Error: rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.mft
File:                     D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.mft (raw, json)
Hash identifier:          8HDe7siQBHmwJSCjiXrJzHZcWL171loB2URdONR20Ec=
Subject key identifier:   F0:44:36:F0:A2:58:89:0B:9F:DF:C9:57:59:E8:2C:F3:73:03:8A:EE
Authority key identifier: D3:84:D2:C5:97:E4:FB:4A:E0:92:9C:F5:FD:E0:5B:99:DD:F3:11:73
Certificate issuer:       /CN=D384D2C597E4FB4AE0929CF5FDE05B99DDF31173
Certificate serial:       5321B923985A487BC973B88B2849E84072E75E12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.mft
Manifest number:          72
Signing time:             Tue 13 Oct 2026 17:21:43 +0000
Manifest this update:     Tue 13 Oct 2026 17:16:43 +0000
Manifest next update:     Wed 14 Oct 2026 20:07:43 +0000
Files and hashes:         1: 323830343a346431383a343030303a3a2f33342d3334203d3e20323637343132.roa (hash: k/HUZicaXW+4s0ET3gp3MWyV+sm6r0kPGSmoDYCVYds=)
                          2: D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.crl (hash: 9WGWVQWv3GlO0y0Zgrp/KrUvA5Nit0VwS5WDXpIbU3A=)
                          3: 323830343a346431383a3a2f33332d3333203d3e20323637343132.roa (hash: H9iD+nrBxhiB/lamyEayoH8zUWXiV/IXfkGgVqtPOmI=)
                          4: 323830343a346431383a3a2f33342d3334203d3e20323637343132.roa (hash: 5PgMh41VAQAfCn7V1hgczEAXXABmvKU9ouRH8FVphR8=)
                          5: 323830343a346431383a383030303a3a2f33332d3333203d3e20323637343132.roa (hash: 0v+X/d26jc69zwXUe4l0wPyIbwl+EKSjcwhQcTlpeCg=)
                          6: 34352e3233352e36342e302f32332d3233203d3e20323637343132.roa (hash: juoBcZ8j5b3Rd3tLcCLc7OkVCcUwzp4PGeQw+STSYNI=)
                          7: 323830343a346431383a633030303a3a2f33342d3334203d3e20323637343132.roa (hash: C3oh8jg6x3ss6NgqIzrqVXVoDSU+W9AkegjVJ5o6YjU=)
                          8: 34352e3233352e36372e302f32342d3234203d3e20323637343132.roa (hash: yb5TQK2Z/cWsq+SbhdyUwpv78DIwT0he+n6Ve7ywqxQ=)
                          9: 323830343a346431383a383030303a3a2f33342d3334203d3e20323637343132.roa (hash: /o+JZmFdeJY1XUdhqE9iURvnItBAcpDNHu7x67KmBGY=)
                          10: 34352e3233352e36362e302f32332d3233203d3e20323637343132.roa (hash: MtV0dlLn6d2CJDGTf9KcJbPGSrjfjWWpGy+yEityRw4=)
                          11: 323830343a346431383a3a2f33322d3332203d3e20323637343132.roa (hash: ibPexvtNt1LeYDQ5J++mK/ctJXy8MNpycJjmeNPhSL0=)
                          12: 34352e3233352e36362e302f32342d3234203d3e20323637343132.roa (hash: nECV9LQUb/x65aPJG5fj5SxVo5aoG4CB1lc5s54XOig=)
                          13: 34352e3233352e36352e302f32342d3234203d3e20323637343132.roa (hash: AT3HgIPlTWbtAa0NwNfbbxh/AzHKn5U0DY1oO+2wymE=)
                          14: 34352e3233352e36342e302f32342d3234203d3e20323637343132.roa (hash: y/gF4idK+dOfUbQul3VbcfzxYY/KIHg9OTVyfgdGQ4w=)
                          15: 34352e3233352e36342e302f32322d3232203d3e20323637343132.roa (hash: bnLDehfTWjQ0YytM1htFe8ZpFfL6b9wvvlpVecrT1ZQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.crl
