Error: rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
File:                     D95F78E630398477E9BAE976B3EAEDB0059994DB.mft (raw, json)
Hash identifier:          mvM2k+OCkuILuASiVDucSDvOq5Hp40YOfaj8G+14vgE=
Subject key identifier:   19:5C:6F:12:03:37:82:0C:5F:2D:FA:A5:85:89:95:E2:5D:63:DE:6D
Authority key identifier: D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB
Certificate issuer:       /CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
Certificate serial:       428BC246973C461D59B730E73995352E7D6B2A3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
Manifest number:          04E3
Signing time:             Sat 31 Oct 2026 12:55:45 +0000
Manifest this update:     Sat 31 Oct 2026 12:50:45 +0000
Manifest next update:     Sun 01 Nov 2026 16:06:45 +0000
Files and hashes:         1: 323830343a363762633a3a2f33342d3334203d3e20323639363437.roa (hash: pBXGSP6xBS4tQHTcAxyiO8BZnw2+dfsHagzia0t4r8Q=)
                          2: 34352e3139302e3133362e302f32322d3232203d3e20323639363437.roa (hash: LlOYaEoeqHrYA4xy9Bq+IRx20dAH+42ivQxYifmQVg0=)
                          3: 323830343a363762633a383030303a3a2f33332d3333203d3e20323639363437.roa (hash: FLXGaKLJIXT/ztk+GQ6KZbmG3HuPwYPyDxg5J/txsdc=)
                          4: 34352e3139302e3133382e302f32342d3234203d3e20323639363437.roa (hash: 8h0SoQa+zHvg8ypoewsh82jRvTmx1mn+k+sbaBCNSRE=)
                          5: D95F78E630398477E9BAE976B3EAEDB0059994DB.crl (hash: rs7pV4/7dPHe9Sipm1CfHYDSACv8MTGYJozDy0UP42E=)
                          6: 323830343a363762633a633030303a3a2f33342d3334203d3e20323639363437.roa (hash: e7p2Z+92+MzlvClpqyoaCVFz9q8M+GOdOURvPxj59zU=)
                          7: 34352e3139302e3133362e302f32322d3234203d3e20323639363437.roa (hash: 3Y2YOrZBZpyxSvI1zOvxfut2UD/6PFOwe1gjuKLm17s=)
                          8: 323830343a363762633a3a2f33322d3332203d3e20323639363437.roa (hash: fvE9pXgMUp8SZiwt8yaIdBGzsVv1q58Rcf6C14Lu/5o=)
                          9: 323830343a363762633a343030303a3a2f33342d3334203d3e20323639363437.roa (hash: 10grmYgRlb0SS90IyJSUVWSNmVEKOcdAfRyd6LTqChc=)
                          10: 323830343a363762633a3a2f33322d3438203d3e20323630363437.roa (hash: HbK+I93CH0OZ8rMeXWbavpKRDyz849KcbyrzE/f1W8c=)
                          11: 323830343a363762633a383030303a3a2f33342d3334203d3e20323639363437.roa (hash: DuW5wKAhp6//rvLyFaiDLnhGVFbnp+HRsMbcYUl+N/0=)
                          12: 323830343a363762633a3a2f33332d3333203d3e20323639363437.roa (hash: smxTkQ5o90PQIFi81VarJKZNQHmklJJsnDJFMVfj0wE=)
                          13: 34352e3139302e3133372e302f32342d3234203d3e20323639363437.roa (hash: XIHUqLSBSkh+uND0iH7PeZcXzivXfes80WQfvk2csrw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl
                          rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 16:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:8b:c2:46:97:3c:46:1d:59:b7:30:e7:39:95:35:2e:7d:6b:2a:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
        Validity
            Not Before: Oct 31 12:50:45 2026 GMT
            Not After : Nov  1 16:06:45 2026 GMT
        Subject: CN=195C6F120337820C5F2DFAA5858995E25D63DE6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:61:ef:f4:72:71:95:2a:e6:90:ca:57:f7:27:
                    34:c2:62:cb:e9:27:a5:46:ca:4f:c8:fe:78:9b:51:
                    60:35:a2:8b:39:9d:81:44:d4:fa:51:e5:88:e8:eb:
                    5b:5f:d3:03:69:c0:58:82:f4:52:59:ab:d7:af:0b:
                    6a:66:ac:45:45:3a:d4:f9:5d:ce:28:84:a7:6e:c9:
                    ed:68:0a:99:34:90:88:e1:78:58:e6:55:5e:43:67:
                    c4:99:2e:24:25:52:83:45:05:f6:fe:7b:c1:3c:f1:
                    2a:fb:f6:ee:f8:93:51:f9:3b:b1:d8:bc:6a:39:87:
                    a2:d1:e1:06:09:b0:10:b2:23:fe:e9:5d:43:6b:fe:
                    a1:27:05:30:e5:2f:98:01:77:48:92:6d:d2:1d:da:
                    c7:ef:79:7e:f7:45:1b:e3:74:ca:2f:94:d7:13:1b:
                    03:8e:2e:6a:2d:ab:00:c4:51:96:ef:c4:f8:15:36:
                    40:9d:40:9f:50:1c:30:bb:4f:95:20:4b:ea:e1:e1:
                    e2:20:e9:8e:86:b0:5b:aa:7f:e3:ec:41:54:5c:73:
                    3d:bf:ee:cc:bf:a3:82:ba:16:5a:c4:c4:b1:39:9f:
                    35:96:65:57:5e:6b:1d:d2:89:1e:6a:22:23:e9:60:
                    9c:22:12:a1:18:c7:32:1b:aa:41:a9:53:b0:80:a3:
                    e7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5C:6F:12:03:37:82:0C:5F:2D:FA:A5:85:89:95:E2:5D:63:DE:6D
            X509v3 Authority Key Identifier:
                keyid:D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:e9:2e:9f:1e:b8:7e:54:50:7a:60:42:52:5a:6c:2e:44:53:
         92:26:bb:f5:f0:99:9b:4a:da:79:60:2b:10:97:c7:52:00:0a:
         85:3c:3a:18:b7:0f:d0:6e:73:5c:19:07:3e:db:b5:66:eb:2a:
         1f:59:c7:75:de:f6:3b:6a:e0:79:65:5a:d8:ff:c3:f0:0b:2b:
         7e:b7:1a:2c:84:22:9a:3c:ec:c4:63:6e:3e:52:1e:22:9c:dd:
         b0:48:d5:de:5e:fb:27:7f:4a:10:56:4f:dc:e6:2f:97:04:9d:
         13:d5:12:f2:26:60:58:42:55:4e:50:b7:68:c8:1a:da:82:0c:
         84:01:42:5d:9f:b3:ac:65:61:bd:41:d0:7e:29:b6:8e:5d:5d:
         c5:15:57:8a:b9:d7:65:04:87:70:2e:f1:68:29:f7:57:57:21:
         4f:e4:3a:90:09:4f:cd:16:b7:a0:d9:d3:20:62:a1:ee:06:d7:
         be:9f:bc:76:8c:94:df:6e:75:10:c2:7f:7c:86:39:b2:97:3c:
         b7:1c:26:ad:ea:d0:be:60:1a:b4:b0:83:55:aa:d6:66:b9:64:
         ab:d1:cb:f4:46:5e:4a:df:98:39:65:11:cf:5a:d4:cd:cc:f1:
         5a:f7:5e:68:e9:d2:a6:b5:a7:81:4b:a5:30:df:ea:e4:b9:cb:
         9a:42:15:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 02:09:18 2026 by rpki-client