Error: rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.mft
File:                     413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.mft (raw, json)
Hash identifier:          vYt0FdT19vEGL/9Ld40hLLtuT/gPBNSoEa5CWxnhUp4=
Subject key identifier:   20:52:B2:65:E5:0E:50:1F:42:13:2A:3D:94:2C:9E:6B:B3:A4:7F:3C
Authority key identifier: 41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78
Certificate issuer:       /CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
Certificate serial:       5F1CBE2A5D4BC5CFE91EFB977E5C15D54DAA6B10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.mft
Manifest number:          0489
Signing time:             Sun 23 Aug 2026 07:50:01 +0000
Manifest this update:     Sun 23 Aug 2026 07:45:01 +0000
Manifest next update:     Mon 24 Aug 2026 11:13:01 +0000
Files and hashes:         1: 323830343a336564343a313030323a3a2f34382d3438203d3e20323636363233.roa (hash: ep93iM+0HtUULj39V7WwL6OAjdcxNiUA8duu0sq826I=)
                          2: 323830343a336564343a383030303a3a2f33342d3334203d3e20323636363233.roa (hash: Bogz742uV2Sxqc/NfsmspNzFLDvpIs/xmCNH5gWpwI4=)
                          3: 323830343a336564343a313030313a3a2f34382d3438203d3e20323636363233.roa (hash: VjXbEEZ5ksHPFK9Q3cH9lr4q70cF/PC7SkKEN4H78WA=)
                          4: 323830343a336564343a323361613a3a2f34382d3438203d3e20323636363233.roa (hash: E8KPciIbaUxrXp4IrPvClmU7PMQZM2Ah8pnopRjgjzI=)
                          5: 323830343a336564343a313961613a3a2f34382d3438203d3e20323636363233.roa (hash: 2xFSzgsR6WEhSihphxynjTYkEntVjk4PsMy9dZgOyKs=)
                          6: 413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl (hash: 7m8yfJtWxOv/3Q7q6GKaTwa4PihTpKBjHJhpBVUZsRk=)
                          7: 323830343a336564343a3561613a3a2f34382d3438203d3e20323636363233.roa (hash: TMFk84NJDPPuaoJXEh9vkm6s+4SiDWt2A4XLDQN+SyI=)
                          8: 323830343a336564343a373361613a3a2f34382d3438203d3e20323636363233.roa (hash: usYDooNgDR7o+ZUVNSB85O3QGOBxOqPiqff608oYGP4=)
                          9: 323830343a336564343a636330303a3a2f34362d3436203d3e20323636363233.roa (hash: BsW4ec7/mjxQ/8ZHZNpO2CqCq3Zn9ZqfeWJy+o0GkH4=)
                          10: 323830343a336564343a3661613a3a2f34382d3438203d3e20323636363233.roa (hash: 3m+7CaWucqbqfx8XphJUIqiHV0PCUUicjmkHHSK4Ito=)
                          11: 323830343a336564343a646430303a3a2f34362d3436203d3e20323636363233.roa (hash: BQMgEjHeh80bZ+nZQnpqWB/H/VGV6BmJdYEfm/iZzak=)
                          12: 323830343a336564343a383030303a3a2f33332d3333203d3e20323636363233.roa (hash: uDFgJoM7Bh5sFNLqUi88tGAgu/Tdrk5mItR8oklei6E=)
                          13: 323830343a336564343a633030303a3a2f33342d3334203d3e20323636363233.roa (hash: MTiQXgkBRCb3W0hltkGx5C4FkHGGB4iYD428MiHFxJg=)
                          14: 323830343a336564343a313030333a3a2f34382d3438203d3e20323636363233.roa (hash: 4VH3xjULPxhkz44qw7YAWKEPvoZZ57xZ7YtooQGLPAY=)
                          15: 323830343a336564343a313861613a3a2f34382d3438203d3e20323636363233.roa (hash: cgNz6xQdz8Wydl3g+w+LI5+MllrxVBy3+Q0j7D2r+QU=)
                          16: 323830343a336564343a666666663a3a2f34382d3438203d3e20323636363233.roa (hash: uWtrs5h712k7S6d73dhXdn9cAudRnMq+S8xfvmztdU4=)
                          17: 323830343a336564343a613534363a3a2f34382d3438203d3e20323636363233.roa (hash: dlrwACLb+o4lPL9QKDDpTSFzBwQKJrQWTMSjTmuKkh4=)
                          18: 323830343a336564343a3a2f33342d3334203d3e20323636363233.roa (hash: mzmHXhV/PD2BaZKTMguXCSG0GVVn4YZuWMoc2B98knQ=)
                          19: 323830343a336564343a3a2f33332d3333203d3e20323636363233.roa (hash: Z6gUHFw70CYdsJJ2ZqaXpA2uEJVr8bUXdo4o+cyFiKQ=)
                          20: 323830343a336564343a3761613a3a2f34382d3438203d3e20323636363233.roa (hash: eV5fUYD0A+hIldT3Wm52/SpEO8knYJ+LmYktLdI1/QQ=)
                          21: 323830343a336564343a3a2f33322d3332203d3e20323636363233.roa (hash: BEmtA2enm9GX5S/rljiSjEtVBavF/tJGsvcxQfCIhps=)
                          22: 323830343a336564343a616137323a3a2f34382d3438203d3e20323636363233.roa (hash: eh6gsFzNc5zbJb8/V3du29oYaJoQhCt4sA1IOKDzbPY=)
