Error: rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.mft
File:                     C53FFF72C11B3649D5A047FD42D3DD312B1842CF.mft (raw, json)
Hash identifier:          +kZDz+qnjfEkMKZmdH5gNHGuPpWLIdzcZ3D+pC3+D54=
Subject key identifier:   DF:B3:D5:FC:24:E1:31:8B:3A:FA:B6:3C:10:2F:C1:32:25:90:7F:E4
Authority key identifier: C5:3F:FF:72:C1:1B:36:49:D5:A0:47:FD:42:D3:DD:31:2B:18:42:CF
Certificate issuer:       /CN=C53FFF72C11B3649D5A047FD42D3DD312B1842CF
Certificate serial:       38D4C4FD1E79476DBB41D435A5D173BD411F7134
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.mft
Manifest number:          04DE
Signing time:             Wed 04 Nov 2026 05:46:18 +0000
Manifest this update:     Wed 04 Nov 2026 05:41:18 +0000
Manifest next update:     Thu 05 Nov 2026 08:11:18 +0000
Files and hashes:         1: 323830343a366166633a3a2f34372d3437203d3e20323730333730.roa (hash: fRc2pRZ64iJ4J2JwD8MnyMRLYZH9sPqZYJ7fQAvVvHo=)
                          2: C53FFF72C11B3649D5A047FD42D3DD312B1842CF.crl (hash: cItNAao2OotLTudY/yq10bthMFqVUwZvK3NHAaMulXw=)
                          3: 3139302e38392e3134382e302f32322d3234203d3e20323730333730.roa (hash: eltPjLsdeEd5MJ8Kuit+kGA7Z6cz0/Y4hxY6GVuFy1Y=)
                          4: 3139302e38392e3134382e302f32342d3234203d3e20323730333730.roa (hash: 1LIz3EMkOFeMTBOA0NGLVvfcTo0mjGf6dVCfGISNKY4=)
                          5: 3139302e38392e3135312e302f32342d3234203d3e20323730333730.roa (hash: 3hqFeovOwv2/2sphyOHHFjUSMFS2dvI+u3ZCAf3BXFw=)
                          6: 323830343a366166633a3a2f33322d3334203d3e20323730333730.roa (hash: 50oZQRSfkhIS7ifIBxYMg3fGMovPtLqRL1sxLyU68EM=)
                          7: 323830343a366166633a323a3a2f34372d3437203d3e20323730333730.roa (hash: c+SP46RP2q0blQfp0k65+ly1SArA+VF+Y7cHpRdo+3M=)
                          8: 3139302e38392e3134392e302f32342d3234203d3e20323730333730.roa (hash: Ms6q71FgHyV6cKM7CqMhlx7mYZDItYR/IsK7KBpXQjY=)
                          9: 3139302e38392e3135302e302f32342d3234203d3e20323730333730.roa (hash: Nd+Yn1Fd25bfj40Hel/RcRLSShFFbt8NoGWOuxrfI9I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.crl
                          rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 08:11:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:d4:c4:fd:1e:79:47:6d:bb:41:d4:35:a5:d1:73:bd:41:1f:71:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C53FFF72C11B3649D5A047FD42D3DD312B1842CF
        Validity
            Not Before: Nov  4 05:41:18 2026 GMT
            Not After : Nov  5 08:11:18 2026 GMT
        Subject: CN=DFB3D5FC24E1318B3AFAB63C102FC13225907FE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ba:31:38:fc:9f:89:97:d4:44:52:06:ae:2e:
                    e9:c9:cc:03:ec:b5:00:81:b3:29:e6:2c:6b:9b:f8:
                    85:48:88:04:66:23:20:88:25:18:23:ff:33:f1:4d:
                    45:17:43:82:50:4f:aa:cd:f3:e6:94:d3:aa:6f:56:
                    c7:5c:ee:39:41:6c:0c:70:0f:1e:b0:05:4f:44:74:
                    e2:80:d5:eb:ed:f1:ef:d1:39:bf:bd:9e:00:11:9d:
                    b0:45:bf:a4:a1:01:cf:37:80:cf:da:06:42:5c:f2:
                    2a:32:40:14:96:ca:a3:e0:3b:48:ca:2e:87:fb:c1:
                    ee:56:c1:87:09:44:a3:5e:c7:5f:87:b2:b9:38:99:
                    d2:6e:d4:77:89:7b:fc:e6:57:37:25:b8:00:4f:2c:
                    9c:39:ce:38:4b:29:34:af:00:b8:f3:61:3f:c4:98:
