Error: rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/1/EE50DC3A66EC9A8B5A49EFAD3F0CFF4EB419E07D.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/1/EE50DC3A66EC9A8B5A49EFAD3F0CFF4EB419E07D.mft File: EE50DC3A66EC9A8B5A49EFAD3F0CFF4EB419E07D.mft (raw, json) Hash identifier: gLm/M6oRWrVRBxSNWYOPUpZpL3Y0D2T1fFfmNQJKfHE= Subject key identifier: 15:7A:C0:8E:67:2E:7C:AB:AD:3B:52:AC:26:54:E3:59:FE:3C:9C:73 Authority key identifier: EE:50:DC:3A:66:EC:9A:8B:5A:49:EF:AD:3F:0C:FF:4E:B4:19:E0:7D Certificate issuer: /CN=EE50DC3A66EC9A8B5A49EFAD3F0CFF4EB419E07D Certificate serial: 5B3187CAC3D496A72631BCCC7D0334432952AF9C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE50DC3A66EC9A8B5A49EFAD3F0CFF4EB419E07D.cer Subject info access: rsync://rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/1/EE50DC3A66EC9A8B5A49EFAD3F0CFF4EB419E07D.mft Manifest number: 0486 Signing time: Sun 23 Aug 2026 20:38:37 +0000 Manifest this update: Sun 23 Aug 2026 20:33:37 +0000 Manifest next update: Mon 24 Aug 2026 21:36:37 +0000 Files and hashes: 1: EE50DC3A66EC9A8B5A49EFAD3F0CFF4EB419E07D.crl (hash: NmSjHYXAYbSi1A015Uhbp7L+58vLTYANYirWzKn+Vp4=) 2: 323830343a346138383a3a2f33322d3438203d3e20323637323436.roa (hash: NQPIOo72rl7M5qYWBOBGnvKE3OUu/ucAMkJnnEzfh2s=) 3: 34352e3233302e3230382e302f32322d3234203d3e20323637323436.roa (hash: 32TC0IBPeKwM09lSRnWOs0MGB5+rMEPLVkr2G7IlExI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/1/EE50DC3A66EC9A8B5A49EFAD3F0CFF4EB419E07D.crl rsync://rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/1/EE50DC3A66EC9A8B5A49EFAD3F0CFF4EB419E07D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE50DC3A66EC9A8B5A49EFAD3F0CFF4EB419E07D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 24 Aug 2026 21:36:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:31:87:ca:c3:d4:96:a7:26:31:bc:cc:7d:03:34:43:29:52:af:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE50DC3A66EC9A8B5A49EFAD3F0CFF4EB419E07D Validity Not Before: Aug 23 20:33:37 2026 GMT Not After : Aug 24 21:36:37 2026 GMT Subject: CN=157AC08E672E7CABAD3B52AC2654E359FE3C9C73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:24:4b:d6:74:50:bd:a2:a0:0e:1d:f2:20:83: 8c:c5:fa:c2:88:86:ef:4b:40:b8:cb:23:17:d4:eb: 05:48:69:f1:c4:ab:e1:3b:36:fe:b3:7c:4d:8a:5e: 5f:f8:a6:16:a9:48:0f:2a:31:ef:47:54:7c:b0:70: ce:4c:bb:35:a1:11:8f:44:b4:45:af:5d:66:ad:29: 64:5c:24:64:5b:54:a8:74:59:5b:55:27:f8:3c:75: 4b:49:ad:d7:34:5c:f1:08:40:83:fc:d5:43:a4:46: e7:df:b2:70:b2:58:6a:92:e6:8e:87:ef:fe:5a:5e: e2:cf:55:21:2a:e5:4d:ae:5b:f8:93:06:db:67:44: 6b:f9:56:0d:29:96:7a:e6:15:f0:d0:ce:07:a4:5b: 95:dd:3c:8a:9d:82:0f:22:1e:a9:68:a1:d5:38:42: 83:4b:c1:3f:1c:40:aa:01:60:ef:e8:b8:31:e3:ab: 98:fe:2e:d2:32:e7:5e:b9:5d:38:5d:ae:ed:84:1f: ab:9c:23:61:82:7a:cf:54:e0:4b:76:08:a9:f9:9a: d3:db:a6:73:c5:97:c9:bf:79:b7:fb:a9:6a:51:d6: 87:1d:c4:87:77:98:21:b7:f1:35:64:a5:dc:10:a8: 4f:4c:e9:d6:49:7b:c1:42:c5:cc:76:5e:5d:85:26: 3e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:7A:C0:8E:67:2E:7C:AB:AD:3B:52:AC:26:54:E3:59:FE:3C:9C:73 