Error: rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/0/4023BE6ADD8783F9160B4934CD4E0C5DF5F8F3B2.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/0/4023BE6ADD8783F9160B4934CD4E0C5DF5F8F3B2.mft
File:                     4023BE6ADD8783F9160B4934CD4E0C5DF5F8F3B2.mft (raw, json)
Hash identifier:          kU6W+FefYgNSE5cKmUvpURWwC2kbuaAPZCuidTswflo=
Subject key identifier:   0F:D7:30:43:94:1D:90:4D:05:AC:DE:0D:59:82:C9:15:E0:49:90:0B
Authority key identifier: 40:23:BE:6A:DD:87:83:F9:16:0B:49:34:CD:4E:0C:5D:F5:F8:F3:B2
Certificate issuer:       /CN=4023BE6ADD8783F9160B4934CD4E0C5DF5F8F3B2
Certificate serial:       45D26056DDAF99D0AA1CFE3A2F2E47DEE68D2501
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4023BE6ADD8783F9160B4934CD4E0C5DF5F8F3B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/0/4023BE6ADD8783F9160B4934CD4E0C5DF5F8F3B2.mft
Manifest number:          6F
Signing time:             Sat 22 Aug 2026 18:10:00 +0000
Manifest this update:     Sat 22 Aug 2026 18:05:00 +0000
Manifest next update:     Sun 23 Aug 2026 18:10:00 +0000
Files and hashes:         1: 323830343a353065383a3a2f33322d3332203d3e20323638343138.roa (hash: v2oi+tcf5RW/Edu80XZ/Mv1ttE4cd6Yhd63F0Vgmr5g=)
                          2: 34352e3136302e3132302e302f32342d3234203d3e20323638343138.roa (hash: RFUOvkWpsAE7sOu0D+suThhgMtxbhih+YJl2qP8fZ70=)
                          3: 34352e3136302e3132322e302f32332d3233203d3e20323638343138.roa (hash: 8H0ydxqYHd/te6tmVSD6RTTlDkJqQT2q8f5Nvnm/4II=)
                          4: 34352e3136302e3132332e302f32342d3234203d3e20323638343138.roa (hash: EpVLTuxPe+1uglJWwZI/T1liOj3IW9tA01WPQU8+HRY=)
                          5: 34352e3136302e3132322e302f32342d3234203d3e20323638343138.roa (hash: 33S47rS2AaroYYvjN0fxHqd6mOo2IaORVPFH+Uyaw4A=)
                          6: 4023BE6ADD8783F9160B4934CD4E0C5DF5F8F3B2.crl (hash: 57Yu3JeAtdwgsaadg/zVLCPOcg5dbl0VYEaA1zqz+mg=)
                          7: 34352e3136302e3132302e302f32322d3232203d3e20323638343138.roa (hash: Rf03NEv2Ag7ZPvqpJClrzY5y9/J64M6yfKsgPSCnJ98=)
                          8: 34352e3136302e3132312e302f32342d3234203d3e20323638343138.roa (hash: gX6YsfVRYJNLrf9vg4tZr6/og38EFppfhLQQqBWj3Q4=)
                          9: 34352e3136302e3132302e302f32332d3233203d3e20323638343138.roa (hash: MH+oX6Z8VRf2X3mEzXTLh4w4t+AMyFb4I97ZpzbHA2E=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d2:60:56:dd:af:99:d0:aa:1c:fe:3a:2f:2e:47:de:e6:8d:25:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4023BE6ADD8783F9160B4934CD4E0C5DF5F8F3B2
        Validity
            Not Before: Aug 22 18:05:00 2026 GMT
            Not After : Aug 29 18:10:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d2:52:0f:9c:c6:cc:ea:47:cd:9d:a3:7d:f9:
                    dd:7c:15:3e:89:a8:68:c2:2f:40:f6:98:d4:2a:98:
                    8f:29:54:45:aa:54:93:7b:b5:c9:e8:6e:14:6d:9c:
                    2f:cd:6e:12:8a:c5:bc:3a:68:da:c2:db:a8:9f:7c:
                    a0:f5:d3:3c:36:b2:71:e1:1e:6e:90:60:0f:b6:d3:
                    f1:84:80:dd:79:00:2d:a7:41:61:c0:20:39:c6:6b:
                    55:95:e8:8a:40:9d:4f:b3:05:51:a4:c7:1d:17:82:
                    c7:56:8d:2b:58:0d:2f:01:71:03:45:a6:71:d4:c8:
                    5b:2f:48:62:19:50:3d:89:5e:c4:e0:8c:bf:13:0a:
                    0f:08:f1:89:33:5c:a2:53:dc:fa:37:be:20:af:67:
                    6d:18:6a:db:b3:57:e0:b0:63:08:66:16:5b:cc:90:
                    d2:e6:b1:14:bd:bb:fc:6d:a1:2e:d4:15:97:94:9a:
                    06:fa:07:5f:42:a2:d4:38:f2:6c:77:83:5f:5e:30:
                    eb:3a:9e:01:bd:25:ae:72:e0:26:6a:b1:43:b8:40:
                    de:77:98:20:7a:f3:9f:a2:71:b3:f3:d1:36:bd:d6:
                    6f:4c:12:f3:bf:7e:b8:a0:02:a3:fd:02:eb:82:31:
                    cd:8c:80:52:df:39:66:8b:88:d1:8a:c7:30:a0:7a:
                    df:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D7:30:43:94:1D:90:4D:05:AC:DE:0D:59:82:C9:15:E0:49:90:0B
            X509v3 Authority Key Identifier:
                keyid:40:23:BE:6A:DD:87:83:F9:16:0B:49:34:CD:4E:0C:5D:F5:F8:F3:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/0/4023BE6ADD8783F9160B4934CD4E0C5DF5F8F3B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4023BE6ADD8783F9160B4934CD4E0C5DF5F8F3B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/0/4023BE6ADD8783F9160B4934CD4E0C5DF5F8F3B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:83:f2:0a:ea:59:3e:e8:8e:70:9f:82:97:d5:62:58:7f:c3:
         7e:2f:ed:fb:eb:a5:2b:d6:63:ec:88:1c:16:b2:b4:6f:4f:88:
         4f:94:fd:c2:ac:84:e6:29:de:24:3f:ca:16:8d:84:69:91:49:
         95:e4:b9:b8:fb:ed:65:62:f4:59:85:1b:f9:e0:af:55:a8:73:
         18:7d:35:12:10:2a:45:da:95:10:4c:96:eb:6c:6d:2e:c8:ad:
         03:74:a6:d9:b0:91:4b:89:d8:42:68:ab:dc:77:b5:1a:7c:51:
         ff:d1:3f:83:fb:d8:38:40:90:3e:5f:4a:91:f6:2a:f9:7f:8e:
         02:b7:37:55:83:01:59:26:45:7c:9b:5b:00:9a:8f:bb:b4:c1:
         9f:06:ca:5b:d8:9c:0b:a6:f2:cd:35:d6:51:30:72:b8:69:f7:
         84:12:57:ad:7d:6f:80:01:94:b3:dd:e4:b2:cf:2a:59:d3:2f:
         77:12:95:4e:70:9d:21:7f:d6:85:3c:be:1b:b3:22:aa:a5:06:
         c4:e1:94:ab:20:a6:18:51:0b:01:cf:d0:98:c5:07:db:de:00:
         5b:d6:e8:cf:09:91:cf:07:26:f7:ea:76:af:ce:a0:13:92:b4:
         9f:d9:65:e8:84:74:bb:89:60:b3:e0:52:90:22:89:69:12:e6:
         f4:56:4e:8b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Aug 23 18:20:29 2026 by rpki-client