Error: rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.mft
File:                     0059BA88737DAD2C55270BBCF409B62E1276558F.mft (raw, json)
Hash identifier:          4qKxzYCcE4MsktF/bqwsFAzU01yEenHpnrIN14UDdOg=
Subject key identifier:   F9:E5:D9:1C:6D:A5:04:0F:00:2E:46:E7:87:A2:DD:59:D0:F8:A9:E6
Authority key identifier: 00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F
Certificate issuer:       /CN=0059BA88737DAD2C55270BBCF409B62E1276558F
Certificate serial:       43B96D685C3DFA917D989C001555DE0EFCBE0EA0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.mft
Manifest number:          056A
Signing time:             Mon 12 Oct 2026 04:10:00 +0000
Manifest this update:     Mon 12 Oct 2026 04:05:00 +0000
Manifest next update:     Tue 13 Oct 2026 04:10:00 +0000
Files and hashes:         1: 323830343a333366633a3a2f33352d3335203d3e20323635343239.roa (hash: uW5wQIFndCbdG9DC0H7H8tR6a5Es/kme5mhXV0cdl2g=)
                          2: 323830343a333366633a323030303a3a2f33352d3335203d3e20323635343239.roa (hash: 2neGCTBIwTW4OwG1cKrADd3QpfKn5U0GQ0SCszIoKno=)
                          3: 323830343a333366633a613030303a3a2f33352d3335203d3e20323635343239.roa (hash: MbqdiNq3V6bRLqbKerzhrE93ldhsmhEdSISZVV7k54c=)
                          4: 323830343a333366633a343030303a3a2f33352d3335203d3e20323635343239.roa (hash: kqmIILOlSSuTY/oyE8XfLPcQ/wOWVbXUFzyO8/oKdiM=)
                          5: 323830343a333366633a653030303a3a2f33352d3335203d3e20323635343239.roa (hash: i6LUKRYQwWC/hKZtryfv2i/2qwkbdhY1TKSfVdlBmoI=)
                          6: 3136382e3139352e38302e302f32322d3234203d3e20323635343239.roa (hash: GztcKnkei55+LGhPlHTqoX8+/sPZkAvf79CzkxXlgn0=)
                          7: 323830343a333366633a363030303a3a2f33352d3335203d3e20323635343239.roa (hash: S32H6hz1Se52Cp2cF+aUCi63DGqjq0YWcUUM1kuUsqY=)
                          8: 323830343a333366633a3a2f33322d3334203d3e20323635343239.roa (hash: wNnXDjfQFu1ApIHEKrb9hZF17hu6qlFtZjjm+yuagPo=)
                          9: 0059BA88737DAD2C55270BBCF409B62E1276558F.crl (hash: 0n/ZEKbhDvHamJt7ihQ9j3w3qUTyJ1knxjafQ778Inc=)
                          10: 323830343a333366633a633030303a3a2f33352d3335203d3e20323635343239.roa (hash: F/2Ym7l8Fo20lA5ZQeR60GPNirK7FVfyNMi4c2cdCYU=)
                          11: 323830343a333366633a383030303a3a2f33352d3335203d3e20323635343239.roa (hash: +III35VeXt/baizD6SXovCGMIjun8P3dlCaU98NDHYg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl
                          rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 04:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b9:6d:68:5c:3d:fa:91:7d:98:9c:00:15:55:de:0e:fc:be:0e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0059BA88737DAD2C55270BBCF409B62E1276558F
        Validity
            Not Before: Oct 12 04:05:00 2026 GMT
            Not After : Oct 13 04:10:00 2026 GMT
