Error: rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.mft
File:                     734B66FA6878EDCF866CF08634B1680301F14295.mft (raw, json)
Hash identifier:          3KPLHyeL190jHssrUsZ29vC85cwvXJ6ZIbaPPMORNio=
Subject key identifier:   F8:3A:45:D5:AF:C3:0C:D2:40:36:29:81:8A:17:9A:E5:05:05:BB:F7
Authority key identifier: 73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95
Certificate issuer:       /CN=734B66FA6878EDCF866CF08634B1680301F14295
Certificate serial:       73CE71748D5B839A779FDBEE62390906CF41075C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.mft
Manifest number:          04BF
Signing time:             Wed 14 Oct 2026 13:39:25 +0000
Manifest this update:     Wed 14 Oct 2026 13:34:25 +0000
Manifest next update:     Thu 15 Oct 2026 15:33:25 +0000
Files and hashes:         1: 3138372e33332e3230352e302f32342d3234203d3e203533303836.roa (hash: 6d2UxrgjHYAOU/A7xZnz552IO3298YKCyrjJPKPL3JM=)
                          2: 3138372e33332e3230322e302f32342d3234203d3e203533303836.roa (hash: i0+X2V+7spIHYIGwV3xy0wvPMstESokJcAr2AlZzIiI=)
                          3: 734B66FA6878EDCF866CF08634B1680301F14295.crl (hash: sYlNwBywSjQeP4bcpuq0gCpzCFgZG37Oh29HIwJlgY4=)
                          4: 3138372e33332e3139362e302f32342d3234203d3e203533303836.roa (hash: eaEUg3jKGO8lRpWjsHA3NrVa9QpBuGIQhyWvyWJkk7c=)
                          5: 3138372e33332e3230342e302f32332d3233203d3e203533303836.roa (hash: H+oMFQ5eQFcuBh5wLT8wXLNV/1Owd77z1VAqc7xiSqU=)
                          6: 3138372e33332e3139342e302f32332d3233203d3e203533303836.roa (hash: /6L5R/edwYRd4NemEpyxj3256CiUsqT7k2LLTFbfo9k=)
                          7: 3138372e33332e3139352e302f32342d3234203d3e203533303836.roa (hash: 2uIes9Rfpok64HSIumGO5mnncc/FGssQoda8dWn0ORQ=)
                          8: 3138372e33332e3139322e302f32342d3234203d3e203533303836.roa (hash: /wB1E0zCczpWWLfwn9r2xN2vS1E/Mp0/8PcIlh7Cmuw=)
                          9: 3138372e33332e3139322e302f32332d3233203d3e203533303836.roa (hash: tq75bBAQ8+Nll2ZybJTw1qtycAP4sGjRJJ+r8Rq3cbc=)
                          10: 3138372e33332e3139372e302f32342d3234203d3e203533303836.roa (hash: J4XD9eZPP+6AIw/usuSQO2a+ULFf/+WZo0jItwbzoXI=)
                          11: 3138372e33332e3139322e302f32322d3232203d3e203533303836.roa (hash: Hx6aldcjt0Z7487GH3fzrxVpFu7bjBKxzPrZc25EjpI=)
                          12: 3138372e33332e3230302e302f32342d3234203d3e203533303836.roa (hash: wjDlAlU5lQ6KNizxiXOjves/ZP3aWv0NR87tqDpHZcQ=)
                          13: 323830343a346665343a633030303a3a2f33342d3334203d3e203533303836.roa (hash: 3MHqzQSaEC/iN448fyDmt8ObgvgfzREAMHxObKlo0yE=)
                          14: 3138372e33332e3230342e302f32342d3234203d3e203533303836.roa (hash: 7nQgwoetb+Yt8y9/aGXPcqIaHBRhOuEmuHrdOnBH5jg=)
                          15: 3138372e33332e3139322e302f32302d3230203d3e203533303836.roa (hash: S+6ImEMoMM3QFaUfW4RixSEIyiJrEAcVlWU4r6kJIOU=)
                          16: 3138372e33332e3230302e302f32322d3232203d3e203533303836.roa (hash: IBLiRdBJBej0dTJXiuoefircXEbDv/acn+De6KX6JLs=)
