Error: rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.mft
File:                     2431B5DDF8166029A0033562C55895BEC665B28A.mft (raw, json)
Hash identifier:          +QJ4FIIlsIiEy8sTf1oVvESmwAhzAoHYMMb8NNgpYRU=
Subject key identifier:   8B:4C:59:E4:F0:A3:49:D3:4B:E2:A4:B4:2F:D7:A6:55:91:9F:52:33
Authority key identifier: 24:31:B5:DD:F8:16:60:29:A0:03:35:62:C5:58:95:BE:C6:65:B2:8A
Certificate issuer:       /CN=2431B5DDF8166029A0033562C55895BEC665B28A
Certificate serial:       5678DCD0BCFD3C4EF03AF6F89D9BAADFEBBE200C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B5DDF8166029A0033562C55895BEC665B28A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.mft
Manifest number:          0347
Signing time:             Tue 25 Aug 2026 17:50:45 +0000
Manifest this update:     Tue 25 Aug 2026 17:45:45 +0000
Manifest next update:     Wed 26 Aug 2026 21:17:45 +0000
Files and hashes:         1: 323830343a3964633a3a2f33322d3332203d3e20323632393938.roa (hash: bzzRVplRzXW60NTyOCB+K8geet/OkJXFRMgfhWt3u08=)
                          2: 3138362e3232342e38342e302f32322d3234203d3e20323632393938.roa (hash: SvLLu85gr28adbYq509a3Xe4Z54Zq24wBIRSJsRFC8U=)
                          3: 3138362e3232342e38312e302f32342d3234203d3e20323632393938.roa (hash: AtJsU6kExK0YhMvioyJ67J1BP7ANY8ORRIXwiNjkVRQ=)
                          4: 3138362e3232342e38332e302f32342d3234203d3e20323632393938.roa (hash: USpldE9gIYG7YsXkqtSs6/SEmEo5Hx1LehjIAMfdhmg=)
                          5: 3138362e3232342e38302e302f32312d3231203d3e20323632393938.roa (hash: n7Ec9a8+etAwsoUdCh1mDInOKOfHdQlk0BAOv7KH2rU=)
                          6: 2431B5DDF8166029A0033562C55895BEC665B28A.crl (hash: Ht25Vrb1QRC5MLCRbsoXgUnrEN4Xbp9RauSMh/Dyjkg=)
                          7: 3138362e3232342e38302e302f32322d3232203d3e20323632393938.roa (hash: Zi6xctsmfPTTrjbSRn8HfoiqhlU6XeDa9bxIhpfeHSg=)
                          8: 3138362e3232342e38322e302f32342d3234203d3e20323632393938.roa (hash: 9YWnUfc891sxIBKKNMun8cRjgUc8C1ftJwqYm804I18=)
                          9: 3138362e3232342e38302e302f32342d3234203d3e20323632393938.roa (hash: A0MyqrWdAY5nyII9y1tl69bNz1SGLLthzTANjSVGuOU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.crl
                          rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B5DDF8166029A0033562C55895BEC665B28A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 21:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:78:dc:d0:bc:fd:3c:4e:f0:3a:f6:f8:9d:9b:aa:df:eb:be:20:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2431B5DDF8166029A0033562C55895BEC665B28A
        Validity
            Not Before: Aug 25 17:45:45 2026 GMT
            Not After : Aug 26 21:17:45 2026 GMT
        Subject: CN=8B4C59E4F0A349D34BE2A4B42FD7A655919F5233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ae:13:fb:8b:50:69:54:f7:63:b1:32:e9:ec:
                    b6:92:f0:9c:7a:81:a6:c1:68:fe:cf:40:53:80:96:
                    da:f5:d9:a1:94:54:82:00:b2:91:2b:af:a3:10:96:
                    75:54:6f:d6:27:8a:54:76:c3:4b:c4:29:32:ce:b0:
                    be:85:02:a0:d7:9c:28:60:a1:92:f9:85:a0:d2:0c:
                    a5:af:a0:62:a9:87:4e:66:b9:b0:a6:cd:44:8b:7c:
                    73:bf:96:65:1e:5f:1d:76:a1:23:6d:3e:72:ac:c4:
                    80:fd:20:4a:06:4d:3a:6c:9a:18:d3:d5:36:4d:33:
                    10:62:5f:af:b8:a0:fd:4a:e0:0d:fd:49:83:06:76:
                    15:b7:85:ae:ab:0b:c8:1b:29:80:25:0f:61:c1:54:
                    aa:f2:a2:93:2d:06:e3:fc:9b:c8:d5:3f:d5:9b:7a:
                    61:7e:49:f3:69:af:0f:22:80:20:08:d2:04:6f:17:
                    b2:72:54:8d:d9:4a:0d:74:cb:e3:15:61:62:93:6a:
                    14:99:b4:34:d4:c4:2a:dc:3e:73:12:ac:aa:9e:f8:
                    1b:02:3f:27:c4:45:1b:62:91:59:33:7a:17:b7:5b:
                    d7:9e:a6:d3:ce:6a:f5:6f:eb:d3:49:ac:4c:1c:90:
                    f3:c7:1e:68:14:26:3e:45:2a:87:50:13:01:a4:76:
                    15:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4C:59:E4:F0:A3:49:D3:4B:E2:A4:B4:2F:D7:A6:55:91:9F:52:33
            X509v3 Authority Key Identifier:
                keyid:24:31:B5:DD:F8:16:60:29:A0:03:35:62:C5:58:95:BE:C6:65:B2:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B5DDF8166029A0033562C55895BEC665B28A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ef:df:88:2b:c2:a2:ad:b3:89:ee:e6:4f:55:5d:90:c9:bd:
         72:45:5f:5d:30:c1:a8:d1:e2:75:cb:9d:45:d0:9a:58:89:9b:
         98:2b:1a:4d:16:6d:08:9d:92:a9:2d:66:f5:3c:93:cd:f2:81:
         70:ed:34:50:7e:9a:a2:14:e4:4e:18:52:ff:4e:d9:7f:75:cc:
         b6:f2:9d:c3:18:48:d1:50:b1:a6:58:bd:e6:18:73:bf:d3:41:
         3a:63:d1:f3:de:d6:01:5a:95:3e:6f:fb:f8:64:d5:fb:30:22:
         28:cd:a1:c7:07:41:43:40:84:4b:86:2b:f6:c4:2c:1c:96:80:
         f3:56:e5:18:84:f9:ae:ba:cb:0e:85:c7:c6:21:ea:6e:c0:05:
         27:4e:e1:6c:4f:c9:74:0c:d4:22:e4:4d:73:34:b2:50:dc:df:
         ab:10:7b:6e:37:9c:26:e4:d7:da:cf:39:cd:02:b0:79:74:1c:
         86:bd:be:b0:09:31:d2:58:b4:98:09:1f:58:bb:29:39:dd:8a:
         92:eb:39:8b:08:38:db:91:51:9b:50:11:94:d5:65:d1:48:a2:
         0e:cd:f9:25:0c:34:f2:31:bb:5e:9d:47:ce:e9:37:64:3a:dc:
         48:c0:c2:0a:8b:a2:bc:47:37:6b:2e:62:fa:c1:37:44:8d:88:
         10:55:a3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 08:10:50 2026 by rpki-client