Error: rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.mft
File:                     A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.mft (raw, json)
Hash identifier:          duEckBuaTpw0UfJugUL7C4trHXDkLw+51StM2y0aa6o=
Subject key identifier:   09:8A:A6:CE:FD:DA:EB:63:A1:BA:EE:0E:80:62:10:99:28:18:58:87
Authority key identifier: A1:65:31:9A:A3:6D:4F:FD:2A:5D:9A:2B:E4:2F:5C:2E:F0:E2:0B:8E
Certificate issuer:       /CN=A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E
Certificate serial:       7A6EBB1CE214FF3371D231A838D9C9776D39D48C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.mft
Manifest number:          056E
Signing time:             Wed 14 Oct 2026 04:20:00 +0000
Manifest this update:     Wed 14 Oct 2026 04:15:00 +0000
Manifest next update:     Thu 15 Oct 2026 04:20:00 +0000
Files and hashes:         1: 323830343a383038303a343030303a3a2f33342d3334203d3e20323731373534.roa (hash: 6vcZuyZ15SCjY3gZq0i6rCSbEUeyQoeAoobLxvAJq6Y=)
                          2: A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.crl (hash: TohIy7tD0tEoVyY+lKh0HjItdBYW2/SIxevLHCZFaC4=)
                          3: 323830343a383038303a3a2f33332d3333203d3e20323731373534.roa (hash: OF4qCfkjSVuHBeRtLzVYWOomJ5NZy654wIaKa/KSQFk=)
                          4: 323830343a383038303a383030303a3a2f33332d3333203d3e20323731373534.roa (hash: kGEtGWQtM11UcMXBptNnTw2aSqCoSvSndPOV/qiV0EA=)
                          5: 323830343a383038303a3a2f33322d3332203d3e20323731373534.roa (hash: 1CYM+lfNzbhk3t6ojtq94Hwaabr/GjokAPRrekXBgPc=)
                          6: 323830343a383038303a633030303a3a2f33342d3334203d3e20323731373534.roa (hash: dOjBFiQ32+qPyJN9X7UuntXflMn6H0c06DF5jVRBZHg=)
                          7: 323830343a383038303a3a2f33342d3334203d3e20323731373534.roa (hash: GsTYgWWVqp4/Gg/7NBRtF3VNJ42vVwEWMp2AsvN42Fk=)
                          8: 323830343a383038303a383030303a3a2f33342d3334203d3e20323731373534.roa (hash: KQnQCytaRVogvL6zJhT8o2cClwMPi5VqD6ts4yzyj6g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.crl
                          rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 04:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:6e:bb:1c:e2:14:ff:33:71:d2:31:a8:38:d9:c9:77:6d:39:d4:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E
        Validity
            Not Before: Oct 14 04:15:00 2026 GMT
            Not After : Oct 15 04:20:00 2026 GMT