                          23: 323830343a336564343a313030303a3a2f34382d3438203d3e20323636363233.roa (hash: QouALCW4xOJ+cEP7hdnFoD42XBaPxBTNZHApiavfQCM=)
                          24: 323830343a336564343a373561613a3a2f34382d3438203d3e20323636363233.roa (hash: myT9qQzVGKBD7MA+VGq5S0alBHpzjfTLe37ykc1ixTM=)
                          25: 323830343a336564343a373661613a3a2f34382d3438203d3e20323636363233.roa (hash: 6SiMhKcprOGKAAZaZOg1ZM5ICcMihPqqme7hFCritO8=)
                          26: 3132382e3230312e37362e302f32322d3234203d3e20323636363233.roa (hash: SZpp2QA5vSsumhWVEM/5dcCueR1ZMqfDSwrQybXad/g=)
                          27: 323830343a336564343a333061613a3a2f34382d3438203d3e20323636363233.roa (hash: KV8jrugMLHdIRJk5zHzyJQcY5G/0gWSoMmyWGl9Bd0o=)
                          28: 323830343a336564343a343030303a3a2f33342d3334203d3e20323636363233.roa (hash: UXQOBzfRIFvjf8ISCdWglyqZsPedsYLLnsCHnLu8Lno=)
                          29: 323830343a336564343a313a3a2f34382d3438203d3e20323636363233.roa (hash: ETpNbSbSS9dqy6Yjz00Okz6Ywr8/SrfsOQ0E55eF1Wo=)
                          30: 323830343a336564343a613534343a3a2f34382d3438203d3e20323636363233.roa (hash: 8E4FIEwwGFb1tYSL1cUmoIMj5CgRC6BOojv+8qnxggQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl
                          rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 10:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:1c:be:2a:5d:4b:c5:cf:e9:1e:fb:97:7e:5c:15:d5:4d:aa:6b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
        Validity
            Not Before: Aug 23 07:45:01 2026 GMT
            Not After : Aug 24 11:13:01 2026 GMT
        Subject: CN=2052B265E50E501F42132A3D942C9E6BB3A47F3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a2:82:f7:27:2a:07:b8:8e:44:66:bd:13:9d:
                    e5:41:83:5a:6b:9f:36:9e:8a:22:c2:d4:a5:5d:23:
                    09:62:fd:4f:b2:d7:20:d3:3b:62:16:31:5a:db:d6:
                    1b:7d:c0:cb:bf:30:d8:89:67:a8:d2:4e:3f:b2:61:
                    50:78:a6:29:5c:0d:52:b4:82:af:b1:2a:42:b5:da:
                    3f:1a:43:58:e4:75:6a:7e:9c:fd:06:88:6f:a0:d4:
                    29:2d:63:37:01:2e:54:78:df:b1:7c:8f:3e:7d:27:
                    36:0a:59:1b:c5:4a:b0:ab:c6:55:09:01:84:aa:9a:
                    03:ab:ba:7a:5c:fd:c2:2d:3b:0f:ff:f6:29:b2:b3:
                    19:73:e1:54:96:a7:4d:89:1f:c4:77:b2:8d:22:3c:
                    0b:14:de:93:60:ca:9c:b3:78:f2:90:ff:52:60:fe:
                    9c:49:c4:01:bc:a3:07:6b:90:a9:de:67:78:e3:b9:
                    9f:64:e9:fa:b7:b6:b4:ed:11:a5:b6:ed:08:ba:9e:
                    9d:56:6c:f9:ef:d2:90:83:1f:7a:c8:10:6b:ba:48:
                    e4:b7:0e:f4:cd:72:61:01:b6:92:9e:4d:55:d9:31:
                    5b:52:b4:4a:ef:10:88:96:11:0c:ee:54:e5:b8:6d:
                    a6:9c:ec:88:57:46:b8:22:20:00:fa:cb:30:eb:d7:
                    cc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:52:B2:65:E5:0E:50:1F:42:13:2A:3D:94:2C:9E:6B:B3:A4:7F:3C
            X509v3 Authority Key Identifier:
                keyid:41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:c6:9e:a6:98:10:c0:d5:72:63:b7:68:21:0c:4d:d5:99:64:
         23:ef:36:79:0c:e8:db:e3:05:c5:a3:4f:f6:69:0a:d5:93:da:
         43:7a:96:e5:39:1e:2d:c8:85:35:30:65:3c:2b:57:80:b2:bf:
         a8:1e:c0:f5:87:37:fa:d1:ef:91:85:a9:28:70:88:e9:86:79:
         a0:fa:6d:ae:b1:fe:61:8a:62:59:13:65:b2:1e:d4:e0:c0:c1:
         cb:6b:38:cc:3a:68:bd:e6:9b:56:d1:aa:e3:e0:1d:12:99:a7:
         9c:bf:c3:b6:fd:10:ca:b7:dd:c2:b0:95:17:1f:41:b8:60:28:
         67:f3:10:97:ac:4d:09:ba:fe:75:fd:97:44:29:ba:f0:f3:88:
         16:0d:44:8f:51:d3:12:e5:f4:db:28:4e:db:53:5a:8d:7d:a7:
         df:c0:23:5f:da:46:ec:bb:18:43:d3:18:32:7b:e2:e0:3f:97:
         9a:ae:01:89:80:cb:1b:47:e6:00:5b:cb:cc:5e:c0:0a:74:dc:
         70:d2:a1:e4:5f:a5:b6:9b:d1:0a:72:a0:05:6f:bc:7b:09:3e:
         d5:c6:4e:4f:6c:47:b9:70:47:f5:96:c2:ba:8c:a8:c1:62:bb:
         a9:d0:42:47:d7:3b:8a:3b:48:16:63:d7:85:94:39:82:b3:0e:
         a3:07:b3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:26:19 2026 by rpki-client