X509v3 Authority Key Identifier: keyid:EE:50:DC:3A:66:EC:9A:8B:5A:49:EF:AD:3F:0C:FF:4E:B4:19:E0:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/1/EE50DC3A66EC9A8B5A49EFAD3F0CFF4EB419E07D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE50DC3A66EC9A8B5A49EFAD3F0CFF4EB419E07D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/1/EE50DC3A66EC9A8B5A49EFAD3F0CFF4EB419E07D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:50:ea:08:8c:a4:9c:fc:6f:e3:48:49:aa:9d:7e:ab:1a:9b: 8e:c3:17:10:2c:9f:be:f3:e1:6a:c5:0e:05:c7:a3:1e:72:38: 40:04:d6:0b:6c:4f:02:5a:e2:7a:50:74:3d:ca:2d:a8:88:ef: ad:45:20:d3:e4:19:86:13:ef:7d:e8:07:4a:d5:64:44:ea:51: d3:83:43:f6:9d:94:86:82:1a:90:7d:ef:86:17:ae:2c:54:b3: 00:a5:4a:00:1b:46:04:cc:d3:86:49:6d:44:58:6e:9d:0c:bd: ed:8c:83:95:22:5b:e9:c1:ac:64:0e:3e:c8:be:ac:5f:97:a7: e6:34:ec:0c:c2:8a:58:18:61:f1:8f:dd:7a:b5:76:6f:8f:78: 28:df:44:30:76:c8:28:99:49:f8:41:83:ea:cf:ce:27:01:ea: cc:6d:6c:fa:5a:d3:89:fb:6c:fd:19:c5:aa:21:81:5d:27:0c: 16:d1:4e:98:46:c2:17:0e:c0:34:ca:18:e1:19:6f:71:75:81: 2b:e3:ec:0f:b6:26:4f:73:a9:0f:da:7f:a5:4e:bb:95:79:4d: 72:d0:7f:26:00:f8:68:78:89:d6:40:81:82:93:7d:14:8d:e1: 07:b9:c4:5d:63:ce:03:11:50:f8:ce:e1:3b:91:8f:bb:48:bf: 13:26:1c:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWzGHysPUlqcmMbzMfQM0QylSr5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU1MERDM0E2NkVDOUE4QjVBNDlFRkFEM0YwQ0ZGNEVC NDE5RTA3RDAeFw0yNjA4MjMyMDMzMzdaFw0yNjA4MjQyMTM2MzdaMDMxMTAvBgNV BAMTKDE1N0FDMDhFNjcyRTdDQUJBRDNCNTJBQzI2NTRFMzU5RkUzQzlDNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwJEvWdFC9oqAOHfIgg4zF+sKI hu9LQLjLIxfU6wVIafHEq+E7Nv6zfE2KXl/4phapSA8qMe9HVHywcM5MuzWhEY9E tEWvXWatKWRcJGRbVKh0WVtVJ/g8dUtJrdc0XPEIQIP81UOkRuffsnCyWGqS5o6H 7/5aXuLPVSEq5U2uW/iTBttnRGv5Vg0plnrmFfDQzgekW5XdPIqdgg8iHqloodU4 QoNLwT8cQKoBYO/ouDHjq5j+LtIy5165XThdru2EH6ucI2GCes9U4Et2CKn5mtPb pnPFl8m/ebf7qWpR1ocdxId3mCG38TVkpdwQqE9M6dZJe8FCxcx2Xl2FJj49AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFXrAjmcufKutO1KsJlTjWf48nHMwHwYDVR0j BBgwFoAU7lDcOmbsmotaSe+tPwz/TrQZ4H0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSjNWdTZxcTd6RmFnVTIyeXNtdHVKQld4VEEzTkJNb2MxZThxd0NlWUVy b28vMS9FRTUwREMzQTY2RUM5QThCNUE0OUVGQUQzRjBDRkY0RUI0MTlFMDdELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VFNTBEQzNBNjZFQzlBOEI1 QTQ5RUZBRDNGMENGRjRFQjQxOUUwN0QuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SjNWdTZxcTd6RmFnVTIyeXNtdHVKQld4VEEzTkJNb2MxZThxd0NlWUVyb28vMS9F RTUwREMzQTY2RUM5QThCNUE0OUVGQUQzRjBDRkY0RUI0MTlFMDdELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApVDqCIyknPxv40hJqp1+qxqbjsMXECyfvvPhasUOBcejHnI4QATWC2xPAlri elB0PcotqIjvrUUg0+QZhhPvfegHStVkROpR04ND9p2UhoIakH3vhheuLFSzAKVK ABtGBMzThkltRFhunQy97YyDlSJb6cGsZA4+yL6sX5en5jTsDMKKWBhh8Y/derV2 b494KN9EMHbIKJlJ+EGD6s/OJwHqzG1s+lrTifts/RnFqiGBXScMFtFOmEbCFw7A NMoY4RlvcXWBK+PsD7YmT3OpD9p/pU67lXlNctB/JgD4aHiJ1kCBgpN9FI3hB7nE XWPOAxFQ+M7hO5GPu0i/EyYcJQ== -----END CERTIFICATE-----Generated at Sun Aug 23 23:00:30 2026 by rpki-client