Error: rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.mft
File:                     EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.mft (raw, json)
Hash identifier:          y/wOoQwKNFFYqyKtDrbzuVXyyvdEYpiel2cDy8idMXQ=
Subject key identifier:   80:5C:92:7F:0E:58:02:0D:DA:22:41:97:71:48:F0:8D:C6:70:15:5C
Authority key identifier: EB:09:2E:E4:7B:CD:BF:6C:DB:F6:58:6B:F0:2A:9D:E9:90:D0:6E:74
Certificate issuer:       /CN=EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74
Certificate serial:       4C356269D9C909CA5F30E9032F3AEE9EB56F95C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.mft
Manifest number:          0481
Signing time:             Sun 23 Aug 2026 03:26:15 +0000
Manifest this update:     Sun 23 Aug 2026 03:21:15 +0000
Manifest next update:     Mon 24 Aug 2026 05:11:15 +0000
Files and hashes:         1: 3136382e3233322e342e302f32322d3234203d3e20323634393230.roa (hash: pnZFHoMduf3zX2Bmv8d7IYJv1/kcj8A/rR9kbVE+o4c=)
                          2: 3137392e34382e3133382e302f32342d3234203d3e20323634393230.roa (hash: YWW0AAgVOqTSmjbfKxYTyHOOZyiB/VcWVlZqbXMNbtQ=)
                          3: 323830343a326665383a3a2f33322d313238203d3e20323634393230.roa (hash: vtbniJP4rp9c1eRa2XgBg0usSgjYkvMqCucyvti70rM=)
                          4: EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.crl (hash: 9poEMPyEzVWfiHtnIUCZtuvXakfoAYiwdsSrZFWHO/I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.crl
                          rsync://rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 05:11:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:35:62:69:d9:c9:09:ca:5f:30:e9:03:2f:3a:ee:9e:b5:6f:95:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74
        Validity
            Not Before: Aug 23 03:21:15 2026 GMT
            Not After : Aug 24 05:11:15 2026 GMT
        Subject: CN=805C927F0E58020DDA2241977148F08DC670155C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:84:27:71:90:96:ec:f0:e7:54:40:5c:db:f2:
                    f8:dc:94:57:63:0b:d9:75:be:20:4d:f9:46:1e:69:
                    4f:57:c3:68:79:38:81:67:19:3e:6d:84:a4:37:97:
                    28:8c:e0:97:8e:53:38:c3:2a:da:8b:21:5c:ce:9a:
                    57:ae:b4:24:53:c4:e4:0c:db:52:ee:1e:16:5a:13:
                    d0:26:a0:1c:22:49:88:71:f7:cc:69:3b:b0:d5:11:
                    b6:34:02:f8:6b:18:72:2f:ea:92:5c:9c:2d:f3:6e:
                    f9:a3:54:ee:8b:46:3a:ed:6f:83:ee:61:b4:8b:31:
                    26:d1:f1:e2:0c:91:e5:14:5a:1b:25:79:33:e4:11:
                    b7:89:6f:93:2b:13:40:19:1b:53:46:ee:9f:6c:cc:
                    7e:d1:f6:4d:59:08:e3:6a:ef:cc:ba:3b:4e:12:cd:
                    5a:69:7a:18:ca:17:01:bb:ff:e2:c2:9d:e9:09:60:
                    44:74:ef:bb:82:46:b6:bc:0a:f9:57:02:9c:f9:dc:
                    26:9c:56:38:ff:65:f0:bb:d8:e0:8d:55:9f:15:c9:
                    19:b4:94:55:b8:b9:35:63:9e:b8:0a:13:26:83:01:
                    ae:3c:ba:5e:ad:1a:f9:4d:6c:e0:46:67:d0:33:ac:
                    5c:c4:e1:3f:ad:e3:34:f4:54:03:fa:c7:c6:db:b7:
