Error: rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.mft
File:                     809D9FD2F741CD2C6EACA91BCA8D29582494856C.mft (raw, json)
Hash identifier:          C2Crbmk1XKrlMhgPm6YjW4hR1Q3EUE+QBNF2MuYxz2I=
Subject key identifier:   34:F5:CB:F3:26:10:48:BA:97:C9:43:C6:F1:74:52:F3:BB:3F:8A:43
Authority key identifier: 80:9D:9F:D2:F7:41:CD:2C:6E:AC:A9:1B:CA:8D:29:58:24:94:85:6C
Certificate issuer:       /CN=809D9FD2F741CD2C6EACA91BCA8D29582494856C
Certificate serial:       6648CE2E20344319C13159345EB8CDC3FFDE09E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.mft
Manifest number:          04D0
Signing time:             Mon 12 Oct 2026 12:37:08 +0000
Manifest this update:     Mon 12 Oct 2026 12:32:08 +0000
Manifest next update:     Tue 13 Oct 2026 15:26:08 +0000
Files and hashes:         1: 3138392e3132342e31362e302f32302d3234203d3e203238323139.roa (hash: OaRBRoXvuxGmVV2EVrrO1/Yn76dygcVn77XVv7r8z7Q=)
                          2: 323830343a323961303a3a2f33322d3334203d3e203238323139.roa (hash: TRItQeOpYsval/Vw31Qq22xuamczIyowVsrzAj+NZsU=)
                          3: 809D9FD2F741CD2C6EACA91BCA8D29582494856C.crl (hash: zOq3Ydf5gm8MrGhinqCqe6GfuMAUhBtYkjJjBzERktM=)
                          4: 3138362e3233362e3232342e302f32302d3234203d3e203238323139.roa (hash: rBAbkLxpstl492bwOlcO3XkZLL4/sgn5F1uThWdeChU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.crl
                          rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 15:26:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:48:ce:2e:20:34:43:19:c1:31:59:34:5e:b8:cd:c3:ff:de:09:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=809D9FD2F741CD2C6EACA91BCA8D29582494856C
        Validity
            Not Before: Oct 12 12:32:08 2026 GMT
            Not After : Oct 13 15:26:08 2026 GMT
        Subject: CN=34F5CBF3261048BA97C943C6F17452F3BB3F8A43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:00:74:37:72:26:2f:aa:8c:71:33:ee:3a:99:
                    3f:0a:4c:5a:6f:ac:bb:d3:d7:bd:ff:6b:db:4a:c3:
                    28:c7:48:03:bf:1e:6f:e7:09:a3:ce:09:bc:a5:56:
                    50:ee:c4:cc:8b:4a:08:50:d3:48:dd:56:52:98:8b:
                    e2:36:8e:83:8b:86:03:52:da:ec:37:72:92:ad:d6:
                    3d:8f:4d:4e:ac:2a:a8:a6:10:64:fb:92:58:88:a1:
                    10:62:94:51:cf:60:d3:d0:39:13:a5:40:e7:9f:60:
                    a6:9b:8e:1b:0b:c5:2b:b5:b4:c1:7c:bf:9c:07:80:
                    56:50:f6:3d:0f:3c:e1:74:af:33:22:be:ba:29:e9:
                    ec:72:1c:91:08:f9:62:51:9a:ac:a9:1c:69:56:fa:
                    e1:a5:2f:84:af:a8:bb:69:6e:7e:b9:81:43:9e:44:
                    8f:39:b4:d5:46:dc:56:c4:f7:e2:7d:8b:99:c1:0b:
                    57:b4:3c:48:f3:a4:26:91:25:e5:9f:ac:35:4d:ba:
                    e3:cf:08:70:c9:88:10:ce:56:09:b1:84:c8:41:7f:
                    b6:a6:74:f8:62:84:13:25:f0:3a:85:3a:60:9b:0e:
                    11:d0:1f:67:b4:54:58:78:15:2a:a4:cb:5d:07:27:
                    64:f0:b0:7b:ae:7d:b0:bb:0c:66:ab:67:b5:25:87:
                    ec:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F5:CB:F3:26:10:48:BA:97:C9:43:C6:F1:74:52:F3:BB:3F:8A:43
            X509v3 Authority Key Identifier:
                keyid:80:9D:9F:D2:F7:41:CD:2C:6E:AC:A9:1B:CA:8D:29:58:24:94:85:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:c2:f9:67:a8:cf:9d:06:82:77:31:10:23:34:2f:22:3e:62:
         2b:88:3a:8b:c3:96:bc:d5:bb:7b:86:89:2f:80:8b:27:b0:cd:
         ac:c9:ed:6f:b4:a9:ed:d6:a8:9a:07:1e:4c:04:e2:e9:43:e1:
         50:67:c5:82:18:29:eb:f1:21:3d:60:9d:ba:c5:7e:79:c4:57:
         1b:c2:f5:dc:f2:32:ed:17:ab:6d:97:08:d8:2f:96:94:4f:01:
         4a:98:9f:69:f9:de:c0:6f:b9:02:ad:1e:14:3c:e3:7b:44:33:
         82:68:c0:55:63:ea:5c:d2:5a:a5:0a:bf:bc:b7:a4:0a:d0:e5:
         f6:48:bc:5c:a0:11:c0:90:7f:fe:2c:84:1f:cb:3e:f7:7c:06:
         44:a7:23:2e:ad:13:be:1f:79:47:e5:c2:23:c3:48:b0:b5:f3:
         0c:8e:75:6f:3e:2c:23:78:a1:33:a0:79:d8:ac:b2:58:e4:bf:
         cf:0f:d9:04:c1:78:32:cc:ca:e1:ad:7b:03:10:a1:93:4d:43:
         dd:14:29:f7:da:9c:6e:72:a7:87:53:bf:56:22:4d:22:32:ec:
         67:87:bf:c6:38:0c:87:84:4d:35:90:e1:21:09:f4:29:23:bc:
         eb:90:7d:a9:a8:69:88:14:bb:58:b3:7c:1c:d4:3d:06:a5:54:
         9e:df:01:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 00:52:29 2026 by rpki-client