Error: rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/42CB6339B5B163F6D6A5494AA81144D6D05048F9.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/42CB6339B5B163F6D6A5494AA81144D6D05048F9.mft
File:                     42CB6339B5B163F6D6A5494AA81144D6D05048F9.mft (raw, json)
Hash identifier:          038qHY1olSH/BR1DZuX6hm78NOOR79ea8bbKOk4cCeo=
Subject key identifier:   16:58:F7:29:76:E8:1E:7F:9B:68:6D:30:82:8A:7E:6A:82:3E:A6:9E
Authority key identifier: 42:CB:63:39:B5:B1:63:F6:D6:A5:49:4A:A8:11:44:D6:D0:50:48:F9
Certificate issuer:       /CN=42CB6339B5B163F6D6A5494AA81144D6D05048F9
Certificate serial:       20D232783F1C1FB16C621C8CCD7F0209AF44CFAB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CB6339B5B163F6D6A5494AA81144D6D05048F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/42CB6339B5B163F6D6A5494AA81144D6D05048F9.mft
Manifest number:          13
Signing time:             Sat 22 Aug 2026 19:42:52 +0000
Manifest this update:     Sat 22 Aug 2026 19:37:52 +0000
Manifest next update:     Sun 23 Aug 2026 21:53:52 +0000
Files and hashes:         1: 42CB6339B5B163F6D6A5494AA81144D6D05048F9.crl (hash: os2VlWh+ktAz0P44dv305cJJjmA8h/9Dxofqp4O/KOU=)
                          2: 34352e3137332e33322e302f32322d3332203d3e20323636343338.roa (hash: CJjrgnCCmcFCHIYqXiWS0uEONKp/FXLPf6yVQju0DbM=)
                          3: 3137302e38322e34382e302f32322d3332203d3e20323636343338.roa (hash: qt8f+pcb1F31TG0ZkhKuxjLPIOjfhzeNYXgCXl86Ugc=)
                          4: 323830343a333764343a3a2f33322d3438203d3e20323636343338.roa (hash: TRSsrflb3DPtHM2LWcwO11g+mZjnEw/TB+FqKaNMZHc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/42CB6339B5B163F6D6A5494AA81144D6D05048F9.crl
                          rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/42CB6339B5B163F6D6A5494AA81144D6D05048F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CB6339B5B163F6D6A5494AA81144D6D05048F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 21:53:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d2:32:78:3f:1c:1f:b1:6c:62:1c:8c:cd:7f:02:09:af:44:cf:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42CB6339B5B163F6D6A5494AA81144D6D05048F9
        Validity
            Not Before: Aug 22 19:37:52 2026 GMT
            Not After : Aug 23 21:53:52 2026 GMT
        Subject: CN=1658F72976E81E7F9B686D30828A7E6A823EA69E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2c:48:52:ce:4b:e3:32:81:b9:da:7b:94:0b:
                    3e:23:97:05:c4:1e:97:62:55:7a:59:f2:45:6a:e0:
                    c9:64:c4:14:14:18:14:80:fb:40:ba:36:d9:bc:a0:
                    a4:c0:9b:f6:8f:24:d9:8b:5a:48:56:9f:02:d6:b0:
                    5f:14:50:79:a4:51:19:5a:b2:e3:7c:74:eb:85:10:
                    e2:68:56:ac:2f:60:63:d8:2e:6a:8d:67:b8:56:b0:
                    1a:f1:fd:b9:8f:c6:3d:79:02:7b:d4:6d:b3:06:c0:
                    e9:99:8d:74:7a:9d:a5:61:3d:d5:98:02:49:a7:8f:
                    39:8b:5f:37:a0:5e:f1:e5:9e:c2:1b:bf:6f:2a:b8:
                    ab:e9:a1:3d:1b:91:53:33:38:7f:a7:ce:a6:72:e3:
                    90:ec:e1:02:dd:9e:7b:de:0f:d1:02:da:d3:d1:d1:
                    b6:ec:18:68:16:95:9f:69:9b:e1:24:ba:a1:48:2f:
                    00:a1:5a:92:49:ce:e3:76:a7:d9:5f:e8:2d:85:75:
                    f8:cb:75:36:f5:f5:54:3c:38:13:77:3b:f0:59:ac:
                    e2:31:ca:9a:9d:b4:7c:f6:6c:b4:71:e0:fa:82:1d:
