Error: rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
File:                     D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft (raw, json)
Hash identifier:          eOHdupvVCm73cyuFuru4Tv6SK0MnO9fmkfyXmUDOAfE=
Subject key identifier:   99:3B:8D:80:E7:F1:51:EB:EC:0C:1A:FE:1C:C3:0B:BA:06:35:42:55
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       607006D79E26FA7821965BB0E75CE0E9CDCE6286
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
Manifest number:          0492
Signing time:             Tue 25 Aug 2026 17:53:02 +0000
Manifest this update:     Tue 25 Aug 2026 17:48:02 +0000
Manifest next update:     Wed 26 Aug 2026 20:36:02 +0000
Files and hashes:         1: 3230302e3136322e3133332e302f32342d3234203d3e203232313737.roa (hash: +0goFd/LMurWFfdExFrOygGpSI08lqGkAsuLFaWRTR4=)
                          2: 3230302e3136322e3134302e302f32322d3232203d3e203232313737.roa (hash: feAr7mzmLoZ67SX8ixBZsFYxa5jtsaLRsLiayuFR4Iw=)
                          3: D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl (hash: hdtLutqH3RCeT5RFXYWNgD3Q0CPNNY1s6cbXm2Y9P1U=)
                          4: 3230302e3136322e3133352e302f32342d3234203d3e203232313737.roa (hash: HIMR8299sImbGEhWgoK4tnpERYMib9Wd7IHIk7qtkqI=)
                          5: 3230302e3136322e3134322e302f32342d3234203d3e203232313737.roa (hash: 3yjUNLSvZSLgjHTVjtOuqU/WAQEJAiqz85SsRf+lMXc=)
                          6: 3230302e3136322e3133312e302f32342d3234203d3e203232313737.roa (hash: df2PrxjXK3CFv/xR4wO223F51fO/kqbjh3dIn5eH8ew=)
                          7: 3230302e3136322e3133362e302f32342d3234203d3e203232313737.roa (hash: Cia4KlGENw8q7BDbBpx1Esf9u1qDpG6xptoX1ZfnAR8=)
                          8: 3230302e3136322e3132392e302f32342d3234203d3e203232313737.roa (hash: w2RJWst/V96QLHdf3OvOcc7LzOwE0kL/84BOw+JHTnY=)
                          9: 3230302e3136322e3133362e302f32322d3232203d3e203232313737.roa (hash: LS3ggZYhLUkmCNXkiOi7epEVc90WyfbjInAFSt5eAZE=)
                          10: 323830343a3533343a3a2f33322d313238203d3e203232313737.roa (hash: xOjWNHdlvC4aWCpaMTim+rUG/eRaBOhfA8dU4+KmaTc=)
                          11: 3230302e3136322e3133372e302f32342d3234203d3e203232313737.roa (hash: pDoo1WhOG32kg0PuB5rXZ49eoVIgpk01MJ2NFJEG98g=)
                          12: 3230302e3136322e3133322e302f32342d3234203d3e203232313737.roa (hash: 4aUXcP8FBY9Zo9u3sryw5c1t8G1ptZr9BuzKMc7lsgA=)
                          13: 3133312e3130302e3137342e302f32342d3234203d3e203232313737.roa (hash: G8yw4ZJifCky4G4PbcnvxeUQr+RiwGNBM9VDzsChI0E=)
                          14: 3138392e35312e302e302f32302d3234203d3e203232313737.roa (hash: MSpmwvI8koTCZN2TB/gPDH1aKqMHmW0jId9F7ZVss/M=)
                          15: 3230302e3136322e3133362e302f32332d3234203d3e203232313737.roa (hash: rKLKrrc6pgIewnHgAINBuwuZA+NuByDSZUrz3uP2ZKc=)
                          16: 3230302e3136322e3133392e302f32342d3234203d3e203232313737.roa (hash: a7RfiYF9zwob9+uSUJt+vTzhAqsLL4WlYxkM+y7K5BQ=)
                          17: 3230302e3136322e3132382e302f32322d3232203d3e203232313737.roa (hash: SwNBp0ka5qIjKgJoDC/Io4eBTQDsLpDy2h6TijNhO/w=)
                          18: 3133312e3130302e3137322e302f32342d3234203d3e203232313737.roa (hash: pqt+C/C+kluvr+JT8MJ6d/qhriCFbH45W/2AEiNZs3E=)
                          19: 3230302e3136322e3132382e302f32302d3230203d3e203232313737.roa (hash: 0+CRX28ivABD7/03XOYQjt/LmyhXhinDYUrbWgzBU/4=)
                          20: 3230302e3136322e3132382e302f32302d3234203d3e203232313737.roa (hash: MXVFLm1qqOz7PH7jNRUzcLTCLPx++pJBfxQHuONGdEE=)
                          21: 3230302e3136322e3132382e302f32342d3234203d3e203232313737.roa (hash: 4hmPv1ugxyvlVTK6l2bvvOQlHfeMtLtPdTmMda6NxGE=)
                          22: 3230302e3136322e3133302e302f32342d3234203d3e203232313737.roa (hash: 8a/TBMAVgwNlIJNYx9eWDBjjchBDqS5Cv2rlk04NSiI=)
                          23: 3133312e3130302e3137352e302f32342d3234203d3e203232313737.roa (hash: 8HB+zauS7rg18e8AsAz+SJZCtcokz5uwCwQSZ2d8ucY=)
                          24: 3133312e3130302e3137322e302f32322d3232203d3e203232313737.roa (hash: TGrfzvEPH/KDtpDUD7qXJSWxp0NISABDPGuPeJAyIH4=)
