Error: rpki-repo.registro.br/repo/A9GJXjkQbK8brLcXGXxfAocQAeyfzsYYAFSN4bYohNUB/1/D2D1DF48E03DEC677ADBC33C8CBEF830F63C4927.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/A9GJXjkQbK8brLcXGXxfAocQAeyfzsYYAFSN4bYohNUB/1/D2D1DF48E03DEC677ADBC33C8CBEF830F63C4927.mft
File:                     D2D1DF48E03DEC677ADBC33C8CBEF830F63C4927.mft (raw, json)
Hash identifier:          byu0UiBiQXM/+3RKSW7G22tS0Fh7w7q4WMIbcmtGEgg=
Subject key identifier:   92:B5:6D:40:2B:0A:E0:E0:57:78:C1:7E:68:CA:EA:43:D4:E0:12:EF
Authority key identifier: D2:D1:DF:48:E0:3D:EC:67:7A:DB:C3:3C:8C:BE:F8:30:F6:3C:49:27
Certificate issuer:       /CN=D2D1DF48E03DEC677ADBC33C8CBEF830F63C4927
Certificate serial:       13C2A93F3EE95912D26CBF95AD5CA0FA123B361B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2D1DF48E03DEC677ADBC33C8CBEF830F63C4927.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9GJXjkQbK8brLcXGXxfAocQAeyfzsYYAFSN4bYohNUB/1/D2D1DF48E03DEC677ADBC33C8CBEF830F63C4927.mft
Manifest number:          68
Signing time:             Mon 12 Oct 2026 01:56:24 +0000
Manifest this update:     Mon 12 Oct 2026 01:51:24 +0000
Manifest next update:     Tue 13 Oct 2026 04:28:24 +0000
Files and hashes:         1: 34352e3137382e3138382e302f32332d3233203d3e20323639303931.roa (hash: TkAYXv1c8eUiRtuSJJAUt3xI/bG5+Bp4XZb1cGiy+Ts=)
                          2: D2D1DF48E03DEC677ADBC33C8CBEF830F63C4927.crl (hash: 9L9kjegBQJbeExdyWO7Q6C/Qknf2Zr//0BwNFohQY6o=)
                          3: 34352e3137382e3139312e302f32342d3234203d3e20323639303931.roa (hash: e57RZbCUxS5pndMZ9mdsoS9VyXRxP73oNwRw5rmQBMA=)
                          4: 34352e3137382e3138382e302f32322d3232203d3e20323639303931.roa (hash: BvHpc3WkfcaOWTCXq2TidbMxZkyTn+iwU4OtuvgV5Zs=)
                          5: 323830343a356635303a3a2f33322d3332203d3e20323639303931.roa (hash: EPBh8YC2OQ8opu5P2czPdY8NaqD0YDt/AX0x1lWnHJk=)
                          6: 34352e3137382e3138382e302f32342d3234203d3e20323639303931.roa (hash: FWMNyWYg2Rk+E7qFJVEnaV/EwsAYDSToAQqkHT3HyO0=)
                          7: 34352e3137382e3139302e302f32332d3233203d3e20323639303931.roa (hash: eUPJMYbSLfUT8eJnKur4tRrSMeIA8MgoyBVprLTf92E=)
                          8: 323830343a356635303a3a2f33322d3336203d3e20323639303931.roa (hash: 2ritvwpY0V0ajPOmpnlWM29Au5R84eAXgEI2nYlWqzE=)
                          9: 34352e3137382e3139302e302f32342d3234203d3e20323639303931.roa (hash: 6/QJxKi7Pctnwa+rrpga0ORvct0iRqkGczKdw0A788U=)
                          10: 34352e3137382e3138392e302f32342d3234203d3e20323639303931.roa (hash: Rfadxmoj17D8bBcLFROGEAeEHE/i7R9Pg9RGjuiWxBE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9GJXjkQbK8brLcXGXxfAocQAeyfzsYYAFSN4bYohNUB/1/D2D1DF48E03DEC677ADBC33C8CBEF830F63C4927.crl
                          rsync://rpki-repo.registro.br/repo/A9GJXjkQbK8brLcXGXxfAocQAeyfzsYYAFSN4bYohNUB/1/D2D1DF48E03DEC677ADBC33C8CBEF830F63C4927.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2D1DF48E03DEC677ADBC33C8CBEF830F63C4927.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 04:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c2:a9:3f:3e:e9:59:12:d2:6c:bf:95:ad:5c:a0:fa:12:3b:36:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2D1DF48E03DEC677ADBC33C8CBEF830F63C4927
