Error: rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.mft
File:                     C53FFF72C11B3649D5A047FD42D3DD312B1842CF.mft (raw, json)
Hash identifier:          CLSjAa3cww3C6uFXiwY8d759zx1pzb3vYwBuy+aTH7E=
Subject key identifier:   4A:FF:46:EC:68:F7:FE:A1:E7:08:EE:13:B2:71:1A:EF:2C:C1:8D:79
Authority key identifier: C5:3F:FF:72:C1:1B:36:49:D5:A0:47:FD:42:D3:DD:31:2B:18:42:CF
Certificate issuer:       /CN=C53FFF72C11B3649D5A047FD42D3DD312B1842CF
Certificate serial:       5A03714BBD7CABC683F0BF64F8D66E60EC3D6A50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.mft
Manifest number:          04D9
Signing time:             Sat 31 Oct 2026 13:32:38 +0000
Manifest this update:     Sat 31 Oct 2026 13:27:38 +0000
Manifest next update:     Sun 01 Nov 2026 14:02:38 +0000
Files and hashes:         1: 323830343a366166633a3a2f34372d3437203d3e20323730333730.roa (hash: fRc2pRZ64iJ4J2JwD8MnyMRLYZH9sPqZYJ7fQAvVvHo=)
                          2: 323830343a366166633a3a2f33322d3334203d3e20323730333730.roa (hash: 50oZQRSfkhIS7ifIBxYMg3fGMovPtLqRL1sxLyU68EM=)
                          3: 3139302e38392e3134382e302f32322d3234203d3e20323730333730.roa (hash: eltPjLsdeEd5MJ8Kuit+kGA7Z6cz0/Y4hxY6GVuFy1Y=)
                          4: 3139302e38392e3134392e302f32342d3234203d3e20323730333730.roa (hash: Ms6q71FgHyV6cKM7CqMhlx7mYZDItYR/IsK7KBpXQjY=)
                          5: 3139302e38392e3135312e302f32342d3234203d3e20323730333730.roa (hash: 3hqFeovOwv2/2sphyOHHFjUSMFS2dvI+u3ZCAf3BXFw=)
                          6: C53FFF72C11B3649D5A047FD42D3DD312B1842CF.crl (hash: DUq0yedXZYzVbpTwLg/p/3eKaKHGY9mRwl+41W0Jp2s=)
                          7: 3139302e38392e3134382e302f32342d3234203d3e20323730333730.roa (hash: 1LIz3EMkOFeMTBOA0NGLVvfcTo0mjGf6dVCfGISNKY4=)
                          8: 3139302e38392e3135302e302f32342d3234203d3e20323730333730.roa (hash: Nd+Yn1Fd25bfj40Hel/RcRLSShFFbt8NoGWOuxrfI9I=)
                          9: 323830343a366166633a323a3a2f34372d3437203d3e20323730333730.roa (hash: c+SP46RP2q0blQfp0k65+ly1SArA+VF+Y7cHpRdo+3M=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.crl
                          rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 14:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:03:71:4b:bd:7c:ab:c6:83:f0:bf:64:f8:d6:6e:60:ec:3d:6a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C53FFF72C11B3649D5A047FD42D3DD312B1842CF
        Validity
            Not Before: Oct 31 13:27:38 2026 GMT
            Not After : Nov  1 14:02:38 2026 GMT
        Subject: CN=4AFF46EC68F7FEA1E708EE13B2711AEF2CC18D79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f1:1a:de:f8:32:0d:ad:39:3a:29:bc:6d:d6:
                    ad:fb:bd:45:82:26:b1:47:a0:3b:7f:96:a8:bb:59:
                    d7:d1:c9:cb:a4:9a:43:6c:a1:a6:fe:7f:f9:1a:2d:
                    64:3b:bc:fa:dc:14:c6:13:f7:22:72:80:4b:74:56:
                    2e:36:68:73:80:95:33:ac:a3:c2:46:00:2b:4e:df:
                    69:7c:86:6e:98:60:f2:18:e8:b2:c6:ae:b6:db:4e:
                    b4:5b:35:e1:2f:da:e8:b1:7b:7e:e2:47:e8:23:1f:
                    7e:16:a9:93:0b:fe:26:fb:13:b0:0a:42:6f:85:8f:
                    de:05:3f:5f:08:9f:e0:4a:c7:dc:65:ab:12:cd:2b:
                    a3:2f:be:fd:5b:3c:f6:2c:01:27:30:01:99:0d:99:
                    e1:ca:1e:d8:a6:5d:1b:40:97:7a:b5:8c:1b:53:98:
