Error: rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.mft
File:                     4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.mft (raw, json)
Hash identifier:          8sbHEi1SofycHNh5n52Vj1Ht+TVUzmMufnFgnAI9DAE=
Subject key identifier:   30:D6:7F:E6:5E:DC:10:C7:71:D8:A0:B2:44:25:34:E7:1D:79:E7:6C
Authority key identifier: 44:13:F2:BD:E0:8D:3C:28:B7:34:73:1A:6E:80:F7:AB:4C:D6:6E:4D
Certificate issuer:       /CN=4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D
Certificate serial:       7F29D7019A74F06F66335AA152463B5115212124
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.mft
Manifest number:          0522
Signing time:             Wed 26 Aug 2026 15:50:00 +0000
Manifest this update:     Wed 26 Aug 2026 15:45:00 +0000
Manifest next update:     Thu 27 Aug 2026 15:50:00 +0000
Files and hashes:         1: 3138362e3139342e3136382e302f32322d3234203d3e20323730383230.roa (hash: 0mzZARCgbhLak1lhuxRoxw5uXq1d53ugNB7tCj+aPaA=)
                          2: 4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.crl (hash: ouQuk5gQgISEvMX1cLhMqleks4GCT1VdVJrc3ptvANM=)
                          3: 323830343a373165633a3a2f33322d3334203d3e20323730383230.roa (hash: qzFC8Gk3equw9247bE06DSyL4so4QLyWewLu6GlVxDw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.crl
                          rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 15:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:29:d7:01:9a:74:f0:6f:66:33:5a:a1:52:46:3b:51:15:21:21:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D
        Validity
            Not Before: Aug 26 15:45:00 2026 GMT
            Not After : Aug 27 15:50:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9e:e1:fa:92:28:03:11:7e:05:32:a1:76:bf:
                    e2:45:02:b8:a9:72:23:b2:f3:51:28:0d:12:e2:d5:
                    d7:89:cc:ca:7a:07:64:de:50:9c:89:25:57:81:8a:
                    4c:e7:8e:06:ca:b8:42:b4:b3:3d:ee:d0:85:97:6f:
                    5f:05:b5:57:51:ba:89:55:59:a0:58:e9:91:a5:b0:
                    16:bc:e7:ce:e6:ca:c3:72:48:4a:44:2f:17:86:09:
                    2f:cc:c5:7f:0a:a4:f4:cd:e1:f9:4d:1e:10:02:75:
                    37:bd:c5:64:09:ca:ca:89:c5:7a:5e:ea:5e:97:08:
                    9d:a4:d0:34:b7:32:10:4a:f1:6f:d5:26:eb:88:27:
                    fb:08:52:6c:1f:64:a8:71:88:fa:ed:93:b8:ba:93:
                    86:12:6d:01:fa:c8:f0:33:36:bb:7c:19:cf:3b:7b:
                    5b:d3:79:fb:df:77:71:53:89:79:df:23:8f:7b:37:
                    b3:68:02:2e:41:c7:47:71:97:c3:5e:8d:9d:dd:a9:
                    7e:24:09:4d:bc:f6:1f:80:a5:77:0b:c8:66:1d:c5:
                    d8:8b:23:7a:ae:e9:a4:ba:25:41:8e:65:d2:1d:40:
                    b6:43:b2:7b:a7:24:1a:2f:2c:4e:05:a9:c7:d9:e7:
                    39:aa:4c:b0:d5:06:00:56:39:82:81:8a:6a:c2:5a:
                    3b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D6:7F:E6:5E:DC:10:C7:71:D8:A0:B2:44:25:34:E7:1D:79:E7:6C
            X509v3 Authority Key Identifier:
                keyid:44:13:F2:BD:E0:8D:3C:28:B7:34:73:1A:6E:80:F7:AB:4C:D6:6E:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:18:f5:2c:1d:2c:20:6b:67:31:30:66:f8:c3:32:41:fb:6d:
         22:cc:97:ab:c2:06:2d:7e:5e:92:a4:36:ca:5c:50:40:dc:ce:
         fc:bf:3c:88:53:2a:86:da:1d:29:bb:02:cf:fa:ac:fb:91:99:
         4f:9c:96:45:05:c5:8f:53:8a:47:ac:7c:38:4e:54:89:53:09:
         98:1c:29:fd:1a:ea:a6:de:0d:84:0a:16:6d:90:e5:42:14:33:
         96:fa:24:83:5c:e8:4c:58:f4:1a:3e:e7:5d:f0:37:64:89:d7:
         f0:8f:8c:43:e4:82:11:a5:cd:3d:5e:97:6b:d6:5f:1c:1e:7c:
         a3:c4:f1:28:db:84:c8:52:4f:d4:84:7f:d6:1c:e4:80:f8:9f:
         65:a4:12:97:b2:f8:fe:a3:48:fc:86:17:69:d2:da:23:82:a8:
         b3:ea:4e:80:4b:90:d7:d3:3a:35:b7:da:16:29:c2:cb:37:74:
         ed:8f:e5:42:b7:50:bf:6f:6e:c2:95:96:5f:5f:91:0e:0f:27:
         e7:79:0b:dd:98:68:58:9b:80:c6:c1:64:d4:1d:7c:07:39:ed:
         00:c4:fd:f6:38:d5:64:ba:82:7f:fa:66:21:6a:df:d5:b2:70:
         70:58:c2:14:8a:fe:59:bb:8b:b4:76:df:28:22:f7:44:52:50:
         a5:53:4d:1a
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUfynXAZp08G9mM1qhUkY7URUhISQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQxM0YyQkRFMDhEM0MyOEI3MzQ3MzFBNkU4MEY3QUI0
Q0Q2NkU0RDAeFw0yNjA4MjYxNTQ1MDBaFw0yNjA4MjcxNTUwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTA5RUUxRkE5MjI4MDMxMTdF
MDUzMkExNzZCRkUyNDUwMkI4QTk3MjIzQjJGMzUxMjgwRDEyRTJENUQ3ODlDQ0NB
N0EwNzY0REU1MDlDODkyNTU3ODE4QTRDRTc4RTA2Q0FCODQyQjRCMzNERUVEMDg1
OTc2RjVGMDVCNTU3NTFCQTg5NTU1OUEwNThFOTkxQTVCMDE2QkNFN0NFRTZDQUMz
NzI0ODRBNDQyRjE3ODYwOTJGQ0NDNTdGMEFBNEY0Q0RFMUY5NEQxRTEwMDI3NTM3
QkRDNTY0MDlDQUNBODlDNTdBNUVFQTVFOTcwODlEQTREMDM0QjczMjEwNEFGMTZG
RDUyNkVCODgyN0ZCMDg1MjZDMUY2NEE4NzE4OEZBRUQ5M0I4QkE5Mzg2MTI2RDAx
RkFDOEYwMzMzNkJCN0MxOUNGM0I3QjVCRDM3OUZCREY3NzcxNTM4OTc5REYyMzhG
N0IzN0IzNjgwMjJFNDFDNzQ3NzE5N0MzNUU4RDlERERBOTdFMjQwOTREQkNGNjFG
ODBBNTc3MEJDODY2MURDNUQ4OEIyMzdBQUVFOUE0QkEyNTQxOEU2NUQyMUQ0MEI2
NDNCMjdCQTcyNDFBMkYyQzRFMDVBOUM3RDlFNzM5QUE0Q0IwRDUwNjAwNTYzOTgy
ODE4QTZBQzI1QTNCREIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAoJ7h+pIoAxF+BTKhdr/iRQK4qXIjsvNRKA0S4tXXiczKegdk3lCc
iSVXgYpM544GyrhCtLM97tCFl29fBbVXUbqJVVmgWOmRpbAWvOfO5srDckhKRC8X
hgkvzMV/CqT0zeH5TR4QAnU3vcVkCcrKicV6XupelwidpNA0tzIQSvFv1SbriCf7
CFJsH2SocYj67ZO4upOGEm0B+sjwMza7fBnPO3tb03n733dxU4l53yOPezezaAIu
QcdHcZfDXo2d3al+JAlNvPYfgKV3C8hmHcXYiyN6rumkuiVBjmXSHUC2Q7J7pyQa
LyxOBanH2ec5qkyw1QYAVjmCgYpqwlo72wIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FDDWf+Ze3BDHcdigskQlNOcdeedsMB8GA1UdIwQYMBaAFEQT8r3gjTwotzRzGm6A
96tM1m5NMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JneTl1cDlmcm12QVh2
ekZoVWV3akIyWnpoUXkydTVZTmJFeW9SVnF5eld3LzEvNDQxM0YyQkRFMDhEM0My
OEI3MzQ3MzFBNkU4MEY3QUI0Q0Q2NkU0RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80NDEzRjJCREUwOEQzQzI4QjczNDczMUE2RTgwRjdBQjRDRDY2
RTRELmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JneTl1cDlmcm12QVh2ekZoVWV3
akIyWnpoUXkydTVZTmJFeW9SVnF5eld3LzEvNDQxM0YyQkRFMDhEM0MyOEI3MzQ3
MzFBNkU4MEY3QUI0Q0Q2NkU0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACQY9SwdLCBrZzEwZvjDMkH7
bSLMl6vCBi1+XpKkNspcUEDczvy/PIhTKobaHSm7As/6rPuRmU+clkUFxY9Tikes
fDhOVIlTCZgcKf0a6qbeDYQKFm2Q5UIUM5b6JINc6ExY9Bo+513wN2SJ1/CPjEPk
ghGlzT1el2vWXxwefKPE8SjbhMhST9SEf9Yc5ID4n2WkEpey+P6jSPyGF2nS2iOC
qLPqToBLkNfTOjW32hYpwss3dO2P5UK3UL9vbsKVll9fkQ4PJ+d5C92YaFibgMbB
ZNQdfAc57QDE/fY41WS6gn/6ZiFq39WycHBYwhSK/lm7i7R23ygi90RSUKVTTRo=
-----END CERTIFICATE-----
Generated at Wed Aug 26 20:32:03 2026 by rpki-client