Error: rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
File:                     8CD2E74C0B51414825F95C9D3D432ADD56896751.mft (raw, json)
Hash identifier:          T0/Zc7liK+94sCBVKLRRBNGWmiV2ukMim9wrMOGgS4o=
Subject key identifier:   17:F7:22:E1:43:42:45:8D:C5:92:0E:0C:8B:C7:F5:E3:3B:3A:4F:61
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       7511625B66A520053876B19F4F5039C5EE90ACE4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
Manifest number:          02E7
Signing time:             Mon 24 Aug 2026 02:20:00 +0000
Manifest this update:     Mon 24 Aug 2026 02:15:00 +0000
Manifest next update:     Tue 25 Aug 2026 04:31:00 +0000
Files and hashes:         1: 3138362e3233352e3137332e302f32342d3234203d3e20323632373834.roa (hash: uarmLIdaT4GjFoHO9HBzfRqA/mQFFPDhPTea4z8VAmU=)
                          2: 3139312e3234312e3134362e302f32342d3234203d3e20323632373834.roa (hash: 9J/pQxrMU93foSOrPHlkgHfm5EjH90TwyEmO0N/0lGM=)
                          3: 3139312e3234312e3135322e302f32342d3234203d3e20323632373834.roa (hash: KT341BmR32wC921592pKreFpdGRGGtLQIRcQIIjIr4U=)
                          4: 3138362e3233352e3137322e302f32342d3234203d3e20323632373834.roa (hash: JfLyfL/AIQ8viR7Yr4MWvOvYL2YNpXBUgmGW5GBEUPk=)
                          5: 323830343a3165303a376530303a3a2f34302d3430203d3e20323632373834.roa (hash: mLlUqOe/Ej28bewJydtNCcFzGJzQy8hmbvP9WPIgcj0=)
                          6: 3138362e3233352e3136322e302f32342d3234203d3e20323632373834.roa (hash: 689IBLwaKA/9LMt4lhUEI+4KQVTUfdjZh1FCEYOWsSA=)
                          7: 3139312e3234312e3134372e302f32342d3234203d3e20323632373834.roa (hash: 5zX93IYsIBfwDWKWuCTfq8wl6ZM8eGX5sV8AYIrsYKY=)
                          8: 3139312e3234312e3135392e302f32342d3234203d3e20323632373834.roa (hash: rOSZCuM08AaBAOgU7KQY13mVQIMGYYydTvnUcwGGsts=)
                          9: 3134332e3230322e3130342e302f32322d3234203d3e20323632373834.roa (hash: +xGwVAzlq04CKXK/H9hh34Lf7XdiuxB0/lJyyIQvAXQ=)
                          10: 3138362e3233352e3136312e302f32342d3234203d3e20323632373834.roa (hash: ZTCSLaDNpz3xrco0bIs31gJPCuEj+lR9yrd52S5jYI4=)
                          11: 3139312e3234312e3134342e302f32342d3234203d3e20323632373834.roa (hash: nCjjYwULsydDCpFlPbOLTGM/hi1DtgpVkmV6pMAu4gs=)
                          12: 3139312e3234312e3135312e302f32342d3234203d3e20323632373834.roa (hash: rig3OWzZf+9EGUrzHkeJJHeHzEuSTnAy9ZOMFIwNV/8=)
                          13: 3139312e3234312e3135352e302f32342d3234203d3e20323632373834.roa (hash: W1PVrXcquUe10ieAbb9tsFSuyFfYEa6phNadCKgKWfQ=)
                          14: 3139312e3234312e3135382e302f32342d3234203d3e20323632373834.roa (hash: aR9yZhOd+g/QEgqOPFYsaAGDLoyKQVJu+jerDdAubWY=)
                          15: 3139312e3234312e3135332e302f32342d3234203d3e20323632373834.roa (hash: fsctAWaWSF2alFtwRmbBFlOgcurrQ8jNbU8y3UJ83zQ=)
                          16: 3138362e3233352e3137312e302f32342d3234203d3e20323632373834.roa (hash: cIhAlURI1BXftPdYXaNp0BgV8gOnDmh4goxGDKnqLoA=)
                          17: 3138362e3233352e3136302e302f32302d3230203d3e20323632373834.roa (hash: 8HbKe0sLI4+sgQvTKXw4Ig9vpKieVEaM93cExFg7Zwg=)
