Error: rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.mft
File:                     0059BA88737DAD2C55270BBCF409B62E1276558F.mft (raw, json)
Hash identifier:          uix+7QI3UAvtf/FxUHPowszZfvVS3kd5DLU6I8+Hc8o=
Subject key identifier:   83:47:18:99:29:C8:6E:D9:9D:08:27:98:A0:AA:41:89:83:0D:53:E9
Authority key identifier: 00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F
Certificate issuer:       /CN=0059BA88737DAD2C55270BBCF409B62E1276558F
Certificate serial:       2AB4FA8115F4CF6DAAE6B6C609B5BEC6AE4A8B45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.mft
Manifest number:          051F
Signing time:             Sun 23 Aug 2026 04:10:00 +0000
Manifest this update:     Sun 23 Aug 2026 04:05:00 +0000
Manifest next update:     Mon 24 Aug 2026 04:10:00 +0000
Files and hashes:         1: 323830343a333366633a3a2f33322d3334203d3e20323635343239.roa (hash: wNnXDjfQFu1ApIHEKrb9hZF17hu6qlFtZjjm+yuagPo=)
                          2: 323830343a333366633a363030303a3a2f33352d3335203d3e20323635343239.roa (hash: S32H6hz1Se52Cp2cF+aUCi63DGqjq0YWcUUM1kuUsqY=)
                          3: 0059BA88737DAD2C55270BBCF409B62E1276558F.crl (hash: spycIIeotOJgBCWoz0Z6IttMAp8yyjSVn1XK2dECxc4=)
                          4: 323830343a333366633a613030303a3a2f33352d3335203d3e20323635343239.roa (hash: MbqdiNq3V6bRLqbKerzhrE93ldhsmhEdSISZVV7k54c=)
                          5: 323830343a333366633a653030303a3a2f33352d3335203d3e20323635343239.roa (hash: i6LUKRYQwWC/hKZtryfv2i/2qwkbdhY1TKSfVdlBmoI=)
                          6: 323830343a333366633a3a2f33352d3335203d3e20323635343239.roa (hash: uW5wQIFndCbdG9DC0H7H8tR6a5Es/kme5mhXV0cdl2g=)
                          7: 3136382e3139352e38302e302f32322d3234203d3e20323635343239.roa (hash: GztcKnkei55+LGhPlHTqoX8+/sPZkAvf79CzkxXlgn0=)
                          8: 323830343a333366633a633030303a3a2f33352d3335203d3e20323635343239.roa (hash: F/2Ym7l8Fo20lA5ZQeR60GPNirK7FVfyNMi4c2cdCYU=)
                          9: 323830343a333366633a343030303a3a2f33352d3335203d3e20323635343239.roa (hash: kqmIILOlSSuTY/oyE8XfLPcQ/wOWVbXUFzyO8/oKdiM=)
                          10: 323830343a333366633a323030303a3a2f33352d3335203d3e20323635343239.roa (hash: 2neGCTBIwTW4OwG1cKrADd3QpfKn5U0GQ0SCszIoKno=)
                          11: 323830343a333366633a383030303a3a2f33352d3335203d3e20323635343239.roa (hash: +III35VeXt/baizD6SXovCGMIjun8P3dlCaU98NDHYg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl
                          rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 04:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b4:fa:81:15:f4:cf:6d:aa:e6:b6:c6:09:b5:be:c6:ae:4a:8b:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0059BA88737DAD2C55270BBCF409B62E1276558F
        Validity
            Not Before: Aug 23 04:05:00 2026 GMT
            Not After : Aug 24 04:10:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:38:8e:e5:e7:4a:d3:af:68:bd:27:7d:09:e4:
                    f7:02:10:31:7c:19:d9:c0:a6:7d:b1:db:28:3d:27:
                    4f:15:5a:6f:5c:67:2a:37:da:91:e2:97:58:c2:84:
                    68:cf:99:a6:67:2f:2a:5b:66:2c:5d:3b:a7:45:78:
                    e4:1e:5f:86:9c:bb:7a:66:78:13:f7:c9:d9:c3:6f:
                    30:07:d1:61:c8:51:07:db:9a:e2:7b:bb:fa:d9:da:
                    5d:7b:4e:ed:66:1c:0f:73:06:a6:b0:5c:bc:98:ad:
                    ed:58:ca:c0:38:5c:ab:f5:50:12:12:a7:d7:5c:88:
                    db:67:f9:a8:e9:c3:08:bf:93:4d:1a:2f:1b:e3:4c:
                    30:15:19:4f:00:07:3f:86:d1:4f:b9:11:c0:89:52:
                    17:b1:5a:4a:55:72:73:f0:7d:83:e0:2b:5a:d7:76:
                    16:8f:c1:85:6e:55:e5:80:4a:83:c5:64:35:c6:71:
                    3d:dd:13:2c:a1:ef:16:36:e0:3c:7d:6a:09:87:49:
                    c5:d9:f1:f0:9d:c6:8f:16:f5:41:9f:9f:0d:06:c2:
                    ba:25:f1:da:7b:ab:2e:32:2f:1d:c2:68:cc:90:d5:
                    6d:1b:82:a7:92:fe:aa:22:74:db:15:13:7b:43:79:
                    87:7c:65:e3:17:ba:b1:66:40:90:34:3a:38:bc:ff:
                    e7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:47:18:99:29:C8:6E:D9:9D:08:27:98:A0:AA:41:89:83:0D:53:E9
            X509v3 Authority Key Identifier:
                keyid:00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:e3:cb:0d:98:f9:71:25:1a:7d:c8:d0:67:53:2d:19:61:33:
         7e:1d:6f:01:56:63:7f:f7:06:3c:0c:c6:e6:89:74:dd:78:4c:
         ec:a8:73:94:81:72:9f:f9:f7:d7:5f:f9:55:de:e7:e3:d1:8b:
         22:93:13:db:36:b6:4e:c1:ed:1a:47:93:ad:66:3c:d7:40:bd:
         53:92:3d:ae:ab:16:c3:75:bd:e8:fd:ac:87:3d:e9:f2:b4:4d:
         41:46:07:7d:4d:ee:ce:4d:be:6f:e6:d4:07:c1:5a:0e:4f:21:
         08:0b:1a:bb:2d:b2:1c:19:39:eb:19:8a:61:07:b2:66:b2:f5:
         e8:9c:98:60:ed:9a:6c:73:b0:93:29:d0:ad:82:f6:58:97:79:
         1c:7c:bd:f2:94:db:5c:05:2b:96:40:d2:73:1b:85:4f:e2:29:
         ad:72:24:77:0f:53:14:b1:26:8f:3d:0f:b8:78:90:11:40:f0:
         cf:92:18:26:84:a5:df:1c:04:ae:0c:9a:16:c4:fa:02:96:5f:
         91:a2:a1:29:0d:f1:3c:78:79:7d:2d:b2:6f:c0:54:cf:e9:b7:
         f6:01:e1:15:ba:80:e7:3b:9e:db:3b:f1:88:7c:bf:70:c0:c1:
         b5:96:97:73:b0:e5:d1:7e:88:e2:a0:c1:d2:6a:24:62:75:b5:
         6d:23:92:f0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Aug 23 15:12:51 2026 by rpki-client