Error: rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
File:                     4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft (raw, json)
Hash identifier:          3RC0oCCyKxMxzdjAc6JC9Wyb5k4swhyzEO5PSxyHh78=
Subject key identifier:   45:94:E9:C3:98:A3:C7:78:87:6C:3A:07:FE:8A:05:AE:86:64:D7:C8
Authority key identifier: 43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63
Certificate issuer:       /CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
Certificate serial:       6C65A54075BB10379997011B46944C43CC6C02D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
Manifest number:          048B
Signing time:             Wed 26 Aug 2026 11:30:00 +0000
Manifest this update:     Wed 26 Aug 2026 11:25:00 +0000
Manifest next update:     Thu 27 Aug 2026 13:21:00 +0000
Files and hashes:         1: 3137392e3130362e31362e302f32302d3234203d3e20323632353935.roa (hash: JhFgZ9iQt2Ligrxes5osFMqnyFJ6oIUaepakI85FJhs=)
                          2: 4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl (hash: I6G8jrDN378+3hL6tcvbNrb8ptIhvjK/6rd4HFduIL4=)
                          3: 3139312e372e382e302f32312d3234203d3e20323632353935.roa (hash: anK27G2c7vjgfJ1phEjaSMtYINLX8h12I1B+Gxsdj6Y=)
                          4: 3137372e38352e302e302f32312d3234203d3e20323632353935.roa (hash: 1FDPtnL/oiYQzGlPc4ijuZvBayQlDfq3fYmNZ7nmZrg=)
                          5: 34352e3136322e3138382e302f32322d3234203d3e20323632353935.roa (hash: W6lb5B+mO6JbiZRX0GW1Uhy+hiuO1g15/lQmnXPUJi8=)
                          6: 34352e3137392e3138302e302f32322d3234203d3e20323632353935.roa (hash: DSIAOHHDtH4HWsBWPwzaFHzBlDruo55nJLmhdype5tA=)
                          7: 3137302e37392e3232342e302f32322d3234203d3e20323632353935.roa (hash: qEL+yyrqlhbf2JPDTvvK2N9DKcJFgre2Wy5/bl9UF6I=)
                          8: 3137302e38332e34342e302f32322d3234203d3e20323632353935.roa (hash: ltlNjmBjNxv/9QTc+0CyILmDJKXwwjOJPrGqWq5UD6s=)
                          9: 3133382e302e36342e302f32322d3234203d3e20323632353935.roa (hash: OPoXHe00vBjl8830SVaAnqbieI93+ItDdZaljPUnuH0=)
                          10: 3133382e3132312e31362e302f32322d3234203d3e20323632353935.roa (hash: i6QY2N/xunlhLUolwp4NC0xURT380/7IasvrTmTUHKc=)
                          11: 323830343a3639303a3a2f33322d3430203d3e20323632353935.roa (hash: XNmpKrhIioidYT0WbDSH+38y4AsFqdpVex8l5oWEx4s=)
                          12: 3136372e3235302e32302e302f32322d3234203d3e20323632353935.roa (hash: eXgqeb2eJqJb6EmYLX0kled+InXYsUY9wftj5OfeO1k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl
                          rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 13:21:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:65:a5:40:75:bb:10:37:99:97:01:1b:46:94:4c:43:cc:6c:02:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
        Validity
            Not Before: Aug 26 11:25:00 2026 GMT
            Not After : Aug 27 13:21:00 2026 GMT
        Subject: CN=4594E9C398A3C778876C3A07FE8A05AE8664D7C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6f:0d:5e:bf:ce:f9:31:f3:05:98:2c:55:92:
                    04:15:87:bb:4e:ea:4a:fb:fb:0d:9a:40:3e:68:35:
                    91:61:9a:78:cc:d2:d6:9e:ff:ac:df:22:0d:4c:9b:
                    ed:31:bc:6e:8c:26:4a:71:0f:26:a9:ea:be:93:12:
                    ad:9a:ea:84:aa:3e:ab:88:21:64:bf:f4:43:c6:b8:
                    03:b6:2d:cf:d9:5d:88:17:95:f4:35:34:54:c8:a6:
                    6f:21:32:55:1f:d6:02:ef:64:f2:65:64:b6:9f:97:
                    1a:87:fc:72:5e:3d:23:f3:4f:bf:2e:c5:b4:64:99:
                    e5:03:a1:9f:cf:f8:ac:d2:80:bd:c9:1d:0b:86:3d:
                    9e:bb:e6:16:fb:ef:be:d2:24:6b:0d:73:14:e9:11:
                    33:8e:39:85:28:c1:2e:af:ee:e4:02:43:85:6b:f7:
                    0f:21:d2:86:16:de:93:a7:1e:84:57:a8:9d:86:f1:
                    32:7b:e8:12:dc:05:41:95:bd:04:3e:21:b4:6f:7d:
                    89:b2:d8:f1:4a:d1:e3:60:3a:d9:3f:e7:db:ee:36:
                    0a:62:17:09:68:1d:a2:67:d6:f8:2d:27:f8:d6:3e:
                    ea:6a:d4:c2:58:d7:e1:97:1d:68:3d:a6:52:8e:bb:
                    e1:dc:b0:92:e2:ee:7d:a3:7d:6f:40:49:ab:6e:be:
                    8a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:94:E9:C3:98:A3:C7:78:87:6C:3A:07:FE:8A:05:AE:86:64:D7:C8
            X509v3 Authority Key Identifier:
                keyid:43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:70:33:33:9c:c8:38:f0:c3:68:3c:e3:2e:47:ba:5c:c3:d0:
         ad:4a:b4:91:94:48:2b:f9:c6:cd:cd:e3:53:61:6f:75:c2:a0:
         a8:72:f6:40:b5:f0:5e:bc:28:7b:aa:5c:1c:62:52:72:37:94:
         80:ba:07:0b:dd:8d:5f:e7:24:33:06:90:b9:fe:d3:c6:6d:23:
         c2:aa:9d:a5:b9:16:ca:69:d0:a3:15:08:54:a8:e5:54:b1:13:
         6b:47:6d:61:5e:d8:ec:7b:d3:9f:e3:cb:ec:42:64:c8:16:c2:
         19:c4:04:d8:72:f6:71:6d:10:72:2f:4a:f9:d1:4d:48:a8:13:
         32:02:e1:a9:27:71:c3:86:11:85:9e:b4:52:a4:00:ef:68:60:
         9d:df:d5:b5:5a:ec:b1:d9:c1:28:15:83:a0:b8:34:08:fd:8b:
         85:fa:43:c6:98:ba:42:f6:8d:f1:46:f5:25:d7:83:70:f7:f0:
         af:04:88:75:3a:f1:84:07:7b:18:66:14:27:9c:f2:f3:7f:7e:
         55:58:2f:c0:a3:04:c2:ad:ef:18:fd:b5:fe:d3:b3:e7:89:a6:
         c7:ab:41:9e:80:01:23:2d:17:d9:29:ad:c2:e8:01:fb:d6:fa:
         3f:1a:6f:40:f7:1a:a6:ac:d1:b0:17:f5:40:6f:41:42:12:d4:
         2c:21:09:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 21:34:44 2026 by rpki-client