                          18: 3138362e3233352e3136382e302f32342d3234203d3e20323632373834.roa (hash: RLrRJNHMuWVhM9uIxbrjpeFm4dzF9kjokEDU1nTCDmw=)
                          19: 3139312e3234312e3135372e302f32342d3234203d3e20323632373834.roa (hash: tV8ZPBcK8kB9YBPvcJTHYW9npK8ipYB4FAIbE7GQS2M=)
                          20: 3137302e302e32382e302f32322d3234203d3e20323632373834.roa (hash: Dm+xdUI+Asp4UgGsNTsQ5rFMa06zPscBU09votBEf9M=)
                          21: 3139312e3234312e3134352e302f32342d3234203d3e20323632373834.roa (hash: w5UD5iEJ5ozwKAUCgYBqgSVtvu8KLq8Jd5uV7hKny4U=)
                          22: 3139312e3234312e3134392e302f32342d3234203d3e20323632373834.roa (hash: X1cuicW13631xj1ryvMUFu2KEqqD7lBsPdYnyIQxwwQ=)
                          23: 3138362e3233352e3136352e302f32342d3234203d3e20323632373834.roa (hash: u3b3ua7aHw6Sso00UCecMkOxq4BPpRqyXgblid7S1gY=)
                          24: 3138362e3233352e3136362e302f32342d3234203d3e20323632373834.roa (hash: AkjKQw/YTUsMmuaymvsIZeaob/0ytTf/QDhJ00b4BOg=)
                          25: 3139312e3234312e3134382e302f32342d3234203d3e20323632373834.roa (hash: xyEvfiA7kH8oBNBmmx+8zruX7fLxab+D6Wl050DVjiA=)
                          26: 8CD2E74C0B51414825F95C9D3D432ADD56896751.crl (hash: 69lYFl9HOaN+tjUlCEKhIQO93xEbL6J99YJNOaJOzG4=)
                          27: 3138362e3233352e3136302e302f32342d3234203d3e20323632373834.roa (hash: Mhm8KNoHZ00agNjKGiWc3Rg2XXc4O+8qmXCvxkwJgOg=)
                          28: 3139312e3234312e3135342e302f32342d3234203d3e20323632373834.roa (hash: pWTgWjPWP/aUhgkhm6agXBHOXHO/Vdt0OewWlMnvxRo=)
                          29: 323830343a3165303a376630303a3a2f34302d3430203d3e20323632373834.roa (hash: KRo3t8DFs6Ljorhe+50fZzf1Dq94yTtDHdnvwcMu3Ks=)
                          30: 3138362e3233352e3136332e302f32342d3234203d3e20323632373834.roa (hash: C8eRojR3zkIbDQz76YNzkdEHNyt6YCZtBZLNPqgO5i4=)
                          31: 3138362e3233352e3136372e302f32342d3234203d3e20323632373834.roa (hash: nOLGRUC64OSFOWtCJLPEf1eWI1WFZO4QYevedbD39qw=)
                          32: 3138362e3233352e3137352e302f32342d3234203d3e20323632373834.roa (hash: 79DIX7RtP5ls/VEw/7upZDmrF2v7LqrCEBTOSkX/sH0=)
                          33: 3139312e3234312e3134342e302f32302d3230203d3e20323632373834.roa (hash: AU4kj8q86d4b70rmK/C8pIkCY6hdXVgR6+d6Ru+0Pic=)
                          34: 3139312e3234312e3135362e302f32342d3234203d3e20323632373834.roa (hash: TCGZOqulx1lI4epQB/GYaGwY4Lp33JNh8Bn/wHY+wEE=)
                          35: 3138362e3233352e3137342e302f32342d3234203d3e20323632373834.roa (hash: ev0BpzLL/j5pQpkFfSOzgV6gdxMa3izuuyjq4hX3EWE=)
                          36: 3138362e3233352e3136342e302f32342d3234203d3e20323632373834.roa (hash: kwK0crkdWbzxYM5qxNc/Me62c26bU9WQ/jmaXhF+RlM=)
                          37: 3138362e3233352e3137302e302f32342d3234203d3e20323632373834.roa (hash: 0N1bBxkepcLd7hcdyrLJ7AgqEWvr1pSThSFJ1ik1d2s=)
                          38: 323830343a3165303a3a2f33322d3336203d3e20323632373834.roa (hash: j9ObupScIEPck3rqXzMQbxFrQ+RRBVzTqsNhyNco6X4=)