                          17: 3138372e33332e3230362e302f32342d3234203d3e203533303836.roa (hash: zBzktboSsWaT6kwY0D6pZ8gdDZW02VkXPO0Bhyp/1KM=)
                          18: 3138372e33332e3139342e302f32342d3234203d3e203533303836.roa (hash: 24snl6YGt1kivxhUVewapLaNZafQ74Aih/qnKUKt/yk=)
                          19: 3138372e33332e3139392e302f32342d3234203d3e203533303836.roa (hash: /+nKA2HvZ8eORfEZgCMmy1p9z3g0pQD+Rc7EGY6rXSY=)
                          20: 3138372e33332e3230322e302f32332d3233203d3e203533303836.roa (hash: Dl2s2Bm+vRWJk28ucpRJKJsa1CoE9MMv6UtxFQ9Ry34=)
                          21: 3138372e33332e3139322e302f32312d3231203d3e203533303836.roa (hash: Lwz0N19qlsXUhMFQYDLQB2IMrrtfyfh5Qh0/RV/YZ3A=)
                          22: 323830343a346665343a3a2f33322d3332203d3e203533303836.roa (hash: wriu8MdW5w/wgMr/+zG+GXjmoSDATemoPkT06+OXjYY=)
                          23: 3138372e33332e3230312e302f32342d3234203d3e203533303836.roa (hash: bNLQS7FFNr/d58UejH2wMWBjVraHERchy7i2pAhxzgo=)
                          24: 3138372e33332e3230342e302f32322d3232203d3e203533303836.roa (hash: kwAIJnc78ufpDxriXBXNsf0uMJNqPki25Fa5WgU3a0Y=)
                          25: 323830343a346665343a383030303a3a2f33342d3334203d3e203533303836.roa (hash: XErlxQb1pK2CkudGTigX2vBeZchAwSTfNXYMIhLlGRM=)
                          26: 3138372e33332e3139362e302f32332d3233203d3e203533303836.roa (hash: /wdBDcUBBsTZ1QAA/DmbhhG9Ytsqks4C+uGGYyH4FUY=)
                          27: 3138372e33332e3230372e302f32342d3234203d3e203533303836.roa (hash: 97bOwm6F7ebNMdLO7q7UdqW81zDu8hFcyI/TONDlBlM=)
                          28: 3138372e33332e3230332e302f32342d3234203d3e203533303836.roa (hash: +tnRC0LZb0stmKss6Y2VUFEOz/n5KHQzpH+yFvyPeHI=)
                          29: 3138372e33332e3139362e302f32322d3232203d3e203533303836.roa (hash: zSMJkIW6aJApQ3SGt3j9NfqjEYQvupGVJsQzWjXRUpo=)
                          30: 3138372e33332e3230302e302f32312d3231203d3e203533303836.roa (hash: S1odgS4iGJA4YmNfy9uMv9gKhO3sssdcjMr/Jmn6jHM=)
                          31: 323830343a346665343a3a2f33342d3334203d3e203533303836.roa (hash: /xpSuniQOKrbmVHWl0UGe48MqNldS0Zvyyf74AMo1D4=)
                          32: 3138372e33332e3139382e302f32342d3234203d3e203533303836.roa (hash: OCWKyQvMQ1G82xY62wtMQloQfRmpfnLSfDkEeFrwEJ4=)
                          33: 3138372e33332e3230302e302f32332d3233203d3e203533303836.roa (hash: keE9eYH9OpCewH8XKoCcXAfpv24cg+cuzfWWuMUgX1Q=)
                          34: 323830343a346665343a383030303a3a2f33332d3333203d3e203533303836.roa (hash: CazgybP24fMlqz+VMY5v+URK3Jh3EAHIU4g9aj8go0c=)
                          35: 3138372e33332e3230362e302f32332d3233203d3e203533303836.roa (hash: +1P+Xa+4taRlnoR0oyUor3ir1ov/I6iqk12Q5PIGdE8=)
                          36: 323830343a346665343a3a2f33332d3333203d3e203533303836.roa (hash: 8fuoQ0ZONvdIeb3lUNTNEOP3EHN45hTfALF1f/xYJSY=)
                          37: 3138372e33332e3139332e302f32342d3234203d3e203533303836.roa (hash: FExbNgwhBHbjM9dOSMj/6kSkjNypwHA/pQFevPyE9JM=)
