Error: rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
File:                     8CD2E74C0B51414825F95C9D3D432ADD56896751.mft (raw, json)
Hash identifier:          2bNKH8EUgkAckdKH5d20DDcDeIwhl2MQLN+2TZ4Mz8c=
Subject key identifier:   26:AF:24:0D:3B:54:C1:27:C7:5A:0D:33:2C:F6:AA:BC:18:CD:A6:83
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       6A9A1234472EA047101336255BF3E8F9BE3338B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
Manifest number:          0342
Signing time:             Sat 31 Oct 2026 19:30:00 +0000
Manifest this update:     Sat 31 Oct 2026 19:25:00 +0000
Manifest next update:     Sun 01 Nov 2026 20:48:00 +0000
Files and hashes:         1: 3138362e3233352e3136342e302f32342d3234203d3e20323632373834.roa (hash: kwK0crkdWbzxYM5qxNc/Me62c26bU9WQ/jmaXhF+RlM=)
                          2: 3134332e3230322e3130342e302f32322d3234203d3e20323632373834.roa (hash: +xGwVAzlq04CKXK/H9hh34Lf7XdiuxB0/lJyyIQvAXQ=)
                          3: 8CD2E74C0B51414825F95C9D3D432ADD56896751.crl (hash: 3b68Gsy7CTbtgACmdzjya1YFB/BlNNPGOL+N6vjlq0c=)
                          4: 3139312e3234312e3135342e302f32342d3234203d3e20323632373834.roa (hash: pWTgWjPWP/aUhgkhm6agXBHOXHO/Vdt0OewWlMnvxRo=)
                          5: 3138362e3233352e3137312e302f32342d3234203d3e20323632373834.roa (hash: cIhAlURI1BXftPdYXaNp0BgV8gOnDmh4goxGDKnqLoA=)
                          6: 3138362e3233352e3136322e302f32342d3234203d3e20323632373834.roa (hash: 689IBLwaKA/9LMt4lhUEI+4KQVTUfdjZh1FCEYOWsSA=)
                          7: 3138362e3233352e3136362e302f32342d3234203d3e20323632373834.roa (hash: AkjKQw/YTUsMmuaymvsIZeaob/0ytTf/QDhJ00b4BOg=)
                          8: 3139312e3234312e3135362e302f32342d3234203d3e20323632373834.roa (hash: TCGZOqulx1lI4epQB/GYaGwY4Lp33JNh8Bn/wHY+wEE=)
                          9: 3139312e3234312e3135302e302f32342d3234203d3e20323632373834.roa (hash: cj2aqa0roETm46n4nhD4LuZF2vk9INnelfpPhikD7aw=)
                          10: 3139312e3234312e3135332e302f32342d3234203d3e20323632373834.roa (hash: fsctAWaWSF2alFtwRmbBFlOgcurrQ8jNbU8y3UJ83zQ=)
                          11: 3138362e3233352e3136302e302f32302d3230203d3e20323632373834.roa (hash: 8HbKe0sLI4+sgQvTKXw4Ig9vpKieVEaM93cExFg7Zwg=)
                          12: 3138362e3233352e3137342e302f32342d3234203d3e20323632373834.roa (hash: ev0BpzLL/j5pQpkFfSOzgV6gdxMa3izuuyjq4hX3EWE=)
                          13: 3139312e3234312e3134362e302f32342d3234203d3e20323632373834.roa (hash: 9J/pQxrMU93foSOrPHlkgHfm5EjH90TwyEmO0N/0lGM=)
                          14: 323830343a3165303a3a2f33322d3336203d3e20323632373834.roa (hash: j9ObupScIEPck3rqXzMQbxFrQ+RRBVzTqsNhyNco6X4=)
                          15: 3138362e3233352e3136372e302f32342d3234203d3e20323632373834.roa (hash: nOLGRUC64OSFOWtCJLPEf1eWI1WFZO4QYevedbD39qw=)
                          16: 3139312e3234312e3134342e302f32302d3230203d3e20323632373834.roa (hash: AU4kj8q86d4b70rmK/C8pIkCY6hdXVgR6+d6Ru+0Pic=)
                          17: 3137302e302e32382e302f32322d3234203d3e20323632373834.roa (hash: Dm+xdUI+Asp4UgGsNTsQ5rFMa06zPscBU09votBEf9M=)
