Error: rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.mft
File:                     3929491D59EC78DBDEC7423B04D06034C1A59303.mft (raw, json)
Hash identifier:          PSfrPN/MCLxQSfRxE7cutVPwMd136OpaKcrdEvUE7SU=
Subject key identifier:   D1:7E:57:EA:8C:AA:13:10:AC:52:2B:37:35:F5:A6:E1:5F:6F:6E:36
Authority key identifier: 39:29:49:1D:59:EC:78:DB:DE:C7:42:3B:04:D0:60:34:C1:A5:93:03
Certificate issuer:       /CN=3929491D59EC78DBDEC7423B04D06034C1A59303
Certificate serial:       54C7489B918E57C9A56BF560A3CA15965D3631FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.mft
Manifest number:          049A
Signing time:             Sun 23 Aug 2026 15:19:49 +0000
Manifest this update:     Sun 23 Aug 2026 15:14:49 +0000
Manifest next update:     Mon 24 Aug 2026 19:08:49 +0000
Files and hashes:         1: 3133382e3138362e34372e302f32342d3234203d3e203532373731.roa (hash: xrip3GzGbts0+j9svHEHgvaLzEPCHkGzlBehBPrzTI4=)
                          2: 3133382e3138362e34342e302f32342d3234203d3e203532373731.roa (hash: H1CAtPqoi98qfBZ8Qhf+bclD0A+AK0qBuAwXopZ4ngQ=)
                          3: 3133382e3138362e34352e302f32342d3234203d3e203532373731.roa (hash: 0gxXrsYO0kG1HUofDdqZqu7vJpCVNf+JdhAc98JtEOI=)
                          4: 3929491D59EC78DBDEC7423B04D06034C1A59303.crl (hash: aileQOF6NUcc6KCZh4c8i26993a4QfJHih7ZtgzFbps=)
                          5: 3133382e3138362e34362e302f32342d3234203d3e203532373731.roa (hash: NAjciGpSQCgCEpu/aLRYC9IYZFZ6qupWYDQ6bCtw3og=)
                          6: 3133382e3138362e34342e302f32322d3234203d3e203532373731.roa (hash: SFO7lV9AhoR9qtC/YEdbEOF6wBFZayMls9S9/Rnfx24=)
                          7: 3137372e3135352e3230382e302f32302d3234203d3e203532373731.roa (hash: wQuUvyrBnHz/Bwoy7HSx0HSwHqPOlSVbPsDzbRx2QVE=)
                          8: 323830343a326661343a3a2f33322d3438203d3e203532373731.roa (hash: /f3q3WJtTf8n5Tt/4ow8M9X3bI0kbUnjEWsb+N6VSQ4=)
                          9: 3136382e3232382e39322e302f32322d3234203d3e203532373731.roa (hash: n06A7aMK9KWyvaj6TunFFzOW1nkzjRc2YjajEjkLNUQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.crl
                          rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 19:08:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c7:48:9b:91:8e:57:c9:a5:6b:f5:60:a3:ca:15:96:5d:36:31:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3929491D59EC78DBDEC7423B04D06034C1A59303
        Validity
            Not Before: Aug 23 15:14:49 2026 GMT
            Not After : Aug 24 19:08:49 2026 GMT
        Subject: CN=D17E57EA8CAA1310AC522B3735F5A6E15F6F6E36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4c:c2:84:04:51:85:7e:1a:18:b0:1c:21:61:
                    9a:10:3c:48:60:c3:fd:01:87:04:2f:9d:1f:a8:31:
                    b8:98:b8:24:4f:44:9f:f4:b7:30:35:65:fe:17:a8:
                    cf:c4:f0:c7:3b:b7:bd:ef:09:4b:6a:e6:e1:5a:9f:
                    72:12:87:f2:fe:4e:b3:91:7b:df:df:a3:32:df:a0:
                    fd:f5:22:5f:9a:3a:01:6a:9a:14:c2:94:91:ea:a2:
                    25:03:ea:84:1b:43:c8:77:3e:c2:0e:9d:bf:cf:42:
                    f0:a3:72:e9:24:94:3b:a3:fe:78:4e:3d:77:3f:42:
                    68:bb:b0:ed:fb:59:26:78:26:ce:77:2c:2e:49:b1:
                    0d:d8:cc:0c:3d:7e:81:e0:63:96:b0:57:7d:ae:cf:
                    d0:cf:5a:0b:d9:03:56:6a:85:dd:1f:b0:d0:86:d3:
                    f0:eb:fd:7b:27:8f:b6:a2:04:27:a9:42:74:e4:a4:
                    97:69:b9:74:e8:ee:d3:fc:55:f6:98:77:24:40:76:
                    d0:db:6d:80:02:a4:b8:f3:49:ae:2c:40:e5:57:86:
                    b4:00:b3:17:44:98:7b:40:4e:ec:fe:46:7a:97:96:
                    dc:bb:fb:a9:37:7b:a3:83:eb:b8:c3:2a:e4:0c:33:
                    d5:84:79:fe:c1:67:bc:30:49:8d:66:4b:ce:80:17:
                    9b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7E:57:EA:8C:AA:13:10:AC:52:2B:37:35:F5:A6:E1:5F:6F:6E:36
            X509v3 Authority Key Identifier:
                keyid:39:29:49:1D:59:EC:78:DB:DE:C7:42:3B:04:D0:60:34:C1:A5:93:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:81:cf:9e:a5:77:e8:07:26:4c:63:86:24:69:b4:91:8d:bf:
         78:03:6b:98:8c:10:42:12:66:4a:fc:b6:c2:96:e8:1b:42:52:
         e3:dd:f3:94:c2:5b:b4:2c:fa:47:80:a4:3b:0a:4f:3d:1b:b4:
         a8:b0:a4:55:1f:0c:56:fe:d4:cd:13:14:5c:26:69:04:8a:f3:
         37:08:66:c7:fc:8b:4c:86:7b:92:bc:a6:0c:bf:f0:a5:eb:b1:
         8e:09:77:5f:c6:29:c5:db:65:da:52:63:f9:2f:37:56:cb:e5:
         40:52:61:e0:66:ac:51:fb:62:b7:54:d6:92:55:7b:46:a5:d0:
         5d:54:bf:a2:82:04:7b:b4:f3:12:71:2e:3e:8c:8b:8a:93:04:
         77:45:54:4c:b6:94:e5:50:bc:56:5f:25:e3:00:3c:59:e4:87:
         86:db:b3:1d:69:44:f1:27:31:85:be:f6:c1:27:9a:5d:9d:5c:
         a0:fc:89:0e:4a:7a:f8:45:dc:77:8a:19:70:85:c1:00:8d:2c:
         d1:6a:8d:47:c1:11:35:d0:25:60:e4:6a:a7:55:00:1e:0d:54:
         8c:02:23:e4:1e:a8:09:8d:7a:e5:4e:a9:b7:ca:4d:af:07:b2:
         3e:00:0a:af:11:bd:5c:b9:5f:d1:d4:bb:a8:c9:5b:86:90:cd:
         64:05:f3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 19:11:34 2026 by rpki-client