Error: rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
File:                     D95F78E630398477E9BAE976B3EAEDB0059994DB.mft (raw, json)
Hash identifier:          liR/4rOHx0/JebGYlj53Fy2HlvVHz0b4iS0cWsttGH8=
Subject key identifier:   FF:A9:A3:09:F4:75:0E:BF:61:6B:0B:79:AC:84:E3:DF:F1:E2:07:8D
Authority key identifier: D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB
Certificate issuer:       /CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
Certificate serial:       0227CFA2B3846CA107572BAA06A82E9FE4FCABA4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
Manifest number:          04CB
Signing time:             Mon 12 Oct 2026 22:45:34 +0000
Manifest this update:     Mon 12 Oct 2026 22:40:34 +0000
Manifest next update:     Tue 13 Oct 2026 23:41:34 +0000
Files and hashes:         1: 34352e3139302e3133362e302f32322d3232203d3e20323639363437.roa (hash: LlOYaEoeqHrYA4xy9Bq+IRx20dAH+42ivQxYifmQVg0=)
                          2: 323830343a363762633a3a2f33342d3334203d3e20323639363437.roa (hash: pBXGSP6xBS4tQHTcAxyiO8BZnw2+dfsHagzia0t4r8Q=)
                          3: 34352e3139302e3133362e302f32322d3234203d3e20323639363437.roa (hash: 3Y2YOrZBZpyxSvI1zOvxfut2UD/6PFOwe1gjuKLm17s=)
                          4: 323830343a363762633a343030303a3a2f33342d3334203d3e20323639363437.roa (hash: 10grmYgRlb0SS90IyJSUVWSNmVEKOcdAfRyd6LTqChc=)
                          5: 323830343a363762633a383030303a3a2f33342d3334203d3e20323639363437.roa (hash: DuW5wKAhp6//rvLyFaiDLnhGVFbnp+HRsMbcYUl+N/0=)
                          6: 34352e3139302e3133382e302f32342d3234203d3e20323639363437.roa (hash: 8h0SoQa+zHvg8ypoewsh82jRvTmx1mn+k+sbaBCNSRE=)
                          7: 34352e3139302e3133372e302f32342d3234203d3e20323639363437.roa (hash: XIHUqLSBSkh+uND0iH7PeZcXzivXfes80WQfvk2csrw=)
                          8: D95F78E630398477E9BAE976B3EAEDB0059994DB.crl (hash: HKO9z31KoOUDY/VXsyyUlxPsbKKS9gXqs6Ufrsi1Q6o=)
                          9: 323830343a363762633a633030303a3a2f33342d3334203d3e20323639363437.roa (hash: e7p2Z+92+MzlvClpqyoaCVFz9q8M+GOdOURvPxj59zU=)
                          10: 323830343a363762633a3a2f33332d3333203d3e20323639363437.roa (hash: smxTkQ5o90PQIFi81VarJKZNQHmklJJsnDJFMVfj0wE=)
                          11: 323830343a363762633a3a2f33322d3438203d3e20323630363437.roa (hash: HbK+I93CH0OZ8rMeXWbavpKRDyz849KcbyrzE/f1W8c=)
                          12: 323830343a363762633a383030303a3a2f33332d3333203d3e20323639363437.roa (hash: FLXGaKLJIXT/ztk+GQ6KZbmG3HuPwYPyDxg5J/txsdc=)
                          13: 323830343a363762633a3a2f33322d3332203d3e20323639363437.roa (hash: fvE9pXgMUp8SZiwt8yaIdBGzsVv1q58Rcf6C14Lu/5o=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl
                          rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 23:41:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:27:cf:a2:b3:84:6c:a1:07:57:2b:aa:06:a8:2e:9f:e4:fc:ab:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
        Validity
            Not Before: Oct 12 22:40:34 2026 GMT
            Not After : Oct 13 23:41:34 2026 GMT
        Subject: CN=FFA9A309F4750EBF616B0B79AC84E3DFF1E2078D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9c:81:b7:b2:9d:51:4b:82:30:49:58:9e:e5:
                    7d:df:bb:a0:ff:80:f2:1e:87:68:2a:c4:3f:61:b6:
                    96:63:38:28:17:70:c5:6d:ba:7d:bf:4d:f9:d7:67:
                    37:6e:b0:52:ae:8e:01:3b:c8:4e:3e:67:17:23:24:
                    20:28:33:a8:66:61:7a:86:07:29:e6:8a:08:75:2c:
                    8c:1c:18:71:96:02:cf:e4:ce:21:aa:3d:c8:1b:0e:
                    b7:09:c2:ae:5d:1b:bb:e3:76:6a:e7:a9:0c:08:14:
                    3c:a1:7c:c1:34:7e:e2:e2:a4:b4:30:9d:17:15:ba:
                    26:3b:57:54:c5:2b:81:da:00:ce:1a:75:e3:9a:e8:
                    0d:1a:33:12:85:fe:b9:f2:1a:e9:d7:c8:b8:c7:a7:
                    27:44:57:67:73:a6:4f:26:88:b9:61:94:be:d1:7f:
                    f5:3e:be:49:ba:0f:ee:82:fb:73:c4:38:11:7b:dc:
                    ce:af:f1:c6:34:52:64:c6:9d:50:5d:b8:61:15:5b:
                    fa:c9:22:35:bd:d1:1b:65:d5:1c:be:dd:85:b9:2f:
                    5d:f1:0b:61:8b:a0:c2:df:a2:46:29:a2:7c:2d:0c:
                    54:e3:28:64:2a:8e:b2:93:e8:69:27:9f:8a:9f:6f:
                    6e:6b:70:65:12:9f:8f:34:19:5a:1e:43:1d:cb:34:
                    64:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A9:A3:09:F4:75:0E:BF:61:6B:0B:79:AC:84:E3:DF:F1:E2:07:8D
            X509v3 Authority Key Identifier:
                keyid:D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:74:1c:96:b3:09:f7:ea:d0:57:c0:a4:31:5d:ca:5e:27:7b:
         f1:c8:02:73:f0:7b:be:a8:3c:f5:06:aa:98:44:ce:75:c9:a7:
         e3:51:d8:af:c6:68:2c:0b:31:19:3d:00:d8:f5:b7:3a:db:34:
         3b:3c:37:0f:59:fa:10:6f:cc:48:53:98:b7:b3:17:cf:7e:dd:
         08:e3:88:83:1f:5b:56:a8:5d:a0:36:86:c9:87:15:77:cc:88:
         b0:a1:d6:08:cc:c7:52:57:b5:10:7f:a2:fa:c3:dc:53:b8:7e:
         b6:98:dd:0f:ae:d4:98:c0:ec:3b:b7:c1:f8:94:c7:45:f6:80:
         70:d8:19:a7:33:1f:90:ce:c2:e0:95:46:a6:e1:af:50:dc:0c:
         f2:ba:9f:ea:06:25:19:1c:b9:d8:91:a8:d0:ea:3e:87:f2:08:
         c6:cf:e8:e2:84:57:fa:f6:5e:06:20:4f:e8:8b:de:51:8d:48:
         c5:17:3e:33:dc:c6:a2:6a:06:11:44:5a:5a:3f:77:d8:d9:97:
         c5:01:7f:b7:87:99:8e:cf:6e:de:5f:4e:3d:46:97:18:80:02:
         4b:4d:de:a3:d1:ef:71:55:dd:ab:e6:98:89:1c:7c:66:60:23:
         1a:fb:47:c0:9b:fb:2e:f3:6f:3c:d8:8b:7e:1e:3c:b7:00:8c:
         6f:94:c0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 13:53:53 2026 by rpki-client