Error: rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.mft
File:                     36ED969D92322E6C7F28A050D3ABC47947497160.mft (raw, json)
Hash identifier:          POZwTzomM6SK/bsXeqeNzs3xTgEwo50AtWnVeKGDZTc=
Subject key identifier:   0F:5E:8D:C2:8B:C7:46:37:86:B7:50:02:CB:7D:12:15:A8:D7:6E:8D
Authority key identifier: 36:ED:96:9D:92:32:2E:6C:7F:28:A0:50:D3:AB:C4:79:47:49:71:60
Certificate issuer:       /CN=36ED969D92322E6C7F28A050D3ABC47947497160
Certificate serial:       3E6C1A9697FB130613B8D05FB29637F77B9E6BF9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ED969D92322E6C7F28A050D3ABC47947497160.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.mft
Manifest number:          044A
Signing time:             Tue 25 Aug 2026 15:15:17 +0000
Manifest this update:     Tue 25 Aug 2026 15:10:17 +0000
Manifest next update:     Wed 26 Aug 2026 17:57:17 +0000
Files and hashes:         1: 36ED969D92322E6C7F28A050D3ABC47947497160.crl (hash: JzNsEF1ix6JFuPQjb8yF7aV4YX8AaEPXMZtZCTDiUO8=)
                          2: 3133382e3132322e3139362e302f32322d3234203d3e203631383133.roa (hash: n+HoyJG26++b3FJA1fVxT685DhRMUTDWbcID6VZG3yc=)
                          3: 323830343a313962343a3a2f33322d3438203d3e203631383133.roa (hash: 634Zk57vNJ6xS0Y4+2TCXWt9fxtitSuJc1Ql07m+6BM=)
                          4: 3230312e3135392e3135362e302f32322d3234203d3e203631383133.roa (hash: Pz5jvf5pyC7yvc8HVLt0O6AXU3kBiFIaZeqlerxaAYg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.crl
                          rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ED969D92322E6C7F28A050D3ABC47947497160.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 17:57:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:6c:1a:96:97:fb:13:06:13:b8:d0:5f:b2:96:37:f7:7b:9e:6b:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ED969D92322E6C7F28A050D3ABC47947497160
        Validity
            Not Before: Aug 25 15:10:17 2026 GMT
            Not After : Aug 26 17:57:17 2026 GMT
        Subject: CN=0F5E8DC28BC7463786B75002CB7D1215A8D76E8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f7:42:b0:b5:41:db:2d:42:a8:f0:4d:93:a9:
                    1e:86:37:ea:c1:4b:db:20:9c:75:e3:1d:12:97:1b:
                    47:20:e9:48:cd:87:0c:aa:56:9b:04:a7:7f:e4:ee:
                    8a:13:9e:7b:db:c8:59:d8:e9:43:19:f5:06:cb:6b:
                    1d:4c:fb:f4:60:1a:c5:d9:40:c8:ff:d0:f8:81:04:
                    60:11:e4:26:d8:9d:87:89:b6:f0:39:d6:0d:ce:c8:
                    df:7c:f7:56:3c:7b:0e:87:c0:13:58:f3:1e:87:b5:
                    0b:46:33:98:69:23:ea:a4:1d:8c:1d:a6:c8:85:4d:
                    9d:30:ca:81:b7:12:8e:2e:18:ad:72:09:29:24:d0:
                    5f:4a:05:10:ae:c2:4f:ff:9d:76:70:c3:83:76:c2:
                    20:10:9f:90:85:60:08:d1:0e:bd:f0:bc:2b:42:f9:
                    56:73:d3:33:16:4e:30:8b:69:54:c2:91:f0:ce:b2:
                    88:c7:b6:32:dd:48:e0:8d:4c:01:3f:e9:6b:b9:98:
                    b5:fc:e6:b5:3e:e6:db:b5:c2:1d:0c:0f:88:9d:fc:
                    58:5b:5a:c6:62:69:c6:d0:3d:77:30:d1:ef:f1:6e:
                    09:e0:62:a0:32:8d:42:d4:f5:b0:b9:a6:d4:8e:83:
                    a3:b5:21:f6:03:ad:4c:34:ef:0a:be:79:5f:69:ea:
                    91:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5E:8D:C2:8B:C7:46:37:86:B7:50:02:CB:7D:12:15:A8:D7:6E:8D
            X509v3 Authority Key Identifier:
                keyid:36:ED:96:9D:92:32:2E:6C:7F:28:A0:50:D3:AB:C4:79:47:49:71:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ED969D92322E6C7F28A050D3ABC47947497160.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:1c:c5:94:28:fa:b2:0e:af:e2:b1:b7:f9:61:55:ae:35:7e:
         05:82:03:05:28:5c:2b:66:16:58:7a:e4:77:13:97:3c:ca:24:
         e6:d5:80:23:49:45:76:1c:e0:b9:d2:17:db:b1:a3:a2:f9:7f:
         cc:ca:aa:31:85:e8:c4:d0:a3:08:1e:82:3a:a8:ff:60:a8:6c:
         80:9f:d6:e1:9a:df:c9:c9:95:30:30:12:b4:2f:92:b4:8b:c5:
         87:1e:95:d1:04:1a:d8:df:69:53:b3:34:c9:45:5a:04:06:ff:
         2d:3a:4d:f1:ab:6e:d7:16:bc:f9:d0:c7:c9:e4:4d:53:80:ed:
         40:ba:ef:0f:5a:3d:f7:29:ef:f5:b5:c3:b1:24:15:b7:16:58:
         39:2a:ad:e0:d3:f0:75:80:e1:4e:90:74:90:c7:95:ed:05:93:
         0c:53:22:3e:54:3d:a3:6b:78:ea:d5:ba:81:92:b6:2c:6b:80:
         33:91:53:c8:1f:53:64:01:9a:48:73:54:8e:39:98:70:bf:73:
         b6:1a:a6:6b:3e:21:2a:4b:dd:05:c6:aa:45:36:e1:79:b9:9e:
         a7:c9:87:bc:47:66:4e:ff:e5:81:12:d0:38:b9:25:c5:69:a2:
         6a:5f:14:6d:82:17:aa:b7:e9:69:72:fa:ab:af:f4:70:19:57:
         51:74:85:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 08:11:39 2026 by rpki-client