Error: rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/7040E70A343ED61D14BF33985442CD6EB7927B4D.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/7040E70A343ED61D14BF33985442CD6EB7927B4D.mft
File:                     7040E70A343ED61D14BF33985442CD6EB7927B4D.mft (raw, json)
Hash identifier:          VQJFTV7kZ9x44rpa60obBFWm6YQFFxFWUzfjtuyggBY=
Subject key identifier:   58:F1:DC:37:67:D2:79:EB:CB:0C:7C:CB:8A:CE:23:54:43:F1:A9:E9
Authority key identifier: 70:40:E7:0A:34:3E:D6:1D:14:BF:33:98:54:42:CD:6E:B7:92:7B:4D
Certificate issuer:       /CN=7040E70A343ED61D14BF33985442CD6EB7927B4D
Certificate serial:       343AFC7647614A27BB1ED8DACD2D799565D6A4A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7040E70A343ED61D14BF33985442CD6EB7927B4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/7040E70A343ED61D14BF33985442CD6EB7927B4D.mft
Manifest number:          0215
Signing time:             Sun 23 Aug 2026 17:54:41 +0000
Manifest this update:     Sun 23 Aug 2026 17:49:41 +0000
Manifest next update:     Mon 24 Aug 2026 19:53:41 +0000
Files and hashes:         1: 3137372e38362e3134322e302f32342d3234203d3e20323731373038.roa (hash: 52caCLfFJrasca2lrGfORWZD/Zggv1Pi1qT4wC2KZzM=)
                          2: 3138362e3233322e3234322e302f32342d3234203d3e20323731373038.roa (hash: GZ8ccAOV65iGpzj0vALfkbqY2Gxtesgz3DPcneM4IoQ=)
                          3: 3230312e3133312e3130332e302f32342d3234203d3e20323731373038.roa (hash: FEbTCHHOeJMCBiHLCKTWP3orSV/DNpPxrhfDRwI/Gnk=)
                          4: 34352e3232392e3135312e302f32342d3234203d3e20323731373038.roa (hash: +kU9OCkJuzwtNJrqTFzQtoOFXw39Kg34DeRZOxuSaGA=)
                          5: 7040E70A343ED61D14BF33985442CD6EB7927B4D.crl (hash: 42wyqhlbhfrofRbnRTQTlO7bp/faTCnpLO9ZplS7W3s=)
                          6: 323830343a376663343a333a3a2f34382d3438203d3e20323731373038.roa (hash: wMiFeyfxac1yb0mP7jm+IgjOZM5Yk1Ds4ZnqBUtZS/U=)
                          7: 323830343a376663343a343a3a2f34382d3438203d3e20323731373038.roa (hash: GDHsFD001ifviUPBrNM+uox15dfwpsaL4QGhpAWu2gU=)
                          8: 323830343a376663343a3a2f33322d3332203d3e20323731373038.roa (hash: O4NnPDApnO515kO49ZbeJ6dRx3lfhRpDb7l3An7cdA0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/7040E70A343ED61D14BF33985442CD6EB7927B4D.crl
                          rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/7040E70A343ED61D14BF33985442CD6EB7927B4D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7040E70A343ED61D14BF33985442CD6EB7927B4D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 19:53:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:3a:fc:76:47:61:4a:27:bb:1e:d8:da:cd:2d:79:95:65:d6:a4:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7040E70A343ED61D14BF33985442CD6EB7927B4D
        Validity
            Not Before: Aug 23 17:49:41 2026 GMT
            Not After : Aug 24 19:53:41 2026 GMT
        Subject: CN=58F1DC3767D279EBCB0C7CCB8ACE235443F1A9E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b2:da:40:2f:89:35:41:a5:d2:39:99:03:1b:
                    49:51:1f:52:5e:ed:a5:5b:83:56:0e:bc:27:b3:e4:
                    11:a9:c5:1c:21:4a:de:46:a7:68:e9:39:95:1d:a1:
                    be:8b:a5:55:88:cb:77:d5:9b:c2:a8:c3:29:0a:d3:
                    e9:6a:c4:5c:b5:8d:6d:1b:cd:9c:98:9a:bf:b2:1d:
                    36:55:76:48:86:4d:7b:13:43:07:8b:9f:07:e0:2d:
                    fb:b9:98:f1:19:44:b8:cf:8f:10:df:8a:24:ee:64:
                    92:1e:5f:5d:cc:be:df:9b:6f:c1:2d:0d:8c:c4:af:
                    30:c1:0c:b3:fc:84:74:45:ef:87:4c:92:11:f0:ea:
                    b4:e0:00:63:97:f1:26:92:5b:0b:d3:76:21:bd:52:
                    0f:b3:e6:53:be:69:5a:29:dc:b2:af:08:f9:66:03:
                    89:62:dd:c6:90:c4:94:e1:ae:2c:8f:d8:cd:18:63:
                    01:29:aa:bf:cf:bb:90:c3:bc:52:e7:04:8a:c2:16:
                    30:5f:dc:b3:e4:e6:1f:7c:28:1a:e8:5a:6c:89:0b:
                    2f:ac:bf:c3:c3:b8:7c:92:99:6d:9a:53:c6:c5:c1:
                    d8:fb:f2:56:35:a5:ac:fa:78:f3:42:0a:d0:80:2b:
                    dc:45:22:2c:a3:bb:8e:4e:84:3d:cc:75:e3:24:05:
                    3f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F1:DC:37:67:D2:79:EB:CB:0C:7C:CB:8A:CE:23:54:43:F1:A9:E9
            X509v3 Authority Key Identifier:
                keyid:70:40:E7:0A:34:3E:D6:1D:14:BF:33:98:54:42:CD:6E:B7:92:7B:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/7040E70A343ED61D14BF33985442CD6EB7927B4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7040E70A343ED61D14BF33985442CD6EB7927B4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/7040E70A343ED61D14BF33985442CD6EB7927B4D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ef:fd:f0:a5:06:39:7e:de:5d:78:d5:fe:3a:8c:0d:44:5e:
         63:a3:69:22:6b:79:9f:42:d0:e5:12:fd:75:d0:3b:c9:97:eb:
         8c:a1:f0:a7:a6:92:c7:56:68:80:ef:36:15:9a:1d:e4:36:63:
         69:53:ff:42:37:6c:81:42:32:48:3c:60:ea:3e:2f:71:bc:d3:
         f4:8a:a8:27:f1:29:71:f6:f0:33:96:d6:ce:4a:28:55:10:3c:
         21:5c:fc:93:bc:45:fc:26:74:6d:d5:47:51:f2:61:40:5e:27:
         4c:1a:1c:ad:0a:40:e2:e7:f3:a2:cf:c9:e8:fe:b1:ab:fc:f0:
         bf:13:bd:24:95:8c:02:d9:bc:b5:33:f9:84:44:d4:5f:b0:15:
         a3:45:53:b1:53:c8:a3:d4:6f:a5:53:34:1c:f1:cc:b8:97:7a:
         62:4a:d4:ae:ef:4b:85:5f:9f:bf:ef:bb:83:ec:38:59:b8:21:
         cb:33:7b:5d:19:30:da:f0:84:05:95:8c:d5:8b:0f:32:c7:6a:
         fb:17:66:bd:23:25:9f:87:58:b1:cc:fa:d2:51:7a:ce:45:c1:
         5c:bc:b6:ee:d3:a2:1e:73:dd:ba:20:13:6e:8c:cf:13:02:58:
         29:26:28:3b:b6:a8:fb:f3:2f:7d:05:74:54:bc:1e:83:e9:17:
         da:1e:69:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:49:44 2026 by rpki-client