Error: rpki-repo.registro.br/repo/8poGNi9of4dkZnzmBjFiW1rriAxH4vFgyx9BjHfFfp1L/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/8poGNi9of4dkZnzmBjFiW1rriAxH4vFgyx9BjHfFfp1L/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.mft
File:                     4C79E3729CF2CCA4F36451F61E86482BE2269626.mft (raw, json)
Hash identifier:          JtoM/fEf92cQYCltDIN4cTF7Nne/yv5ZiGp5Gt2TstU=
Subject key identifier:   C2:2F:80:56:B0:17:D4:A6:DB:5F:1D:9A:0E:19:02:21:EB:4E:A5:F2
Authority key identifier: 4C:79:E3:72:9C:F2:CC:A4:F3:64:51:F6:1E:86:48:2B:E2:26:96:26
Certificate issuer:       /CN=4C79E3729CF2CCA4F36451F61E86482BE2269626
Certificate serial:       139EE6C470A79846E1910862D1F24077BC31E828
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8poGNi9of4dkZnzmBjFiW1rriAxH4vFgyx9BjHfFfp1L/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.mft
Manifest number:          016C
Signing time:             Sat 22 Aug 2026 15:08:01 +0000
Manifest this update:     Sat 22 Aug 2026 15:03:01 +0000
Manifest next update:     Sun 23 Aug 2026 15:47:01 +0000
Files and hashes:         1: 34352e3233322e3133362e302f32342d3234203d3e20323637333231.roa (hash: Bl3bGbtCvlPG3j4pHMUNxv5IlifGx4iwBAlD7VcgiPg=)
                          2: 34352e3233322e3133362e302f32332d3233203d3e20323637333231.roa (hash: /4+KRFfz4SSnbIyBFAWrYhmQvBPz2FVxjQaLSjExm4U=)
                          3: 34352e3233322e3133372e302f32342d3234203d3e20323637333231.roa (hash: xEujc1pL8KfvBpQfp73J6DViWGaFGO+f9UaeDJMwuZI=)
                          4: 4C79E3729CF2CCA4F36451F61E86482BE2269626.crl (hash: mfiub6Us6KUE7cMGS+Bmzv2ys7kU+2qqqvCPC9w9qXI=)
                          5: 34352e3233322e3133382e302f32342d3234203d3e20323637333231.roa (hash: 127U4Q3LcORfkA3pNpcVFGr2mGtWKqUSeVM6Lbk+OD4=)
                          6: 34352e3233322e3133392e302f32342d3234203d3e20323637333231.roa (hash: TCN6FnWmf3qZK9KXz8P44wEj1MSvfUBtEhzBg5pL884=)
                          7: 323830343a346261383a3a2f33322d3332203d3e20323637333231.roa (hash: j2S0AAQlzk7yPwNC3hlQxaWti4OEYa0wWjp+63RK3PM=)
                          8: 34352e3233322e3133382e302f32332d3233203d3e20323637333231.roa (hash: 98UpR4P+AbxeUuHVJTwFmuzdJSc88ItGTC7GnitfLQw=)
                          9: 34352e3233322e3133362e302f32322d3232203d3e20323637333231.roa (hash: C9Rv2pS9LFzc85EO+lSMTxiQ9mFr6ByiAW1m6ieK9So=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8poGNi9of4dkZnzmBjFiW1rriAxH4vFgyx9BjHfFfp1L/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.crl
                          rsync://rpki-repo.registro.br/repo/8poGNi9of4dkZnzmBjFiW1rriAxH4vFgyx9BjHfFfp1L/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 15:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:9e:e6:c4:70:a7:98:46:e1:91:08:62:d1:f2:40:77:bc:31:e8:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C79E3729CF2CCA4F36451F61E86482BE2269626
