Error: rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.mft
File:                     398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.mft (raw, json)
Hash identifier:          a+38U0o044JeC+nMG9wK2DXqFlcChNugotfn1qLu9DQ=
Subject key identifier:   66:5A:3E:41:00:9A:93:C3:6D:1A:4C:E5:00:9A:59:57:AF:2F:7E:E4
Authority key identifier: 39:87:31:60:6E:B4:C0:DD:0D:FA:C2:B4:73:FC:2F:70:FF:DB:9D:47
Certificate issuer:       /CN=398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47
Certificate serial:       381C668112D93502CF99B724F7654964B5ED193D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.mft
Manifest number:          31
Signing time:             Sun 11 Oct 2026 05:59:42 +0000
Manifest this update:     Sun 11 Oct 2026 05:54:42 +0000
Manifest next update:     Mon 12 Oct 2026 09:12:42 +0000
Files and hashes:         1: 34352e3139302e36322e302f32342d3234203d3e20323639363230.roa (hash: 5j3xBvjNg9fMhgEXii/p/u9tnum/JFzrPR4olORIuFo=)
                          2: 398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.crl (hash: 2GAz4ZAtDkoTUwFa8dERw+L0pHu4M/UCe6PRBrzskf4=)
                          3: 34352e3139302e36322e302f32332d3233203d3e20323639363230.roa (hash: dhsu5Y0FB9Cl23XbcbcqJCltk3pHgEd0q11dDAmpUaI=)
                          4: 323830343a363735343a3a2f33322d3332203d3e20323639363230.roa (hash: Hq1BPJyHsmno6M93fOnnMWAlkWaZLmkHwAo+Tm9o2Q0=)
                          5: 34352e3139302e36302e302f32342d3234203d3e20323639363230.roa (hash: cM5gVrD0v/cLKNPoi71jgxC3ZGEfOS39cEGt4Yv3vYM=)
                          6: 34352e3139302e36312e302f32342d3234203d3e20323639363230.roa (hash: Ts8kPpCuGW7FQzepWDFd9VAUiGQIQ0PffCSHu7QJm1A=)
                          7: 34352e3139302e36302e302f32322d3232203d3e20323639363230.roa (hash: A/rxDHFZ8p5Dj5swW2Q+HuoDiQVnMToevx61HcbNFpk=)
                          8: 34352e3139302e36332e302f32342d3234203d3e20323639363230.roa (hash: vlLHXFdCZa/lI3tF4v//Cbf3MuuAti9QNmQ9HgahWOQ=)
                          9: 34352e3139302e36302e302f32332d3233203d3e20323639363230.roa (hash: ZRs+ef9gXcCSVGmlJWFiA5iISa/SCWkzDOwPryuwkf0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.crl
                          rsync://rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 09:12:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:1c:66:81:12:d9:35:02:cf:99:b7:24:f7:65:49:64:b5:ed:19:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47
        Validity
            Not Before: Oct 11 05:54:42 2026 GMT
            Not After : Oct 12 09:12:42 2026 GMT
        Subject: CN=665A3E41009A93C36D1A4CE5009A5957AF2F7EE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:20:f1:b3:37:0c:f6:a7:bf:03:68:4e:d1:13:
                    a9:81:ba:41:52:11:d5:62:16:04:0c:91:3d:75:9c:
                    48:91:14:ea:e7:22:42:92:8e:07:7e:5e:7f:04:3f:
                    54:b7:5c:66:b2:fe:6b:7c:23:a7:e9:a7:c2:0f:d2:
                    21:db:89:7e:85:da:91:d0:6f:e6:75:62:85:c3:ae:
                    23:b7:e8:79:b5:9d:5d:0f:fa:55:d0:33:9a:72:cc:
                    2e:8c:7a:53:4f:b1:f4:04:20:24:d3:97:30:ad:7f:
                    2c:13:9f:b2:c8:f6:16:b4:11:e3:6b:bf:87:10:20:
                    c5:9e:35:f4:37:ca:61:33:77:bf:87:43:12:54:0b:
                    ab:76:36:98:dd:e7:0c:c4:77:72:a7:58:cf:38:89:
                    fa:cb:b9:cb:00:ef:a5:89:1e:ec:a0:d0:b2:14:f7:
                    48:04:07:79:f4:11:b8:57:3a:a3:a4:9b:3e:67:b5:
                    dc:b7:0b:b1:d4:96:9d:7b:33:39:0b:e2:57:ce:4c:
                    22:61:8b:22:1c:b8:92:fb:79:62:88:dd:fb:8d:c9:
                    54:ec:93:96:37:db:38:8f:33:e3:5f:a2:d8:59:1b:
                    e9:d1:a4:a4:a7:c8:a0:d4:e3:f0:ec:b9:90:c4:59:
                    1e:9d:ef:31:3e:9b:6b:28:ee:55:44:3e:3f:89:56:
                    b3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:5A:3E:41:00:9A:93:C3:6D:1A:4C:E5:00:9A:59:57:AF:2F:7E:E4
            X509v3 Authority Key Identifier:
                keyid:39:87:31:60:6E:B4:C0:DD:0D:FA:C2:B4:73:FC:2F:70:FF:DB:9D:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:37:8b:e3:87:ef:40:59:81:9b:d3:70:24:3b:d2:06:1b:b9:
         e9:58:4f:d5:9d:15:b5:df:66:13:3f:52:63:f9:b9:93:47:4c:
         d3:b7:b1:d4:9c:2b:7e:d2:c7:b7:17:58:d3:14:d9:f8:02:b0:
         da:0d:4a:33:39:5c:8b:be:c5:8e:e2:9e:52:21:92:fc:72:38:
         c8:20:62:d6:40:d2:42:f7:b9:5f:2f:56:d6:b1:5b:3e:68:9c:
         cd:11:ee:95:11:13:f6:50:fb:31:0f:a9:5b:6e:87:7a:5c:09:
         4a:d7:43:5c:82:b9:5b:8d:cd:ef:4d:99:16:4e:f5:e3:d8:44:
         39:ab:18:29:ed:16:ba:09:c4:28:3b:b3:5d:cb:ea:8b:c3:34:
         66:ed:50:56:f7:24:6b:4a:42:46:8e:f3:0d:0a:fb:02:56:6f:
         49:a9:af:00:75:be:2e:a0:36:20:4d:90:7a:3f:9d:10:eb:7c:
         44:92:35:ed:01:46:45:89:c9:56:de:9b:f5:02:61:64:71:46:
         b0:d7:07:11:bd:d6:cb:98:b6:16:f7:90:b8:7b:0c:b2:a9:a7:
         34:14:15:75:99:74:d6:49:0b:b9:e5:7e:6f:37:12:d0:52:68:
         5e:04:8a:8c:66:91:dd:77:d0:ab:04:9f:45:1b:9a:a8:f3:cb:
         14:c8:b2:79
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOBxmgRLZNQLPmbck92VJZLXtGT0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzk4NzMxNjA2RUI0QzBERDBERkFDMkI0NzNGQzJGNzBG
RkRCOUQ0NzAeFw0yNjEwMTEwNTU0NDJaFw0yNjEwMTIwOTEyNDJaMDMxMTAvBgNV
BAMTKDY2NUEzRTQxMDA5QTkzQzM2RDFBNENFNTAwOUE1OTU3QUYyRjdFRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaIPGzNwz2p78DaE7RE6mBukFS
EdViFgQMkT11nEiRFOrnIkKSjgd+Xn8EP1S3XGay/mt8I6fpp8IP0iHbiX6F2pHQ
b+Z1YoXDriO36Hm1nV0P+lXQM5pyzC6MelNPsfQEICTTlzCtfywTn7LI9ha0EeNr
v4cQIMWeNfQ3ymEzd7+HQxJUC6t2Npjd5wzEd3KnWM84ifrLucsA76WJHuyg0LIU
90gEB3n0EbhXOqOkmz5ntdy3C7HUlp17MzkL4lfOTCJhiyIcuJL7eWKI3fuNyVTs
k5Y32ziPM+NfothZG+nRpKSnyKDU4/DsuZDEWR6d7zE+m2so7lVEPj+JVrMrAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUZlo+QQCak8NtGkzlAJpZV68vfuQwHwYDVR0j
BBgwFoAUOYcxYG60wN0N+sK0c/wvcP/bnUcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWpVbVUxbjhEUDh5MkdMTXpvR01iOW9vNFF4TXhOY2pIaU5KOWMyTFdR
aFIvMC8zOTg3MzE2MDZFQjRDMEREMERGQUMyQjQ3M0ZDMkY3MEZGREI5RDQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5ODczMTYwNkVCNEMwREQw
REZBQzJCNDczRkMyRjcwRkZEQjlENDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NWpVbVUxbjhEUDh5MkdMTXpvR01iOW9vNFF4TXhOY2pIaU5KOWMyTFdRaFIvMC8z
OTg3MzE2MDZFQjRDMEREMERGQUMyQjQ3M0ZDMkY3MEZGREI5RDQ3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUjeL44fvQFmBm9NwJDvSBhu56VhP1Z0Vtd9mEz9SY/m5k0dM07ex1JwrftLH
txdY0xTZ+AKw2g1KMzlci77FjuKeUiGS/HI4yCBi1kDSQve5Xy9W1rFbPmiczRHu
lRET9lD7MQ+pW26HelwJStdDXIK5W43N702ZFk7149hEOasYKe0WugnEKDuzXcvq
i8M0Zu1QVvcka0pCRo7zDQr7AlZvSamvAHW+LqA2IE2Qej+dEOt8RJI17QFGRYnJ
Vt6b9QJhZHFGsNcHEb3Wy5i2FveQuHsMsqmnNBQVdZl01kkLueV+bzcS0FJoXgSK
jGaR3XfQqwSfRRuaqPPLFMiyeQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 21:59:52 2026 by rpki-client