Error: rpki-repo.registro.br/repo/8xMA26XVpRpguUSQWiUwam12enNn5A4nMALVAfj2PBBy/0/2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/8xMA26XVpRpguUSQWiUwam12enNn5A4nMALVAfj2PBBy/0/2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.mft
File:                     2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.mft (raw, json)
Hash identifier:          gboHrA++UsH9sZNs5n+5tc916C2ci86SDHn7oW6R4dk=
Subject key identifier:   7F:C1:CA:B2:E0:A2:3D:1B:F9:53:3E:CE:84:24:52:C5:66:EE:A7:D9
Authority key identifier: 2F:C7:BA:5E:AF:88:32:D3:E4:27:36:C6:41:F0:60:7E:50:EC:6D:2D
Certificate issuer:       /CN=2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D
Certificate serial:       5FF59F19AE5204ED20C0BEB1627D1D7EDE01D549
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8xMA26XVpRpguUSQWiUwam12enNn5A4nMALVAfj2PBBy/0/2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.mft
Manifest number:          02DD
Signing time:             Mon 24 Aug 2026 02:34:16 +0000
Manifest this update:     Mon 24 Aug 2026 02:29:16 +0000
Manifest next update:     Tue 25 Aug 2026 02:56:16 +0000
Files and hashes:         1: 323830343a356165343a666630303a3a2f34342d3434203d3e20323638383033.roa (hash: 2Q5bs3E9kRbz3/DkYBQCVhAIKo8a7ujVSvgr5uxsXrA=)
                          2: 2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.crl (hash: jg00FA4ibXSsJIdhdgikOZT/t+iwIyZ7BDIprywvcPA=)
                          3: 323830343a356165343a3a2f33322d3332203d3e20323638383033.roa (hash: l2+CyLeX+Gy9J94nPNSpUmPm+e8P5rwqghfgvJG1Nu4=)
                          4: 34352e3137332e39332e302f32342d3234203d3e20323638383033.roa (hash: wAIhSADe0SmDPZqWaF04UiwBQN6A0bPjL2JcWvxg8Yc=)
                          5: 34352e3137332e39322e302f32342d3234203d3e20323638383033.roa (hash: oOZrdSVhj/KKiu8QOANXNayme5Vq6XSojZo6hJ3Gs88=)
                          6: 34352e3137332e39352e302f32342d3234203d3e20323638383033.roa (hash: Zg07BR1a/ZEddfVP971slIh8vt8SIdJ+JqDY5cw3hCg=)
                          7: 34352e3137332e39342e302f32332d3233203d3e20323638383033.roa (hash: syBQ/A51gegR5Qlc0SERF6CdI+fe/f3f4mp2wgD3GLQ=)
                          8: 323830343a356165343a666631303a3a2f34342d3434203d3e20323638383033.roa (hash: lWbo7kymhCnxq9ZIUqqJ3AZsjO91OUePJmvEsW7bBc4=)
                          9: 34352e3137332e39342e302f32342d3234203d3e20323638383033.roa (hash: uHHCmxJCTxtOaZMZ1yjnFLkhgysAu6hb8jMCuKyz19s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8xMA26XVpRpguUSQWiUwam12enNn5A4nMALVAfj2PBBy/0/2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.crl
                          rsync://rpki-repo.registro.br/repo/8xMA26XVpRpguUSQWiUwam12enNn5A4nMALVAfj2PBBy/0/2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 02:56:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f5:9f:19:ae:52:04:ed:20:c0:be:b1:62:7d:1d:7e:de:01:d5:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D