        Validity
            Not Before: Aug 22 15:03:01 2026 GMT
            Not After : Aug 23 15:47:01 2026 GMT
        Subject: CN=C22F8056B017D4A6DB5F1D9A0E190221EB4EA5F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:94:a2:9f:d8:bd:66:56:1e:7c:91:7d:ee:fb:
                    a7:d8:c9:a7:45:3a:65:84:0a:4f:5d:97:ee:c8:56:
                    fe:e2:43:69:bd:cf:04:f6:ba:9f:c0:79:bb:f8:73:
                    15:90:0e:f9:d0:ef:9a:f2:74:48:b6:f1:30:ef:c4:
                    8a:a7:9c:41:b8:46:c2:17:16:2d:b1:6a:8f:bc:75:
                    57:ec:b3:59:bf:13:6e:d8:86:d7:83:61:1f:b5:f2:
                    29:0c:c5:34:67:0e:61:35:57:1b:75:5d:1b:50:a2:
                    8b:86:e3:b6:90:bd:c1:74:92:c5:ee:3d:3e:cd:7d:
                    49:42:34:8d:e9:a1:32:83:b0:0d:bf:60:81:c7:a3:
                    51:55:75:73:9b:72:15:5e:00:73:35:41:c9:ba:8e:
                    d9:9b:77:3a:8a:cf:a2:2f:20:ef:32:88:6d:41:27:
                    bc:4f:e0:8e:a0:7d:78:a5:52:ec:a1:a4:63:70:da:
                    6f:ce:98:e7:d0:7a:9a:e3:f9:ac:30:b7:69:d0:c9:
                    76:8d:97:f0:3d:0b:b8:c0:c9:7e:db:40:87:54:f6:
                    ff:cd:6e:a8:b5:a7:2e:1a:7e:56:37:85:92:f7:d5:
                    c1:2a:9e:41:e4:26:81:75:3a:8f:9e:e8:7e:b5:1a:
                    dc:1f:ab:f6:aa:1e:7a:15:a6:37:98:a8:45:7d:fa:
                    fa:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:2F:80:56:B0:17:D4:A6:DB:5F:1D:9A:0E:19:02:21:EB:4E:A5:F2
            X509v3 Authority Key Identifier:
                keyid:4C:79:E3:72:9C:F2:CC:A4:F3:64:51:F6:1E:86:48:2B:E2:26:96:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8poGNi9of4dkZnzmBjFiW1rriAxH4vFgyx9BjHfFfp1L/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8poGNi9of4dkZnzmBjFiW1rriAxH4vFgyx9BjHfFfp1L/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:50:f8:b3:7a:66:4e:a6:24:c1:e3:73:73:70:fc:d2:ec:1a:
         df:ef:4d:d2:1b:11:c7:e6:d4:03:33:ae:db:0c:55:73:a3:ac:
         51:0b:a7:8a:a0:f8:e6:54:06:10:67:20:19:7c:9f:1c:f0:2a:
         2c:fb:03:e1:ea:39:47:87:9e:b7:36:47:c3:a8:64:2f:9d:c7:
         4c:33:fa:20:44:f3:bb:64:6e:1b:50:59:09:09:d2:07:9f:74:
         57:98:6c:15:6e:77:ea:bc:60:22:39:44:d9:d2:54:b0:c8:f6:
         00:cb:48:28:7c:da:d2:26:e6:e6:a6:2b:7e:f6:09:f9:2d:41:
         31:d4:d4:f8:c6:22:c9:00:74:6f:c2:79:bd:df:d6:d7:16:46:
         81:a6:26:28:d4:b3:1e:a5:50:30:74:08:d7:e6:12:f7:3a:be:
         c8:cc:92:46:57:d0:a4:64:4d:b4:45:62:83:77:b3:f7:b9:6a:
         4d:3f:9b:45:8a:84:dd:16:1b:36:1e:0a:97:5d:c9:bf:af:07:
         4a:93:f0:45:ed:83:9a:9b:47:75:5f:af:46:b3:cf:da:f9:eb:
         c7:6c:67:45:a4:a1:da:f4:43:6b:af:8b:d4:bf:90:d7:9c:a0:
         65:0d:02:63:08:d1:78:14:8a:e1:66:08:e3:28:b0:a4:42:1b:
         fe:5f:fe:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:20:07 2026 by rpki-client