Error: rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.mft
File:                     A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.mft (raw, json)
Hash identifier:          oD7JDc35IZzXRExwlFRV6GePXaBU0NQox+iuz3Ogplc=
Subject key identifier:   EB:F8:E7:AB:95:C7:10:A2:45:C5:31:8D:AC:D3:98:3A:F9:E2:AC:1C
Authority key identifier: A9:4C:26:1E:7F:54:FD:8F:91:32:D7:CC:65:87:6A:9F:CC:B2:2B:44
Certificate issuer:       /CN=A94C261E7F54FD8F9132D7CC65876A9FCCB22B44
Certificate serial:       08D66C86CE5D777349FF0D84DC735DBA6C29E68B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.mft
Manifest number:          048C
Signing time:             Sun 23 Aug 2026 08:47:14 +0000
Manifest this update:     Sun 23 Aug 2026 08:42:14 +0000
Manifest next update:     Mon 24 Aug 2026 09:03:14 +0000
Files and hashes:         1: 3137372e33392e3134342e302f32312d3234203d3e20323632343237.roa (hash: 2aYEhjjjmZEpcJQjkFDs9GcZJY0yyLe7/GNg0PrLRDQ=)
                          2: 3133382e39392e34382e302f32322d3234203d3e20323632343237.roa (hash: lFE5gdFlotbVZ/ader8fS7ddZ7F1vMd+RLz58X0z1zg=)
                          3: 3136382e3232382e3137322e302f32322d3234203d3e20323632343237.roa (hash: I1KofV/gDgGNo6pqVH7aM2ZIjTFamFD7T1deaLjwcws=)
                          4: 3137372e37312e32342e302f32312d3234203d3e20323632343237.roa (hash: jbQZTyNvhqR8K3X4/cHqzIURAP5S+P93gV9yB1e5Omk=)
                          5: 3137372e33392e3135322e302f32322d3234203d3e20323632343237.roa (hash: x2zABcvcgdsVRe7JLqx9xXPX3lv1ybeM3CgjuslMByM=)
                          6: 323830343a3434383a3a2f33322d3438203d3e20323632343237.roa (hash: aOiF6PYqdNGGMv7EZzFq7ndGVUK3Klb748WNp26Y48g=)
                          7: 3134332e3230322e32382e302f32322d3234203d3e20323632343237.roa (hash: 8JVkQQUnSjWez23MtgHlPB3yB7Lkv9Z9fsIpMnO6NOc=)
                          8: A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.crl (hash: yp2anhCj4XqGVVXa6T6YuJkvcbBvlQ2EmPYTC2dEPdM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.crl
                          rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 09:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d6:6c:86:ce:5d:77:73:49:ff:0d:84:dc:73:5d:ba:6c:29:e6:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A94C261E7F54FD8F9132D7CC65876A9FCCB22B44
        Validity
            Not Before: Aug 23 08:42:14 2026 GMT
            Not After : Aug 24 09:03:14 2026 GMT
        Subject: CN=EBF8E7AB95C710A245C5318DACD3983AF9E2AC1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ed:6c:00:26:68:00:e5:8b:da:ae:72:62:03:
                    7e:f9:d9:ed:b7:58:98:03:c4:51:2d:d0:42:4a:e8:
                    85:05:46:b7:14:6a:ce:87:ef:3e:94:8a:59:f8:8c:
                    cf:28:20:56:47:27:29:29:eb:60:99:63:10:2a:ad:
                    7a:fb:45:54:64:a6:8b:d1:e8:4a:7a:7e:b2:02:1c:
                    20:74:1f:49:b0:4f:77:e0:0d:59:ce:00:59:31:3e:
                    b9:30:ea:15:3b:3e:2d:9e:a2:7b:af:81:f2:ab:43:
                    84:d2:6e:a6:b3:5d:a1:c2:69:9f:51:37:77:a8:0c:
                    0b:ab:53:f5:a4:89:91:61:a7:9c:66:76:cb:07:f1:
                    3b:7d:2c:94:5f:f4:cc:a3:63:e6:3e:b1:27:59:0a:
                    ec:27:3d:e6:e1:14:21:a2:7e:c9:76:6c:33:76:45:
                    1e:fa:80:f8:9f:4e:39:cf:68:fb:69:77:87:39:e8:
                    f6:fe:96:90:90:c7:27:26:3e:5e:54:e0:f9:91:3a:
                    5b:60:28:0b:7c:47:93:4e:19:b1:9d:8b:92:28:b5:
                    85:f3:b7:db:e6:41:6d:3d:06:14:05:73:53:d6:46:
                    62:7f:46:70:23:50:03:83:b5:dd:55:9f:27:ed:f4:
                    be:ea:c5:a1:43:39:d0:d4:2b:59:c0:fb:1f:b4:17:
                    96:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F8:E7:AB:95:C7:10:A2:45:C5:31:8D:AC:D3:98:3A:F9:E2:AC:1C
            X509v3 Authority Key Identifier:
                keyid:A9:4C:26:1E:7F:54:FD:8F:91:32:D7:CC:65:87:6A:9F:CC:B2:2B:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:0e:ff:03:ae:53:12:0c:f6:54:93:6e:57:9b:82:ff:16:f3:
         e6:76:70:a6:8d:9b:b8:4e:93:3c:7d:84:63:9f:7f:0f:61:a4:
         d6:e0:09:f0:7f:5c:82:a7:7c:a8:98:2a:fc:3d:d6:e6:be:46:
         94:61:43:d5:f3:d3:14:16:05:bd:50:06:0f:9a:df:2a:b5:75:
         aa:04:89:cd:ca:49:14:d6:8c:7c:aa:74:9d:43:ae:42:b1:7d:
         30:6b:97:6d:2b:ae:dd:8f:8a:e5:c0:f0:fe:71:2f:0d:2a:e9:
         0d:b7:04:3a:cf:fc:5e:3d:2f:52:50:97:1f:81:88:a6:08:b4:
         c7:89:66:3b:b7:80:e2:51:8e:e1:74:4b:f1:c0:6b:3f:5f:cc:
         b1:6e:74:77:41:9f:c6:77:14:8e:f8:50:19:79:17:b4:fd:d4:
         98:09:c3:10:03:c1:0a:08:5e:60:cc:74:4d:6a:92:51:5b:99:
         51:18:77:9e:cb:9d:2d:ad:6f:bc:a5:b3:98:32:5c:ef:5d:80:
         c3:db:3e:12:20:c3:6d:30:26:ac:df:9d:80:bd:df:5b:10:79:
         06:9e:03:6b:fa:e7:5b:c4:90:29:d7:e6:40:a8:a0:b5:ee:43:
         73:9d:64:aa:92:65:ca:c8:62:f1:f7:df:29:a2:10:57:77:71:
         53:a5:db:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 15:08:54 2026 by rpki-client