Error: rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.mft
File:                     8373C13408682E3BA48652A9BE590C5E4E4A0CFA.mft (raw, json)
Hash identifier:          2YXMSqF0dFZFyYAWqINSmfBShDNUQ6U8q7OxojuMDNQ=
Subject key identifier:   7D:F6:90:47:69:20:86:0C:7E:0C:1B:12:E8:90:48:39:D6:01:8B:EF
Authority key identifier: 83:73:C1:34:08:68:2E:3B:A4:86:52:A9:BE:59:0C:5E:4E:4A:0C:FA
Certificate issuer:       /CN=8373C13408682E3BA48652A9BE590C5E4E4A0CFA
Certificate serial:       132A20BEAF56D46715D51AB8E3F07BFD68E12722
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.mft
Manifest number:          0520
Signing time:             Sun 23 Aug 2026 22:00:00 +0000
Manifest this update:     Sun 23 Aug 2026 21:55:00 +0000
Manifest next update:     Mon 24 Aug 2026 22:00:00 +0000
Files and hashes:         1: 34352e3139312e37392e302f32342d3234203d3e20323639373030.roa (hash: MqQsbos22qPHOeoNdC7kln72lHiWGjxgz4CrfbTd+OM=)
                          2: 34352e3139312e37382e302f32332d3233203d3e20323639373030.roa (hash: oqK4yu5Cb4906jjtqs6tuZ32D9E70j5WZmZM5bxAaw4=)
                          3: 323830343a363838633a633030303a3a2f34302d3430203d3e20323639373030.roa (hash: zEzjL+jT7owCnQYTOWo1i49QNfzcf58l0LLzYZsJYFA=)
                          4: 34352e3139312e37372e302f32342d3234203d3e20323639373030.roa (hash: +p52Y8Qsh3hGKKEwidiTk8nquG4CbQtx/yf+uoKo+LE=)
                          5: 34352e3139312e37382e302f32342d3234203d3e20323639373030.roa (hash: WPTeti68ODIJEQS/VIffQwiBkgJMOy9PH/4cNvDrQNQ=)
                          6: 8373C13408682E3BA48652A9BE590C5E4E4A0CFA.crl (hash: vFTCobk4ak5Fzno4lbp9uQkTRyEnSaCH899FupE0uuc=)
                          7: 34352e3139312e37362e302f32342d3234203d3e20323639373030.roa (hash: dlpFZpQumOUTD18lSDJxCbzd8ZrQm3IwDxOVd19B15M=)
                          8: 323830343a363838633a3a2f33322d3332203d3e20323639373030.roa (hash: Fp+efHCcJJ5vWi6kah0cvENqA6GWYmPZYLxPjfLZb/g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.crl
                          rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:2a:20:be:af:56:d4:67:15:d5:1a:b8:e3:f0:7b:fd:68:e1:27:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8373C13408682E3BA48652A9BE590C5E4E4A0CFA
        Validity
            Not Before: Aug 23 21:55:00 2026 GMT
            Not After : Aug 24 22:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:2b:cd:ad:9d:7d:04:86:c4:f4:e1:6e:00:90:
                    92:87:0f:47:e5:c7:35:44:bb:4b:10:ed:3f:22:01:
                    89:55:c8:2f:d1:58:55:e3:f2:04:85:0e:bb:74:f3:
                    66:e8:c1:1b:4c:54:c5:23:95:7b:d7:7f:aa:45:3d:
                    69:ca:44:c9:1f:cd:49:f3:e9:be:aa:94:42:e0:d3:
                    e2:46:b1:d6:b3:32:71:5f:47:40:6b:41:67:d7:18:
                    6c:55:3c:54:a7:a1:d6:d9:df:32:fa:9f:1b:25:e7:
                    46:ba:67:bc:f1:ad:e9:04:82:19:12:27:c9:52:2d:
                    6c:e5:6b:b1:be:3f:25:e9:19:22:c6:47:f0:47:62:
                    d7:56:b6:0f:d8:89:8c:62:08:16:ae:f2:5c:f4:df:
                    a2:38:fd:c8:52:82:f4:f8:9d:32:71:a7:f2:b9:eb:
                    ae:ad:c1:5c:c5:58:08:e3:1e:44:62:09:a0:1f:37:
                    23:70:20:48:49:51:4c:3c:ab:fe:11:cf:62:7f:61:
                    4c:42:20:f3:d7:c1:64:3a:25:98:15:76:73:62:a6:
                    ff:0e:4c:22:04:27:6f:1b:8a:8c:2c:15:3d:47:86:
                    11:9b:c4:6f:05:f4:11:e2:26:64:08:91:0e:00:c5:
                    46:4b:f9:4b:07:8e:5c:d9:c1:00:7c:8b:35:e0:e5:
                    4f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F6:90:47:69:20:86:0C:7E:0C:1B:12:E8:90:48:39:D6:01:8B:EF
            X509v3 Authority Key Identifier:
                keyid:83:73:C1:34:08:68:2E:3B:A4:86:52:A9:BE:59:0C:5E:4E:4A:0C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:08:ec:6a:ac:2e:73:f1:47:0a:98:30:18:3d:7e:50:f7:f2:
         09:70:1d:b1:c8:81:04:d0:e6:c5:8d:c8:bc:c3:75:a8:ba:b7:
         f1:08:f2:18:09:99:31:2f:c8:ad:00:bb:26:75:b3:89:db:76:
         4b:43:59:2d:66:10:54:29:c4:72:39:d4:81:36:24:15:0a:03:
         54:39:40:49:3c:dd:8c:f9:d2:c3:14:d5:16:d1:49:25:d5:69:
         e4:c6:64:db:e2:ce:dd:ad:41:5e:f8:64:33:15:f1:07:f8:ef:
         40:29:62:52:18:64:8c:27:4e:3b:17:f1:0a:3d:29:4b:f1:f8:
         b1:55:71:73:0b:18:88:34:42:a1:b0:df:3f:cc:65:4d:e7:ec:
         b5:0b:e8:0f:fd:eb:47:0a:d1:97:21:08:88:7d:8f:ef:97:f0:
         e4:82:42:d7:53:50:26:7d:ea:68:01:b1:11:a3:ed:a0:4e:fd:
         6f:6e:50:f0:13:af:e1:9b:e0:1a:a7:c7:e7:a8:03:f1:9c:5d:
         44:8b:c5:f5:38:69:54:0a:50:92:6b:0f:09:05:fc:8b:75:cb:
         76:0d:25:20:e3:b1:8c:21:69:39:6d:ba:2f:bb:7d:4f:99:1a:
         48:77:2a:d4:2c:75:cc:3f:50:3d:84:c6:e6:5d:dd:a6:86:bb:
         c1:ea:aa:cf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Aug 23 23:39:04 2026 by rpki-client