                    95:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5C:92:7F:0E:58:02:0D:DA:22:41:97:71:48:F0:8D:C6:70:15:5C
            X509v3 Authority Key Identifier:
                keyid:EB:09:2E:E4:7B:CD:BF:6C:DB:F6:58:6B:F0:2A:9D:E9:90:D0:6E:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:dd:0f:c7:2b:38:90:3f:e1:73:41:4e:d8:2b:29:9d:10:f6:
         a4:b2:e7:d5:f2:46:e6:43:90:c1:1b:9c:ab:25:5d:63:b2:6d:
         bf:f2:6e:fe:13:ce:60:25:0b:a0:6b:59:47:49:6f:c5:f6:c0:
         47:f5:86:8f:6f:b2:4a:c0:4e:62:21:dc:10:04:56:ce:06:af:
         7d:4d:f4:f6:ae:48:e3:37:d3:0b:c3:e8:bc:6c:6a:45:dd:f8:
         1b:04:bd:4f:4b:78:bd:d0:18:5a:72:2c:db:8e:81:fa:a4:e1:
         90:05:bc:22:07:c2:d7:b9:fe:9d:3c:24:fc:ec:28:0e:13:b7:
         ab:4f:a9:8c:32:bb:0b:79:23:24:d2:14:6f:60:af:9d:53:a2:
         dd:28:ba:e9:ed:b0:37:90:31:d2:ee:0a:21:75:d7:89:5e:a6:
         5f:2f:cc:d6:57:2e:20:bb:a0:3a:12:c8:99:6d:75:e2:2b:92:
         07:89:5c:d8:af:97:ae:bd:18:12:a1:29:e9:ec:95:04:75:aa:
         53:76:c2:8d:58:40:1f:6e:f2:b7:e8:be:26:e7:5b:5f:08:bb:
         9b:f7:5c:9e:84:98:d6:17:c4:96:e2:fd:ea:f3:64:95:60:6f:
         2f:20:37:b7:e5:dd:b6:84:6d:87:4b:24:49:29:b6:43:92:d6:
         c9:a4:28:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTDViadnJCcpfMOkDLzrunrVvlcIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUIwOTJFRTQ3QkNEQkY2Q0RCRjY1ODZCRjAyQTlERTk5
MEQwNkU3NDAeFw0yNjA4MjMwMzIxMTVaFw0yNjA4MjQwNTExMTVaMDMxMTAvBgNV
BAMTKDgwNUM5MjdGMEU1ODAyMEREQTIyNDE5NzcxNDhGMDhEQzY3MDE1NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDChCdxkJbs8OdUQFzb8vjclFdj
C9l1viBN+UYeaU9Xw2h5OIFnGT5thKQ3lyiM4JeOUzjDKtqLIVzOmleutCRTxOQM
21LuHhZaE9AmoBwiSYhx98xpO7DVEbY0AvhrGHIv6pJcnC3zbvmjVO6LRjrtb4Pu
YbSLMSbR8eIMkeUUWhsleTPkEbeJb5MrE0AZG1NG7p9szH7R9k1ZCONq78y6O04S
zVppehjKFwG7/+LCnekJYER077uCRra8CvlXApz53CacVjj/ZfC72OCNVZ8VyRm0
lFW4uTVjnrgKEyaDAa48ul6tGvlNbOBGZ9AzrFzE4T+t4zT0VAP6x8bbt5V1AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUgFySfw5YAg3aIkGXcUjwjcZwFVwwHwYDVR0j
BBgwFoAU6wku5HvNv2zb9lhr8Cqd6ZDQbnQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzFuNGh5cnV1ZGFFdHpnTGJoZXU4ZEx0d1F5UHB0NHZ6czdVYmliMTFV
UUMvMS9FQjA5MkVFNDdCQ0RCRjZDREJGNjU4NkJGMDJBOURFOTkwRDA2RTc0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VCMDkyRUU0N0JDREJGNkNE
QkY2NTg2QkYwMkE5REU5OTBEMDZFNzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NzFuNGh5cnV1ZGFFdHpnTGJoZXU4ZEx0d1F5UHB0NHZ6czdVYmliMTFVUUMvMS9F
QjA5MkVFNDdCQ0RCRjZDREJGNjU4NkJGMDJBOURFOTkwRDA2RTc0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXt0Pxys4kD/hc0FO2CspnRD2pLLn1fJG5kOQwRucqyVdY7Jtv/Ju/hPOYCUL
oGtZR0lvxfbAR/WGj2+ySsBOYiHcEARWzgavfU309q5I4zfTC8PovGxqRd34GwS9
T0t4vdAYWnIs246B+qThkAW8IgfC17n+nTwk/OwoDhO3q0+pjDK7C3kjJNIUb2Cv
nVOi3Si66e2wN5Ax0u4KIXXXiV6mXy/M1lcuILugOhLImW114iuSB4lc2K+Xrr0Y
EqEp6eyVBHWqU3bCjVhAH27yt+i+JudbXwi7m/dcnoSY1hfEluL96vNklWBvLyA3
t+XdtoRth0skSSm2Q5LWyaQoFw==
-----END CERTIFICATE-----
Generated at Sun Aug 23 10:25:08 2026 by rpki-client