Error: rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.mft
File:                     0144765DC0A3D9D0EADA845625C5E7F14C552690.mft (raw, json)
Hash identifier:          kN1uJNYvwmUVg+7cLlDQ0iRZKVN70MaIQAO3k3AoqTs=
Subject key identifier:   B4:82:43:D6:7F:20:F6:62:A5:2E:35:47:49:C4:C5:D4:04:B8:75:06
Authority key identifier: 01:44:76:5D:C0:A3:D9:D0:EA:DA:84:56:25:C5:E7:F1:4C:55:26:90
Certificate issuer:       /CN=0144765DC0A3D9D0EADA845625C5E7F14C552690
Certificate serial:       1178222AC5E9CE214BBBC8D80F46F9025FBAA0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.mft
Manifest number:          047D
Signing time:             Sun 23 Aug 2026 14:55:50 +0000
Manifest this update:     Sun 23 Aug 2026 14:50:50 +0000
Manifest next update:     Mon 24 Aug 2026 16:06:50 +0000
Files and hashes:         1: 323830343a366635303a3130303a3a2f34302d3430203d3e20323730363532.roa (hash: 0bvMOZf/vlqYqQtsMXwwRob7CdL1Ky1zncY2CbyflGs=)
                          2: 0144765DC0A3D9D0EADA845625C5E7F14C552690.crl (hash: 08SbaSQ0vmrzxcZ6J3WF798JnOzaHp2hi+eieTiOfCM=)
                          3: 3139302e31312e3230392e302f32342d3234203d3e20323730363532.roa (hash: LQ7x5KpsSTNYv+XaOfo9m2p6hIHYACLMd3PIYhHf89w=)
                          4: 323830343a366635303a3a2f33322d3332203d3e20323730363532.roa (hash: yI8AufnBPd/JAFoluG6sIQxIw45BFskRHoD7Gg5CcgY=)
                          5: 323830343a366635303a343030303a3a2f33342d3334203d3e20323730363532.roa (hash: q6bx/V26fnn1rKQlZjXL9DByBrCnOyKKRWOapvio31M=)
                          6: 3139302e31312e3231302e302f32342d3234203d3e20323730363532.roa (hash: Upc2t48mABVc/B3tiHVEZpNtKpbkYjDV3xXRghrciVg=)
                          7: 3139302e31312e3231302e302f32332d3233203d3e20323730363532.roa (hash: FnUMABFm+iWTMtU7fTd5b8RDP2Mwwtt1yuSnL7/O+Os=)
                          8: 323830343a366635303a3a2f34302d3430203d3e20323730363532.roa (hash: oWmYmvtDe1E+af+rhP9hakpmthsKpRFsjoEAopKpt6c=)
                          9: 3139302e31312e3230382e302f32342d3234203d3e20323730363532.roa (hash: JKavBcC+YkWZjlDoTpR/o7xA62BZmC7nXUIkKVie7Mg=)
                          10: 3139302e31312e3230382e302f32322d3232203d3e20323730363532.roa (hash: V8eliT+hBRgsymXtFyjuorkxzl1l/dghR6F/JEpHFVA=)
                          11: 3139302e31312e3231312e302f32342d3234203d3e20323730363532.roa (hash: ciVqttWWvXb4uBVaTr8KxPhVpv2A/P6YHIYuvqe4QbM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.crl
                          rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 16:06:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:78:22:2a:c5:e9:ce:21:4b:bb:c8:d8:0f:46:f9:02:5f:ba:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0144765DC0A3D9D0EADA845625C5E7F14C552690
        Validity
            Not Before: Aug 23 14:50:50 2026 GMT
            Not After : Aug 24 16:06:50 2026 GMT
        Subject: CN=B48243D67F20F662A52E354749C4C5D404B87506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:70:5e:94:35:27:f4:55:cd:29:24:20:49:58:
                    ef:46:5f:4f:0c:02:5c:75:21:a1:50:a7:3f:0b:27:
                    a7:df:12:9a:a3:f1:03:c7:15:eb:24:84:fd:f5:10:
                    53:c4:40:c8:4b:06:a4:30:df:81:0a:20:58:88:f5:
                    8b:7c:5b:c3:d6:df:e9:77:11:f3:37:d5:01:87:b6:
                    20:82:54:14:eb:6a:48:33:f6:4c:c5:ea:f4:a8:2d:
                    92:37:68:66:a2:51:f9:a0:5c:c3:73:31:41:16:b1:
                    d3:78:cd:a0:56:18:a3:bc:4e:e9:95:58:69:4e:40:
                    ac:0f:98:a2:6d:4a:c5:17:6c:3b:6d:62:ee:57:ab:
                    d9:60:ea:d6:68:c4:10:75:3f:56:9d:dc:1f:a6:57:
                    a3:f2:27:bc:8e:2b:c2:58:fd:c5:3d:0b:c3:0e:bc:
                    4e:65:2f:31:f2:17:3d:6c:a4:5d:37:1a:d4:23:b9:
                    4a:db:f7:67:31:ef:ea:2b:37:98:78:c5:4d:ab:d6:
                    dc:88:78:c9:b0:32:51:9d:0a:b8:00:75:63:e0:e5:
                    6d:70:82:f2:49:27:e2:34:b3:43:e1:0e:d5:ae:ad:
                    69:6d:82:6a:32:d8:7f:48:3a:79:16:8d:5c:c9:5f:
                    51:fa:aa:bb:5f:de:f9:81:49:5a:b8:83:27:a4:ef:
                    48:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:82:43:D6:7F:20:F6:62:A5:2E:35:47:49:C4:C5:D4:04:B8:75:06
            X509v3 Authority Key Identifier:
                keyid:01:44:76:5D:C0:A3:D9:D0:EA:DA:84:56:25:C5:E7:F1:4C:55:26:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:82:8b:92:10:12:a1:c7:69:d0:f6:03:cf:02:6c:c9:ed:19:
         3d:3f:9d:e7:78:d2:98:22:2c:88:93:bb:e5:41:73:1a:4b:3f:
         af:b8:da:39:9e:ba:3e:52:81:d0:20:84:e0:51:f9:23:f6:f3:
         9b:a9:ec:58:9e:c5:68:a1:09:d9:b0:81:e6:05:45:aa:19:b5:
         b8:24:7a:c1:a0:41:ee:cb:1d:d2:6a:a3:4f:59:dd:96:5f:9d:
         ae:30:31:d3:d7:2b:f4:6a:2a:49:c8:70:41:8b:95:58:51:f8:
         90:b1:ad:c7:b6:e5:0f:00:04:f4:4a:d5:c6:6b:aa:6e:2d:33:
         9d:6d:75:3e:aa:fd:88:ad:b7:bd:53:fb:cc:86:e3:7d:24:97:
         d2:52:a1:6f:80:01:7e:98:ff:82:33:67:c9:8c:4f:39:88:d7:
         0e:de:42:a4:e7:49:8c:c1:24:28:4b:df:70:aa:80:33:0f:29:
         a8:4f:15:ff:a4:a0:59:8b:3a:68:9d:b7:fa:17:0b:17:43:64:
         a8:f1:99:f9:ea:fb:4d:8a:55:50:22:a8:8e:3a:8a:11:39:9f:
         c4:03:ab:8d:d7:ec:93:97:7b:0b:8e:f7:bb:fd:68:46:1b:4c:
         56:fa:a7:ef:ba:56:1b:8e:d3:3f:79:00:f1:c1:40:69:f4:01:
         40:f7:f9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 04:31:32 2026 by rpki-client