Error: rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.mft
File:                     A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.mft (raw, json)
Hash identifier:          DnivaIFewWz8+9TkjxeRICZxhwmyIx6Rwrpo8XOIOXY=
Subject key identifier:   54:7E:97:B9:40:0C:39:CD:A3:CD:09:AD:3C:9C:55:51:19:C1:7F:52
Authority key identifier: A1:65:31:9A:A3:6D:4F:FD:2A:5D:9A:2B:E4:2F:5C:2E:F0:E2:0B:8E
Certificate issuer:       /CN=A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E
Certificate serial:       1F97F8043F86273131839970FE23219331CF6210
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.mft
Manifest number:          051F
Signing time:             Sat 22 Aug 2026 12:20:00 +0000
Manifest this update:     Sat 22 Aug 2026 12:15:00 +0000
Manifest next update:     Sun 23 Aug 2026 12:20:00 +0000
Files and hashes:         1: 323830343a383038303a3a2f33322d3332203d3e20323731373534.roa (hash: 1CYM+lfNzbhk3t6ojtq94Hwaabr/GjokAPRrekXBgPc=)
                          2: A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.crl (hash: DLbm6C/X2nJmbTvlaDjZQIuotbfzgwG12yo0JJZFTzg=)
                          3: 323830343a383038303a3a2f33332d3333203d3e20323731373534.roa (hash: OF4qCfkjSVuHBeRtLzVYWOomJ5NZy654wIaKa/KSQFk=)
                          4: 323830343a383038303a383030303a3a2f33342d3334203d3e20323731373534.roa (hash: KQnQCytaRVogvL6zJhT8o2cClwMPi5VqD6ts4yzyj6g=)
                          5: 323830343a383038303a3a2f33342d3334203d3e20323731373534.roa (hash: GsTYgWWVqp4/Gg/7NBRtF3VNJ42vVwEWMp2AsvN42Fk=)
                          6: 323830343a383038303a383030303a3a2f33332d3333203d3e20323731373534.roa (hash: kGEtGWQtM11UcMXBptNnTw2aSqCoSvSndPOV/qiV0EA=)
                          7: 323830343a383038303a343030303a3a2f33342d3334203d3e20323731373534.roa (hash: 6vcZuyZ15SCjY3gZq0i6rCSbEUeyQoeAoobLxvAJq6Y=)
                          8: 323830343a383038303a633030303a3a2f33342d3334203d3e20323731373534.roa (hash: dOjBFiQ32+qPyJN9X7UuntXflMn6H0c06DF5jVRBZHg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.crl
                          rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 12:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:97:f8:04:3f:86:27:31:31:83:99:70:fe:23:21:93:31:cf:62:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E
        Validity
            Not Before: Aug 22 12:15:00 2026 GMT
            Not After : Aug 23 12:20:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a3:dd:f1:e8:38:6d:31:05:cb:c4:60:1b:de:
                    8a:34:f9:70:ec:b8:5d:c3:c9:de:79:15:06:cf:4b:
                    00:85:9a:27:01:20:ff:c8:1d:a4:de:32:87:ad:18:
                    95:fb:f3:cb:28:c1:f3:87:9a:9c:82:d7:da:0a:c8:
                    44:2d:ee:be:b8:a4:a1:99:07:53:b8:8c:a6:93:d7:
                    e9:ef:71:c4:7f:58:24:a2:c5:4e:d7:3b:a3:ca:81:
                    61:8f:f8:d7:0e:73:a1:22:c3:38:6a:bc:d7:d7:b3:
                    da:95:f2:1b:d2:12:95:99:a1:d7:3e:0b:99:78:72:
                    9f:84:74:9d:8e:14:b4:23:ae:d6:75:3d:f0:4f:87:
                    d1:f4:52:5f:0b:17:7d:ad:a5:10:a8:6d:1b:19:b1:
                    b1:89:d6:3f:61:0d:1a:f1:50:11:59:a7:5c:f9:ad:
                    32:43:58:c0:17:1a:78:d8:78:e1:97:eb:2c:73:e7:
                    ce:55:d6:2f:21:85:fa:ab:54:c5:3f:3d:d2:29:c6:
                    f4:c2:5d:87:02:81:99:d8:da:a0:9a:6c:05:35:0f:
                    8b:b5:0b:62:c5:66:45:08:a2:5e:88:0d:b1:0e:4c:
                    ab:0b:37:de:6c:03:0f:6f:f2:2d:54:37:4f:c7:22:
                    b2:9f:47:5a:a7:85:35:ff:27:36:cb:e9:2e:51:e0:
                    34:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7E:97:B9:40:0C:39:CD:A3:CD:09:AD:3C:9C:55:51:19:C1:7F:52
            X509v3 Authority Key Identifier:
                keyid:A1:65:31:9A:A3:6D:4F:FD:2A:5D:9A:2B:E4:2F:5C:2E:F0:E2:0B:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:6c:75:21:3f:5d:61:05:d2:8e:47:26:1c:8e:cd:de:99:1a:
         3a:a3:87:a9:a0:ae:36:e6:99:57:57:76:9f:58:40:a3:da:db:
         10:0f:9a:66:73:2b:72:1d:c3:29:92:c4:bf:bd:2b:6c:ed:b0:
         ac:58:8c:4f:92:50:33:f3:a9:04:2a:b3:01:40:1b:4f:a4:29:
         1c:2f:d8:4a:21:6b:5e:f5:0c:03:85:1e:dd:58:20:f1:76:72:
         b1:85:08:28:c8:81:e4:41:5d:b7:d1:42:35:b0:50:22:b5:00:
         78:af:a3:e0:08:86:e2:97:d0:f4:41:65:a7:8a:44:09:54:16:
         3a:86:1e:91:59:dc:c7:f6:97:6d:63:31:44:06:de:1c:63:de:
         86:79:84:47:61:96:7b:68:71:fa:d4:d6:0c:90:04:11:d6:0f:
         41:2c:96:87:71:34:81:63:74:37:a1:3d:de:9e:f7:62:7d:f6:
         60:26:95:99:e6:cf:e4:3e:ee:d6:36:bb:68:60:02:17:95:31:
         93:87:64:4d:2c:11:12:d1:78:47:77:38:05:9e:87:b4:73:8a:
         af:f5:ef:c3:91:ed:46:8e:07:9a:2d:23:da:aa:ee:9b:c0:0e:
         83:97:6f:f0:98:6c:61:d0:d5:4a:ee:23:dd:0e:e6:31:4d:d3:
         02:e3:90:4e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Aug 23 02:55:04 2026 by rpki-client