                    80:a4:79:97:d7:c2:be:ff:2d:11:32:03:04:98:36:
                    b5:70:92:a9:26:85:a9:e0:24:6c:77:46:2d:da:b7:
                    81:e8:e2:56:da:11:f3:db:d3:19:d7:db:13:22:bb:
                    84:29:55:2b:e6:f7:fb:00:5b:c5:b1:ec:31:75:69:
                    9d:de:14:5e:ed:3e:70:c6:7c:29:63:12:e0:24:fe:
                    36:2a:1e:de:8e:8c:5d:de:cc:9e:3b:6f:4b:e6:20:
                    d8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:FF:46:EC:68:F7:FE:A1:E7:08:EE:13:B2:71:1A:EF:2C:C1:8D:79
            X509v3 Authority Key Identifier:
                keyid:C5:3F:FF:72:C1:1B:36:49:D5:A0:47:FD:42:D3:DD:31:2B:18:42:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:57:8e:25:ae:4d:6e:a4:bd:45:34:19:42:07:9f:c1:d6:17:
         97:61:8a:16:f6:18:44:cb:1b:f6:6e:15:6a:71:ac:3a:30:7c:
         6e:39:e5:26:ea:88:fe:8e:90:ed:22:64:d7:39:94:cb:0d:1a:
         e7:09:5a:78:5e:b6:be:99:1c:49:f0:24:2e:b3:f3:78:28:ca:
         eb:7b:d1:ef:1b:0d:d0:a5:35:8c:a5:63:5a:6e:d3:b0:cd:f7:
         34:7a:85:80:d0:38:4c:58:df:d7:94:ee:9d:a7:3e:27:21:18:
         a2:7c:e4:2f:be:6a:03:be:dc:10:79:e0:59:44:f3:86:c0:d5:
         66:cf:07:48:ce:d1:8e:af:a4:d4:44:08:77:71:6c:15:fb:64:
         31:15:ff:4a:79:2e:da:20:49:2d:b5:7c:8c:a3:4d:07:6c:3d:
         5d:b5:05:8d:38:45:74:f2:75:5a:e3:23:6b:53:98:8a:2c:61:
         e8:a1:cb:e4:8c:36:af:fc:da:a5:4d:85:7d:d6:9e:e5:95:19:
         e1:1a:64:a8:27:f9:05:46:77:8d:a9:b4:c8:6e:0a:a9:ef:cd:
         10:90:a1:27:61:e2:4f:83:00:f9:29:98:c4:b4:3a:5e:e1:ef:
         5d:26:c4:e3:87:f4:19:78:35:7f:cc:ef:d6:11:af:90:4a:f9:
         0b:04:ed:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWgNxS718q8aD8L9k+NZuYOw9alAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUzRkZGNzJDMTFCMzY0OUQ1QTA0N0ZENDJEM0REMzEy
QjE4NDJDRjAeFw0yNjEwMzExMzI3MzhaFw0yNjExMDExNDAyMzhaMDMxMTAvBgNV
BAMTKDRBRkY0NkVDNjhGN0ZFQTFFNzA4RUUxM0IyNzExQUVGMkNDMThENzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT8Rre+DINrTk6Kbxt1q37vUWC
JrFHoDt/lqi7WdfRycukmkNsoab+f/kaLWQ7vPrcFMYT9yJygEt0Vi42aHOAlTOs
o8JGACtO32l8hm6YYPIY6LLGrrbbTrRbNeEv2uixe37iR+gjH34WqZML/ib7E7AK
Qm+Fj94FP18In+BKx9xlqxLNK6Mvvv1bPPYsAScwAZkNmeHKHtimXRtAl3q1jBtT
mICkeZfXwr7/LREyAwSYNrVwkqkmhangJGx3Ri3at4Ho4lbaEfPb0xnX2xMiu4Qp
VSvm9/sAW8Wx7DF1aZ3eFF7tPnDGfCljEuAk/jYqHt6OjF3ezJ47b0vmINjfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUSv9G7Gj3/qHnCO4TsnEa7yzBjXkwHwYDVR0j
BBgwFoAUxT//csEbNknVoEf9QtPdMSsYQs8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnQzYkdaWHo4bUpEckRkbVo2TkRjMnhaRHNiamZnRXJocmpXZTdIdjhv
UU0vMS9DNTNGRkY3MkMxMUIzNjQ5RDVBMDQ3RkQ0MkQzREQzMTJCMTg0MkNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M1M0ZGRjcyQzExQjM2NDlE
NUEwNDdGRDQyRDNERDMxMkIxODQyQ0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MnQzYkdaWHo4bUpEckRkbVo2TkRjMnhaRHNiamZnRXJocmpXZTdIdjhvUU0vMS9D
NTNGRkY3MkMxMUIzNjQ5RDVBMDQ3RkQ0MkQzREQzMTJCMTg0MkNGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAo1eOJa5NbqS9RTQZQgefwdYXl2GKFvYYRMsb9m4VanGsOjB8bjnlJuqI/o6Q
7SJk1zmUyw0a5wlaeF62vpkcSfAkLrPzeCjK63vR7xsN0KU1jKVjWm7TsM33NHqF
gNA4TFjf15Tunac+JyEYonzkL75qA77cEHngWUTzhsDVZs8HSM7Rjq+k1EQId3Fs
FftkMRX/Snku2iBJLbV8jKNNB2w9XbUFjThFdPJ1WuMja1OYiixh6KHL5Iw2r/za
pU2Ffdae5ZUZ4RpkqCf5BUZ3jam0yG4Kqe/NEJChJ2HiT4MA+SmYxLQ6XuHvXSbE
44f0GXg1f8zv1hGvkEr5CwTt3Q==
-----END CERTIFICATE-----
Generated at Sun Nov 1 02:11:28 2026 by rpki-client