Error: rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft
File:                     03981ED1B457034CCBAC00F384454B3A021E294E.mft (raw, json)
Hash identifier:          dSWKnH716x9J2m4HUeTiG0dnERNXhxefT6R67ZNKUdY=
Subject key identifier:   8D:1D:9D:A2:47:7F:DF:0B:97:23:75:EC:2A:D0:CF:AF:74:05:FE:18
Authority key identifier: 03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E
Certificate issuer:       /CN=03981ED1B457034CCBAC00F384454B3A021E294E
Certificate serial:       53485CBC3529B7040DDCB3CA1EF4A0BD8D280351
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft
Manifest number:          0485
Signing time:             Sat 22 Aug 2026 21:13:54 +0000
Manifest this update:     Sat 22 Aug 2026 21:08:54 +0000
Manifest next update:     Sun 23 Aug 2026 22:17:54 +0000
Files and hashes:         1: 3136372e3234392e3131322e302f32322d3234203d3e203238313331.roa (hash: fKWd8WgiDa5Ht7tMgQGvC3xQxvgcY8MSZHBzd2JuTbI=)
                          2: 03981ED1B457034CCBAC00F384454B3A021E294E.crl (hash: lHCb7MLvsZzkLo7AFow8jOR0btEMj/9k4F94YrdX6fo=)
                          3: 3137302e38312e3137362e302f32322d3234203d3e203238313331.roa (hash: UbyQMrHUKwbLKtTgseFNC4d0CqNtWevhcDvEeIFUG3I=)
                          4: 323830343a3137303a343330303a3a2f34302d3430203d3e203238313331.roa (hash: Fmo1lRJNHUfGTyasn32GwoOYVRilCNBAF1aLdF0hFUo=)
                          5: 323830343a3137303a343830303a3a2f34302d3430203d3e203238313331.roa (hash: EyMabbVYF1bzjaG1ZBT7tRW1hKqTrTOL5NdD9Xetxg4=)
                          6: 323830343a3137303a343430303a3a2f34302d3430203d3e203238313331.roa (hash: YarjLwp74GvKEpvklDqG1T64wh6amwHEuMmWpqvvJq8=)
                          7: 323830343a3137303a3a2f33322d3332203d3e203238313331.roa (hash: GY0Bf7ArPtlQCU8Tv5LuGbvbjvTLddtcfk/sbRMlEXo=)
                          8: 3133382e302e3139322e302f32322d3234203d3e203238313331.roa (hash: OACuBlgvFeqrBl97DicWFUeheJzjkdOGiOjtroPLZ5I=)
                          9: 323830343a3137303a373330303a3a2f34302d3430203d3e203238313331.roa (hash: 50WUIjJD62uBTFKdvO8JYXX0xVMF6TQAnzCm3fj1Sx8=)
                          10: 3137302e302e3234302e302f32322d3234203d3e203238313331.roa (hash: Laz4YLFFtezeErlvJGMgRFBNQ7RKM38W+k6IxZ/xDtM=)
                          11: 3138362e3230382e3232342e302f32302d3234203d3e203238313331.roa (hash: kKqwDCUTpgJeSqQ4PZVZHVIC0pnPUWAEDt5PFTxRhn0=)
                          12: 323830343a3137303a343930303a3a2f34302d3430203d3e203238313331.roa (hash: dwF2FE0Vl3l8gNCaYi1/Ukn+N0wvFAJnEu/faprf2Ww=)
                          13: 323830343a3137303a373230303a3a2f34302d3430203d3e203238313331.roa (hash: uwLHAHP6eVKIN9LSKU3TNLOMyTdKyxGBMYJqGnjOPts=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl
                          rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 22:17:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:48:5c:bc:35:29:b7:04:0d:dc:b3:ca:1e:f4:a0:bd:8d:28:03:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03981ED1B457034CCBAC00F384454B3A021E294E
        Validity
            Not Before: Aug 22 21:08:54 2026 GMT
            Not After : Aug 23 22:17:54 2026 GMT
        Subject: CN=8D1D9DA2477FDF0B972375EC2AD0CFAF7405FE18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fd:58:ef:55:c5:cf:d4:7d:45:74:c3:54:cd:
                    09:26:c3:d8:a4:e9:5c:b5:ce:c3:d5:5c:6c:7d:e6:
                    d4:48:3e:7f:12:2f:76:f1:95:c1:ec:7c:6c:2a:49:
                    f7:04:20:3c:7b:ac:4e:17:fe:3c:8d:d1:80:72:3e:
                    7e:26:4b:37:94:46:e0:cf:01:ae:a5:2b:42:42:f1:
                    c3:73:7d:fb:07:aa:ee:df:43:13:ee:0f:23:b4:99:
                    43:15:ab:68:04:95:e7:52:ff:03:63:be:d4:ba:f5:
                    4e:76:3b:a9:05:85:07:28:d4:d8:66:b7:cb:a3:bc:
                    73:39:57:24:37:3f:cb:45:f9:13:51:36:30:09:7f:
                    57:a8:21:3e:c3:c7:1c:2a:bd:aa:be:49:17:16:07:
                    b5:57:d7:e1:30:50:be:7d:f4:6b:fd:10:fa:3a:20:
                    65:b1:53:3f:cf:c0:13:4a:e0:5b:de:25:6d:37:17:
                    37:74:06:32:53:ad:67:52:af:f5:27:78:80:72:a9:
                    2f:e1:1e:1d:62:1b:14:5f:d7:e5:b1:d8:ef:37:60:
                    c9:67:7d:cb:aa:be:ab:8f:14:f4:07:f8:17:c0:52:
                    18:30:53:2a:8f:05:fb:e0:4f:ff:7b:60:0e:24:0a:
                    9a:d6:fc:35:2d:5c:f9:00:4d:d5:59:e2:1f:6b:ae:
                    40:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:1D:9D:A2:47:7F:DF:0B:97:23:75:EC:2A:D0:CF:AF:74:05:FE:18
            X509v3 Authority Key Identifier:
                keyid:03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:14:0f:20:7c:64:ed:c9:34:90:71:e8:55:62:59:18:63:14:
         74:15:7b:e9:f4:91:89:49:06:4f:7c:60:0d:b2:b0:68:8a:2b:
         3f:6c:d5:ac:fc:00:db:8b:41:e6:30:5d:4a:d5:0e:57:46:e3:
         62:90:a3:f4:9c:6d:78:ae:33:86:29:4a:4f:bb:f9:5d:12:33:
         96:7d:db:d6:4a:bd:f0:0e:69:aa:a1:d0:73:5b:2f:38:01:18:
         e8:aa:a7:f3:91:90:8b:b8:47:e0:51:dc:1e:ab:4b:50:04:a7:
         ad:0d:ba:3f:29:f6:ae:8a:ad:4d:1a:a6:6f:e9:81:91:d7:84:
         fc:94:f2:27:c8:93:35:f9:81:c0:2d:8d:da:94:eb:d1:fb:00:
         2a:90:d5:46:af:47:e5:0b:81:39:c5:d0:a7:e0:1d:f7:1e:b6:
         ef:96:c3:4e:e3:e1:2e:a6:15:70:ad:ed:af:2b:69:1d:f2:ff:
         65:28:d6:20:18:a8:87:76:be:64:54:92:af:b6:28:15:89:33:
         57:df:35:10:b7:1c:3f:c5:f5:ca:8a:1e:f8:ed:5f:2a:5d:ff:
         51:e7:61:cc:8a:ba:24:32:09:54:45:ec:a0:c7:00:31:9e:8a:
         7e:a2:b4:f2:ec:d1:12:d9:24:9a:ec:7e:62:3e:7c:a4:2a:86:
         31:0d:41:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:19:25 2026 by rpki-client