Error: rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.mft
File:                     7ADC4A0F30F84A13F06E94A86F034E04BF92B875.mft (raw, json)
Hash identifier:          N4LRgZUgFGWXCTEzBbvudVIaWdcgghXfpK/LVA17icM=
Subject key identifier:   BD:34:22:8E:28:65:3F:87:17:4F:81:F0:E2:94:CC:7C:1D:28:B7:EE
Authority key identifier: 7A:DC:4A:0F:30:F8:4A:13:F0:6E:94:A8:6F:03:4E:04:BF:92:B8:75
Certificate issuer:       /CN=7ADC4A0F30F84A13F06E94A86F034E04BF92B875
Certificate serial:       2D814340764B4EF5480355F04B568BB586825EF6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.mft
Manifest number:          02A6
Signing time:             Sat 22 Aug 2026 21:12:28 +0000
Manifest this update:     Sat 22 Aug 2026 21:07:28 +0000
Manifest next update:     Mon 24 Aug 2026 00:06:28 +0000
Files and hashes:         1: 323830343a376531383a3a2f33322d313238203d3e20323731363032.roa (hash: I6CrKREpR3G1zKzM+l1uY0N/pDdfMeCiMRGy+koVDpE=)
                          2: 3137392e36332e3135382e302f32342d3234203d3e20323731363032.roa (hash: qWzAcV7Gz0DgMZ3ddonb6EFuyCmiEF8muRoKxtmGQOM=)
                          3: 3137392e36332e3135362e302f32322d3232203d3e20323731363032.roa (hash: 0EUIWVU4my9U+y8UV07pvXmtiiUZqxEh8V0Q7xctVB0=)
                          4: 7ADC4A0F30F84A13F06E94A86F034E04BF92B875.crl (hash: ExPOhUU4EpLKtM9MmhXklJfWYot3cvIoSvdHHsKr3q4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.crl
                          rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:81:43:40:76:4b:4e:f5:48:03:55:f0:4b:56:8b:b5:86:82:5e:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ADC4A0F30F84A13F06E94A86F034E04BF92B875
        Validity
            Not Before: Aug 22 21:07:28 2026 GMT
            Not After : Aug 24 00:06:28 2026 GMT
        Subject: CN=BD34228E28653F87174F81F0E294CC7C1D28B7EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7f:46:fe:01:47:88:42:62:3e:e2:b7:a2:06:
                    02:cd:b2:cc:17:a7:a2:14:14:91:37:8c:48:f6:84:
                    f7:f0:ca:56:7c:11:4c:4e:5e:89:b5:e4:41:6d:6b:
                    3d:31:8b:b3:96:d3:cb:5c:db:14:5f:96:19:cd:2d:
                    df:50:2d:08:32:17:c5:4d:87:2c:fc:b8:8c:5f:bc:
                    88:05:fb:94:2b:4f:f3:3f:72:08:a6:f2:63:ed:fe:
                    d5:d6:82:5a:91:47:20:ce:8f:89:36:24:09:b2:5a:
                    fa:f4:4a:eb:ba:3f:d4:d3:1c:b7:85:b9:a2:15:d4:
                    d7:5a:52:44:9e:3a:80:6e:1e:81:ce:73:ba:4f:72:
                    ff:ca:5d:6f:1c:a4:47:1c:08:7c:e6:e2:d5:8d:50:
                    68:58:24:64:49:e1:a2:d3:d9:f0:86:92:fb:84:69:
                    ca:ea:74:3d:06:b5:18:05:36:c2:b5:a3:7e:35:be:
                    0b:2d:60:3c:2e:19:db:e9:b4:df:68:3d:a2:de:bc:
                    c9:69:29:fd:bb:02:17:b5:5a:f1:d5:ac:f9:a0:bd:
                    fe:7b:cb:01:23:51:d9:df:e0:42:c3:a1:14:14:4b:
                    83:ae:e1:37:c8:df:d0:30:8e:37:5a:70:92:89:4d:
                    66:42:5d:14:dc:11:3e:b7:2e:87:2e:a1:d3:9a:a8:
                    12:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:34:22:8E:28:65:3F:87:17:4F:81:F0:E2:94:CC:7C:1D:28:B7:EE
            X509v3 Authority Key Identifier:
                keyid:7A:DC:4A:0F:30:F8:4A:13:F0:6E:94:A8:6F:03:4E:04:BF:92:B8:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:ac:2c:16:4c:0f:ef:f4:ea:1a:0d:76:41:bf:10:85:76:ba:
         9b:93:cf:51:71:4f:f7:9b:a3:24:32:2f:8a:da:cb:c1:cd:65:
         a0:79:30:a4:d5:32:45:fe:15:fd:4a:c6:66:7d:83:22:fe:b3:
         b3:08:20:c9:cc:1c:73:35:bd:c4:76:a3:e2:1d:bf:56:5c:de:
         49:e1:ab:f6:2e:44:68:fa:c7:ed:a4:11:f4:ab:48:05:95:ca:
         d0:9e:a0:bf:72:1c:c8:a5:45:2a:92:ec:30:ed:0c:b6:5e:07:
         60:ac:bc:45:64:33:f2:5a:bb:9a:3c:b8:4f:16:f4:50:bf:14:
         59:92:54:d2:85:53:4f:0e:35:b8:b5:29:b5:51:d4:3d:78:cc:
         4d:93:ac:d5:81:ef:56:22:e7:24:cc:8a:4a:9f:04:33:3f:a7:
         13:dd:6b:26:c9:49:ea:ac:a8:b8:3b:da:07:c4:3a:70:d4:1d:
         f4:ac:89:da:6b:e4:f5:dd:0f:da:87:03:fa:c2:ba:73:2f:c5:
         3d:c8:b7:00:88:0b:11:69:5b:77:14:56:dd:84:7c:77:68:7f:
         f3:0b:f3:c7:da:e4:1c:b0:99:c0:d9:2e:3f:f6:70:cb:4e:52:
         da:7f:0b:78:45:2a:d9:aa:fc:1a:c8:98:47:5e:b4:91:f7:42:
         44:82:12:13
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULYFDQHZLTvVIA1XwS1aLtYaCXvYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0FEQzRBMEYzMEY4NEExM0YwNkU5NEE4NkYwMzRFMDRC
RjkyQjg3NTAeFw0yNjA4MjIyMTA3MjhaFw0yNjA4MjQwMDA2MjhaMDMxMTAvBgNV
BAMTKEJEMzQyMjhFMjg2NTNGODcxNzRGODFGMEUyOTRDQzdDMUQyOEI3RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaf0b+AUeIQmI+4reiBgLNsswX
p6IUFJE3jEj2hPfwylZ8EUxOXom15EFtaz0xi7OW08tc2xRflhnNLd9QLQgyF8VN
hyz8uIxfvIgF+5QrT/M/cgim8mPt/tXWglqRRyDOj4k2JAmyWvr0Suu6P9TTHLeF
uaIV1NdaUkSeOoBuHoHOc7pPcv/KXW8cpEccCHzm4tWNUGhYJGRJ4aLT2fCGkvuE
acrqdD0GtRgFNsK1o341vgstYDwuGdvptN9oPaLevMlpKf27Ahe1WvHVrPmgvf57
ywEjUdnf4ELDoRQUS4Ou4TfI39AwjjdacJKJTWZCXRTcET63LocuodOaqBLjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUvTQijihlP4cXT4Hw4pTMfB0ot+4wHwYDVR0j
BBgwFoAUetxKDzD4ShPwbpSobwNOBL+SuHUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNW80WDZIRWloN0p4dm03ajNwbUFuaHQ4TnFCTEFkVzZQZkxCMnNoNE5T
TDUvMS83QURDNEEwRjMwRjg0QTEzRjA2RTk0QTg2RjAzNEUwNEJGOTJCODc1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdBREM0QTBGMzBGODRBMTNG
MDZFOTRBODZGMDM0RTA0QkY5MkI4NzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NW80WDZIRWloN0p4dm03ajNwbUFuaHQ4TnFCTEFkVzZQZkxCMnNoNE5TTDUvMS83
QURDNEEwRjMwRjg0QTEzRjA2RTk0QTg2RjAzNEUwNEJGOTJCODc1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATqwsFkwP7/TqGg12Qb8QhXa6m5PPUXFP95ujJDIvitrLwc1loHkwpNUyRf4V
/UrGZn2DIv6zswggycwcczW9xHaj4h2/VlzeSeGr9i5EaPrH7aQR9KtIBZXK0J6g
v3IcyKVFKpLsMO0Mtl4HYKy8RWQz8lq7mjy4Txb0UL8UWZJU0oVTTw41uLUptVHU
PXjMTZOs1YHvViLnJMyKSp8EMz+nE91rJslJ6qyouDvaB8Q6cNQd9KyJ2mvk9d0P
2ocD+sK6cy/FPci3AIgLEWlbdxRW3YR8d2h/8wvzx9rkHLCZwNkuP/Zwy05S2n8L
eEUq2ar8GsiYR160kfdCRIISEw==
-----END CERTIFICATE-----
Generated at Sun Aug 23 14:32:16 2026 by rpki-client