Error: rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.mft
File:                     C3976BFC098E04D93A5507BBB046C3608B889670.mft (raw, json)
Hash identifier:          jFUSHIgZju0EeyFHPSP+l4AEHDYTr5yLcCz5vz4Uxv0=
Subject key identifier:   D2:D8:D1:F6:34:7D:5F:0D:BB:B9:83:FE:65:F3:CF:C0:97:63:4B:8E
Authority key identifier: C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70
Certificate issuer:       /CN=C3976BFC098E04D93A5507BBB046C3608B889670
Certificate serial:       51EB13B45726F2D0E86E2740DBAE1CFD94F61512
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.mft
Manifest number:          058B
Signing time:             Sun 01 Nov 2026 09:00:00 +0000
Manifest this update:     Sun 01 Nov 2026 08:55:00 +0000
Manifest next update:     Mon 02 Nov 2026 09:00:00 +0000
Files and hashes:         1: 34352e3138382e3134322e302f32332d3234203d3e20323639353332.roa (hash: 0m8+zDBDxvXL3n0SvabbxLxFpASSiSoHHAJ2i6fBMTU=)
                          2: 34352e3138382e3134302e302f32332d3234203d3e20323639353332.roa (hash: LaVXT9Gat57OXh1VksRLfzPee1kgO9ByuhkPIGFEVpA=)
                          3: 323830343a363631343a343030303a3a2f33342d3334203d3e20323639353332.roa (hash: 3pDxFqA/yFfHk+CAtGXogl/uiNeu0UZ54S2QUNUdoNA=)
                          4: 323830343a363631343a383030303a3a2f33342d3334203d3e20323639353332.roa (hash: a+0x97JcmUKYtxw1wlbVLfBbMv5HN34KM6tNZbfzoCk=)
                          5: C3976BFC098E04D93A5507BBB046C3608B889670.crl (hash: qWA3SSUjpJeBHmUD+6+VNV1GFhiwsl8d2SQ3zDnw2Ko=)
                          6: 323830343a363631343a3a2f33332d3333203d3e20323639353332.roa (hash: tMQrDW5AQq55OX25vS7sR8u3kgrjVThIuO5ojnSvHXA=)
                          7: 323830343a363631343a383030303a3a2f33332d3333203d3e20323639353332.roa (hash: znG6mVdtuJf7OTpvcebCRJ6rRcTUzVPFmAEWycFohbI=)
                          8: 323830343a363631343a3a2f33322d3332203d3e20323639353332.roa (hash: ZbjsSwMRWm9SrcYoBYdOEKdQGPU9q8shbg/hbHCpkQk=)
                          9: 323830343a363631343a3a2f33342d3334203d3e20323639353332.roa (hash: FRp9INqXDhAYwybC+EuExcMHfp69A1qO1NeFzfuwAqE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.crl
                          rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:eb:13:b4:57:26:f2:d0:e8:6e:27:40:db:ae:1c:fd:94:f6:15:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3976BFC098E04D93A5507BBB046C3608B889670
        Validity
            Not Before: Nov  1 08:55:00 2026 GMT
            Not After : Nov  2 09:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1f:d4:f9:27:d5:00:91:f0:84:bc:17:52:22:
                    41:d7:56:1f:96:b0:eb:76:55:b0:14:12:d2:20:09:
                    29:5b:cd:73:2f:2a:be:24:8e:4d:5f:3a:60:bf:8a:
                    58:7a:5b:0a:9b:aa:79:a0:80:2f:fe:70:7c:f8:03:
                    c2:76:6d:a2:62:2e:1a:69:a2:b8:96:43:2a:cf:1e:
                    07:c8:48:7f:98:a3:d7:ce:d4:23:cd:6f:ab:36:e4:
                    43:d3:c3:4a:3b:b4:c6:ee:21:0a:f1:af:5f:43:d3:
                    19:4d:5d:cd:cd:27:c6:72:df:38:b9:6e:8e:ef:36:
                    3c:41:04:ea:1b:d7:b1:bf:9c:0a:fe:df:39:9c:48:
                    dd:54:50:9d:f1:b0:5c:76:15:73:fc:08:70:55:05:
                    be:0c:03:9d:6a:04:39:26:d8:c3:6c:6a:ea:9d:43:
                    ca:04:be:64:0c:de:f7:3f:9e:a1:28:d6:72:7c:ab:
                    89:06:3a:f9:31:db:30:f5:59:66:0e:06:26:ab:3d:
                    e3:d7:9e:cd:3d:24:31:ed:c1:bb:0a:cc:03:cd:80:
                    40:d6:73:70:fd:bb:dc:99:fb:d8:30:30:af:76:f1:
                    67:dd:7e:26:9e:2e:92:87:d0:6f:31:98:86:76:db:
                    2e:3c:ef:1b:6d:4d:b4:b4:e1:d5:09:7d:59:96:66:
                    17:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D8:D1:F6:34:7D:5F:0D:BB:B9:83:FE:65:F3:CF:C0:97:63:4B:8E
            X509v3 Authority Key Identifier:
                keyid:C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:5c:20:c7:14:d5:a2:04:1c:ab:7d:ef:67:b8:49:33:33:81:
         2f:31:23:3a:0c:5c:7c:3c:00:61:e5:4a:e6:ae:00:09:2a:1f:
         ff:3c:b4:ea:06:d3:23:2b:27:f9:4e:c4:69:16:eb:05:09:5e:
         97:fa:ed:be:a3:62:6c:3b:79:05:d6:7b:8c:b0:5d:32:a9:02:
         f5:9d:48:6d:25:7a:45:13:3e:89:26:d2:56:17:c9:bf:9c:31:
         56:87:a7:8b:0c:ca:35:5f:07:7e:62:9c:14:3b:54:e2:1e:44:
         39:8f:35:56:b3:8e:84:c9:b7:97:83:85:b6:91:35:02:51:99:
         e3:bd:c3:97:bf:63:04:f9:be:05:6a:22:00:98:e2:75:69:1b:
         a7:c6:0e:49:6c:67:96:71:8b:b7:58:d0:50:97:66:82:f0:2b:
         92:1f:23:9a:6a:7b:90:8c:ef:b2:da:8d:43:68:75:0e:a8:3f:
         03:ba:c5:ce:33:5b:5a:90:b2:33:88:2b:93:f4:59:37:a8:bc:
         f6:38:30:80:c2:9a:7d:c5:eb:a9:f0:a5:ba:ea:6c:26:75:07:
         bc:5a:e7:c6:ec:db:cf:c6:80:d6:5a:2d:38:97:c4:f1:c0:11:
         c8:4d:6c:b9:3b:bf:d2:02:a1:7d:1d:b9:63:c2:c2:cc:72:d4:
         46:fc:33:46
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 2 00:49:16 2026 by rpki-client