Error: rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.mft
File:                     B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.mft (raw, json)
Hash identifier:          uUy9lJWmqK/Ip8FrqTOccc8GPQ3k7CEsxIesooK6CJg=
Subject key identifier:   FF:FF:D6:34:72:F3:CB:CD:82:EF:A7:5B:8E:1E:48:C2:4A:C4:3D:67
Authority key identifier: B6:C5:FB:85:7E:69:A9:04:49:73:FA:30:62:AA:1D:6F:BF:5C:4A:81
Certificate issuer:       /CN=B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81
Certificate serial:       10D98C5B40D258443989D27CC92E9916025E30D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.mft
Manifest number:          048A
Signing time:             Wed 26 Aug 2026 04:29:17 +0000
Manifest this update:     Wed 26 Aug 2026 04:24:17 +0000
Manifest next update:     Thu 27 Aug 2026 04:29:17 +0000
Files and hashes:         1: 323830343a373463303a3a2f33332d3333203d3e20323731303031.roa (hash: bfze2OkHv0CirGa6o3aVa143n8LPQ5iJTjycvufqJeQ=)
                          2: 323830343a373463303a3a2f33322d3332203d3e20323731303031.roa (hash: qjWQFW+9i3bxMpb9nu0NnsmvW2vz0ZF77WeNaaHz8wg=)
                          3: 323830343a373463303a363a3a2f34382d3438203d3e20323731303031.roa (hash: RbhtQAfeCAhd749TcWBL328x0ExsujCj8pVwowkwKCQ=)
                          4: 323830343a373463303a383030303a3a2f33332d3333203d3e20323731303031.roa (hash: qYZkWgpVVLbm9MkhZNlJEtL1eu/zJOHCRqzNVEJEnoU=)
                          5: 3137372e3232332e3133322e302f32332d3233203d3e20323731303031.roa (hash: 5grWE5cRh/6cEmXqmMN3pi5gUfC2kvK3BaUW2/4nGzA=)
                          6: 3137372e3232332e3133342e302f32332d3233203d3e20323731303031.roa (hash: 3ntzYsi1IOZza3qeVwwdkv0WKZbyr128hpJBpmu3I78=)
                          7: 3137372e3232332e3133322e302f32322d3232203d3e20323731303031.roa (hash: gGyxm4/SpvEkMY753tiQw3JFdBITSh6wElzkaMRTdLs=)
                          8: B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.crl (hash: CjATtYkya6YgdSBObOimt/gsTCBeUhb+DE6z1ZyS3ww=)
                          9: 323830343a373463303a333a3a2f34382d3438203d3e20323731303031.roa (hash: oADN4xx/OmX5VJ6pQXgUfHrknndpiAE/iLY48zwQ6Js=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.crl
                          rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 04:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d9:8c:5b:40:d2:58:44:39:89:d2:7c:c9:2e:99:16:02:5e:30:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81
        Validity
            Not Before: Aug 26 04:24:17 2026 GMT
            Not After : Aug 27 04:29:17 2026 GMT
        Subject: CN=FFFFD63472F3CBCD82EFA75B8E1E48C24AC43D67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:19:76:db:c4:19:27:7f:4f:c3:e5:25:06:a2:
                    4a:41:0f:f1:81:eb:fb:7a:74:22:4f:e4:4c:90:21:
                    7d:06:18:ec:c7:76:bf:b0:1b:78:ed:4b:99:4b:9a:
                    db:bb:76:57:7a:ea:49:34:a7:4c:27:03:f3:b1:af:
                    c3:44:aa:8c:18:9c:13:61:e4:bd:01:91:65:e5:00:
                    9d:49:7d:2f:7f:02:50:a2:62:61:c9:1b:c4:6f:e1:
                    ee:c2:41:d0:2d:eb:9a:8a:99:3f:41:df:ce:97:08:
                    39:a3:3c:e8:a1:d8:ff:7a:a0:62:69:a4:38:ba:8b:
                    e7:f6:0a:68:d5:5e:e9:b7:17:a5:ba:e1:cf:6d:c2:
                    0c:27:f6:08:6b:b2:ff:67:7b:53:32:1b:6a:1b:d8:
                    6f:9c:bf:12:55:52:29:87:a2:59:f2:03:db:6f:d5:
                    a6:aa:8c:0f:0b:1c:ea:7f:5c:89:3e:4b:3c:4b:9f:
                    e5:f2:fd:bf:e7:07:12:f9:1f:b9:88:d3:7b:0a:36:
                    5f:6a:01:3c:3f:71:e6:6c:36:da:fe:bb:46:dd:99:
                    93:a7:f8:99:13:b8:dc:b6:79:f6:48:45:16:fd:48:
                    d1:4c:5c:8a:1c:7d:2e:ce:91:fa:06:8b:3a:4a:05:
                    ad:53:a1:af:9a:b4:94:1a:fd:be:b7:fb:c8:db:ca:
                    fc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FF:D6:34:72:F3:CB:CD:82:EF:A7:5B:8E:1E:48:C2:4A:C4:3D:67
            X509v3 Authority Key Identifier:
                keyid:B6:C5:FB:85:7E:69:A9:04:49:73:FA:30:62:AA:1D:6F:BF:5C:4A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:08:37:ac:2e:52:88:76:9f:cf:e2:c4:3b:90:16:ff:6b:9a:
         e0:e7:6a:d8:c2:62:07:1e:1a:59:fb:4f:82:65:a8:b6:05:8e:
         41:ff:d0:e6:b7:c6:bd:74:39:f3:38:10:16:44:06:d3:8b:58:
         fa:1f:be:68:4f:c1:2a:bb:bb:38:54:42:2a:c9:67:fe:f1:51:
         42:23:8c:12:bc:97:2d:68:03:85:bb:d1:8d:c4:21:73:56:5c:
         c5:01:b8:db:12:59:04:6a:be:c8:22:2e:1e:5f:f7:83:51:93:
         07:ba:5e:84:f9:56:ea:25:c5:60:e3:e6:d8:f9:37:24:96:e8:
         8b:a3:fb:da:44:d0:0f:0f:de:9b:cc:93:ec:a7:e1:bf:c3:49:
         f4:21:62:01:2b:60:96:ed:bf:9a:f2:54:e2:57:b2:0a:3b:8f:
         dd:b3:d9:d0:e3:cb:93:50:fa:eb:89:46:37:2c:78:88:e4:95:
         63:5c:62:7b:63:d2:04:8f:11:5d:db:4c:2a:b3:dc:a0:cd:1a:
         c0:05:a5:69:96:4f:2a:3b:77:b5:e4:97:7b:7e:8d:f1:ef:b4:
         d5:23:55:08:72:ba:49:b5:cb:b1:2c:d4:78:8b:d3:bd:08:cd:
         61:e4:4f:7f:d6:36:42:44:c5:ac:26:3c:2a:69:ef:bb:c2:61:
         90:4b:67:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUENmMW0DSWEQ5idJ8yS6ZFgJeMNkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZDNUZCODU3RTY5QTkwNDQ5NzNGQTMwNjJBQTFENkZC
RjVDNEE4MTAeFw0yNjA4MjYwNDI0MTdaFw0yNjA4MjcwNDI5MTdaMDMxMTAvBgNV
BAMTKEZGRkZENjM0NzJGM0NCQ0Q4MkVGQTc1QjhFMUU0OEMyNEFDNDNENjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+GXbbxBknf0/D5SUGokpBD/GB
6/t6dCJP5EyQIX0GGOzHdr+wG3jtS5lLmtu7dld66kk0p0wnA/Oxr8NEqowYnBNh
5L0BkWXlAJ1JfS9/AlCiYmHJG8Rv4e7CQdAt65qKmT9B386XCDmjPOih2P96oGJp
pDi6i+f2CmjVXum3F6W64c9twgwn9ghrsv9ne1MyG2ob2G+cvxJVUimHolnyA9tv
1aaqjA8LHOp/XIk+SzxLn+Xy/b/nBxL5H7mI03sKNl9qATw/ceZsNtr+u0bdmZOn
+JkTuNy2efZIRRb9SNFMXIocfS7OkfoGizpKBa1Toa+atJQa/b63+8jbyvzRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU///WNHLzy82C76dbjh5IwkrEPWcwHwYDVR0j
BBgwFoAUtsX7hX5pqQRJc/owYqodb79cSoEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1o1dWN2NzIxZDRmRGJxQXVFMVVtOFpuUWo4cGFwYUo1MUhTUnBIeGlX
RFUvMS9CNkM1RkI4NTdFNjlBOTA0NDk3M0ZBMzA2MkFBMUQ2RkJGNUM0QTgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I2QzVGQjg1N0U2OUE5MDQ0
OTczRkEzMDYyQUExRDZGQkY1QzRBODEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q1o1dWN2NzIxZDRmRGJxQXVFMVVtOFpuUWo4cGFwYUo1MUhTUnBIeGlXRFUvMS9C
NkM1RkI4NTdFNjlBOTA0NDk3M0ZBMzA2MkFBMUQ2RkJGNUM0QTgxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcAg3rC5SiHafz+LEO5AW/2ua4Odq2MJiBx4aWftPgmWotgWOQf/Q5rfGvXQ5
8zgQFkQG04tY+h++aE/BKru7OFRCKsln/vFRQiOMEryXLWgDhbvRjcQhc1ZcxQG4
2xJZBGq+yCIuHl/3g1GTB7pehPlW6iXFYOPm2Pk3JJboi6P72kTQDw/em8yT7Kfh
v8NJ9CFiAStglu2/mvJU4leyCjuP3bPZ0OPLk1D664lGNyx4iOSVY1xie2PSBI8R
XdtMKrPcoM0awAWlaZZPKjt3teSXe36N8e+01SNVCHK6SbXLsSzUeIvTvQjNYeRP
f9Y2QkTFrCY8Kmnvu8JhkEtn2w==
-----END CERTIFICATE-----
Generated at Wed Aug 26 18:28:26 2026 by rpki-client