Error: rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.mft
File:                     B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.mft (raw, json)
Hash identifier:          aHsA9ILvAj6Qf8ZaCsh2+3amsUnykgKoHgjIn5A24e0=
Subject key identifier:   5E:6C:7B:83:A9:EB:92:87:97:FE:51:71:1F:50:F7:A8:ED:8F:1F:1E
Authority key identifier: B4:1D:6A:9C:5F:D8:1F:51:C4:F5:E7:3E:59:4F:0C:F0:C9:99:B8:43
Certificate issuer:       /CN=B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843
Certificate serial:       0F1E874E2784DFD8B218D804C02E3C991D60FDEF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.mft
Manifest number:          02F3
Signing time:             Tue 25 Aug 2026 16:52:10 +0000
Manifest this update:     Tue 25 Aug 2026 16:47:10 +0000
Manifest next update:     Wed 26 Aug 2026 19:33:10 +0000
Files and hashes:         1: 323830343a353239633a383030303a3a2f33342d3334203d3e20323638353239.roa (hash: xnXDzoH3/S68frwVKP+UPecXvFgXSM56k4h5r+dt1js=)
                          2: 34352e3136322e35302e302f32342d3234203d3e20323638353239.roa (hash: Kxys4tmihnVJ3lAH1ei6nnjQrKuXjovgEZJwbs2VaV0=)
                          3: 323830343a353239633a3a2f33342d3334203d3e20323638353239.roa (hash: p0NzeAxs+5iOL8D87BoFA759wIsDKp+MPKWi/WzaxE4=)
                          4: 323830343a353239633a3a2f33332d3333203d3e20323638353239.roa (hash: GodzEhK38moypx2tU2I8HENxdupkK5F5cBwZx7vPM0M=)
                          5: 34352e3136322e34382e302f32332d3233203d3e20323638353239.roa (hash: o5k5qPZrQD+R+rjHRByCCsh5If+NR7VenqgIK3M4aBw=)
                          6: 323830343a353239633a343030303a3a2f33342d3334203d3e20323638353239.roa (hash: OI7On3DAp4Vwy5bsf24vPkSugWa6IsVlSLYlzTmOYhA=)
                          7: 323830343a353239633a3a2f33322d3332203d3e20323638353239.roa (hash: yesGEizXRMmDgXlWJRTWWureb+6kZIocTEn+Nslrotw=)
                          8: 34352e3136322e34382e302f32342d3234203d3e20323638353239.roa (hash: bWAtAMTGoedY8hbmysukuNFzlfcEx28LkrMyr3XzYq0=)
                          9: 34352e3136322e35312e302f32342d3234203d3e20323638353239.roa (hash: jUYXbsZvnQ/1DQQxFb2AS/5McEXR4349BvfmLJcfjvg=)
                          10: 323830343a353239633a383030303a3a2f33332d3333203d3e20323638353239.roa (hash: iRUHJPcqqcsFSIaEWq9vr5fdxN+xA1I2Mi8S0sfFHlg=)
                          11: B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.crl (hash: nSwZ7yp0vH8yb6SCKDSlwSBVQbwwwB4ZeZzzj5LoAC4=)
                          12: 34352e3136322e34392e302f32342d3234203d3e20323638353239.roa (hash: 0dwLyXzdEN7NjIUYnBYEdG6E3t8kZG2oUycGgZ7HFvc=)
                          13: 34352e3136322e35302e302f32332d3233203d3e20323638353239.roa (hash: SPLbf2REHD2aPi7ThPXahU8dEMftG+Q0IgbGOxw/4Mw=)
                          14: 34352e3136322e34382e302f32322d3232203d3e20323638353239.roa (hash: dm8gvwbEjVCB6uiHvJDtp4FKVPSTe3xtOenrM7yoCqE=)
                          15: 323830343a353239633a633030303a3a2f33342d3334203d3e20323638353239.roa (hash: ojxetBMWRoOFzU3iX1Vz5o1kbTj96Iatk1KnhwIhlYw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.crl