                    f6:a2:0d:20:3d:1c:30:58:2e:d6:28:c8:64:a2:81:
                    85:26:a4:b7:d8:f1:7a:c2:16:79:6d:da:a0:74:72:
                    81:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:58:F7:29:76:E8:1E:7F:9B:68:6D:30:82:8A:7E:6A:82:3E:A6:9E
            X509v3 Authority Key Identifier:
                keyid:42:CB:63:39:B5:B1:63:F6:D6:A5:49:4A:A8:11:44:D6:D0:50:48:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/42CB6339B5B163F6D6A5494AA81144D6D05048F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CB6339B5B163F6D6A5494AA81144D6D05048F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/42CB6339B5B163F6D6A5494AA81144D6D05048F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:4d:b3:bd:29:16:21:c3:9f:96:d3:3f:73:9a:ce:05:e6:f0:
         c4:69:54:10:4c:fe:fe:bc:0f:8d:fe:4a:7a:c2:6f:cd:08:6a:
         59:28:f9:4c:1f:4e:34:49:04:ad:1a:ee:47:4f:0c:6c:e6:06:
         23:09:b4:b2:ea:14:94:5f:51:b5:95:54:0c:01:48:8d:c1:62:
         9c:a7:03:2f:89:70:15:8c:e5:6f:30:17:3a:0d:9b:a9:d7:6b:
         71:ad:67:21:70:65:5f:65:ca:7a:0c:53:d0:2c:45:f1:a9:cb:
         d0:03:6e:c9:c1:fd:3f:cb:3b:86:cb:04:4d:80:dd:d1:70:54:
         a8:3d:f5:ee:02:70:d7:06:7f:30:2c:ee:50:68:94:7b:fe:3a:
         72:65:40:1f:dc:5a:52:2b:4c:a6:4e:83:e1:4a:09:b0:e6:9d:
         2d:14:86:fb:73:16:a8:01:4e:40:93:27:78:13:0f:37:ab:df:
         cd:a6:00:f8:50:a6:97:10:b0:6e:bc:95:02:7e:79:e2:a8:c8:
         13:ef:9e:62:cb:7f:49:ab:91:60:1e:5c:27:f7:b5:9f:2f:84:
         0c:94:ed:f6:eb:b6:dd:90:9f:7d:de:a0:2c:6f:1c:97:c8:f7:
         aa:e7:c1:5d:fc:d5:e8:87:7f:15:46:81:06:18:dd:4c:0f:c8:
         76:2a:67:96
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUINIyeD8cH7FsYhyMzX8CCa9Ez6swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDJDQjYzMzlCNUIxNjNGNkQ2QTU0OTRBQTgxMTQ0RDZE
MDUwNDhGOTAeFw0yNjA4MjIxOTM3NTJaFw0yNjA4MjMyMTUzNTJaMDMxMTAvBgNV
BAMTKDE2NThGNzI5NzZFODFFN0Y5QjY4NkQzMDgyOEE3RTZBODIzRUE2OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7LEhSzkvjMoG52nuUCz4jlwXE
HpdiVXpZ8kVq4MlkxBQUGBSA+0C6Ntm8oKTAm/aPJNmLWkhWnwLWsF8UUHmkURla
suN8dOuFEOJoVqwvYGPYLmqNZ7hWsBrx/bmPxj15AnvUbbMGwOmZjXR6naVhPdWY
AkmnjzmLXzegXvHlnsIbv28quKvpoT0bkVMzOH+nzqZy45Ds4QLdnnveD9EC2tPR
0bbsGGgWlZ9pm+EkuqFILwChWpJJzuN2p9lf6C2FdfjLdTb19VQ8OBN3O/BZrOIx
ypqdtHz2bLRx4PqCHfaiDSA9HDBYLtYoyGSigYUmpLfY8XrCFnlt2qB0coHNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUFlj3KXboHn+baG0wgop+aoI+pp4wHwYDVR0j
BBgwFoAUQstjObWxY/bWpUlKqBFE1tBQSPkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmlFcDdONkphRmRkZEM1UGNaNktCOWtMVU05UHRaMVZEUjViZlRhWlF5
THYvMC80MkNCNjMzOUI1QjE2M0Y2RDZBNTQ5NEFBODExNDRENkQwNTA0OEY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyQ0I2MzM5QjVCMTYzRjZE
NkE1NDk0QUE4MTE0NEQ2RDA1MDQ4RjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RmlFcDdONkphRmRkZEM1UGNaNktCOWtMVU05UHRaMVZEUjViZlRhWlF5THYvMC80
MkNCNjMzOUI1QjE2M0Y2RDZBNTQ5NEFBODExNDRENkQwNTA0OEY5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAA02zvSkWIcOfltM/c5rOBebwxGlUEEz+/rwPjf5KesJvzQhqWSj5TB9ONEkE
rRruR08MbOYGIwm0suoUlF9RtZVUDAFIjcFinKcDL4lwFYzlbzAXOg2bqddrca1n
IXBlX2XKegxT0CxF8anL0ANuycH9P8s7hssETYDd0XBUqD317gJw1wZ/MCzuUGiU
e/46cmVAH9xaUitMpk6D4UoJsOadLRSG+3MWqAFOQJMneBMPN6vfzaYA+FCmlxCw
bryVAn554qjIE++eYst/SauRYB5cJ/e1ny+EDJTt9uu23ZCffd6gLG8cl8j3qufB
XfzV6Id/FUaBBhjdTA/Idipnlg==
-----END CERTIFICATE-----
Generated at Sun Aug 23 03:16:30 2026 by rpki-client