Error: rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.mft
File:                     413DEE2A242256C5C1A9566FD18C03ECF2F0F586.mft (raw, json)
Hash identifier:          T4lQcM35yAOWGuFUscTwGryf/WKvU8wpMgVjpVLnXfg=
Subject key identifier:   DF:81:B2:E5:B0:04:C0:74:50:30:AD:5A:32:FB:84:94:96:46:96:C9
Authority key identifier: 41:3D:EE:2A:24:22:56:C5:C1:A9:56:6F:D1:8C:03:EC:F2:F0:F5:86
Certificate issuer:       /CN=413DEE2A242256C5C1A9566FD18C03ECF2F0F586
Certificate serial:       1FFD6A2CB05D849C93F646E566EAFB201CD7A6EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.mft
Manifest number:          051E
Signing time:             Sat 22 Aug 2026 12:30:00 +0000
Manifest this update:     Sat 22 Aug 2026 12:25:00 +0000
Manifest next update:     Sun 23 Aug 2026 12:30:00 +0000
Files and hashes:         1: 323830343a363463633a3a2f33322d3334203d3e20323639343439.roa (hash: vbBJksUixaCou3Yg5ly8jM+BIbRBRciatDxLe+wdIUk=)
                          2: 34352e3138362e3137362e302f32322d3234203d3e20323639343439.roa (hash: N3eL2aeWVdktkofBaT6E9gkeG3ajWvnfGJnt+5rzKyQ=)
                          3: 413DEE2A242256C5C1A9566FD18C03ECF2F0F586.crl (hash: Of7VUWvv8selJI6NIRI55jPOYmjpoqfYAZ37qeLFc/4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.crl
                          rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 12:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:fd:6a:2c:b0:5d:84:9c:93:f6:46:e5:66:ea:fb:20:1c:d7:a6:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413DEE2A242256C5C1A9566FD18C03ECF2F0F586
        Validity
            Not Before: Aug 22 12:25:00 2026 GMT
            Not After : Aug 23 12:30:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f7:fd:05:86:56:36:57:35:9e:63:39:26:98:
                    18:50:8f:e4:63:b1:83:66:12:56:ea:57:a7:4a:81:
                    fe:ca:69:ec:f5:8e:8a:85:fc:d1:16:9b:16:11:85:
                    43:de:ac:6d:78:7a:c6:01:31:c6:b0:b9:ab:6d:2c:
                    16:65:b7:2c:04:6f:b1:e0:83:14:a2:f0:4a:c2:bf:
                    fa:0d:5c:61:85:bc:22:11:23:e4:8a:5a:b7:db:cd:
                    b9:65:4f:12:79:5f:39:9b:6e:c7:9e:0d:a8:b8:3b:
                    ae:ce:31:f9:23:de:cf:e3:e2:d5:ab:2f:6a:b6:64:
                    c9:0e:9e:8d:f5:6e:30:c7:7e:a7:39:e9:21:20:26:
                    bb:0d:dd:b2:23:8e:ad:7c:7f:a5:88:35:15:0d:c3:
                    d3:79:ec:4f:81:8f:84:5b:de:9f:35:b2:a4:f6:05:
                    93:4f:73:2b:fa:56:32:38:63:92:84:04:7c:89:95:
                    c2:1f:a4:57:66:4a:f3:01:e3:01:4a:6f:d0:f8:ae:
                    84:65:1d:2f:d8:cd:19:de:1e:ad:7e:9d:f0:34:8f:
                    7c:67:45:55:4e:e6:a7:40:0c:a5:9d:e8:c4:9f:a4:
                    24:27:b1:a5:b4:8a:cd:c5:b9:06:0b:12:e2:3a:c8:
                    35:59:80:5c:4b:83:cf:e5:a4:16:68:19:78:97:cb:
                    a9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:81:B2:E5:B0:04:C0:74:50:30:AD:5A:32:FB:84:94:96:46:96:C9
            X509v3 Authority Key Identifier:
                keyid:41:3D:EE:2A:24:22:56:C5:C1:A9:56:6F:D1:8C:03:EC:F2:F0:F5:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:a1:00:b8:fd:bf:1e:fe:82:22:1e:b0:f3:35:cd:18:b6:fd:
         d5:31:79:78:f3:dc:f8:93:81:fd:a7:c6:8f:ad:3d:66:7d:61:
         86:85:21:56:39:aa:36:81:e4:6a:2d:44:5a:d9:37:11:52:51:
         fd:40:66:30:ef:d9:24:68:c7:d2:ea:85:e0:25:c3:71:b0:a7:
         f2:3e:33:84:05:59:eb:fe:34:c0:2e:0f:9f:4c:37:04:1a:99:
         47:a9:7b:88:07:34:52:9c:7d:05:9a:94:bd:37:49:73:c4:68:
         bd:e9:f4:8c:69:b4:63:8e:39:bd:93:68:7e:fa:ea:81:40:ad:
         96:70:d3:81:13:56:59:51:ed:04:cb:e4:5f:17:c1:cb:f2:b1:
         f3:3f:26:f0:44:dd:46:e5:77:27:0a:71:00:74:f1:d0:2c:ce:
         dc:f8:e1:d4:fc:24:ce:3f:e8:2e:d0:55:ab:e5:98:79:e9:61:
         c6:5c:b4:88:0d:0a:9f:25:ee:47:fa:f6:68:6a:d3:10:15:fb:
         e5:96:08:1d:e9:30:01:99:e3:99:b8:55:de:7c:3d:90:b6:8d:
         c3:25:e6:82:c6:1d:d9:ec:51:14:19:3d:bb:3a:24:23:00:98:
         74:f2:41:5a:f9:79:4f:61:11:ef:35:28:18:cf:85:d6:fb:03:
         c6:70:f2:75
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Aug 23 03:10:08 2026 by rpki-client