Error: rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.mft
File:                     46435C07BDEF9EF66EA3F9AC516B398FE487AF17.mft (raw, json)
Hash identifier:          cbVkot8v0kpK4ropcl5h/6BRAfC5h/z7X5CoVpKQVjk=
Subject key identifier:   8A:3E:A3:E6:55:19:64:80:D3:18:2E:5E:11:99:83:94:04:A1:39:20
Authority key identifier: 46:43:5C:07:BD:EF:9E:F6:6E:A3:F9:AC:51:6B:39:8F:E4:87:AF:17
Certificate issuer:       /CN=46435C07BDEF9EF66EA3F9AC516B398FE487AF17
Certificate serial:       62F09E6430C6B9A71CDCCC23F4ACCA90FD166958
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.mft
Manifest number:          04C2
Signing time:             Mon 19 Oct 2026 14:29:42 +0000
Manifest this update:     Mon 19 Oct 2026 14:24:42 +0000
Manifest next update:     Tue 20 Oct 2026 16:30:42 +0000
Files and hashes:         1: 46435C07BDEF9EF66EA3F9AC516B398FE487AF17.crl (hash: 9YProD///R3e1MXnGvCWGb0Jv7CziXeNOt+tI9219zQ=)
                          2: 3137372e3132382e36342e302f32312d3234203d3e203532383639.roa (hash: a+s2eCS1Qi9XdN+0NGZcybpvGXeVSYAA51idoewPqEg=)
                          3: 323830343a313733343a3a2f33322d3438203d3e203532383639.roa (hash: B1qj5H95iAFViQXKUAZBh1CF0OK++m7Hb8x8x8RW7oM=)
                          4: 3137372e39332e3138342e302f32322d3234203d3e203532383639.roa (hash: eE7Q0OD7F5xMUEU7LWhkf8npt2OMJAjI8Sl0qnqPWEw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.crl
                          rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 16:30:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:f0:9e:64:30:c6:b9:a7:1c:dc:cc:23:f4:ac:ca:90:fd:16:69:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46435C07BDEF9EF66EA3F9AC516B398FE487AF17
        Validity
            Not Before: Oct 19 14:24:42 2026 GMT
            Not After : Oct 20 16:30:42 2026 GMT
        Subject: CN=8A3EA3E655196480D3182E5E1199839404A13920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7c:f0:7c:7b:c0:51:ce:cb:6b:74:ea:ca:0d:
                    49:c0:4e:1f:5b:e6:a2:9f:b5:d6:6d:e1:cf:a6:84:
                    1d:53:f8:cd:68:0d:3f:db:db:8c:9d:6f:0e:2f:d0:
                    26:67:80:5a:b6:c4:8b:47:39:b1:4d:3a:8c:d8:a1:
                    08:9d:23:ab:3d:d2:c5:92:74:4b:77:07:26:f6:ee:
                    a6:61:ba:b6:04:cc:14:d3:b4:b7:7e:d4:e3:ea:35:
                    ec:58:68:09:3c:8b:0c:37:34:fe:59:fd:8c:bb:83:
                    35:da:72:72:6a:77:ec:69:e7:fe:04:38:f5:d2:f9:
                    34:e4:fb:53:7a:3b:e0:2e:b4:7b:ef:bc:ea:b1:36:
                    b1:de:e8:ba:3a:8b:91:e1:fd:1b:9c:6d:07:1d:25:
                    6d:eb:e1:f9:16:1f:d4:ad:2d:e5:a8:55:2f:6e:51:
                    35:93:b0:25:2a:03:22:80:4f:5b:ad:1b:d9:82:9d:
                    fd:9c:9a:1d:5e:6e:97:dc:c7:ac:55:d6:01:83:11:
                    ab:ec:13:67:c3:cc:51:fa:aa:01:f4:9c:cf:35:25:
                    6f:ef:43:77:9a:de:48:81:66:f1:71:2b:d8:17:b1:
                    a2:03:39:40:30:eb:c5:31:64:8e:a8:dc:73:1a:55:
                    b1:97:96:c4:6a:18:5f:1e:03:ba:ae:74:15:61:02:
