Error: rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.mft
File:                     8373C13408682E3BA48652A9BE590C5E4E4A0CFA.mft (raw, json)
Hash identifier:          3KT+ssMOl1OKq5CBvy+Xti3HmLPCcq/MMzUYEC1C19A=
Subject key identifier:   29:DD:F0:8F:7B:51:A6:35:82:49:1B:E1:90:5C:39:29:91:35:25:C7
Authority key identifier: 83:73:C1:34:08:68:2E:3B:A4:86:52:A9:BE:59:0C:5E:4E:4A:0C:FA
Certificate issuer:       /CN=8373C13408682E3BA48652A9BE590C5E4E4A0CFA
Certificate serial:       5B8EC07A7CE05AAABD38D9DF56E9C6CBF7806FB9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.mft
Manifest number:          0586
Signing time:             Fri 30 Oct 2026 23:10:00 +0000
Manifest this update:     Fri 30 Oct 2026 23:05:00 +0000
Manifest next update:     Sat 31 Oct 2026 23:10:00 +0000
Files and hashes:         1: 8373C13408682E3BA48652A9BE590C5E4E4A0CFA.crl (hash: e8U4GCOT+WB9rBGyAIxte4rX4I+JLjJTjSZBj7FwSgk=)
                          2: 34352e3139312e37392e302f32342d3234203d3e20323639373030.roa (hash: MqQsbos22qPHOeoNdC7kln72lHiWGjxgz4CrfbTd+OM=)
                          3: 323830343a363838633a633030303a3a2f34302d3430203d3e20323639373030.roa (hash: zEzjL+jT7owCnQYTOWo1i49QNfzcf58l0LLzYZsJYFA=)
                          4: 323830343a363838633a3a2f33322d3332203d3e20323639373030.roa (hash: Fp+efHCcJJ5vWi6kah0cvENqA6GWYmPZYLxPjfLZb/g=)
                          5: 34352e3139312e37372e302f32342d3234203d3e20323639373030.roa (hash: +p52Y8Qsh3hGKKEwidiTk8nquG4CbQtx/yf+uoKo+LE=)
                          6: 34352e3139312e37362e302f32342d3234203d3e20323639373030.roa (hash: dlpFZpQumOUTD18lSDJxCbzd8ZrQm3IwDxOVd19B15M=)
                          7: 34352e3139312e37382e302f32332d3233203d3e20323639373030.roa (hash: oqK4yu5Cb4906jjtqs6tuZ32D9E70j5WZmZM5bxAaw4=)
                          8: 34352e3139312e37382e302f32342d3234203d3e20323639373030.roa (hash: WPTeti68ODIJEQS/VIffQwiBkgJMOy9PH/4cNvDrQNQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.crl
                          rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 23:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:8e:c0:7a:7c:e0:5a:aa:bd:38:d9:df:56:e9:c6:cb:f7:80:6f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8373C13408682E3BA48652A9BE590C5E4E4A0CFA
        Validity
            Not Before: Oct 30 23:05:00 2026 GMT
            Not After : Oct 31 23:10:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:dd:81:50:6d:d7:1f:70:04:59:66:4d:a1:d7:
                    00:e9:ce:89:86:ec:86:6e:80:b2:47:60:66:70:b3:
                    21:65:2b:f6:76:28:19:17:d7:13:c3:6c:22:80:92:
                    8f:20:03:7f:29:fb:30:4b:82:71:4b:78:f0:17:63:
                    ad:10:ee:e5:b3:77:b6:67:b3:32:1c:bc:ee:fc:36:
                    28:d9:3b:f5:06:af:4b:70:3b:05:49:ab:68:ea:41:
                    04:f2:b8:3a:6b:81:9b:df:92:9b:a6:53:48:8a:46:
                    e8:eb:fa:35:e1:8a:c8:74:74:4b:f8:f9:58:44:63:
                    79:64:6a:41:1c:ee:33:8e:49:15:29:15:3d:45:31:
                    c7:4f:cd:4e:1c:2f:40:c0:96:d9:d7:3b:43:55:cd:
                    17:08:07:c8:b2:5e:4d:de:ec:c3:ad:12:bc:a0:68:
                    b7:92:7b:18:49:c2:6d:fc:ac:fd:19:f4:23:35:40:
                    28:43:08:65:b8:d1:27:ce:2c:ab:d2:81:80:5f:3e:
                    9c:05:e4:d2:7e:21:74:5c:f2:04:82:cf:d4:30:ba:
                    6e:c7:de:f4:ee:c8:e0:60:12:a6:72:2e:e7:8d:92:
                    3d:3c:4c:74:55:55:7f:72:39:17:fe:7e:d3:3b:6f:
                    de:89:97:28:97:11:f8:eb:58:c3:41:55:89:5b:ca:
                    07:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DD:F0:8F:7B:51:A6:35:82:49:1B:E1:90:5C:39:29:91:35:25:C7
            X509v3 Authority Key Identifier:
                keyid:83:73:C1:34:08:68:2E:3B:A4:86:52:A9:BE:59:0C:5E:4E:4A:0C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:f4:56:25:47:e9:54:1c:bc:d5:e1:77:3a:5f:96:1d:f2:90:
         54:7d:2f:be:e9:bc:2b:f6:b3:34:30:17:dd:df:33:34:bc:4a:
         57:1c:4a:5b:27:c8:68:73:26:e7:2b:15:4c:f8:19:d3:fb:a7:
         f5:92:b4:2b:84:81:58:97:c1:fd:ec:36:07:31:d9:48:73:e1:
         75:97:63:21:3d:24:a7:d5:fd:4b:9c:55:7d:bf:a7:c7:26:00:
         17:4a:b8:fc:25:36:2d:0f:18:85:30:a2:52:45:1e:3a:6b:96:
         20:6e:d6:bc:97:e5:76:7d:98:3a:df:5d:1a:3e:68:94:0a:b9:
         6b:06:6e:92:74:89:0b:fc:66:08:08:d6:a4:f4:0f:2c:87:c0:
         81:47:c2:de:cd:a8:67:e5:93:0e:cc:b7:27:47:e9:02:48:81:
         cc:52:27:93:6a:0b:61:aa:c2:26:20:3e:83:4e:fa:bb:75:1b:
         29:16:10:24:a3:92:2f:18:34:cc:54:ae:e1:db:00:eb:5e:bf:
         03:57:be:fc:f0:51:cf:2b:8c:a8:57:aa:ca:9f:5f:70:6b:bf:
         d0:9c:b1:e2:00:b5:bc:e3:6e:4f:5d:c1:99:12:37:94:04:1a:
         02:cf:7e:bd:f6:39:2e:12:76:c1:f7:08:1a:a1:8f:b3:c8:cf:
         fd:4a:4e:b6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 31 09:48:24 2026 by rpki-client