AF:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2r9xwJhVpyjBT5fmCXnyxNCVPLexMtVWF4QqprDRkbZK/1/618318A8B569DF2B0A94521CDE2EC6E4D671AFF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/618318A8B569DF2B0A94521CDE2EC6E4D671AFF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2r9xwJhVpyjBT5fmCXnyxNCVPLexMtVWF4QqprDRkbZK/1/618318A8B569DF2B0A94521CDE2EC6E4D671AFF8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:1f:c4:f5:f7:af:32:6b:07:36:e3:fa:6f:15:8d:ff:e9:ac:
         23:2c:1f:fa:8a:e1:3d:02:b8:77:31:a3:3d:60:15:46:6a:52:
         16:bb:93:d4:13:9c:b6:6f:f2:2a:d3:8a:f6:00:2e:34:a1:78:
         bf:1b:71:ae:84:3e:f9:e7:3b:55:ed:a4:11:d9:4c:84:c9:0a:
         98:51:94:68:81:65:57:5c:67:4c:44:98:cf:13:d5:a0:79:f7:
         9f:68:38:7d:74:4c:ad:c8:a4:dd:f5:6a:82:6b:8e:17:8e:d5:
         ba:ed:07:34:70:e4:48:88:3d:89:8f:b2:be:af:06:6b:d3:76:
         ca:d0:dd:9a:c9:df:68:c9:e6:f0:d1:b3:3d:43:38:be:37:3e:
         ac:1f:92:af:83:49:2d:a5:7d:6e:de:f9:28:4c:9f:1d:db:21:
         80:b9:5a:4a:6c:83:27:64:07:e1:4f:7b:5b:1c:61:6d:ae:9c:
         64:44:83:b9:1c:a2:ac:b5:2a:94:c3:10:ca:3e:f9:d9:42:7e:
         6d:44:36:62:20:d1:c7:de:3a:e3:a3:28:8c:cb:e0:06:2f:20:
         ab:2e:3d:cd:e5:31:32:91:fa:dc:b3:66:a4:f1:a2:ff:7e:b6:
         d0:58:e5:52:4e:6a:e3:80:a0:a2:17:af:a6:78:7a:c4:21:5c:
         2a:a1:68:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 00:46:22 2026 by rpki-client