                    eb:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3E:A3:E6:55:19:64:80:D3:18:2E:5E:11:99:83:94:04:A1:39:20
            X509v3 Authority Key Identifier:
                keyid:46:43:5C:07:BD:EF:9E:F6:6E:A3:F9:AC:51:6B:39:8F:E4:87:AF:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:7d:51:52:ad:f0:90:37:9d:9b:6d:5c:3c:27:0f:90:c4:1a:
         ca:66:f7:a5:47:cb:11:48:25:15:16:99:88:fc:51:0b:77:dd:
         a7:d1:18:56:bb:9f:e0:9c:72:fd:29:37:be:55:05:61:23:ce:
         e3:2f:29:0e:86:72:63:76:96:05:85:c8:4d:8b:29:d7:37:5a:
         d2:f3:19:d5:f0:c0:9a:38:d2:c4:3d:ad:4e:5a:4d:bd:00:12:
         a1:b5:84:c6:47:9e:9b:35:b9:80:4a:c9:eb:11:b5:d6:dc:6b:
         a4:64:bf:3e:2e:05:1e:a4:62:23:02:59:1b:41:8b:c3:37:f2:
         7d:ca:f9:83:69:1d:0c:8c:b2:39:98:db:8f:fe:d9:dd:fe:09:
         b2:57:d2:b1:b7:1b:05:c5:65:82:d4:0d:67:3b:ea:c2:89:b1:
         fc:c0:1c:57:c4:e0:23:b2:83:24:9d:56:34:4d:22:fa:0f:aa:
         7b:bc:8e:0d:d5:93:5f:e3:b1:8a:8e:ec:ad:51:13:db:cd:14:
         8d:a0:c2:f2:73:96:a6:db:26:49:03:6a:38:da:ce:f0:6d:86:
         8c:f1:7a:4b:96:c0:e7:d7:e5:b2:be:dc:e3:fe:e4:39:65:78:
         fc:e9:1f:a1:6e:ab:f3:6d:dd:3c:16:a7:40:f8:a8:f1:aa:db:
         cc:2e:3f:83
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYvCeZDDGuacc3Mwj9KzKkP0WaVgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDY0MzVDMDdCREVGOUVGNjZFQTNGOUFDNTE2QjM5OEZF
NDg3QUYxNzAeFw0yNjEwMTkxNDI0NDJaFw0yNjEwMjAxNjMwNDJaMDMxMTAvBgNV
BAMTKDhBM0VBM0U2NTUxOTY0ODBEMzE4MkU1RTExOTk4Mzk0MDRBMTM5MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClfPB8e8BRzstrdOrKDUnATh9b
5qKftdZt4c+mhB1T+M1oDT/b24ydbw4v0CZngFq2xItHObFNOozYoQidI6s90sWS
dEt3Byb27qZhurYEzBTTtLd+1OPqNexYaAk8iww3NP5Z/Yy7gzXacnJqd+xp5/4E
OPXS+TTk+1N6O+AutHvvvOqxNrHe6Lo6i5Hh/RucbQcdJW3r4fkWH9StLeWoVS9u
UTWTsCUqAyKAT1utG9mCnf2cmh1ebpfcx6xV1gGDEavsE2fDzFH6qgH0nM81JW/v
Q3ea3kiBZvFxK9gXsaIDOUAw68UxZI6o3HMaVbGXlsRqGF8eA7qudBVhAuvZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUij6j5lUZZIDTGC5eEZmDlAShOSAwHwYDVR0j
BBgwFoAURkNcB73vnvZuo/msUWs5j+SHrxcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjg0WlhwcldGNlF6N1M1QmJqM1pHcG5iRlJIclFVbTlLWDRVckhDNWNT
UGsvMS80NjQzNUMwN0JERUY5RUY2NkVBM0Y5QUM1MTZCMzk4RkU0ODdBRjE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ2NDM1QzA3QkRFRjlFRjY2
RUEzRjlBQzUxNkIzOThGRTQ4N0FGMTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Mjg0WlhwcldGNlF6N1M1QmJqM1pHcG5iRlJIclFVbTlLWDRVckhDNWNTUGsvMS80
NjQzNUMwN0JERUY5RUY2NkVBM0Y5QUM1MTZCMzk4RkU0ODdBRjE3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAL31RUq3wkDedm21cPCcPkMQaymb3pUfLEUglFRaZiPxRC3fdp9EYVruf4Jxy
/Sk3vlUFYSPO4y8pDoZyY3aWBYXITYsp1zda0vMZ1fDAmjjSxD2tTlpNvQASobWE
xkeemzW5gErJ6xG11txrpGS/Pi4FHqRiIwJZG0GLwzfyfcr5g2kdDIyyOZjbj/7Z
3f4JslfSsbcbBcVlgtQNZzvqwomx/MAcV8TgI7KDJJ1WNE0i+g+qe7yODdWTX+Ox
io7srVET280UjaDC8nOWptsmSQNqONrO8G2GjPF6S5bA59flsr7c4/7kOWV4/Okf
oW6r823dPBanQPio8arbzC4/gw==
-----END CERTIFICATE-----
Generated at Mon Oct 19 22:23:53 2026 by rpki-client