Error: rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/85154D17EB56420277A0D6D3168ECEB7B88CD654.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/85154D17EB56420277A0D6D3168ECEB7B88CD654.mft
File:                     85154D17EB56420277A0D6D3168ECEB7B88CD654.mft (raw, json)
Hash identifier:          7EGZMoz5nm+PH2k/yPuzpCjlgsp4UHgxF1sRoKBAZoA=
Subject key identifier:   7F:F3:CF:3F:7E:7B:A5:45:9A:6F:16:12:E7:C4:B5:F3:37:9C:D6:1A
Authority key identifier: 85:15:4D:17:EB:56:42:02:77:A0:D6:D3:16:8E:CE:B7:B8:8C:D6:54
Certificate issuer:       /CN=85154D17EB56420277A0D6D3168ECEB7B88CD654
Certificate serial:       6E850AE08AB7929883AC8C748E8E85039F3EA7C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85154D17EB56420277A0D6D3168ECEB7B88CD654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/85154D17EB56420277A0D6D3168ECEB7B88CD654.mft
Manifest number:          026B
Signing time:             Tue 13 Oct 2026 11:33:31 +0000
Manifest this update:     Tue 13 Oct 2026 11:28:31 +0000
Manifest next update:     Wed 14 Oct 2026 15:16:31 +0000
Files and hashes:         1: 34352e3136312e3139322e302f32342d3234203d3e20323638343831.roa (hash: 43b/l2ysS3pPAarD/kzHSsDY6D19X60ClWkw88IXfTU=)
                          2: 34352e3136312e3139332e302f32342d3234203d3e20323638343831.roa (hash: RHlBUjwlKoYaR+a+mwz+WZbUdGpgoGM8wpXWwIut5ZQ=)
                          3: 34352e3136312e3139352e302f32342d3234203d3e20323638343831.roa (hash: 1wkWabWp0woqSHyY8xxC/Jf8DfyggI3L2WS3gdUO5jo=)
                          4: 85154D17EB56420277A0D6D3168ECEB7B88CD654.crl (hash: 5lrI6IJuw3hu5Yh67sLbItgbYR+cWbTqy2bTt9SSatk=)
                          5: 34352e3136312e3139322e302f32322d3232203d3e20323638343831.roa (hash: IJ+oUAmkGzwVMcQnHiiIvkEZbzpGxD/Toq35L7b+tlo=)
                          6: 323830343a353164633a313038303a3a2f34332d3433203d3e20323638343831.roa (hash: /+hN+4tc6Sgrg6QOgljG/AaLNg+sF4T9+Sem8M6rpG4=)
                          7: 323830343a353164633a313065303a3a2f34332d3433203d3e20323638343831.roa (hash: iamZZffbKJh+nac6JCAFwVGJClBx4q/ducF1AmBoonc=)
                          8: 34352e3136312e3139342e302f32342d3234203d3e20323638343831.roa (hash: 2Jmhu16jNEb/Jmotf6nH0bYdzuUI3e0KtUetDAh8CNU=)
                          9: 323830343a353164633a313063303a3a2f34332d3433203d3e20323638343831.roa (hash: 1cVDnhUqJgt69Pf9T17P3YPrOluT5hv0CRswLsc71Pg=)
                          10: 323830343a353164633a3a2f33322d3332203d3e20323638343831.roa (hash: MFuFkljnV0pguHpgmW17/8/WFzaWCWP2kwwO6NvB2sk=)
                          11: 323830343a353164633a313061303a3a2f34332d3433203d3e20323638343831.roa (hash: BgSbgGx13x4RQpSRwK9ORTftrP7EQLJDdH2aXBajVvA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/85154D17EB56420277A0D6D3168ECEB7B88CD654.crl
                          rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/85154D17EB56420277A0D6D3168ECEB7B88CD654.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85154D17EB56420277A0D6D3168ECEB7B88CD654.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 15:16:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:85:0a:e0:8a:b7:92:98:83:ac:8c:74:8e:8e:85:03:9f:3e:a7:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85154D17EB56420277A0D6D3168ECEB7B88CD654