                          38: 323830343a346665343a343030303a3a2f33342d3334203d3e203533303836.roa (hash: RyMppZbh/w5wFZhtjwIe6ghSo5mixmtzL6vGvgOhmok=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl
                          rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 15:33:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ce:71:74:8d:5b:83:9a:77:9f:db:ee:62:39:09:06:cf:41:07:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734B66FA6878EDCF866CF08634B1680301F14295
        Validity
            Not Before: Oct 14 13:34:25 2026 GMT
            Not After : Oct 15 15:33:25 2026 GMT
        Subject: CN=F83A45D5AFC30CD2403629818A179AE50505BBF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:79:a6:49:81:24:f2:fa:2f:f2:c5:4e:61:a2:
                    c2:07:a5:bd:f4:c4:0e:70:c3:51:57:8b:74:3f:0b:
                    53:69:dc:57:03:d5:4a:41:69:c8:b7:e4:6a:a3:7c:
                    b4:33:77:9f:3c:8d:cc:77:66:9e:3b:ca:ed:13:75:
                    44:0b:d6:f7:87:97:5e:f6:27:9b:38:9f:2b:17:21:
                    1b:a3:ee:84:a4:d2:68:ac:83:1d:f8:b4:68:00:41:
                    c9:86:9e:63:e9:5b:49:9b:78:77:a0:32:55:90:9a:
                    94:63:cd:88:ef:e0:72:3c:28:7e:2d:74:6e:55:82:
                    cd:92:0b:4e:18:29:be:88:b7:7f:8e:0e:d6:4f:8d:
                    f5:de:35:2e:a2:ae:67:5f:db:ee:c5:4d:4d:6d:00:
                    00:97:89:12:fd:31:17:27:9d:8d:8a:a2:65:94:86:
                    3c:8e:3f:81:d9:28:8c:2e:05:d8:9b:ea:fc:16:9c:
                    04:01:e1:3f:29:cc:d6:9e:12:10:29:93:ec:c4:aa:
                    62:04:5e:af:fc:da:b4:73:c6:26:94:e6:e7:35:d0:
                    de:4d:a1:3a:01:14:3c:8d:29:f4:fa:cd:bc:df:45:
                    91:3f:70:13:99:45:37:b5:6d:3e:55:a9:72:2f:5a:
                    41:57:b9:ab:b8:04:d9:d4:bd:77:84:da:b8:e3:5b:
                    b3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:3A:45:D5:AF:C3:0C:D2:40:36:29:81:8A:17:9A:E5:05:05:BB:F7
            X509v3 Authority Key Identifier:
                keyid:73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:19:ed:77:49:75:35:08:52:32:84:39:93:91:11:65:9f:7b:
         9f:bb:bc:33:79:69:eb:42:91:42:37:49:ed:29:32:45:fd:4a:
         1a:5a:00:6e:9d:0b:3c:76:79:d3:2f:59:04:7f:d7:2b:95:0f:
         f5:aa:d3:df:c9:9c:99:46:3d:88:23:85:5a:41:fd:04:e9:e6:
         11:7c:e7:e3:c9:14:42:c5:d6:1e:a5:b0:9e:af:96:96:e8:66:
         9e:c5:b9:27:7f:70:37:be:a7:eb:75:94:c7:59:7f:53:58:02:
         28:44:d4:90:65:aa:7a:25:d0:87:6d:98:cb:e7:df:f1:2e:59:
         10:b8:36:37:ad:7b:90:9a:1c:37:90:b8:33:37:f4:c5:e7:84:
         0c:a0:ac:fe:74:09:f2:10:75:37:8e:61:5b:a0:73:46:9b:f0:
         a6:9b:c5:a0:c2:c5:54:d3:ed:e7:ba:51:a5:2a:80:0f:e3:85:
         6c:ee:d3:76:6d:54:20:3b:1f:f5:3d:e1:93:3c:76:b4:61:26:
         8e:d7:91:f0:23:3f:ca:52:62:2f:d3:4b:99:a5:44:57:ff:9c:
         fd:02:65:fc:56:30:f7:37:0f:06:e8:ec:0c:96:62:0e:c0:da:
         90:66:32:b8:58:c4:1d:f9:19:fa:40:f9:b3:d0:2a:70:83:7a:
         bf:1e:af:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:15:36 2026 by rpki-client