        Validity
            Not Before: Aug 24 02:29:16 2026 GMT
            Not After : Aug 25 02:56:16 2026 GMT
        Subject: CN=7FC1CAB2E0A23D1BF9533ECE842452C566EEA7D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d1:02:e6:95:5d:4c:10:92:2d:92:74:b9:31:
                    df:28:ac:59:df:71:29:17:77:5d:1e:b9:34:9e:56:
                    10:0f:c1:2e:08:6a:29:bd:5e:88:64:2d:c6:bf:72:
                    c6:95:81:ca:7c:49:26:cf:0f:94:5d:09:ad:bc:28:
                    98:9c:4b:6c:7a:61:f2:a7:e7:68:bc:eb:cc:84:9b:
                    75:48:8a:d5:bf:b4:5e:ee:84:3a:ff:96:72:23:81:
                    4e:7e:2a:d2:f7:de:fe:02:db:81:83:f5:dc:5e:8e:
                    c3:65:f4:02:e1:b4:e8:a0:30:85:2b:7b:0e:5d:4e:
                    b3:3d:ec:1c:c5:86:48:1b:64:79:a2:b3:16:8f:6a:
                    63:69:4a:63:e2:94:33:f8:14:07:fa:16:1c:0a:d7:
                    53:4c:f9:0e:2a:18:5b:cc:a1:53:ca:21:5f:2b:79:
                    a7:b9:d8:c2:13:85:ad:b4:e7:f1:54:bd:ec:a8:c9:
                    0c:2b:6d:77:00:c2:f1:0e:94:db:f3:47:f3:63:c0:
                    ab:f4:6c:04:e2:63:d4:5d:15:07:6e:4e:f1:3c:67:
                    3e:47:d0:12:aa:76:9c:58:08:f8:39:67:4c:73:74:
                    4f:59:b3:14:f0:49:f5:46:f8:a8:22:1c:4d:74:21:
                    b2:be:b9:a0:41:1f:43:2f:d9:eb:f1:0a:e6:95:17:
                    04:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C1:CA:B2:E0:A2:3D:1B:F9:53:3E:CE:84:24:52:C5:66:EE:A7:D9
            X509v3 Authority Key Identifier:
                keyid:2F:C7:BA:5E:AF:88:32:D3:E4:27:36:C6:41:F0:60:7E:50:EC:6D:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8xMA26XVpRpguUSQWiUwam12enNn5A4nMALVAfj2PBBy/0/2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8xMA26XVpRpguUSQWiUwam12enNn5A4nMALVAfj2PBBy/0/2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:66:50:46:49:67:43:4c:c8:dd:a9:56:24:98:95:d8:12:ea:
         79:36:0c:ad:fd:0e:c1:2b:ab:7c:99:6b:15:1f:9c:08:aa:be:
         3f:5f:f3:7f:be:bb:23:7e:08:d5:60:da:79:5f:f8:7b:f9:4a:
         8e:2f:3d:af:4e:8f:ce:5f:df:d8:bb:ce:94:0c:4c:83:b8:06:
         38:00:3e:80:80:16:f8:4e:e6:7b:ab:62:ff:80:b9:52:23:b5:
         33:a2:9c:b1:37:b6:96:72:d7:0d:10:45:df:f1:79:ab:eb:cf:
         da:8a:c7:8b:9a:df:f8:f1:53:01:a0:f1:fa:73:a2:09:ee:52:
         1a:70:4e:2f:77:c4:5d:cf:fa:01:47:c0:06:9e:be:a6:8d:41:
         54:c2:d1:db:ba:3f:44:f0:aa:3a:fe:79:0c:3a:da:ab:eb:b0:
         c8:97:ad:f1:b5:2c:ff:19:72:c1:b6:35:f1:c1:d9:cf:66:b8:
         c6:ce:bd:8f:87:4a:83:9d:4d:af:9d:fd:71:c3:ec:1f:a9:91:
         d4:0f:6b:c3:8b:a8:c9:c0:8c:a2:a4:e7:f5:7c:82:0f:c3:e7:
         bf:d7:14:e5:35:30:c7:f6:2a:17:50:d7:98:17:c2:8d:39:fe:
         6f:25:d0:6d:c9:26:0c:65:ad:9b:f2:93:f2:90:a8:3d:2b:14:
         0d:59:e4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 04:31:28 2026 by rpki-client