                    46:ce:e3:c7:21:99:ec:3e:e9:76:b6:0b:1f:90:f1:
                    ca:4b:30:4f:70:74:95:83:4a:51:d6:25:d9:2a:b7:
                    8c:4e:f6:ae:f9:d6:49:50:86:4d:bd:0e:ab:2d:18:
                    aa:81:f8:56:8e:37:d4:7f:66:8c:97:73:1b:3c:64:
                    d5:94:7b:15:5c:b2:a1:de:94:d5:a1:2c:b7:6f:dc:
                    7b:1e:fc:76:a7:0d:28:2d:39:ca:af:2a:7f:11:13:
                    ca:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B3:D5:FC:24:E1:31:8B:3A:FA:B6:3C:10:2F:C1:32:25:90:7F:E4
            X509v3 Authority Key Identifier:
                keyid:C5:3F:FF:72:C1:1B:36:49:D5:A0:47:FD:42:D3:DD:31:2B:18:42:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:a7:c2:20:99:f9:4f:8c:27:d1:a5:84:95:20:6b:82:af:a9:
         02:a1:00:4c:e2:f5:ad:4a:a0:9e:ec:cb:42:2f:25:78:87:a1:
         91:c4:be:75:aa:44:3e:7b:da:57:09:15:85:e2:34:5c:4e:12:
         39:ca:67:9b:66:e3:8c:fd:38:4c:a5:22:1a:6d:37:a8:2d:72:
         24:ad:12:3a:bf:5b:58:a9:25:7f:6d:ef:d0:b5:a8:5e:5b:99:
         07:63:05:b0:b4:54:e0:cb:1c:2b:3f:f9:ba:45:cd:dc:ae:d9:
         60:a4:f7:35:61:6a:b1:55:61:cf:b1:49:91:67:48:ba:36:6a:
         b3:9d:14:35:9c:44:a7:dd:d3:e3:8c:3e:bd:46:9a:24:bf:e6:
         10:ea:21:9d:a5:b0:aa:4e:34:ea:b3:77:38:ad:46:d1:04:57:
         4a:9e:88:a7:d9:72:0c:19:ec:74:76:90:46:fd:70:04:30:4d:
         49:56:55:0c:40:8e:39:b4:79:86:1a:bb:6c:5c:f9:53:9f:f6:
         a0:81:e8:d9:86:31:2d:62:99:fc:7e:1b:0c:5b:10:11:4f:15:
         5d:67:6b:7c:51:ca:4f:82:06:cb:6c:2c:51:fd:f1:45:e3:aa:
         a9:05:ad:6e:ff:d0:30:18:60:1b:c9:4b:66:b0:20:25:e2:bc:
         cb:55:f7:6b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUONTE/R55R227QdQ1pdFzvUEfcTQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUzRkZGNzJDMTFCMzY0OUQ1QTA0N0ZENDJEM0REMzEy
QjE4NDJDRjAeFw0yNjExMDQwNTQxMThaFw0yNjExMDUwODExMThaMDMxMTAvBgNV
BAMTKERGQjNENUZDMjRFMTMxOEIzQUZBQjYzQzEwMkZDMTMyMjU5MDdGRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaujE4/J+Jl9REUgauLunJzAPs
tQCBsynmLGub+IVIiARmIyCIJRgj/zPxTUUXQ4JQT6rN8+aU06pvVsdc7jlBbAxw
Dx6wBU9EdOKA1evt8e/ROb+9ngARnbBFv6ShAc83gM/aBkJc8ioyQBSWyqPgO0jK
Lof7we5WwYcJRKNex1+Hsrk4mdJu1HeJe/zmVzcluABPLJw5zjhLKTSvALjzYT/E
mEbO48chmew+6Xa2Cx+Q8cpLME9wdJWDSlHWJdkqt4xO9q751klQhk29DqstGKqB
+FaON9R/ZoyXcxs8ZNWUexVcsqHelNWhLLdv3Hse/HanDSgtOcqvKn8RE8rvAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU37PV/CThMYs6+rY8EC/BMiWQf+QwHwYDVR0j
BBgwFoAUxT//csEbNknVoEf9QtPdMSsYQs8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnQzYkdaWHo4bUpEckRkbVo2TkRjMnhaRHNiamZnRXJocmpXZTdIdjhv
UU0vMS9DNTNGRkY3MkMxMUIzNjQ5RDVBMDQ3RkQ0MkQzREQzMTJCMTg0MkNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M1M0ZGRjcyQzExQjM2NDlE
NUEwNDdGRDQyRDNERDMxMkIxODQyQ0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MnQzYkdaWHo4bUpEckRkbVo2TkRjMnhaRHNiamZnRXJocmpXZTdIdjhvUU0vMS9D
NTNGRkY3MkMxMUIzNjQ5RDVBMDQ3RkQ0MkQzREQzMTJCMTg0MkNGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMKfCIJn5T4wn0aWElSBrgq+pAqEATOL1rUqgnuzLQi8leIehkcS+dapEPnva
VwkVheI0XE4SOcpnm2bjjP04TKUiGm03qC1yJK0SOr9bWKklf23v0LWoXluZB2MF
sLRU4MscKz/5ukXN3K7ZYKT3NWFqsVVhz7FJkWdIujZqs50UNZxEp93T44w+vUaa
JL/mEOohnaWwqk406rN3OK1G0QRXSp6Ip9lyDBnsdHaQRv1wBDBNSVZVDECOObR5
hhq7bFz5U5/2oIHo2YYxLWKZ/H4bDFsQEU8VXWdrfFHKT4IGy2wsUf3xReOqqQWt
bv/QMBhgG8lLZrAgJeK8y1X3aw==
-----END CERTIFICATE-----
Generated at Wed Nov 4 14:58:16 2026 by rpki-client