Error: rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.mft
File:                     398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.mft (raw, json)
Hash identifier:          CmfTiO3Jzi14Sxqt3iwTdigODYkV6QiEtSnY9FfShxE=
Subject key identifier:   BE:AC:E6:DC:44:E1:AC:6B:84:B3:FD:A5:FC:84:DC:DF:23:AB:FA:D3
Authority key identifier: 39:87:31:60:6E:B4:C0:DD:0D:FA:C2:B4:73:FC:2F:70:FF:DB:9D:47
Certificate issuer:       /CN=398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47
Certificate serial:       3675BBB833FC538FA58CAF0BBD9BF60D6DA11294
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.mft
Manifest number:          34
Signing time:             Tue 13 Oct 2026 12:40:46 +0000
Manifest this update:     Tue 13 Oct 2026 12:35:46 +0000
Manifest next update:     Wed 14 Oct 2026 15:33:46 +0000
Files and hashes:         1: 34352e3139302e36332e302f32342d3234203d3e20323639363230.roa (hash: vlLHXFdCZa/lI3tF4v//Cbf3MuuAti9QNmQ9HgahWOQ=)
                          2: 398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.crl (hash: IksJtOC/YVYt0zZ0+cjqYOdNf+ckESZfG+SM8HBur9c=)
                          3: 34352e3139302e36322e302f32342d3234203d3e20323639363230.roa (hash: 5j3xBvjNg9fMhgEXii/p/u9tnum/JFzrPR4olORIuFo=)
                          4: 34352e3139302e36302e302f32322d3232203d3e20323639363230.roa (hash: A/rxDHFZ8p5Dj5swW2Q+HuoDiQVnMToevx61HcbNFpk=)
                          5: 34352e3139302e36302e302f32342d3234203d3e20323639363230.roa (hash: cM5gVrD0v/cLKNPoi71jgxC3ZGEfOS39cEGt4Yv3vYM=)
                          6: 34352e3139302e36322e302f32332d3233203d3e20323639363230.roa (hash: dhsu5Y0FB9Cl23XbcbcqJCltk3pHgEd0q11dDAmpUaI=)
                          7: 34352e3139302e36312e302f32342d3234203d3e20323639363230.roa (hash: Ts8kPpCuGW7FQzepWDFd9VAUiGQIQ0PffCSHu7QJm1A=)
                          8: 34352e3139302e36302e302f32332d3233203d3e20323639363230.roa (hash: ZRs+ef9gXcCSVGmlJWFiA5iISa/SCWkzDOwPryuwkf0=)
                          9: 323830343a363735343a3a2f33322d3332203d3e20323639363230.roa (hash: Hq1BPJyHsmno6M93fOnnMWAlkWaZLmkHwAo+Tm9o2Q0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.crl
                          rsync://rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 15:33:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:75:bb:b8:33:fc:53:8f:a5:8c:af:0b:bd:9b:f6:0d:6d:a1:12:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47
        Validity
            Not Before: Oct 13 12:35:46 2026 GMT
            Not After : Oct 14 15:33:46 2026 GMT
        Subject: CN=BEACE6DC44E1AC6B84B3FDA5FC84DCDF23ABFAD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d0:96:2a:2f:ed:da:17:0d:1f:dd:22:59:8c:
                    50:b9:cd:fe:bf:26:22:f1:99:b9:84:cd:9b:69:ec:
                    9d:00:18:e0:78:90:0a:de:d8:6b:2f:8d:ba:9e:46:
                    ea:2b:d3:e5:19:58:cf:49:16:b0:ad:77:94:32:63:
                    68:84:65:1e:2b:b3:25:73:9f:ad:60:c6:e1:99:da:
                    d3:c9:ab:c7:8a:c8:0e:c9:f9:19:1b:bd:80:4a:31:
                    d3:9b:6b:66:a9:67:60:45:9a:db:68:42:20:e0:aa:
                    07:e1:3e:67:fa:ae:c2:dc:6a:34:36:b5:7c:5a:b6:
                    14:04:a7:6d:a1:84:81:89:ce:63:ca:8f:f4:24:48:
                    dc:72:89:db:75:c9:00:eb:94:8c:5d:d4:e1:43:0d:
                    ac:22:70:60:51:c2:9d:bb:17:6f:ab:82:cd:7c:14:
                    3f:27:4b:0f:15:f0:03:70:65:10:f4:8a:8d:4b:d7:
                    6f:bc:20:d0:01:53:7c:e0:69:ec:51:b1:b1:e7:18:
                    b4:a0:b0:29:f3:0b:ad:eb:63:2f:48:da:39:a2:ea:
                    49:cf:29:2b:4a:aa:ef:fb:d9:67:f8:b0:61:ae:bc:
                    e8:1f:1f:14:65:01:46:28:ba:44:83:b2:2d:7c:df:
                    fe:e5:f2:ff:76:86:67:24:9e:fc:23:68:c2:63:0f:
                    10:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:AC:E6:DC:44:E1:AC:6B:84:B3:FD:A5:FC:84:DC:DF:23:AB:FA:D3
            X509v3 Authority Key Identifier:
                keyid:39:87:31:60:6E:B4:C0:DD:0D:FA:C2:B4:73:FC:2F:70:FF:DB:9D:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:b3:10:ba:27:fa:ad:17:12:d8:f5:6b:8e:44:f7:e9:49:f6:
         c2:56:b3:40:37:9c:a6:d7:b4:bf:20:03:f0:71:ba:91:d9:cc:
         56:e3:27:7c:15:0d:a2:30:e3:98:41:04:90:95:68:a1:32:87:
         b7:ed:ff:97:94:db:f2:21:bd:97:eb:bf:e5:99:fa:a3:e5:d9:
         12:ab:05:29:33:22:fa:88:0c:68:6e:81:6d:9f:49:0c:2c:e0:
         3e:f1:1f:1b:c1:5a:68:a7:23:ab:94:91:60:7b:bf:99:bb:31:
         76:8f:85:08:2c:fc:da:ba:a2:23:15:4d:50:f8:17:70:bd:39:
         1d:c6:e2:b9:6f:85:55:c6:f4:fa:ed:7c:3e:8e:37:1b:cb:b3:
         88:87:63:d4:26:07:77:44:dc:74:50:a1:16:1b:ea:b3:c5:72:
         76:98:7f:4d:b7:b3:03:f2:e3:01:da:d7:cc:63:3d:bd:aa:51:
         d5:b5:49:ad:6b:96:b5:50:28:8f:35:00:7d:87:a2:d6:41:5d:
         a6:b0:e7:ea:e7:bd:f1:ab:2d:26:42:80:9b:1a:59:91:97:45:
         57:70:a1:12:5b:e2:78:27:27:9a:24:33:91:87:70:60:74:1f:
         1a:9a:86:3b:be:aa:68:da:69:29:06:62:8e:32:8b:cd:42:27:
         44:f6:19:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:51:19 2026 by rpki-client