        Subject: CN=3082010A0282010100C3181C605E554C1C502A268B2C8643C43D1E50D9F4C8E8599C81EE32BDD74FF6761FBC1AF3D3A7871495E9E9476C289CAD5F290EF90EAFD034F74F7F8A74017D7EFF8D9C2679E1936A6F97FE19FE2FD97103CFFBC3D1B5DF99C30873D8DD684579098FABA59E4A058BD0D480CD499700B93829A7901A693B966ADA81E6B033FD4735BA35B67A93264181084C7F2D3C7EEC77C333184280F931B9E5338AC5367ED6F19E2BDA84EA3E752211776D525B955D8583D0D274A1087C8BE35584D81AC6632740366BF0D5DA9F934A949E74298DFD81ACDE515BF32D014DBC55BF4B7017D62012D0EF21858ABD909FE7F6D709639DEE2BED65CD27EE250EF56BCC577C8F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:18:1c:60:5e:55:4c:1c:50:2a:26:8b:2c:86:
                    43:c4:3d:1e:50:d9:f4:c8:e8:59:9c:81:ee:32:bd:
                    d7:4f:f6:76:1f:bc:1a:f3:d3:a7:87:14:95:e9:e9:
                    47:6c:28:9c:ad:5f:29:0e:f9:0e:af:d0:34:f7:4f:
                    7f:8a:74:01:7d:7e:ff:8d:9c:26:79:e1:93:6a:6f:
                    97:fe:19:fe:2f:d9:71:03:cf:fb:c3:d1:b5:df:99:
                    c3:08:73:d8:dd:68:45:79:09:8f:ab:a5:9e:4a:05:
                    8b:d0:d4:80:cd:49:97:00:b9:38:29:a7:90:1a:69:
                    3b:96:6a:da:81:e6:b0:33:fd:47:35:ba:35:b6:7a:
                    93:26:41:81:08:4c:7f:2d:3c:7e:ec:77:c3:33:18:
                    42:80:f9:31:b9:e5:33:8a:c5:36:7e:d6:f1:9e:2b:
                    da:84:ea:3e:75:22:11:77:6d:52:5b:95:5d:85:83:
                    d0:d2:74:a1:08:7c:8b:e3:55:84:d8:1a:c6:63:27:
                    40:36:6b:f0:d5:da:9f:93:4a:94:9e:74:29:8d:fd:
                    81:ac:de:51:5b:f3:2d:01:4d:bc:55:bf:4b:70:17:
                    d6:20:12:d0:ef:21:85:8a:bd:90:9f:e7:f6:d7:09:
                    63:9d:ee:2b:ed:65:cd:27:ee:25:0e:f5:6b:cc:57:
                    7c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:8A:A6:CE:FD:DA:EB:63:A1:BA:EE:0E:80:62:10:99:28:18:58:87
            X509v3 Authority Key Identifier:
                keyid:A1:65:31:9A:A3:6D:4F:FD:2A:5D:9A:2B:E4:2F:5C:2E:F0:E2:0B:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:e8:79:d0:e9:b1:ea:07:7a:60:12:11:f5:88:bd:d8:32:2b:
         c2:c0:65:5a:bd:db:64:22:7b:dc:76:bb:64:6a:9d:39:3a:a1:
         53:88:77:05:34:d2:2d:e4:73:9d:25:c1:86:1f:a9:96:69:d8:
         66:a0:03:b3:f1:75:5c:e4:8c:0b:5e:a6:a1:f6:58:4a:1f:19:
         ab:60:03:5d:eb:4d:20:2d:6a:52:68:5d:2c:ed:2d:5f:5f:cb:
         63:58:84:ff:a9:9e:0b:9a:6a:45:00:bb:66:96:bf:d4:26:9c:
         25:29:1e:9c:1f:42:42:90:c7:52:2a:32:c2:de:e2:f2:71:48:
         cc:6a:a0:1a:eb:25:f4:d8:0d:3e:e8:c0:d3:67:ed:e1:e9:34:
         23:fe:ab:69:11:6d:4a:c0:9a:9f:c4:e9:3b:f4:a1:b7:86:5b:
         ed:20:6e:0c:5f:18:33:a0:d0:82:68:62:3b:fd:98:f9:54:dc:
         1d:43:2e:c9:ff:07:d6:d2:76:f3:50:da:4c:0a:a0:ed:71:45:
         b2:79:9f:76:2c:2e:fd:89:9f:69:dd:d4:56:dc:3c:92:c5:aa:
         7b:4a:a8:d1:dc:78:7d:ed:54:68:0c:91:85:50:b2:94:b1:b0:
         88:1b:fe:38:68:db:6d:a9:ba:c0:2d:0d:28:b2:6a:1d:c3:cd:
         0c:6c:53:a2
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUem67HOIU/zNx0jGoONnJd2051IwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE2NTMxOUFBMzZENEZGRDJBNUQ5QTJCRTQyRjVDMkVG
MEUyMEI4RTAeFw0yNjEwMTQwNDE1MDBaFw0yNjEwMTUwNDIwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzMxODFDNjA1RTU1NEMxQzUw
MkEyNjhCMkM4NjQzQzQzRDFFNTBEOUY0QzhFODU5OUM4MUVFMzJCREQ3NEZGNjc2
MUZCQzFBRjNEM0E3ODcxNDk1RTlFOTQ3NkMyODlDQUQ1RjI5MEVGOTBFQUZEMDM0
Rjc0RjdGOEE3NDAxN0Q3RUZGOEQ5QzI2NzlFMTkzNkE2Rjk3RkUxOUZFMkZEOTcx
MDNDRkZCQzNEMUI1REY5OUMzMDg3M0Q4REQ2ODQ1NzkwOThGQUJBNTlFNEEwNThC
RDBENDgwQ0Q0OTk3MDBCOTM4MjlBNzkwMUE2OTNCOTY2QURBODFFNkIwMzNGRDQ3
MzVCQTM1QjY3QTkzMjY0MTgxMDg0QzdGMkQzQzdFRUM3N0MzMzMxODQyODBGOTMx
QjlFNTMzOEFDNTM2N0VENkYxOUUyQkRBODRFQTNFNzUyMjExNzc2RDUyNUI5NTVE
ODU4M0QwRDI3NEExMDg3QzhCRTM1NTg0RDgxQUM2NjMyNzQwMzY2QkYwRDVEQTlG
OTM0QTk0OUU3NDI5OERGRDgxQUNERTUxNUJGMzJEMDE0REJDNTVCRjRCNzAxN0Q2
MjAxMkQwRUYyMTg1OEFCRDkwOUZFN0Y2RDcwOTYzOURFRTJCRUQ2NUNEMjdFRTI1
MEVGNTZCQ0M1NzdDOEYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwxgcYF5VTBxQKiaLLIZDxD0eUNn0yOhZnIHuMr3XT/Z2H7wa89On
hxSV6elHbCicrV8pDvkOr9A0909/inQBfX7/jZwmeeGTam+X/hn+L9lxA8/7w9G1
35nDCHPY3WhFeQmPq6WeSgWL0NSAzUmXALk4KaeQGmk7lmrageawM/1HNbo1tnqT
JkGBCEx/LTx+7HfDMxhCgPkxueUzisU2ftbxnivahOo+dSIRd21SW5VdhYPQ0nSh
CHyL41WE2BrGYydANmvw1dqfk0qUnnQpjf2BrN5RW/MtAU28Vb9LcBfWIBLQ7yGF
ir2Qn+f21wljne4r7WXNJ+4lDvVrzFd8jwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FAmKps792utjobruDoBiEJkoGFiHMB8GA1UdIwQYMBaAFKFlMZqjbU/9Kl2aK+Qv
XC7w4guOMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JxZDRrdWtLbWVOb2Y5
WEdEMkJTY2hzZHFkYUJVQ3RtM3gzM3JTcEZMY0gyLzEvQTE2NTMxOUFBMzZENEZG
RDJBNUQ5QTJCRTQyRjVDMkVGMEUyMEI4RS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BMTY1MzE5QUEzNkQ0RkZEMkE1RDlBMkJFNDJGNUMyRUYwRTIw
QjhFLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JxZDRrdWtLbWVOb2Y5WEdEMkJT
Y2hzZHFkYUJVQ3RtM3gzM3JTcEZMY0gyLzEvQTE2NTMxOUFBMzZENEZGRDJBNUQ5
QTJCRTQyRjVDMkVGMEUyMEI4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGLoedDpseoHemASEfWIvdgy
K8LAZVq922Qie9x2u2RqnTk6oVOIdwU00i3kc50lwYYfqZZp2GagA7PxdVzkjAte
pqH2WEofGatgA13rTSAtalJoXSztLV9fy2NYhP+pnguaakUAu2aWv9QmnCUpHpwf
QkKQx1IqMsLe4vJxSMxqoBrrJfTYDT7owNNn7eHpNCP+q2kRbUrAmp/E6Tv0obeG
W+0gbgxfGDOg0IJoYjv9mPlU3B1DLsn/B9bSdvNQ2kwKoO1xRbJ5n3YsLv2Jn2nd
1FbcPJLFqntKqNHceH3tVGgMkYVQspSxsIgb/jho222pusAtDSiyah3DzQxsU6I=
-----END CERTIFICATE-----
Generated at Wed Oct 14 20:33:05 2026 by rpki-client