Error: rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.mft
File:                     D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.mft (raw, json)
Hash identifier:          MRzWnf+IxNPhE1q7uIJHG8JHscwPstsRi6aAfa9zVqw=
Subject key identifier:   D2:52:B2:D0:60:74:2A:9F:13:EF:5D:D6:BF:A9:47:23:D7:F2:5F:23
Authority key identifier: D5:5B:E7:00:52:78:F3:F9:25:2F:A4:D5:C5:17:15:A6:B1:BF:81:E7
Certificate issuer:       /CN=D55BE7005278F3F9252FA4D5C51715A6B1BF81E7
Certificate serial:       2C0BBD56D740EF86C5A2069A693C4FA497A6C13D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.mft
Manifest number:          32
Signing time:             Thu 15 Oct 2026 00:19:05 +0000
Manifest this update:     Thu 15 Oct 2026 00:14:05 +0000
Manifest next update:     Fri 16 Oct 2026 04:07:05 +0000
Files and hashes:         1: 3138362e3234392e32302e302f32332d3233203d3e20323633303232.roa (hash: 6usHz3+mqcfGTvGn4dRYN3S7uTdqwQG5qEnYsoLEnl4=)
                          2: 3138362e3234392e32322e302f32332d3233203d3e20323633303232.roa (hash: AOVxgLFY04uhIZbI/8DqQGdXzhrDBnsmgZoUxJXyeEg=)
                          3: 323830343a6131383a3a2f33322d3332203d3e20323633303232.roa (hash: PS+XeGhXOEmD+nirZe3TWzTMK43VyxVVxjALwkpvPBs=)
                          4: 323830343a6131383a3a2f33322d3334203d3e20323633303232.roa (hash: z7PegJXqQ0sB+NbE4LvDulgB8YzcMK7gQvzkM6Rxg/A=)
                          5: 3138362e3234392e31362e302f32312d3234203d3e20323633303232.roa (hash: nus+ZX1/L4riIe5h7MirtLUd0sb2JMc7KIsmO+pjLXA=)
                          6: 3138362e3234392e31382e302f32332d3233203d3e20323633303232.roa (hash: euFs/tw+SFJKOPYfLqxSd0sFuD7nvLGJcHdUe81QfXc=)
                          7: 3138362e3234392e31362e302f32332d3233203d3e20323633303232.roa (hash: Wa/V4eertNy3OlZH2Xftrx0fU6Y3WcRTDr5j1dScR54=)
                          8: 3138362e3234392e31362e302f32312d3231203d3e20323633303232.roa (hash: bpCZuy4rAYg1IgAyehuvFWnQ2ATRS4GhKwrH84MNFpI=)
                          9: D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.crl (hash: QekL6yoFVSGPHTT8Hti2rFu3/AJKtHb7XnpPpvp/naU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.crl
                          rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 04:07:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:0b:bd:56:d7:40:ef:86:c5:a2:06:9a:69:3c:4f:a4:97:a6:c1:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D55BE7005278F3F9252FA4D5C51715A6B1BF81E7
        Validity
            Not Before: Oct 15 00:14:05 2026 GMT
            Not After : Oct 16 04:07:05 2026 GMT
        Subject: CN=D252B2D060742A9F13EF5DD6BFA94723D7F25F23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:65:ee:7f:b9:8b:b0:43:42:d9:6b:dd:32:cd:
                    1a:a0:c2:af:a8:52:b9:7b:42:e0:21:78:23:11:d8:
                    7f:69:03:28:c6:69:c8:50:05:d1:1e:d6:88:ec:c7:
                    85:b5:b1:41:85:67:d9:f8:21:3e:eb:4b:cd:9a:6b:
                    64:e7:cf:56:a1:18:b2:58:60:02:fa:e0:b2:eb:24:
                    91:ad:01:cd:8a:a3:32:32:38:99:13:b1:bb:5f:c4:
                    22:8a:9a:84:f8:f4:c0:d1:0a:7c:79:d2:8d:6f:1f:
                    4d:7b:05:80:af:04:99:8c:3b:ed:49:b7:b3:fb:b8:
                    14:9f:47:5f:74:03:c1:ad:a4:5f:66:11:67:a0:3c:
                    e2:02:5b:70:20:3d:11:17:0a:d0:ec:0d:85:51:da:
                    14:16:27:1b:de:2c:ee:ec:23:65:ac:d2:da:2b:0b:
                    b7:37:f5:b7:7f:78:83:1d:b9:67:35:b9:10:72:92:
                    8b:f5:2c:b8:7f:e6:27:58:3e:0c:72:3f:02:14:80:
                    af:5c:11:38:d6:1c:4b:18:5b:e7:70:71:46:fb:44:
                    34:d0:dd:b0:17:b3:20:d4:3e:b5:cc:cc:d4:63:ae:
                    48:9a:10:b1:fd:ed:86:57:96:17:09:80:11:c5:7d:
                    ca:9d:13:55:e2:04:9f:59:8f:f6:c9:b9:58:47:59:
                    fc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:52:B2:D0:60:74:2A:9F:13:EF:5D:D6:BF:A9:47:23:D7:F2:5F:23
            X509v3 Authority Key Identifier:
                keyid:D5:5B:E7:00:52:78:F3:F9:25:2F:A4:D5:C5:17:15:A6:B1:BF:81:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:a8:be:c4:c4:41:6b:12:cb:26:20:08:46:9c:a1:df:cc:2d:
         69:2d:4b:5b:80:9f:cf:a0:bf:ed:19:8c:71:52:93:36:04:2a:
         a8:10:e7:df:b6:bc:99:42:bb:2a:4a:78:06:56:f9:6b:cb:94:
         39:b1:f0:bb:a4:0b:dc:8a:a5:2e:4b:29:1e:c4:49:19:25:28:
         de:d4:52:b2:20:05:fc:b9:b2:8e:7b:af:f0:7f:5e:7b:77:39:
         7d:be:a1:8f:28:8a:b0:fa:02:5f:67:a2:04:7a:00:8a:be:ad:
         34:54:fc:b3:be:78:96:63:5c:c4:2e:ab:48:5e:52:56:83:5c:
         21:a1:be:b6:f6:cf:f7:54:56:f6:c2:ac:eb:12:b5:24:b0:18:
         b6:90:29:36:95:a2:e5:58:29:50:ba:58:a4:a3:2a:e9:8b:9e:
         b6:8f:57:5b:46:66:1b:b5:d7:6b:36:e3:c4:6f:38:22:c5:81:
         0c:19:fb:a7:ee:d3:08:fd:7f:d0:60:bf:5b:08:83:98:46:1a:
         40:75:2e:87:1b:ff:98:54:bf:b7:27:d2:48:a9:88:e2:6d:3a:
         76:29:1a:2c:4a:68:05:95:27:39:bc:10:de:17:ce:d0:47:eb:
         79:90:9b:1e:2d:84:3f:d5:bf:11:95:f1:8b:17:cc:2f:b2:51:
         27:44:2a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:28:55 2026 by rpki-client