Error: rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft
File:                     57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft (raw, json)
Hash identifier:          eFBco+4GknnMpEJd4Jf8U/woX9bW34ELy7U/2eBKkIs=
Subject key identifier:   C9:79:D8:4A:C5:75:8F:AE:EF:39:77:87:92:14:DB:8A:73:0E:95:03
Authority key identifier: 57:13:5F:33:D3:B8:CA:CE:38:71:4D:FB:9D:70:A5:8A:A9:C1:E7:B3
Certificate issuer:       /CN=57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3
Certificate serial:       6E9730D8B1A6973AB1FCBD9CC0D5DCCE2295D5A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft
Manifest number:          0489
Signing time:             Sun 23 Aug 2026 08:10:00 +0000
Manifest this update:     Sun 23 Aug 2026 08:05:00 +0000
Manifest next update:     Mon 24 Aug 2026 08:37:00 +0000
Files and hashes:         1: 3136342e3136332e34342e302f32322d3232203d3e20323635393338.roa (hash: 1z4/xMozbUx2CPAp5a1G9mTLfzpvBpA70xbCWwQm3IM=)
                          2: 3136342e3136332e34342e302f32332d3233203d3e20323635393338.roa (hash: 0kK3z/TrTAaoriZ3GY5WskvHWB4ENyEqA6Wnc3yr+IE=)
                          3: 3136342e3136332e34362e302f32332d3233203d3e20323635393338.roa (hash: Mu0Wn6H9qsU4Z+oCCRBb3/sh2XWemV9Lqf1gWwvHxXo=)
                          4: 3136342e3136332e34342e302f32342d3234203d3e20323635393338.roa (hash: 0ae2f1EZL6HbxhVwcUzw3Me44jF/YDkz9SSwEVRkb24=)
                          5: 323830343a343032383a3a2f33322d3332203d3e20323635393338.roa (hash: UMKRCX/4qYhc4XNHoqfKV/1ONT4TGbG+lvZt+EzE/0A=)
                          6: 3136342e3136332e34352e302f32342d3234203d3e20323635393338.roa (hash: lV1oKe747G0n6WRgM1a4dM22y9iZagltIiwr2w1aEBg=)
                          7: 57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl (hash: jxSqNQF3tzmaGtsOHB16v4ZXCIowAGoXMbjyM0Dhvy4=)
                          8: 3136342e3136332e34372e302f32342d3234203d3e20323635393338.roa (hash: ECg/+TFC7sOVcDJEnNISsSLO7wDSB/2DnX7fHheA4EU=)
                          9: 323830343a343032383a3130303a3a2f34302d3430203d3e20323635393338.roa (hash: 1tVL+6B8HhLcFiXsFBeRJ5hySt2gSzAHZgR8EqHAJgk=)
                          10: 3136342e3136332e34362e302f32342d3234203d3e20323635393338.roa (hash: Fx9VT/BBPrSUohUu7tYHinsNONRM+8cKqY2rlMaecck=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl
                          rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 08:37:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:97:30:d8:b1:a6:97:3a:b1:fc:bd:9c:c0:d5:dc:ce:22:95:d5:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3
        Validity
            Not Before: Aug 23 08:05:00 2026 GMT
            Not After : Aug 24 08:37:00 2026 GMT
        Subject: CN=C979D84AC5758FAEEF3977879214DB8A730E9503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:40:37:53:89:93:28:94:2d:58:ea:a0:33:34:
                    22:c4:94:b1:31:85:96:c8:77:90:12:59:5c:10:07:
                    a4:80:af:dc:3e:e6:b2:63:eb:ce:b6:d7:c5:e4:2b:
                    19:5a:93:65:ed:c9:4a:6a:fb:98:c4:1d:68:a0:79:
                    e7:c4:f9:36:7f:c9:de:80:23:eb:ec:4e:70:9b:62:
                    47:54:48:01:a5:5a:a4:e9:19:78:56:84:4e:ba:ca:
                    13:b3:be:c7:11:b7:09:d0:0a:5d:b3:24:32:3e:ba:
                    ff:22:a3:fd:7f:de:63:fd:a2:ac:8d:6b:0d:47:61:
                    2c:3f:97:0a:71:ba:60:52:75:b4:1d:c0:cc:b9:3b:
                    5e:cb:e3:52:28:a8:40:a2:11:68:fd:8a:88:60:ed:
                    8b:d7:c0:24:fd:2f:7c:be:4f:cd:7b:0e:cf:23:a2:
                    2d:60:41:69:95:c0:c2:0a:a6:36:16:e5:d7:4b:0a:
                    0c:5b:f2:97:b7:1e:37:05:f3:8b:75:1a:df:88:cf:
                    4b:4c:47:6a:05:df:7c:7e:f7:55:b3:37:0d:b0:c5:
                    0f:91:c2:d4:2c:1a:e2:28:d2:b7:53:3e:7c:56:db:
                    6c:62:f9:ac:31:af:6a:1d:46:21:d7:47:a7:f0:62:
                    c5:dc:0e:a3:6a:97:28:29:77:48:09:d4:cd:65:87:
                    3b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:79:D8:4A:C5:75:8F:AE:EF:39:77:87:92:14:DB:8A:73:0E:95:03
            X509v3 Authority Key Identifier:
                keyid:57:13:5F:33:D3:B8:CA:CE:38:71:4D:FB:9D:70:A5:8A:A9:C1:E7:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:51:84:ff:01:e0:42:9e:77:34:d6:84:8d:ce:d4:be:c9:a6:
         64:1f:ee:ad:69:8d:f8:65:1b:08:94:d9:87:ed:d6:d7:f6:eb:
         d5:b1:4a:76:44:3a:8b:51:69:40:54:6a:ef:93:a3:47:57:03:
         91:fc:8f:46:cd:49:48:60:9b:e3:b2:9d:93:2c:02:53:b3:1d:
         13:ce:34:94:5e:3f:ca:55:4d:f8:8f:00:cf:81:55:ee:8b:74:
         e4:63:a5:64:eb:ef:96:3e:fd:79:93:2b:d0:ab:4f:ce:fd:c0:
         dd:89:93:92:c7:e0:18:21:d6:d0:1a:49:f5:01:23:b0:5b:dc:
         36:fd:f7:ba:27:43:0f:2f:8c:f5:78:cb:22:9a:15:96:a0:9b:
         07:c2:df:b2:96:32:9b:79:9d:1e:ce:4a:a2:3e:be:b2:e6:7b:
         5e:3a:0b:01:c0:e1:96:03:c8:c7:1f:da:e0:14:ed:ed:8c:db:
         b4:1d:a9:a0:92:eb:84:28:ee:ce:a8:9c:9b:30:6a:d6:48:1c:
         36:65:2d:eb:8f:eb:00:11:3e:89:4e:99:4f:6c:33:cf:53:09:
         3c:23:c7:8c:24:25:4f:43:01:3b:fe:4f:fa:b8:db:ed:a0:4a:
         99:a6:2d:13:49:95:92:4d:61:73:2a:b2:e0:73:3f:80:8e:ae:
         e8:50:38:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 13:36:05 2026 by rpki-client