Error: rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.mft
File:                     413DEE2A242256C5C1A9566FD18C03ECF2F0F586.mft (raw, json)
Hash identifier:          6AJjvgaWPap0NoeB8XKwq5sbCUX0+/NUj3IMtaSVztk=
Subject key identifier:   29:E2:34:32:A5:EE:73:AA:90:9A:49:87:09:B0:46:C9:DF:DF:07:98
Authority key identifier: 41:3D:EE:2A:24:22:56:C5:C1:A9:56:6F:D1:8C:03:EC:F2:F0:F5:86
Certificate issuer:       /CN=413DEE2A242256C5C1A9566FD18C03ECF2F0F586
Certificate serial:       0AAD64E19D1B9BF6667B18C81D0865AB11BC4D52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.mft
Manifest number:          0569
Signing time:             Sun 11 Oct 2026 12:30:00 +0000
Manifest this update:     Sun 11 Oct 2026 12:25:00 +0000
Manifest next update:     Mon 12 Oct 2026 12:30:00 +0000
Files and hashes:         1: 34352e3138362e3137362e302f32322d3234203d3e20323639343439.roa (hash: N3eL2aeWVdktkofBaT6E9gkeG3ajWvnfGJnt+5rzKyQ=)
                          2: 413DEE2A242256C5C1A9566FD18C03ECF2F0F586.crl (hash: 5JpWnD/zgppsh90F+bXluolvbjp9gQaThjFrxS283uo=)
                          3: 323830343a363463633a3a2f33322d3334203d3e20323639343439.roa (hash: vbBJksUixaCou3Yg5ly8jM+BIbRBRciatDxLe+wdIUk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.crl
                          rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 12:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ad:64:e1:9d:1b:9b:f6:66:7b:18:c8:1d:08:65:ab:11:bc:4d:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413DEE2A242256C5C1A9566FD18C03ECF2F0F586
        Validity
            Not Before: Oct 11 12:25:00 2026 GMT
            Not After : Oct 12 12:30:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fa:66:22:f9:85:f6:c0:03:87:9e:cb:c2:b2:
                    6b:a2:71:8b:47:1d:2b:70:c5:b6:4b:e9:1b:79:ec:
                    8f:5f:1e:f5:f3:e3:d4:f0:58:63:a9:de:5f:98:24:
                    fe:87:5e:59:75:b8:0f:d7:2c:f2:41:79:ae:f5:74:
                    2b:ca:57:51:02:5f:fa:8d:85:1c:e8:57:47:24:5e:
                    4f:24:9c:90:59:bf:64:21:b4:f4:54:b9:57:a3:43:
                    81:5b:07:f1:47:9d:4a:99:12:d0:b9:ac:7b:b0:54:
                    92:fd:44:d9:21:5d:b3:80:14:1b:5b:c6:df:81:c0:
                    aa:87:14:17:cc:c4:3a:8d:1d:49:94:1b:02:9a:13:
                    0b:b0:45:e3:70:7b:c5:e8:44:7f:d7:6a:18:27:c7:
                    f1:41:df:bf:b0:e1:4a:72:16:c1:87:09:69:fb:37:
                    18:d7:e3:19:06:b0:f3:93:f6:9b:41:36:2a:1e:32:
                    81:fc:43:14:67:42:5d:dd:48:ed:79:9c:e3:a0:9a:
                    9a:a4:e9:fe:c6:cf:93:86:6d:d1:30:7c:0c:d4:e5:
                    56:27:bc:2f:da:cc:0b:46:ff:54:f4:7c:5a:43:7b:
                    7d:38:f4:2b:ea:83:f0:53:e3:ad:6a:76:5c:4f:4a:
                    e4:36:bc:d3:c3:e3:e3:c6:9a:3d:75:68:af:ab:2b:
                    3b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E2:34:32:A5:EE:73:AA:90:9A:49:87:09:B0:46:C9:DF:DF:07:98
            X509v3 Authority Key Identifier:
                keyid:41:3D:EE:2A:24:22:56:C5:C1:A9:56:6F:D1:8C:03:EC:F2:F0:F5:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:0b:6d:f5:8e:43:44:87:d9:44:f5:7f:40:e0:47:f8:34:e8:
         46:f5:0e:a4:00:db:68:67:49:a0:02:42:9f:61:11:cb:d1:78:
         b4:4b:18:52:0b:93:8c:4d:71:5c:99:47:15:a8:87:c0:60:64:
         a1:96:bd:92:68:7b:e8:b9:8b:d7:e5:c6:bf:b3:76:53:60:85:
         16:95:b8:e1:e9:58:75:8d:a0:bd:54:3a:fa:0b:62:5c:79:2a:
         f8:3b:a9:4a:05:07:8c:75:36:58:63:a5:48:0c:3b:28:5b:df:
         3d:84:ef:58:e2:fe:5e:81:d9:46:64:fd:e2:fc:83:b3:f1:37:
         b1:5e:1d:1b:be:98:3f:77:cf:cc:ba:16:fc:27:a7:f2:75:4c:
         b3:bf:97:a4:0e:84:93:08:5c:41:20:f9:f1:56:8c:0b:73:ef:
         8a:8e:70:d4:e9:8e:52:7c:65:57:e0:ce:8a:bb:cd:ab:2f:56:
         13:49:d6:c8:a2:bc:1e:ba:be:7c:70:f9:62:38:ba:83:f8:ec:
         e8:25:96:c4:c7:b0:77:a5:0e:d0:dc:52:d0:9b:a4:ec:37:9c:
         c0:08:4d:d1:06:8d:bc:2a:2d:31:a6:07:0a:3e:51:cb:9f:32:
         30:45:b8:52:7e:60:16:44:a1:e8:78:ce:9b:df:2c:9c:84:3c:
         19:67:df:c6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 11 20:32:22 2026 by rpki-client