Error: rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
File:                     D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft (raw, json)
Hash identifier:          Y6nBqkcAyeL89Cut48HRVfdJRMeHrLIBU3wB0P9rp+A=
Subject key identifier:   06:DB:9B:2D:04:18:30:2F:9D:C5:5C:0E:18:E5:1F:FC:EC:ED:48:0E
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       349EA92692B1B8F0C04A345D2498FFF73314D6BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
Manifest number:          04E8
Signing time:             Wed 28 Oct 2026 22:49:12 +0000
Manifest this update:     Wed 28 Oct 2026 22:44:12 +0000
Manifest next update:     Fri 30 Oct 2026 00:46:12 +0000
Files and hashes:         1: 3133312e3130302e3137352e302f32342d3234203d3e203232313737.roa (hash: 8HB+zauS7rg18e8AsAz+SJZCtcokz5uwCwQSZ2d8ucY=)
                          2: 3133312e3130302e3137322e302f32342d3234203d3e203232313737.roa (hash: pqt+C/C+kluvr+JT8MJ6d/qhriCFbH45W/2AEiNZs3E=)
                          3: 3230302e3136322e3133362e302f32342d3234203d3e203232313737.roa (hash: Cia4KlGENw8q7BDbBpx1Esf9u1qDpG6xptoX1ZfnAR8=)
                          4: 3230302e3136322e3134332e302f32342d3234203d3e203232313737.roa (hash: tQXNitmGeAMgOOGQB3ec1heHIIFTsXEMkt084dnk3c0=)
                          5: 3133312e3130302e3137322e302f32322d3232203d3e203232313737.roa (hash: TGrfzvEPH/KDtpDUD7qXJSWxp0NISABDPGuPeJAyIH4=)
                          6: 3230302e3136322e3133362e302f32322d3232203d3e203232313737.roa (hash: LS3ggZYhLUkmCNXkiOi7epEVc90WyfbjInAFSt5eAZE=)
                          7: 3230302e3136322e3133362e302f32332d3234203d3e203232313737.roa (hash: rKLKrrc6pgIewnHgAINBuwuZA+NuByDSZUrz3uP2ZKc=)
                          8: 323830343a3533343a3a2f33322d313238203d3e203232313737.roa (hash: xOjWNHdlvC4aWCpaMTim+rUG/eRaBOhfA8dU4+KmaTc=)
                          9: 3230302e3136322e3133372e302f32342d3234203d3e203232313737.roa (hash: pDoo1WhOG32kg0PuB5rXZ49eoVIgpk01MJ2NFJEG98g=)
                          10: 3230302e3136322e3132382e302f32322d3232203d3e203232313737.roa (hash: SwNBp0ka5qIjKgJoDC/Io4eBTQDsLpDy2h6TijNhO/w=)
                          11: 3230302e3136322e3133322e302f32322d3232203d3e203232313737.roa (hash: JmMWAEsSlJ6B/1oaGwfBanW5pbXDn/ENy/M7pcZVNgM=)
                          12: 3230302e3136322e3134312e302f32342d3234203d3e203232313737.roa (hash: v9qbYBbhHMIjxA/n1XkVL9g+IEiwJRsijmZjf6laD7M=)
                          13: 3230302e3136322e3133332e302f32342d3234203d3e203232313737.roa (hash: +0goFd/LMurWFfdExFrOygGpSI08lqGkAsuLFaWRTR4=)
                          14: 3230302e3136322e3133342e302f32342d3234203d3e203232313737.roa (hash: i1JfbygWSHq9QMhPwV0N2EyH8dC9ecdZydnFg+k4fmY=)
                          15: 3230302e3136322e3133392e302f32342d3234203d3e203232313737.roa (hash: a7RfiYF9zwob9+uSUJt+vTzhAqsLL4WlYxkM+y7K5BQ=)
                          16: 3133312e3130302e3137342e302f32342d3234203d3e203232313737.roa (hash: G8yw4ZJifCky4G4PbcnvxeUQr+RiwGNBM9VDzsChI0E=)
                          17: 3138392e35312e302e302f32302d3234203d3e203232313737.roa (hash: MSpmwvI8koTCZN2TB/gPDH1aKqMHmW0jId9F7ZVss/M=)
                          18: D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl (hash: h1Rna0YSwQwB7C6Q+7CzlgcALg6k6SGYSWkLICM7Mjc=)
                          19: 3230302e3136322e3133302e302f32342d3234203d3e203232313737.roa (hash: 8a/TBMAVgwNlIJNYx9eWDBjjchBDqS5Cv2rlk04NSiI=)
                          20: 3230302e3136322e3133322e302f32342d3234203d3e203232313737.roa (hash: 4aUXcP8FBY9Zo9u3sryw5c1t8G1ptZr9BuzKMc7lsgA=)
                          21: 3230302e3136322e3132382e302f32302d3234203d3e203232313737.roa (hash: MXVFLm1qqOz7PH7jNRUzcLTCLPx++pJBfxQHuONGdEE=)
                          22: 3230302e3136322e3134322e302f32342d3234203d3e203232313737.roa (hash: 3yjUNLSvZSLgjHTVjtOuqU/WAQEJAiqz85SsRf+lMXc=)
                          23: 3133312e3130302e3137332e302f32342d3234203d3e203232313737.roa (hash: ibyk1oY+gUhcgIJ9i3FXh1S+gw4Qe7hxL5IeQeRA6+Y=)
                          24: 323830343a3533343a323030303a3a2f34302d3430203d3e203232313737.roa (hash: XjooNNlSQgiglmY+X6ccfMzWiktFEZW1v3jPWi0KwT4=)