                          18: 323830343a3165303a376630303a3a2f34302d3430203d3e20323632373834.roa (hash: KRo3t8DFs6Ljorhe+50fZzf1Dq94yTtDHdnvwcMu3Ks=)
                          19: 3139312e3234312e3135312e302f32342d3234203d3e20323632373834.roa (hash: rig3OWzZf+9EGUrzHkeJJHeHzEuSTnAy9ZOMFIwNV/8=)
                          20: 3138362e3233352e3136302e302f32342d3234203d3e20323632373834.roa (hash: Mhm8KNoHZ00agNjKGiWc3Rg2XXc4O+8qmXCvxkwJgOg=)
                          21: 3139312e3234312e3135352e302f32342d3234203d3e20323632373834.roa (hash: W1PVrXcquUe10ieAbb9tsFSuyFfYEa6phNadCKgKWfQ=)
                          22: 3139312e3234312e3135372e302f32342d3234203d3e20323632373834.roa (hash: tV8ZPBcK8kB9YBPvcJTHYW9npK8ipYB4FAIbE7GQS2M=)
                          23: 3139312e3234312e3135392e302f32342d3234203d3e20323632373834.roa (hash: rOSZCuM08AaBAOgU7KQY13mVQIMGYYydTvnUcwGGsts=)
                          24: 3138362e3233352e3136352e302f32342d3234203d3e20323632373834.roa (hash: u3b3ua7aHw6Sso00UCecMkOxq4BPpRqyXgblid7S1gY=)
                          25: 3138362e3233352e3137322e302f32342d3234203d3e20323632373834.roa (hash: JfLyfL/AIQ8viR7Yr4MWvOvYL2YNpXBUgmGW5GBEUPk=)
                          26: 3139312e3234312e3134342e302f32342d3234203d3e20323632373834.roa (hash: nCjjYwULsydDCpFlPbOLTGM/hi1DtgpVkmV6pMAu4gs=)
                          27: 3139312e3234312e3134372e302f32342d3234203d3e20323632373834.roa (hash: 5zX93IYsIBfwDWKWuCTfq8wl6ZM8eGX5sV8AYIrsYKY=)
                          28: 3138362e3233352e3136392e302f32342d3234203d3e20323632373834.roa (hash: rmp1gEIwx+k0bIkVk6avBe1rbucTIUVCHgvLv/WqUN0=)
                          29: 3139312e3234312e3134352e302f32342d3234203d3e20323632373834.roa (hash: w5UD5iEJ5ozwKAUCgYBqgSVtvu8KLq8Jd5uV7hKny4U=)
                          30: 3138362e3233352e3136312e302f32342d3234203d3e20323632373834.roa (hash: ZTCSLaDNpz3xrco0bIs31gJPCuEj+lR9yrd52S5jYI4=)
                          31: 3138362e3233352e3137332e302f32342d3234203d3e20323632373834.roa (hash: uarmLIdaT4GjFoHO9HBzfRqA/mQFFPDhPTea4z8VAmU=)
                          32: 3138362e3233352e3136332e302f32342d3234203d3e20323632373834.roa (hash: C8eRojR3zkIbDQz76YNzkdEHNyt6YCZtBZLNPqgO5i4=)
                          33: 323830343a3165303a376530303a3a2f34302d3430203d3e20323632373834.roa (hash: mLlUqOe/Ej28bewJydtNCcFzGJzQy8hmbvP9WPIgcj0=)
                          34: 3139312e3234312e3134392e302f32342d3234203d3e20323632373834.roa (hash: X1cuicW13631xj1ryvMUFu2KEqqD7lBsPdYnyIQxwwQ=)
                          35: 3139312e3234312e3135322e302f32342d3234203d3e20323632373834.roa (hash: KT341BmR32wC921592pKreFpdGRGGtLQIRcQIIjIr4U=)
                          36: 3138362e3233352e3136382e302f32342d3234203d3e20323632373834.roa (hash: RLrRJNHMuWVhM9uIxbrjpeFm4dzF9kjokEDU1nTCDmw=)
                          37: 3138362e3233352e3137352e302f32342d3234203d3e20323632373834.roa (hash: 79DIX7RtP5ls/VEw/7upZDmrF2v7LqrCEBTOSkX/sH0=)
                          38: 3139312e3234312e3134382e302f32342d3234203d3e20323632373834.roa (hash: xyEvfiA7kH8oBNBmmx+8zruX7fLxab+D6Wl050DVjiA=)