                          rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 19:33:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:1e:87:4e:27:84:df:d8:b2:18:d8:04:c0:2e:3c:99:1d:60:fd:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843
        Validity
            Not Before: Aug 25 16:47:10 2026 GMT
            Not After : Aug 26 19:33:10 2026 GMT
        Subject: CN=5E6C7B83A9EB928797FE51711F50F7A8ED8F1F1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f5:62:ea:02:cd:09:dc:41:a6:72:50:08:93:
                    f0:25:b1:a9:e8:ae:d5:3d:54:59:e2:70:d3:66:91:
                    77:e2:d9:c8:70:80:c9:cb:82:d0:b2:f3:0d:d0:2d:
                    4d:9a:5f:59:5c:b7:3c:4d:5e:43:0b:b1:c1:60:17:
                    a8:09:22:a1:c3:91:6a:71:d3:45:f6:02:9e:59:da:
                    2e:13:ae:35:33:b3:d7:a1:80:3c:81:1f:6a:03:38:
                    55:db:ef:64:7a:b8:c2:cd:f7:82:50:d2:a7:f9:bd:
                    ce:26:6b:14:d0:11:f2:87:c1:66:2b:16:db:61:c1:
                    cc:eb:19:38:37:3f:09:e7:0f:64:d9:2c:9f:9d:2a:
                    85:20:80:a7:87:b8:b5:e9:7a:75:41:77:5b:f8:cb:
                    d4:9f:c5:d1:d5:78:30:3b:c4:af:bf:9d:94:56:86:
                    b1:07:3b:a7:84:93:45:c0:29:e1:54:ea:84:80:5c:
                    56:b7:82:57:ac:a5:2c:3d:d8:b2:40:a3:09:f0:8a:
                    e5:b4:af:14:06:86:70:c4:8b:13:17:99:44:5c:21:
                    5a:d3:70:97:14:b6:8a:52:01:f7:46:f4:f2:51:f5:
                    e3:6e:43:78:fa:b3:35:9c:e0:46:f2:a6:0d:6e:9f:
                    44:3a:4c:10:88:7e:28:1d:0e:f2:41:bc:bb:68:80:
                    53:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:6C:7B:83:A9:EB:92:87:97:FE:51:71:1F:50:F7:A8:ED:8F:1F:1E
            X509v3 Authority Key Identifier:
                keyid:B4:1D:6A:9C:5F:D8:1F:51:C4:F5:E7:3E:59:4F:0C:F0:C9:99:B8:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:53:96:e8:4a:fd:ea:5f:c8:1a:65:82:a9:d3:e8:58:81:46:
         ef:96:e7:9e:01:17:52:9e:28:9e:68:48:5a:7b:ed:ff:83:ed:
         ae:38:e4:ac:60:c0:65:6c:23:9a:b6:60:1f:bd:09:4f:36:4b:
         f5:36:72:75:e7:3a:ab:3b:ea:9b:dd:bc:a9:46:cd:7e:e1:e8:
         fe:af:88:25:cc:ee:48:eb:3a:28:d4:50:92:a6:39:d9:99:23:
         00:ae:a8:f6:62:b6:ca:65:bd:13:39:e9:12:18:f0:3e:c1:11:
         f6:5a:9d:bb:cd:47:02:6a:5e:76:66:d9:ef:0b:dc:78:f5:d5:
         5d:0d:d3:50:76:62:32:e7:38:bd:d9:94:dc:4c:ab:2b:f6:f3:
         8b:25:1e:e6:f8:13:15:a6:c6:17:68:58:15:aa:68:c5:f7:21:
         5c:c5:35:61:b0:03:e4:3d:78:94:fb:91:fd:ec:cd:08:dc:2a:
         1b:9d:1c:1a:2a:4d:af:73:43:fb:f3:04:70:b4:23:03:80:ee:
         65:e9:e9:9a:eb:0c:65:0f:a6:5c:c2:d2:11:05:6c:91:52:51:
         75:82:7e:fa:9f:6b:d8:58:e6:a2:9d:9d:c9:06:ed:65:4c:23:
         b1:b0:eb:13:bc:ec:a7:99:3d:12:0b:d0:d0:a7:63:36:a8:27:
         a7:83:6f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 08:10:26 2026 by rpki-client