                          39: 3139312e3234312e3135302e302f32342d3234203d3e20323632373834.roa (hash: cj2aqa0roETm46n4nhD4LuZF2vk9INnelfpPhikD7aw=)
                          40: 3138362e3233352e3136392e302f32342d3234203d3e20323632373834.roa (hash: rmp1gEIwx+k0bIkVk6avBe1rbucTIUVCHgvLv/WqUN0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
                          rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 04:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:11:62:5b:66:a5:20:05:38:76:b1:9f:4f:50:39:c5:ee:90:ac:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Aug 24 02:15:00 2026 GMT
            Not After : Aug 25 04:31:00 2026 GMT
        Subject: CN=17F722E14342458DC5920E0C8BC7F5E33B3A4F61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4d:57:38:05:9c:3a:5f:9c:11:83:99:23:ac:
                    38:88:d6:f6:53:92:8c:56:23:b7:af:5b:86:95:80:
                    da:44:98:1b:61:48:d8:ff:02:f6:db:66:36:26:f1:
                    23:cf:5e:bb:41:f3:5c:ef:a2:0e:2f:07:75:de:2b:
                    47:2b:34:34:e1:a6:c6:90:a9:24:19:08:8f:8b:c7:
                    f9:7f:ae:1f:56:3f:d3:2b:2f:2b:9c:f9:b1:24:ee:
                    dd:fc:3b:f9:32:73:6f:3a:d2:6f:34:5e:56:fc:79:
                    59:cf:0a:95:12:a9:15:ba:36:34:c6:d6:a3:ce:14:
                    70:e9:27:40:87:42:84:4f:be:ee:1e:41:da:52:1d:
                    56:a6:2f:a8:4e:a5:59:d8:bf:3d:48:a8:c5:f7:fc:
                    eb:ec:b4:29:1e:50:3f:79:b8:59:57:e8:c9:b9:a2:
                    85:03:0b:ab:6b:ec:bb:78:2b:41:5e:c2:24:2b:02:
                    c4:4f:ce:aa:da:54:d5:2a:d6:b7:e3:0e:7d:22:74:
                    cb:91:60:81:33:96:6c:14:f5:3d:d7:e4:8c:ff:34:
                    7d:8b:b0:36:23:05:83:ff:55:c7:02:e3:47:92:18:
                    42:fa:54:bc:22:b7:80:4c:ef:ba:15:fc:5e:a0:43:
                    47:2c:1d:fa:79:d9:5a:34:09:bc:55:08:06:f4:2d:
                    5a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F7:22:E1:43:42:45:8D:C5:92:0E:0C:8B:C7:F5:E3:3B:3A:4F:61
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:5c:14:fd:99:fb:2b:ac:5e:f7:d3:90:21:5e:6b:40:80:93:
         14:19:f1:0f:81:d8:a9:b9:4a:7c:e2:22:c9:57:f2:8f:83:15:
         b2:78:34:f9:37:a3:c7:4d:c4:26:e4:b8:2a:2e:8d:e8:71:09:
         41:0a:23:49:f2:1d:9a:8b:a9:33:db:fd:2b:d3:b6:3f:a6:de:
         d1:e1:77:84:b6:68:b6:2f:c0:fd:68:96:6c:ff:19:47:37:d6:
         41:b6:fa:cb:58:61:4a:03:e4:28:c6:91:a8:ee:1b:95:60:c1:
         f7:5a:2d:e8:dc:b1:dc:d5:99:5d:c0:fb:ba:88:65:51:06:b9:
         62:af:e6:ce:20:f1:be:38:ae:bc:bc:1c:a8:d0:89:0c:65:61:
         54:54:91:fb:25:88:52:f6:9b:f3:60:89:8d:fd:ab:e2:98:b9:
         aa:0e:55:43:ed:88:62:4d:46:4b:40:f6:5d:d7:e9:41:fc:d9:
         40:01:84:8a:56:c8:19:a1:6a:41:8c:92:55:ea:ef:fc:9c:41:
         7e:1f:d6:9c:b7:4a:38:57:13:92:d3:6a:0e:4b:52:81:bc:2d:
         b9:ea:e1:7d:ee:e2:26:9b:68:6f:b0:21:c9:5c:c7:1a:ca:bd:
         74:52:25:47:0b:5d:a8:4a:63:db:c5:0e:33:ca:e9:20:4a:29:
         c8:5e:38:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 09:25:16 2026 by rpki-client