        Validity
            Not Before: Oct 12 01:51:24 2026 GMT
            Not After : Oct 13 04:28:24 2026 GMT
        Subject: CN=92B56D402B0AE0E05778C17E68CAEA43D4E012EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:47:d3:65:9d:26:ec:83:94:c6:3b:db:36:09:
                    d5:da:39:7d:91:95:46:12:7e:95:08:51:28:cd:55:
                    22:d8:9f:23:14:75:8f:c4:58:c9:a1:fd:51:81:57:
                    e2:da:1c:ce:1f:1e:5b:bd:52:93:f9:dd:4f:e9:02:
                    ec:5e:9c:2d:a4:f5:0c:96:c5:0c:02:45:71:c3:04:
                    db:b4:86:85:08:77:63:1e:a7:3c:a7:25:eb:5d:48:
                    82:a9:e1:1c:11:3c:ad:86:11:d5:90:e6:41:fd:0e:
                    62:a3:6d:9f:59:20:26:ff:8e:d6:63:68:a5:55:3b:
                    6a:df:35:15:d6:f5:98:8e:db:79:0d:10:43:f9:ea:
                    94:66:b8:c6:d3:84:f0:0c:b0:1a:17:20:b8:8f:e7:
                    2b:c5:4e:db:4c:74:73:bc:57:2c:26:c9:7e:d3:77:
                    f6:10:ca:73:79:25:07:88:b0:fa:fb:b0:9d:53:35:
                    55:3b:88:4b:0c:58:9e:df:b9:f4:b8:2e:cd:db:7c:
                    27:99:8c:08:fd:22:bc:7c:a6:88:b4:47:77:73:bd:
                    ed:65:5a:da:c1:37:ff:89:97:cf:d3:22:0f:be:ab:
                    4c:07:5b:1c:ff:22:9c:af:5e:78:ab:81:70:81:de:
                    0c:57:3c:5b:18:3a:45:18:81:7c:04:31:bd:8f:85:
                    af:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B5:6D:40:2B:0A:E0:E0:57:78:C1:7E:68:CA:EA:43:D4:E0:12:EF
            X509v3 Authority Key Identifier:
                keyid:D2:D1:DF:48:E0:3D:EC:67:7A:DB:C3:3C:8C:BE:F8:30:F6:3C:49:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9GJXjkQbK8brLcXGXxfAocQAeyfzsYYAFSN4bYohNUB/1/D2D1DF48E03DEC677ADBC33C8CBEF830F63C4927.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2D1DF48E03DEC677ADBC33C8CBEF830F63C4927.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9GJXjkQbK8brLcXGXxfAocQAeyfzsYYAFSN4bYohNUB/1/D2D1DF48E03DEC677ADBC33C8CBEF830F63C4927.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:9f:97:b4:ac:27:bc:ac:60:96:71:36:5a:b1:14:84:d8:b2:
         7f:ee:87:52:8d:98:76:f3:8f:b8:ab:69:6d:43:f3:68:dc:af:
         d3:e2:e3:f8:cb:1e:3b:fd:20:a8:14:83:1b:7f:80:42:cb:90:
         87:02:f3:03:60:ae:97:11:a7:7f:bb:db:d1:73:48:56:e4:f0:
         41:03:35:1d:a7:4d:16:5f:a8:57:fc:77:ab:ea:86:08:ed:9e:
         a5:f7:78:67:56:c7:0c:83:48:a5:ae:c9:0a:40:e0:e3:4d:15:
         29:51:11:8c:38:17:b4:82:62:99:2b:a1:c2:12:55:ab:63:7d:
         df:6e:b0:48:f6:e4:d8:f0:ef:c5:1a:80:53:05:47:e3:ae:6b:
         95:41:18:70:6a:a1:7d:64:c1:f7:43:57:e4:b8:70:c4:7d:82:
         fe:b4:7d:92:3e:81:fb:21:73:7d:1b:6c:20:0b:98:49:dc:db:
         35:55:5a:8a:93:18:c4:e2:4a:d2:ad:f7:3b:cd:fb:e5:5d:6a:
         1c:cd:61:50:8d:77:94:d8:2a:44:c2:7f:ce:3b:29:02:60:9c:
         61:78:e5:56:9f:ab:61:b9:ba:ae:5f:de:82:88:f7:11:d4:43:
         39:63:6c:f3:3a:d8:28:ce:35:53:93:38:71:e0:44:9e:c5:d4:
         ec:89:4e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:14:33 2026 by rpki-client