                          25: 3230302e3136322e3134302e302f32342d3234203d3e203232313737.roa (hash: uIatVJTA6JNImnzSlVdIeQgNDErRdRkwMz4gCwNLA5g=)
                          26: 323830343a3533343a663030303a3a2f34302d3430203d3e203232313737.roa (hash: 09+NUz+9frP/8kdDf1nf1Vcs/0LDihk1Z0P6kBHO1ms=)
                          27: 3230302e3136322e3134332e302f32342d3234203d3e203232313737.roa (hash: tQXNitmGeAMgOOGQB3ec1heHIIFTsXEMkt084dnk3c0=)
                          28: 3230302e3136322e3133322e302f32322d3232203d3e203232313737.roa (hash: JmMWAEsSlJ6B/1oaGwfBanW5pbXDn/ENy/M7pcZVNgM=)
                          29: 3133312e3130302e3137332e302f32342d3234203d3e203232313737.roa (hash: ibyk1oY+gUhcgIJ9i3FXh1S+gw4Qe7hxL5IeQeRA6+Y=)
                          30: 3230302e3136322e3134312e302f32342d3234203d3e203232313737.roa (hash: v9qbYBbhHMIjxA/n1XkVL9g+IEiwJRsijmZjf6laD7M=)
                          31: 323830343a3533343a323030303a3a2f34302d3430203d3e203232313737.roa (hash: XjooNNlSQgiglmY+X6ccfMzWiktFEZW1v3jPWi0KwT4=)
                          32: 3230302e3136322e3133342e302f32342d3234203d3e203232313737.roa (hash: i1JfbygWSHq9QMhPwV0N2EyH8dC9ecdZydnFg+k4fmY=)
                          33: 3230302e3136322e3133382e302f32342d3234203d3e203232313737.roa (hash: lH2fqT4N3xDjFp8PjOoXFMu6kkBt6nuEAEd7is+iPj0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 20:36:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:70:06:d7:9e:26:fa:78:21:96:5b:b0:e7:5c:e0:e9:cd:ce:62:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Aug 25 17:48:02 2026 GMT
            Not After : Aug 26 20:36:02 2026 GMT
        Subject: CN=993B8D80E7F151EBEC0C1AFE1CC30BBA06354255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9a:c3:71:40:7c:13:47:36:67:ad:fb:23:94:
                    6c:51:b2:ac:a5:e7:44:d8:4d:58:af:00:25:ba:52:
                    0d:61:b2:9b:a2:04:31:05:c4:c9:f2:89:e9:65:7d:
                    c8:be:58:31:38:b0:f4:ae:48:3e:39:a5:17:8e:9c:
                    58:6a:65:4a:c4:8d:d6:c9:06:c8:d9:64:d9:ba:2f:
                    c9:bd:bb:7b:dc:ef:53:67:b5:c5:30:13:e7:70:0d:
                    00:17:a9:52:9c:c3:04:a0:1c:e5:15:04:92:84:82:
                    1f:df:f3:e7:d0:66:6d:15:84:e3:81:c7:56:e6:05:
                    1a:9c:47:9a:df:cd:52:b6:68:22:f1:ae:f5:7b:f4:
                    c1:a8:09:45:86:e2:29:1e:0c:5a:ec:aa:3b:15:cc:
                    0c:56:3a:4e:28:ce:2c:11:ca:05:0b:ae:a5:b5:b3:
                    23:93:64:34:cb:80:ca:d1:6e:6e:fe:3d:f1:7c:1d:
                    dd:6e:28:e5:a7:34:01:08:d9:81:30:80:6f:1d:ec:
                    3a:22:9c:cf:7c:f7:22:45:07:14:56:d1:9a:d1:ba:
                    89:86:b5:ce:46:ea:a6:1a:47:40:e0:46:a0:8c:eb:
                    e6:dc:78:6e:e3:e3:28:a2:ab:a6:1c:65:4d:ac:65:
                    11:e2:08:02:81:24:43:3d:4d:1e:28:c2:69:f6:f5:
                    60:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:3B:8D:80:E7:F1:51:EB:EC:0C:1A:FE:1C:C3:0B:BA:06:35:42:55
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:8c:76:e1:90:1f:38:01:cb:6e:41:d6:d1:aa:34:7a:6e:a1:
         88:6b:3a:48:dd:54:b7:39:5e:b8:3c:a0:de:5d:8f:ee:20:20:
         b3:7e:42:c0:60:15:cc:2c:30:e9:4c:a4:e6:58:02:07:a4:4f:
         58:a9:87:46:09:0e:a2:7e:9b:5c:d9:b0:52:25:ce:18:e8:0d:
         8a:77:78:69:c9:85:09:26:3a:9a:8c:db:49:38:69:0a:4e:bc:
         19:14:5e:a7:04:14:d3:f4:a5:2f:12:8e:58:e6:22:85:ef:26:
         3b:d4:f5:c1:b8:92:72:9d:cf:0e:df:a8:40:bf:9d:30:be:5c:
         5d:ad:55:10:2d:7a:0e:4a:55:99:93:d9:1a:f9:17:ef:5a:c7:
         9c:14:ad:dc:91:13:5d:51:34:3e:7c:fe:e9:7b:5f:69:f9:ff:
         15:1b:f3:7c:81:c1:93:9d:48:c8:d8:c5:e3:f1:34:0a:2e:ef:
         5e:58:87:57:36:a7:d9:15:d4:e4:92:f2:d3:fa:06:f7:8c:e0:
         49:cb:81:48:c8:c0:6b:dd:c1:f5:85:97:4a:8c:d6:51:e3:1c:
         a9:33:f6:54:d2:43:84:9c:34:f4:41:2e:c1:28:7e:60:2d:24:
         ae:44:b5:f8:f6:06:7e:38:81:4e:7d:93:3e:42:75:f9:5c:d5:
         66:4f:cf:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:18:29 2026 by rpki-client