                          39: 3138362e3233352e3137302e302f32342d3234203d3e20323632373834.roa (hash: 0N1bBxkepcLd7hcdyrLJ7AgqEWvr1pSThSFJ1ik1d2s=)
                          40: 3139312e3234312e3135382e302f32342d3234203d3e20323632373834.roa (hash: aR9yZhOd+g/QEgqOPFYsaAGDLoyKQVJu+jerDdAubWY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
                          rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 20:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:9a:12:34:47:2e:a0:47:10:13:36:25:5b:f3:e8:f9:be:33:38:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Oct 31 19:25:00 2026 GMT
            Not After : Nov  1 20:48:00 2026 GMT
        Subject: CN=26AF240D3B54C127C75A0D332CF6AABC18CDA683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ac:37:c0:5c:d9:20:63:b3:41:67:3b:2b:ab:
                    24:2e:f5:2b:51:5c:0c:d6:10:6e:e2:cc:48:55:df:
                    29:8a:ea:72:5b:9d:f2:38:e2:04:db:52:36:0b:ef:
                    fe:56:d7:e8:2d:9e:f8:d1:8e:eb:41:0e:92:bc:32:
                    8d:a4:7c:c9:28:60:49:34:8d:41:aa:2f:9f:b5:a7:
                    10:22:ab:2b:50:6b:4f:aa:d2:64:72:ee:8d:c0:f8:
                    c4:16:a3:70:cd:f3:32:71:ea:87:ce:c2:af:7d:55:
                    d8:47:00:cb:d2:7e:d5:39:f9:ff:81:f3:b2:1a:d2:
                    97:67:98:41:af:a9:e8:b8:fd:c4:32:5c:95:5d:9c:
                    2b:76:d8:d4:e6:10:79:62:87:77:84:2f:e4:1d:e3:
                    f6:20:93:fd:f8:17:56:15:1a:e3:b3:6d:93:18:91:
                    72:35:46:af:55:46:30:0b:f2:56:24:60:7e:7f:a4:
                    d0:ac:65:94:92:86:4e:9e:eb:25:23:9a:82:27:73:
                    63:48:11:43:d5:d7:a7:d8:4b:b8:5f:07:19:1b:78:
                    c9:70:27:b6:9d:57:2b:b8:44:bc:38:7f:55:18:76:
                    ce:05:52:df:10:f0:11:3d:d5:46:40:3a:ca:2b:b7:
                    61:3b:4d:8e:3a:83:db:35:aa:9d:fc:dc:ad:88:c8:
                    7b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:AF:24:0D:3B:54:C1:27:C7:5A:0D:33:2C:F6:AA:BC:18:CD:A6:83
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:3e:7b:28:05:95:fa:02:de:b2:c3:0f:c9:ad:09:01:41:a9:
         ab:b2:94:a7:74:48:08:91:6e:f2:c8:a0:cd:fe:35:49:47:86:
         fb:d4:93:d7:bd:24:10:58:7f:91:65:df:e7:a0:0e:aa:55:61:
         87:a8:df:af:63:85:2c:a4:33:b2:7b:bb:09:b3:ed:60:c1:ba:
         9e:45:51:bd:2e:2b:65:d3:82:d0:b0:e3:82:d7:e9:b5:da:8a:
         80:66:23:d7:2b:35:c2:84:d3:ac:32:94:52:1e:47:50:6e:cf:
         f6:03:e6:3a:22:ba:c5:ef:b2:30:5f:9c:07:f5:e2:f9:ce:36:
         2b:c3:0a:a5:5f:a7:ce:bc:a2:7d:a9:f6:b6:97:34:fa:84:60:
         10:6a:39:ae:b7:da:13:b6:a4:dd:47:3a:6a:41:89:65:d1:23:
         53:f0:09:97:5f:92:c5:e9:c6:47:2c:1e:59:d4:64:d1:72:35:
         d3:5b:d8:6f:0b:d5:1b:c5:77:c7:14:5b:fc:14:4e:47:c6:fc:
         93:95:bc:d8:e2:a2:79:0a:71:80:16:99:82:8d:1e:57:e2:1b:
         cd:27:4f:a5:25:00:ed:a8:2b:d4:a1:f2:b8:8d:70:e1:63:e3:
         7b:5f:93:85:f5:c7:8f:b2:00:2f:69:3f:70:3c:1e:4c:0c:00:
         fa:57:6d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 09:22:32 2026 by rpki-client