                          rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 20:07:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:21:b9:23:98:5a:48:7b:c9:73:b8:8b:28:49:e8:40:72:e7:5e:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D384D2C597E4FB4AE0929CF5FDE05B99DDF31173
        Validity
            Not Before: Oct 13 17:16:43 2026 GMT
            Not After : Oct 14 20:07:43 2026 GMT
        Subject: CN=F04436F0A258890B9FDFC95759E82CF373038AEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:df:6b:fe:21:c6:b9:7f:6e:ab:8b:fb:93:d4:
                    10:82:9b:de:19:f4:5a:3a:75:5d:5b:5e:14:8e:ce:
                    7e:20:f8:25:1b:4d:ff:2c:b0:0a:c8:be:68:92:51:
                    0c:76:19:76:33:d1:c7:93:75:28:a3:26:f9:f7:30:
                    e1:c3:26:a1:9f:83:32:48:ad:d3:08:ce:8c:3d:4e:
                    b6:39:58:18:de:b9:ad:46:5f:5c:da:d1:74:21:55:
                    b7:b4:d0:cb:50:0d:71:56:0e:8f:0f:64:e4:d9:7a:
                    d5:f1:d2:ff:4c:65:ac:b2:df:8b:7d:e2:39:1e:71:
                    9d:e4:c1:5b:43:83:a0:e1:90:ac:52:8e:9a:e6:77:
                    77:a5:fa:1c:3b:40:70:80:dc:e5:88:4e:a7:ed:68:
                    f8:9c:be:07:b6:97:dc:bf:b1:72:62:a7:7f:12:cc:
                    d8:80:47:50:15:05:d5:b6:c4:c9:c1:cf:be:e2:13:
                    d7:3e:0a:c9:ae:d6:9d:6e:fb:5f:bb:58:37:6e:00:
                    f3:3f:86:36:ff:18:3e:49:88:ff:53:5b:a2:51:b1:
                    47:40:6e:60:a1:3e:95:b1:7f:90:6e:04:58:21:ff:
                    a2:95:e0:27:df:4f:27:86:3f:e9:fa:7e:81:e1:61:
                    9e:0f:cb:9e:2c:50:10:ab:ed:0c:b6:f2:6c:d7:76:
                    9a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:44:36:F0:A2:58:89:0B:9F:DF:C9:57:59:E8:2C:F3:73:03:8A:EE
            X509v3 Authority Key Identifier:
                keyid:D3:84:D2:C5:97:E4:FB:4A:E0:92:9C:F5:FD:E0:5B:99:DD:F3:11:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:cb:25:99:6b:4f:43:ad:81:a0:83:a7:54:41:27:dd:21:78:
         35:45:f1:39:90:47:c7:b0:52:5c:d4:5d:fb:27:89:19:b2:8f:
         6a:27:83:70:49:dc:79:a8:d5:6f:a8:eb:10:57:c8:02:be:1b:
         87:9e:55:0d:dd:b2:e0:34:8a:8c:5b:06:03:20:e2:9a:3f:97:
         94:9d:74:76:a0:ec:a2:81:fb:4e:22:ec:f2:31:f8:09:87:cf:
         ed:81:e9:6b:50:a9:50:d6:7e:8d:e6:0f:51:0a:68:f0:65:03:
         17:0c:f2:9a:aa:d0:3b:87:70:df:df:56:36:83:bc:35:13:da:
         b5:24:5e:84:5b:e8:2b:1e:97:44:76:1a:ed:d6:f2:34:29:35:
         00:3a:06:56:cf:9c:dd:b3:28:ad:73:5d:6b:07:c9:6e:37:08:
         11:a7:06:d5:9a:34:e2:36:ec:cb:62:ee:91:71:d1:7f:0b:89:
         b3:ab:84:02:4f:92:ac:6b:f4:c8:8f:67:89:69:44:0d:aa:5f:
         48:eb:f0:08:de:11:c5:8e:f4:ca:e8:f8:ad:bd:2d:53:78:60:
         9a:0d:ec:08:da:1d:2e:f4:6b:36:0c:bf:cd:d0:71:37:1f:94:
         8d:a0:ee:3c:a1:80:04:b7:a0:14:c3:9c:82:78:ce:e4:70:97:
         d9:05:83:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:47:35 2026 by rpki-client