Error: rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft
File:                     95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft (raw, json)
Hash identifier:          h8hgqHkCK38WR1giOj4d11rtFUsTgUmOAVZP/UkBWpU=
Subject key identifier:   47:B9:38:57:AF:CC:72:15:30:C5:D4:EF:12:3A:48:A6:0E:E6:83:86
Authority key identifier: 95:B2:CF:7C:56:35:CD:91:2B:BD:7A:8D:ED:18:4C:C3:98:CB:E3:07
Certificate issuer:       /CN=95B2CF7C5635CD912BBD7A8DED184CC398CBE307
Certificate serial:       64ACB5EA56CD5C0F16E1E18225362B24EC486EF2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft
Manifest number:          0482
Signing time:             Sun 23 Aug 2026 08:47:44 +0000
Manifest this update:     Sun 23 Aug 2026 08:42:44 +0000
Manifest next update:     Mon 24 Aug 2026 10:19:44 +0000
Files and hashes:         1: 95B2CF7C5635CD912BBD7A8DED184CC398CBE307.crl (hash: r+PrVSCUCFylstvjpr29UULeAgdJ6ANpRCCyzuGtYK0=)
                          2: 3134332e3133372e33362e302f32322d3232203d3e20323730393439.roa (hash: hORhhEUZHV6EWha9xU6cjOFONpcXr+/pqPHfPPZKfm4=)
                          3: 323830343a373366383a3a2f33322d3332203d3e20323730393439.roa (hash: JQ5SVQoYS1TJdeiD3c7cXwL9TNeI4YdTtRuu8ewxifc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.crl
                          rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 10:19:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:ac:b5:ea:56:cd:5c:0f:16:e1:e1:82:25:36:2b:24:ec:48:6e:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95B2CF7C5635CD912BBD7A8DED184CC398CBE307
        Validity
            Not Before: Aug 23 08:42:44 2026 GMT
            Not After : Aug 24 10:19:44 2026 GMT
        Subject: CN=47B93857AFCC721530C5D4EF123A48A60EE68386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c7:2e:eb:6a:3d:15:33:a8:5e:17:ff:30:e1:
                    8b:23:66:80:f9:e7:b3:ae:d9:f2:d1:a4:74:31:b8:
                    d3:04:95:2e:23:49:98:ca:34:58:e5:ea:52:19:c9:
                    a3:87:b7:ba:5b:4a:8b:f1:ea:26:59:99:db:2c:9a:
                    1e:14:bf:4b:c8:2d:70:92:fc:3c:90:50:1d:6e:40:
                    39:4c:e3:b5:45:75:61:9b:f5:5b:a5:3d:df:8b:4a:
                    67:c9:68:85:e3:9f:c3:06:8a:70:08:d3:6f:52:5f:
                    82:1f:16:9f:17:35:80:99:0f:9b:65:12:56:8a:91:
                    cc:dc:32:5d:46:13:e0:dc:2f:a3:32:d7:94:15:d3:
                    da:8c:b3:ac:b1:78:15:03:6f:64:59:91:9f:6d:ba:
                    1a:1a:b8:ac:a1:49:30:cd:68:69:54:5c:cf:63:ea:
                    fe:66:4a:79:dc:f7:78:47:83:c5:0e:6f:cb:60:01:
                    0d:95:b2:96:29:5c:20:d9:a6:1a:d5:ba:96:eb:6f:
                    7c:26:eb:3a:1d:fc:2c:6d:03:f4:1b:6a:73:22:b5:
                    d7:46:46:6b:3f:55:9d:b8:d4:b0:a4:87:40:78:04:
                    99:57:87:b5:e4:3c:0c:23:e5:47:9c:9a:25:d2:10:
                    fb:56:a2:6e:72:60:46:52:08:68:cc:73:10:da:8d:
                    00:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B9:38:57:AF:CC:72:15:30:C5:D4:EF:12:3A:48:A6:0E:E6:83:86
            X509v3 Authority Key Identifier:
                keyid:95:B2:CF:7C:56:35:CD:91:2B:BD:7A:8D:ED:18:4C:C3:98:CB:E3:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:b8:b1:9e:26:24:32:dc:2e:8f:51:80:a7:e1:72:73:6d:15:
         f7:04:90:71:c9:2b:40:01:3f:ad:36:d0:8f:ae:3a:a5:6b:71:
         2e:f9:3e:6b:84:f1:a9:44:9a:5f:fb:30:7b:25:22:42:ea:a3:
         f8:ed:71:64:f3:38:1b:59:dc:6f:fb:24:f8:b5:bb:0a:72:1b:
         47:31:97:b9:a7:55:81:47:55:19:b7:93:e4:38:61:27:99:49:
         30:c9:8e:20:ea:ea:de:94:4b:b9:7f:6a:72:ae:9f:f3:eb:e2:
         82:0c:11:da:7c:8a:be:b0:70:7a:64:60:d4:47:92:bc:57:76:
         c1:d5:c0:66:12:8b:4e:54:c4:6b:7f:fa:b9:e0:1a:f0:dc:32:
         45:a5:6f:71:a7:9b:bb:f9:69:86:e1:62:40:ae:0f:0b:b2:49:
         d1:1a:f6:c0:1f:17:b4:e4:ce:dd:36:ce:a2:a0:e2:ac:52:cb:
         73:18:55:8f:a2:b9:55:f7:d0:2a:83:ba:94:4d:83:51:10:c6:
         9a:c8:4f:2c:52:e9:3d:df:25:a4:ca:0a:a0:a6:2e:f2:3c:19:
         2a:b1:3a:76:2f:59:50:ea:4c:e6:8c:65:75:91:b7:0e:df:e9:
         ef:ca:5a:57:8d:7e:cf:39:c3:ff:a4:d7:d8:da:9f:50:69:1c:
         20:86:f4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 20:57:33 2026 by rpki-client