Error: rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.mft
File:                     2D7667AAA3EBB72048A79335E58D7FD1F8263830.mft (raw, json)
Hash identifier:          xvxCMd01gbPLUT0mJYYiPhy3inifCAvrJjdWIgnrnvI=
Subject key identifier:   C0:71:F9:BD:09:D0:0F:37:CF:B0:00:E7:76:A2:79:A2:32:D6:C1:EE
Authority key identifier: 2D:76:67:AA:A3:EB:B7:20:48:A7:93:35:E5:8D:7F:D1:F8:26:38:30
Certificate issuer:       /CN=2D7667AAA3EBB72048A79335E58D7FD1F8263830
Certificate serial:       73867D6DAFC71C0769BD9AE3DD9EC63E27592EBB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.mft
Manifest number:          0567
Signing time:             Wed 14 Oct 2026 17:00:00 +0000
Manifest this update:     Wed 14 Oct 2026 16:55:00 +0000
Manifest next update:     Thu 15 Oct 2026 17:00:00 +0000
Files and hashes:         1: 2D7667AAA3EBB72048A79335E58D7FD1F8263830.crl (hash: bXl76nGEmQoi6woeTvE5KjTo+KvlkdoCfec+nbfSTtg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.crl
                          rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:86:7d:6d:af:c7:1c:07:69:bd:9a:e3:dd:9e:c6:3e:27:59:2e:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D7667AAA3EBB72048A79335E58D7FD1F8263830
        Validity
            Not Before: Oct 14 16:55:00 2026 GMT
            Not After : Oct 21 17:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:62:30:1e:f8:cb:09:49:db:9d:71:2c:0e:93:
                    f8:92:57:10:80:cb:c8:24:02:33:58:72:45:d6:bf:
                    88:9d:70:22:d7:0a:d1:14:fd:26:75:d5:e7:2c:8a:
                    7d:46:20:c0:0e:b4:66:89:79:e3:23:46:7f:33:c8:
                    34:ad:21:39:ed:97:ab:a4:bb:cb:7d:7d:bc:3d:ee:
                    d5:3d:7c:23:70:30:1c:58:3a:2e:3f:8a:95:7d:0c:
                    df:ba:bd:1c:80:89:dd:0a:44:26:4b:d3:23:9b:42:
                    a3:af:de:92:9a:12:08:c6:6f:07:ff:f3:7b:04:d5:
                    5b:41:d8:61:ed:ef:1a:2a:3b:5a:06:29:94:c3:a7:
                    9a:8b:b5:71:52:21:e5:2a:ef:89:20:9b:fe:a9:f9:
                    97:c8:6e:2b:01:0a:67:f5:ac:e8:2c:9f:b9:03:f3:
                    31:9b:ed:24:ae:79:c9:2a:a6:27:9e:d0:33:f9:c6:
                    61:a9:0d:45:59:52:f9:1b:7e:6e:6f:05:32:0e:20:
                    d5:63:7d:a5:d1:e2:8c:02:06:84:95:0c:39:2f:b5:
                    fb:54:20:5b:40:69:29:fb:76:d8:61:09:7f:70:19:
                    a8:95:da:59:fc:ca:48:ff:15:3f:61:4f:08:9b:2c:
                    6b:e6:99:83:be:39:ef:73:ca:43:f8:a6:1d:9a:d4:
                    6b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:71:F9:BD:09:D0:0F:37:CF:B0:00:E7:76:A2:79:A2:32:D6:C1:EE
            X509v3 Authority Key Identifier:
                keyid:2D:76:67:AA:A3:EB:B7:20:48:A7:93:35:E5:8D:7F:D1:F8:26:38:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:ea:c1:99:30:ef:6f:16:c6:03:ca:c0:36:0c:67:79:97:2f:
         cc:cc:d3:c1:f4:2f:88:13:d4:aa:51:d1:67:d7:05:99:c2:4c:
         68:5d:fe:51:2a:5c:4d:ae:49:ed:2d:df:7d:b2:19:a8:04:05:
         fe:84:2c:d1:38:c4:b5:45:62:da:c6:b4:b9:2f:34:19:a8:d1:
         10:0c:e8:02:2a:99:e0:f1:67:97:44:cc:ca:a2:7d:70:aa:e4:
         06:56:1f:11:64:14:b6:f1:e7:b3:63:1c:f5:19:52:93:be:10:
         1f:44:f4:b5:6c:c1:14:b3:d0:a1:92:5f:9c:c7:0f:3b:56:23:
         75:f5:7f:53:e3:ba:9f:0c:42:17:ea:df:92:e5:2e:95:c2:5d:
         19:bb:3a:cf:c3:b6:7b:00:4a:c7:4f:b1:fe:5b:7a:ac:65:5c:
         67:f9:e0:e5:46:1c:d0:9a:84:62:72:c1:2b:d9:6e:04:1d:f9:
         de:df:8e:27:e8:94:60:85:65:da:d4:13:b7:e5:1b:71:bc:da:
         11:bb:a6:87:3d:84:72:22:b9:ad:6d:9e:be:73:51:c7:c3:61:
         b5:6c:d1:75:94:b2:31:01:35:69:95:7d:af:ff:df:86:7e:98:
         f9:02:f6:ff:f7:c5:fd:19:c4:d6:8f:42:9b:62:e0:8b:6b:8b:
         0a:ac:d0:1a
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUc4Z9ba/HHAdpvZrj3Z7GPidZLrswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ3NjY3QUFBM0VCQjcyMDQ4QTc5MzM1RTU4RDdGRDFG
ODI2MzgzMDAeFw0yNjEwMTQxNjU1MDBaFw0yNjEwMjExNzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzU2MjMwMUVGOENCMDk0OURC
OUQ3MTJDMEU5M0Y4OTI1NzEwODBDQkM4MjQwMjMzNTg3MjQ1RDZCRjg4OUQ3MDIy
RDcwQUQxMTRGRDI2NzVENUU3MkM4QTdENDYyMEMwMEVCNDY2ODk3OUUzMjM0NjdG
MzNDODM0QUQyMTM5RUQ5N0FCQTRCQkNCN0Q3REJDM0RFRUQ1M0Q3QzIzNzAzMDFD
NTgzQTJFM0Y4QTk1N0QwQ0RGQkFCRDFDODA4OUREMEE0NDI2NEJEMzIzOUI0MkEz
QUZERTkyOUExMjA4QzY2RjA3RkZGMzdCMDRENTVCNDFEODYxRURFRjFBMkEzQjVB
MDYyOTk0QzNBNzlBOEJCNTcxNTIyMUU1MkFFRjg5MjA5QkZFQTlGOTk3Qzg2RTJC
MDEwQTY3RjVBQ0U4MkM5RkI5MDNGMzMxOUJFRDI0QUU3OUM5MkFBNjI3OUVEMDMz
RjlDNjYxQTkwRDQ1NTk1MkY5MUI3RTZFNkYwNTMyMEUyMEQ1NjM3REE1RDFFMjhD
MDIwNjg0OTUwQzM5MkZCNUZCNTQyMDVCNDA2OTI5RkI3NkQ4NjEwOTdGNzAxOUE4
OTVEQTU5RkNDQTQ4RkYxNTNGNjE0RjA4OUIyQzZCRTY5OTgzQkUzOUVGNzNDQTQz
RjhBNjFEOUFENDZCOTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxWIwHvjLCUnbnXEsDpP4klcQgMvIJAIzWHJF1r+InXAi1wrRFP0m
ddXnLIp9RiDADrRmiXnjI0Z/M8g0rSE57ZerpLvLfX28Pe7VPXwjcDAcWDouP4qV
fQzfur0cgIndCkQmS9Mjm0Kjr96SmhIIxm8H//N7BNVbQdhh7e8aKjtaBimUw6ea
i7VxUiHlKu+JIJv+qfmXyG4rAQpn9azoLJ+5A/Mxm+0krnnJKqYnntAz+cZhqQ1F
WVL5G35ubwUyDiDVY32l0eKMAgaElQw5L7X7VCBbQGkp+3bYYQl/cBmoldpZ/MpI
/xU/YU8Imyxr5pmDvjnvc8pD+KYdmtRrlwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FMBx+b0J0A83z7AA53aieaIy1sHuMB8GA1UdIwQYMBaAFC12Z6qj67cgSKeTNeWN
f9H4JjgwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNSNmtvNDVIR1MzWGNr
dDdaYWdSNGhaekVtZURBa0RKc25LMmVaRUJyS2RTLzEvMkQ3NjY3QUFBM0VCQjcy
MDQ4QTc5MzM1RTU4RDdGRDFGODI2MzgzMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8yRDc2NjdBQUEzRUJCNzIwNDhBNzkzMzVFNThEN0ZEMUY4MjYz
ODMwLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNSNmtvNDVIR1MzWGNrdDdaYWdS
NGhaekVtZURBa0RKc25LMmVaRUJyS2RTLzEvMkQ3NjY3QUFBM0VCQjcyMDQ4QTc5
MzM1RTU4RDdGRDFGODI2MzgzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHnqwZkw728WxgPKwDYMZ3mX
L8zM08H0L4gT1KpR0WfXBZnCTGhd/lEqXE2uSe0t332yGagEBf6ELNE4xLVFYtrG
tLkvNBmo0RAM6AIqmeDxZ5dEzMqifXCq5AZWHxFkFLbx57NjHPUZUpO+EB9E9LVs
wRSz0KGSX5zHDztWI3X1f1Pjup8MQhfq35LlLpXCXRm7Os/DtnsASsdPsf5beqxl
XGf54OVGHNCahGJywSvZbgQd+d7fjifolGCFZdrUE7flG3G82hG7poc9hHIiua1t
nr5zUcfDYbVs0XWUsjEBNWmVfa//34Z+mPkC9v/3xf0ZxNaPQpti4Itriwqs0Bo=
-----END CERTIFICATE-----
Generated at Thu Oct 15 05:49:54 2026 by rpki-client