        Subject: CN=3082010A0282010100C960F10A48F8AA1A2B4D601DE31F5FBBA5F09848F0EF37D2745E07B1577053992796F0B28C7C73D02378D784D09BB3C0F786ADD8D639898694763F9543BF04D767F05D99A9CAADF789D7E20EC414130666F1D34A65AC33443259825397468C0B9976DC08D1D5B6C969163BADDF90F4518E412A0CF54097CC5D92CFDD3A18A063C8DCF2154DB9F233B9C0D5962B019E277D67DD6C974465AAC44EA6DC024A828D6BD4123C8D4FCBA5F24381DDA959026355A91C8119B735013AEAF8119873379DC13A72C32CB061DCF67F9A2EF4F52D849E56828EE36003B91C9A651682B4B7903415B26CA2E569A65FEAC594EDDF796FE9393692B49D0901A1169D2E70AFED650203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:60:f1:0a:48:f8:aa:1a:2b:4d:60:1d:e3:1f:
                    5f:bb:a5:f0:98:48:f0:ef:37:d2:74:5e:07:b1:57:
                    70:53:99:27:96:f0:b2:8c:7c:73:d0:23:78:d7:84:
                    d0:9b:b3:c0:f7:86:ad:d8:d6:39:89:86:94:76:3f:
                    95:43:bf:04:d7:67:f0:5d:99:a9:ca:ad:f7:89:d7:
                    e2:0e:c4:14:13:06:66:f1:d3:4a:65:ac:33:44:32:
                    59:82:53:97:46:8c:0b:99:76:dc:08:d1:d5:b6:c9:
                    69:16:3b:ad:df:90:f4:51:8e:41:2a:0c:f5:40:97:
                    cc:5d:92:cf:dd:3a:18:a0:63:c8:dc:f2:15:4d:b9:
                    f2:33:b9:c0:d5:96:2b:01:9e:27:7d:67:dd:6c:97:
                    44:65:aa:c4:4e:a6:dc:02:4a:82:8d:6b:d4:12:3c:
                    8d:4f:cb:a5:f2:43:81:dd:a9:59:02:63:55:a9:1c:
                    81:19:b7:35:01:3a:ea:f8:11:98:73:37:9d:c1:3a:
                    72:c3:2c:b0:61:dc:f6:7f:9a:2e:f4:f5:2d:84:9e:
                    56:82:8e:e3:60:03:b9:1c:9a:65:16:82:b4:b7:90:
                    34:15:b2:6c:a2:e5:69:a6:5f:ea:c5:94:ed:df:79:
                    6f:e9:39:36:92:b4:9d:09:01:a1:16:9d:2e:70:af:
                    ed:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E5:D9:1C:6D:A5:04:0F:00:2E:46:E7:87:A2:DD:59:D0:F8:A9:E6
            X509v3 Authority Key Identifier:
                keyid:00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:0d:17:8c:92:2f:fb:a5:00:ff:53:90:36:5f:10:1a:c6:de:
         f1:f6:8a:89:00:55:bd:5c:de:0e:6b:da:a2:6b:21:2e:9c:fd:
         97:a1:22:94:7a:0b:63:33:6e:8c:36:0e:84:3c:6f:91:dc:15:
         52:9d:11:38:f3:50:5f:d1:b6:40:89:ce:df:26:68:89:29:ba:
         2b:86:39:18:f1:f2:23:d4:45:e3:80:77:aa:32:77:c9:87:46:
         b5:ff:83:91:6e:9b:5b:ea:36:0a:0b:78:b1:e6:b6:2c:3f:21:
         47:e4:9d:1d:f1:2d:ce:01:e6:9a:d7:d3:58:7e:bd:cf:80:48:
         58:a6:33:0e:07:5f:d8:22:45:1d:37:85:ef:dc:86:b7:ff:3a:
         a0:5d:dd:a9:bd:d3:26:90:3a:bb:db:b2:dd:5b:9e:8c:17:5e:
         1e:f1:e1:d0:56:9c:9b:c3:1b:28:b6:b1:0b:17:41:64:43:1e:
         19:ad:2f:8a:a5:f0:f2:e0:3c:24:65:4e:53:e8:fd:ce:25:eb:
         89:ba:40:16:19:53:79:82:ea:67:43:80:3b:5d:e7:10:b1:94:
         51:28:3f:a1:db:7f:4d:51:a5:d9:cc:e1:bd:18:a9:02:b5:35:
         d4:e3:23:c2:8e:eb:fb:f8:be:06:6b:ce:49:69:bc:3b:65:b9:
         df:7f:74:1f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 12 14:17:46 2026 by rpki-client