Error: rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.mft
File:                     A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.mft (raw, json)
Hash identifier:          HZ9wxLwgtD8WjhxHyJxgbVbulMoN6cAZX/BuX1k3Czw=
Subject key identifier:   E2:B9:5A:FA:36:38:76:1E:EC:04:12:04:BF:98:75:58:03:C9:7A:9B
Authority key identifier: A9:4C:26:1E:7F:54:FD:8F:91:32:D7:CC:65:87:6A:9F:CC:B2:2B:44
Certificate issuer:       /CN=A94C261E7F54FD8F9132D7CC65876A9FCCB22B44
Certificate serial:       1D0BB56EB8741240BCA37188CEE7E6517B4F0F5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.mft
Manifest number:          04D0
Signing time:             Tue 13 Oct 2026 02:47:00 +0000
Manifest this update:     Tue 13 Oct 2026 02:42:00 +0000
Manifest next update:     Wed 14 Oct 2026 03:29:00 +0000
Files and hashes:         1: 3137372e33392e3134342e302f32312d3234203d3e20323632343237.roa (hash: 2aYEhjjjmZEpcJQjkFDs9GcZJY0yyLe7/GNg0PrLRDQ=)
                          2: 3137372e33392e3135322e302f32322d3234203d3e20323632343237.roa (hash: x2zABcvcgdsVRe7JLqx9xXPX3lv1ybeM3CgjuslMByM=)
                          3: 323830343a3434383a3a2f33322d3438203d3e20323632343237.roa (hash: aOiF6PYqdNGGMv7EZzFq7ndGVUK3Klb748WNp26Y48g=)
                          4: 3133382e39392e34382e302f32322d3234203d3e20323632343237.roa (hash: lFE5gdFlotbVZ/ader8fS7ddZ7F1vMd+RLz58X0z1zg=)
                          5: A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.crl (hash: K8ooK1BFQ0bA5AfTx6kBmydy49ie73Uq2T4u2GNgQ7Y=)
                          6: 3134332e3230322e32382e302f32322d3234203d3e20323632343237.roa (hash: 8JVkQQUnSjWez23MtgHlPB3yB7Lkv9Z9fsIpMnO6NOc=)
                          7: 3137372e37312e32342e302f32312d3234203d3e20323632343237.roa (hash: jbQZTyNvhqR8K3X4/cHqzIURAP5S+P93gV9yB1e5Omk=)
                          8: 3136382e3232382e3137322e302f32322d3234203d3e20323632343237.roa (hash: I1KofV/gDgGNo6pqVH7aM2ZIjTFamFD7T1deaLjwcws=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.crl
                          rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 03:29:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:0b:b5:6e:b8:74:12:40:bc:a3:71:88:ce:e7:e6:51:7b:4f:0f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A94C261E7F54FD8F9132D7CC65876A9FCCB22B44
        Validity
            Not Before: Oct 13 02:42:00 2026 GMT
            Not After : Oct 14 03:29:00 2026 GMT
        Subject: CN=E2B95AFA3638761EEC041204BF98755803C97A9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9f:dc:e4:45:35:31:20:80:f0:5c:55:ce:71:
                    3b:d3:be:cc:e4:cc:9a:96:5c:82:25:d8:64:ee:3b:
                    54:15:3e:88:10:7a:ac:c2:4d:1d:6f:d3:a9:ad:c5:
                    09:08:1b:a5:3d:ef:df:7a:93:f9:7f:cd:07:a0:f9:
                    b1:d4:a8:91:89:71:fd:62:06:0b:71:ff:a8:56:48:
                    87:37:64:eb:ac:1d:76:ac:dd:86:80:ff:c1:82:d9:
                    88:7f:97:6c:74:9d:73:bb:db:bd:4b:13:25:fd:5a:
                    80:96:79:3d:af:2b:83:19:ac:f8:62:e8:06:c8:a8:
                    8d:36:86:2c:af:d8:b3:5d:32:3a:e6:37:f4:c4:b7:
                    c5:ce:41:e1:92:dd:3d:b2:b4:dc:36:2d:f0:c4:38:
                    21:b8:c5:8f:24:97:6a:05:ed:2d:14:95:50:69:b0:
                    e8:cf:b3:5c:f7:3a:2b:b0:6d:bf:cf:c4:91:93:7a:
                    88:2f:09:79:79:f9:37:8a:c0:95:2e:25:e9:36:15:
                    65:8e:50:db:83:4f:7c:69:68:c7:fc:d0:f9:17:17:
                    32:02:c5:01:ad:7b:99:27:b1:be:37:34:8c:05:0a:
                    05:f1:e2:d7:39:50:03:16:06:d3:43:ae:c7:fb:ca:
                    b3:f1:d0:8c:6c:a2:e2:a4:67:95:a1:db:83:ba:79:
                    69:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B9:5A:FA:36:38:76:1E:EC:04:12:04:BF:98:75:58:03:C9:7A:9B
            X509v3 Authority Key Identifier:
                keyid:A9:4C:26:1E:7F:54:FD:8F:91:32:D7:CC:65:87:6A:9F:CC:B2:2B:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:7d:5f:ed:0b:9c:3f:18:41:28:b2:8b:84:1e:68:eb:49:fc:
         91:10:76:85:6a:64:50:ea:82:c0:93:7d:03:24:ba:35:26:e3:
         10:23:14:71:c6:34:07:c5:0b:80:cc:4e:e0:19:23:03:bc:55:
         dc:f4:0e:dc:1b:53:6c:56:92:a9:2e:1c:78:f0:ef:01:7b:d3:
         e8:e6:50:8e:93:78:e1:8c:3e:98:7f:cd:ef:8a:54:d5:7d:fe:
         b6:27:ea:1e:da:55:e6:ab:15:bf:c2:46:14:0b:c0:c4:aa:f3:
         47:5f:58:c1:9f:dc:a0:35:1e:0f:31:49:48:d5:70:44:ad:30:
         ae:75:3c:fe:ec:8c:3d:2c:8a:e5:7a:5f:a9:70:2a:f4:21:3c:
         ee:aa:d3:54:7f:7c:eb:5a:83:50:a7:92:5a:c5:1b:66:c5:f0:
         9d:de:f8:f2:f7:1a:76:f8:7b:aa:13:38:6f:13:97:c1:0e:ec:
         7e:66:0a:d7:28:76:41:a8:0f:09:5f:3c:cd:83:b8:b1:d9:01:
         ed:0d:04:60:b0:dd:35:ba:26:aa:30:29:e0:c5:8a:9b:ee:6b:
         fe:4f:83:51:c5:88:29:b1:3a:88:8c:ea:60:1a:10:de:d8:5e:
         b1:63:64:b3:64:7b:fc:37:06:52:77:de:ca:a7:50:49:6f:11:
         bc:53:be:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 10:07:51 2026 by rpki-client