Error: rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.mft
File:                     0EC8EAC7F1F5A216824B37118697748825F314D9.mft (raw, json)
Hash identifier:          E/X6P3BLZedp+jBJMfMK1d2PEdlPf5OOH97K846fxPE=
Subject key identifier:   FF:98:99:88:65:23:DF:41:85:AE:BA:8E:98:43:C3:25:9A:3C:14:C2
Authority key identifier: 0E:C8:EA:C7:F1:F5:A2:16:82:4B:37:11:86:97:74:88:25:F3:14:D9
Certificate issuer:       /CN=0EC8EAC7F1F5A216824B37118697748825F314D9
Certificate serial:       30E5FBB9CA2F526C2531C452B0D76687EA9AFC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.mft
Manifest number:          047C
Signing time:             Mon 24 Aug 2026 06:09:11 +0000
Manifest this update:     Mon 24 Aug 2026 06:04:11 +0000
Manifest next update:     Tue 25 Aug 2026 08:35:11 +0000
Files and hashes:         1: 3136382e3230352e34302e302f32322d3234203d3e203631393432.roa (hash: IEOVkq/MiFbe9kSiq1vq9xeON4CdOaPUnC31voI+IqY=)
                          2: 3137302e3233332e3136342e302f32322d3234203d3e203631393432.roa (hash: RQs3auMT7WMmlvqSiPqhEHjFJdNIhqeq2j9N65JdYuk=)
                          3: 34352e3233392e3130302e302f32322d3234203d3e203631393432.roa (hash: LUDr48xTpx4WCKeX1gnuj4FThy0qQoXGwUVL2TBdP10=)
                          4: 3136382e3139362e37322e302f32322d3234203d3e203631393432.roa (hash: mwSV4AsrionZd6ucwU2XTnQDI1FeF1RXfyJry+mNJBE=)
                          5: 3137302e3233392e382e302f32322d3234203d3e203631393432.roa (hash: PD7H74uB42C5FlUCcIhjDyZK1EARVfc0do0yGt8ctg4=)
                          6: 3139322e31322e3131322e302f32322d3234203d3e203631393432.roa (hash: 5AlfVOEKh4aGDgamW6LgPBzM9IIMT2YGRydnyqqOrhA=)
                          7: 3230312e3133312e36382e302f32322d3234203d3e203631393432.roa (hash: oTj7b9bhH6RiSTQ8IwoCGUPpjxzPMpOXUR545PqouwU=)
                          8: 0EC8EAC7F1F5A216824B37118697748825F314D9.crl (hash: YdRShlRZ9H1XNH65/9tI8WrnpZlZaSy+2hN/5W4O//U=)
                          9: 323830343a313839383a3a2f33322d3430203d3e203631393432.roa (hash: MTSIW9OG/6g79JqNzXOS6suIJzY+iyX6qIWY52vA9V0=)
                          10: 3133312e3235352e36382e302f32322d3234203d3e203631393432.roa (hash: 9P2w7BtRiGunbE7Dhl819E+nMHeQGNGRIZd1Oc/GcCA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.crl
                          rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 08:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e5:fb:b9:ca:2f:52:6c:25:31:c4:52:b0:d7:66:87:ea:9a:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EC8EAC7F1F5A216824B37118697748825F314D9
        Validity
            Not Before: Aug 24 06:04:11 2026 GMT
            Not After : Aug 25 08:35:11 2026 GMT
        Subject: CN=FF9899886523DF4185AEBA8E9843C3259A3C14C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0f:6f:80:48:c5:02:96:c0:e8:62:1d:8e:a8:
                    34:5d:60:99:77:fd:b1:42:60:73:98:3c:b9:44:03:
                    eb:10:6b:eb:a6:c3:bf:dd:54:3e:56:65:a6:eb:b8:
                    80:44:54:42:b8:31:69:11:0f:11:bf:84:e6:11:42:
                    ae:7a:0a:4f:50:a4:d8:3c:bb:09:5c:d5:f7:e1:ff:
                    fd:3c:3c:0a:1f:1f:0a:38:71:9c:1a:6b:24:5e:84:
                    63:90:05:f5:fe:46:b2:20:28:04:e5:66:b3:67:e4:
                    5a:5d:af:12:c5:50:4d:2d:4e:91:c9:1f:d7:ef:51:
                    85:77:b9:7b:47:db:47:50:1d:e1:f3:7b:97:92:2d:
                    ce:0d:1e:0c:76:5d:63:c1:ee:c0:cc:97:04:b9:56:
                    81:78:cd:ff:2e:4e:16:42:1a:35:ba:5e:68:81:5a:
                    e7:39:ec:e2:27:a3:0f:01:d0:60:7d:ee:61:f5:b7:
                    a3:57:c0:69:f6:81:5b:7a:bb:a4:7e:d7:44:69:da:
                    1c:a5:fc:c2:d9:fb:78:f8:c7:41:a7:33:82:91:bd:
                    0d:e4:56:1e:ba:68:c4:a4:ba:3b:d0:bd:6d:0c:1b:
                    0b:97:0f:e6:40:34:8a:a1:92:70:23:11:c9:a1:b2:
                    3c:16:78:57:da:9c:8b:eb:98:33:41:d5:4c:84:94:
                    13:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:98:99:88:65:23:DF:41:85:AE:BA:8E:98:43:C3:25:9A:3C:14:C2
            X509v3 Authority Key Identifier:
                keyid:0E:C8:EA:C7:F1:F5:A2:16:82:4B:37:11:86:97:74:88:25:F3:14:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:48:ba:9f:74:c5:f8:a4:1d:b8:f1:ad:2b:bd:61:fb:7e:90:
         9f:98:cd:63:15:84:1f:bf:e0:04:26:6d:dc:6a:95:fa:7e:cc:
         ac:10:78:b9:43:4f:39:10:b9:ea:56:b5:91:e8:6c:8e:45:c6:
         e6:1c:e3:16:79:de:6e:58:05:6c:c8:2a:e4:ca:d2:08:ee:71:
         d1:0c:b9:d8:d6:f9:be:4a:0c:a5:9f:be:86:a6:db:2a:88:f8:
         e4:de:fd:54:bf:86:88:f1:21:28:f2:f8:b3:1c:54:3f:dd:96:
         eb:cf:6e:e2:3a:3d:fa:0c:8d:a4:e1:71:2d:92:8c:a7:0d:76:
         08:04:01:3a:15:59:97:7a:32:e4:cb:62:4b:91:5d:c0:c8:44:
         ce:b2:40:83:d9:68:a4:c0:f2:76:3e:8c:70:42:55:7c:62:4b:
         db:66:3e:29:8c:75:a9:c0:41:24:1c:c5:53:29:80:03:1c:65:
         6f:43:1c:f8:a1:01:3e:e1:a1:dc:ae:1b:42:47:6e:08:68:c0:
         1e:fc:93:06:6d:d0:88:75:ad:16:d1:78:a9:8d:c2:58:7b:bb:
         48:1a:28:d3:ab:0f:7e:81:22:df:8f:1a:9f:24:8f:f9:c0:36:
         0d:e2:c2:11:01:87:a7:a4:be:81:05:ca:9e:da:d2:3a:4a:b6:
         e3:0e:23:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 01:42:05 2026 by rpki-client