        Validity
            Not Before: Oct 13 11:28:31 2026 GMT
            Not After : Oct 14 15:16:31 2026 GMT
        Subject: CN=7FF3CF3F7E7BA5459A6F1612E7C4B5F3379CD61A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ac:6c:4c:d6:e7:71:ca:73:0c:8f:0f:43:0c:
                    ae:a4:5e:0d:72:ff:ba:c3:68:83:a7:1e:16:7f:9a:
                    c2:f2:68:bd:d5:9c:d1:9f:37:d1:34:0d:8b:77:69:
                    e2:83:44:46:f6:3f:8e:5a:97:e1:25:aa:63:12:8e:
                    fa:ae:71:3f:23:90:6f:44:02:66:f2:db:a6:cc:fc:
                    7a:07:c0:fa:98:8e:cc:20:ef:2f:25:26:20:62:c9:
                    63:d9:9e:03:68:f7:1a:1a:57:4e:02:09:2c:fb:ed:
                    d2:4e:bb:0c:13:90:d5:8f:12:f8:2e:60:82:bc:c1:
                    8f:25:e2:11:21:77:6e:29:24:37:2e:50:c6:53:ca:
                    4e:89:f6:28:e9:37:0a:49:20:ce:a7:b4:79:7f:2d:
                    40:ca:e2:e9:d8:43:1e:d1:03:b0:c8:2a:c4:1e:cd:
                    de:6c:1f:64:6a:48:bc:08:71:59:69:2f:b9:1d:c6:
                    43:11:08:07:19:78:75:39:26:71:5a:77:2b:58:f6:
                    b9:cd:ba:2d:e1:3c:a2:19:bc:97:5e:3b:3a:f0:fa:
                    3f:95:b2:42:2c:3c:0f:69:4c:b3:a8:30:05:12:7a:
                    ce:7b:09:f0:8a:03:3d:94:d6:2a:c1:c5:74:a5:a0:
                    7a:d3:26:76:75:d3:37:f1:21:d4:eb:92:ae:13:fd:
                    e9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F3:CF:3F:7E:7B:A5:45:9A:6F:16:12:E7:C4:B5:F3:37:9C:D6:1A
            X509v3 Authority Key Identifier:
                keyid:85:15:4D:17:EB:56:42:02:77:A0:D6:D3:16:8E:CE:B7:B8:8C:D6:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/85154D17EB56420277A0D6D3168ECEB7B88CD654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85154D17EB56420277A0D6D3168ECEB7B88CD654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/85154D17EB56420277A0D6D3168ECEB7B88CD654.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:7c:35:e4:99:63:64:8d:96:7d:42:63:cb:5f:74:20:a7:44:
         11:4a:5e:ac:91:4b:73:8e:ff:53:34:4a:1a:0f:68:da:06:a6:
         32:c4:e5:06:c0:dc:6a:64:eb:72:b3:e8:9b:d7:27:0b:01:1c:
         65:a0:2f:44:2d:a6:ce:08:d8:63:20:1d:5d:4a:de:ac:9b:3a:
         c7:8f:fa:32:d7:61:a0:63:cc:f9:95:84:6f:8e:9e:61:c8:8d:
         7c:70:35:ba:2e:1c:04:be:b8:46:94:b3:b0:5a:67:4b:75:3a:
         9a:5e:ad:eb:64:57:85:ef:13:55:cf:40:99:51:87:b8:b2:c3:
         09:cf:01:70:d0:b1:06:39:b3:e7:a0:65:39:7e:fb:2c:50:95:
         2d:a5:78:2e:0f:e2:92:16:4a:08:d5:1a:55:f5:a6:f6:a6:b7:
         ee:cd:b6:af:13:01:e1:f8:bb:d0:27:00:d3:63:8c:2b:c8:a8:
         5f:72:c7:a2:4d:51:51:2f:5c:34:fa:d8:03:d7:5e:5f:c4:73:
         9e:25:65:52:60:ca:7b:76:b7:bc:c2:a6:c8:94:7d:46:dd:85:
         36:c5:cc:b4:b6:9e:27:76:82:bf:66:79:c6:16:51:38:9c:60:
         d8:20:ee:ec:b4:9b:73:39:a7:54:c0:ea:30:c5:8e:10:0e:19:
         86:d4:e5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:11:23 2026 by rpki-client