Error: rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.mft
File:                     DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.mft (raw, json)
Hash identifier:          xHeJk/cBeYOYfYJjpfRvvJM+SvqSqmK02eUW4OOTXrI=
Subject key identifier:   4D:CD:EF:95:B2:2E:77:EC:E3:EF:95:D0:88:CB:B8:E4:30:B9:4C:D0
Authority key identifier: DA:1D:EB:02:D6:4A:CF:26:A0:DE:3E:FC:48:CF:27:3C:87:DB:23:32
Certificate issuer:       /CN=DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332
Certificate serial:       7DE374B31A13FE96B2C154C27184FB5CD67EDD0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.mft
Manifest number:          9E
Signing time:             Wed 14 Oct 2026 09:40:00 +0000
Manifest this update:     Wed 14 Oct 2026 09:35:00 +0000
Manifest next update:     Thu 15 Oct 2026 09:40:00 +0000
Files and hashes:         1: DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.crl (hash: m5opc+dLsJb78aidY+aWkxcp2Qg7Zk4jPKDnN1eGZD0=)
                          2: 323830343a346136343a3230303a3a2f34322d3432203d3e20323637323337.roa (hash: JgdF3JpiwKQIxevluS7w3Iy/OleCRStBS2m6+M7RMTc=)
                          3: 34352e3233312e3235342e302f32342d3234203d3e20323637323337.roa (hash: ADtq7B+5Cp3TA+gfciHyAcEN0e5S4rpDtvSOo9Vww4U=)
                          4: 34352e3233312e3235322e302f32342d3234203d3e20323637323337.roa (hash: dhBxqWi6JsMXixHvmAcYHoHgXkauMXDzTw8n/FIqKxI=)
                          5: 323830343a346136343a3a2f33322d3332203d3e20323637323337.roa (hash: I1ACpIxbmPNWFiH4GhKVK6IKl+ZEhUodIIQyaRueN9g=)
                          6: 34352e3233312e3235332e302f32342d3234203d3e20323637323337.roa (hash: vTUxfwoviMlEUzgXhDQ5J9vXT+f/L1k/pmnJLhOJ9+o=)
                          7: 34352e3233312e3235352e302f32342d3234203d3e20323637323337.roa (hash: QqXNgXJU/AuUT7+K0Jq2gtdqx4/LYZ6+9ycYvdr3jBU=)
                          8: 34352e3233312e3235342e302f32332d3233203d3e20323637323337.roa (hash: wp24kNYZ6liSxdKwBO1jzzNk+31JRj/O56ZmAMtpmso=)
                          9: 34352e3233312e3235322e302f32332d3233203d3e20323637323337.roa (hash: FpqDlD4bz6wCJ7uKjBgPhYnHBRaCZcXQnBMUGDlf9KU=)
                          10: 34352e3233312e3235322e302f32322d3232203d3e20323637323337.roa (hash: G1lIfbZB6xZ8o0GiJY8BavutglT4bXB9Fyoa0XiHCE8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.crl
                          rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 09:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:e3:74:b3:1a:13:fe:96:b2:c1:54:c2:71:84:fb:5c:d6:7e:dd:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332
        Validity
            Not Before: Oct 14 09:35:00 2026 GMT
            Not After : Oct 21 09:40:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:77:e9:e1:85:26:fe:fe:74:a7:7a:b2:8c:7e:
                    47:e6:d3:7a:81:9d:10:6c:3a:88:11:7d:38:ef:36:
                    d6:c5:dd:c7:d0:ca:bf:89:7b:97:1f:f2:e8:1f:99:
                    8f:bb:18:91:91:fc:10:5e:ad:94:73:85:4e:0b:db:
                    57:5c:3e:dc:d5:21:0f:13:f5:d2:aa:de:ba:2f:7e:
                    d9:5c:5d:28:4c:c1:13:1f:9f:a3:68:2c:84:1d:60:
                    87:fc:ee:55:29:43:3a:4a:39:0f:33:33:55:38:80:
                    b5:cb:ee:c7:85:eb:d9:68:83:17:18:3f:e8:f5:7a:
                    ed:54:74:ed:08:77:f3:62:a4:16:1f:a0:3a:d6:1a:
                    22:3c:5f:44:1f:5e:4c:8a:6e:71:f5:d7:80:98:62:
                    b5:0f:d7:26:c8:81:ea:76:16:c8:19:75:14:c5:6a:
                    95:1c:46:d5:f4:72:40:05:93:d9:5d:85:58:b8:bb:
                    4c:ee:45:9b:d1:b7:89:fd:25:54:41:33:2f:d3:13:
                    3b:32:0c:1f:43:9c:11:5c:0d:0f:43:55:31:87:40:
                    24:29:e9:b4:e8:b0:08:e7:4d:15:22:4a:d3:4e:9b:
                    88:f6:41:5d:ab:73:39:e6:34:b3:a3:b2:9f:61:78:
                    42:09:f1:6b:a7:26:8e:40:bc:65:dd:a0:37:00:4a:
                    3e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:CD:EF:95:B2:2E:77:EC:E3:EF:95:D0:88:CB:B8:E4:30:B9:4C:D0
            X509v3 Authority Key Identifier:
                keyid:DA:1D:EB:02:D6:4A:CF:26:A0:DE:3E:FC:48:CF:27:3C:87:DB:23:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:90:24:f5:ff:7c:76:44:57:de:19:52:65:a3:b8:1e:73:90:
         12:d3:c8:c4:8f:90:e0:f7:cd:c2:a6:a0:db:90:db:e5:4a:1a:
         f2:50:9c:32:82:24:62:ed:45:1c:45:e0:d4:1e:d5:2b:66:6d:
         11:45:8b:ac:9c:41:19:09:e1:c2:89:cb:f1:6a:c3:93:cf:a2:
         c7:e5:91:c5:70:6e:cc:43:a7:61:3b:06:6a:c6:86:27:45:fe:
         6c:5a:ed:e8:9a:3e:4f:1d:bf:14:eb:f6:0e:01:b5:6a:3c:27:
         b4:6b:48:13:90:66:2f:77:ee:5d:da:e9:64:55:07:60:be:2f:
         5e:e1:00:39:25:55:ef:38:97:ff:68:25:d8:01:7a:a5:b8:5a:
         b6:e3:d3:94:99:8d:08:f6:68:2d:1c:be:1e:22:95:23:7d:c6:
         97:25:25:57:d4:54:90:a5:60:50:75:a0:48:ed:7d:1e:25:0f:
         3e:c0:7b:3b:dd:31:26:13:00:17:6d:97:dc:06:15:69:ca:7b:
         10:a6:d7:b9:79:a0:09:30:8c:77:45:49:e5:88:c3:98:12:52:
         87:ad:18:b5:af:76:76:d0:91:67:28:32:8f:8a:0c:23:b1:f5:
         a1:24:5b:68:e8:f4:9b:7a:da:d4:11:74:4b:50:ac:07:5f:43:
         ca:a6:44:02
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Oct 15 01:58:45 2026 by rpki-client