                          25: 3230302e3136322e3134302e302f32322d3232203d3e203232313737.roa (hash: feAr7mzmLoZ67SX8ixBZsFYxa5jtsaLRsLiayuFR4Iw=)
                          26: 3230302e3136322e3133312e302f32342d3234203d3e203232313737.roa (hash: df2PrxjXK3CFv/xR4wO223F51fO/kqbjh3dIn5eH8ew=)
                          27: 3230302e3136322e3132382e302f32302d3230203d3e203232313737.roa (hash: 0+CRX28ivABD7/03XOYQjt/LmyhXhinDYUrbWgzBU/4=)
                          28: 3230302e3136322e3133382e302f32342d3234203d3e203232313737.roa (hash: lH2fqT4N3xDjFp8PjOoXFMu6kkBt6nuEAEd7is+iPj0=)
                          29: 3230302e3136322e3134302e302f32342d3234203d3e203232313737.roa (hash: uIatVJTA6JNImnzSlVdIeQgNDErRdRkwMz4gCwNLA5g=)
                          30: 3230302e3136322e3132392e302f32342d3234203d3e203232313737.roa (hash: w2RJWst/V96QLHdf3OvOcc7LzOwE0kL/84BOw+JHTnY=)
                          31: 3230302e3136322e3133352e302f32342d3234203d3e203232313737.roa (hash: HIMR8299sImbGEhWgoK4tnpERYMib9Wd7IHIk7qtkqI=)
                          32: 3230302e3136322e3132382e302f32342d3234203d3e203232313737.roa (hash: 4hmPv1ugxyvlVTK6l2bvvOQlHfeMtLtPdTmMda6NxGE=)
                          33: 323830343a3533343a663030303a3a2f34302d3430203d3e203232313737.roa (hash: 09+NUz+9frP/8kdDf1nf1Vcs/0LDihk1Z0P6kBHO1ms=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 00:46:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:9e:a9:26:92:b1:b8:f0:c0:4a:34:5d:24:98:ff:f7:33:14:d6:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Oct 28 22:44:12 2026 GMT
            Not After : Oct 30 00:46:12 2026 GMT
        Subject: CN=06DB9B2D0418302F9DC55C0E18E51FFCECED480E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:00:0d:46:05:72:28:a1:5f:5c:8c:bf:cc:c6:
                    a3:59:42:08:bc:97:c8:70:ba:9d:f8:fd:97:26:33:
                    e3:cf:36:18:92:a8:20:aa:2d:f0:09:cd:87:35:ac:
                    35:ff:c8:15:b3:f0:f3:14:a1:45:47:96:02:0d:2b:
                    32:a8:73:7a:0b:8c:0b:08:54:e1:5d:e4:03:ae:be:
                    cd:f5:33:fb:c3:13:97:ab:dc:61:27:22:f0:de:db:
                    35:01:39:79:c7:99:db:bc:39:c7:15:fc:9e:d8:68:
                    16:16:71:50:a1:cf:44:16:2b:25:fc:bc:eb:19:ec:
                    4a:83:b2:64:b7:55:41:81:3e:c0:47:92:e1:d7:30:
                    11:f9:01:01:cb:7d:42:a7:15:bc:75:48:50:54:b7:
                    55:19:e3:9f:b5:4a:c5:a9:6b:09:3c:7b:55:e4:35:
                    5d:13:c1:59:47:cf:6e:0e:6c:49:f7:d6:2a:a6:7d:
                    d8:99:06:48:7c:9e:38:c1:20:a8:d6:90:0c:77:de:
                    09:b3:00:37:47:7b:0b:d7:34:63:19:00:b8:01:74:
                    a2:39:79:db:24:0e:59:b4:73:81:da:93:7f:1d:f6:
                    11:25:1f:77:67:a1:25:17:0c:31:15:54:32:c8:ac:
                    46:14:56:47:22:bb:8f:71:e5:e0:d7:69:37:46:17:
                    f9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:DB:9B:2D:04:18:30:2F:9D:C5:5C:0E:18:E5:1F:FC:EC:ED:48:0E
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:08:cb:d9:50:6c:ae:37:9c:08:96:ca:62:29:c0:85:b5:79:
         37:01:d2:11:03:19:67:2f:84:4f:98:63:df:88:75:a3:78:1a:
         bb:62:ee:2d:99:a7:e6:e6:57:46:6b:66:c6:b6:de:7b:b4:33:
         00:08:9c:a0:e8:a1:b1:a2:7e:ec:43:ab:56:f4:bc:3a:d0:fd:
         c9:0b:31:80:22:5e:fe:fc:80:61:dd:1a:e3:7e:fb:3c:df:f1:
         1e:f5:56:3e:14:59:af:e0:11:a1:c8:04:f4:27:b8:d4:3d:a3:
         22:f1:99:b7:fe:74:e4:6d:0b:71:6b:a5:b2:40:f9:34:71:98:
         e8:c6:46:37:ed:62:78:b4:b5:e1:33:54:8f:3b:fd:84:6a:09:
         bd:df:24:1d:93:24:c1:87:2e:9c:6e:10:87:3a:0e:0b:7c:de:
         c0:0a:0f:8a:06:1e:35:b6:0c:dc:3f:b3:44:ea:ac:4f:2c:54:
         aa:19:c3:b8:af:db:49:03:04:43:1e:6b:d7:5d:88:d4:42:0b:
         37:16:51:24:7d:fe:6c:b8:f1:e1:6d:ed:21:b6:8f:82:fc:c0:
         f1:84:b4:02:ea:04:12:70:b3:bf:e5:05:8d:19:e9:bc:cb:46:
         c0:41:8a:c7:f0:8e:3b:9c:8b:ff:ef:14:c3:17:4f:cd:98:5a:
         36:0e:1b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:11:02 2026 by rpki-client