Error: rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.mft
File:                     6321913B8F265DB266263684C1BC420640061E1A.mft (raw, json)
Hash identifier:          gghZ5/+AEZsHp8OeJ3eIJ9efiVXEZFyqzzzANNPMw+8=
Subject key identifier:   B3:2E:C0:3E:19:DA:AD:D8:1B:D7:90:5E:FC:DF:E7:72:E7:C5:69:07
Authority key identifier: 63:21:91:3B:8F:26:5D:B2:66:26:36:84:C1:BC:42:06:40:06:1E:1A
Certificate issuer:       /CN=6321913B8F265DB266263684C1BC420640061E1A
Certificate serial:       2FF33DBFB68FD51B811877C61F435BE848EC6340
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6321913B8F265DB266263684C1BC420640061E1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.mft
Manifest number:          0428
Signing time:             Sun 20 Sep 2026 08:03:35 +0000
Manifest this update:     Sun 20 Sep 2026 07:58:35 +0000
Manifest next update:     Mon 21 Sep 2026 11:20:35 +0000
Files and hashes:         1: 3137302e36362e302e302f31362d3234203d3e203131393933.roa (hash: Aa6+6KgZHik6+ABzhpmvLEKv4dZCz7fRMiExXTKJrRE=)
                          2: 3139382e3138342e3136312e302f32342d3234203d3e203131393933.roa (hash: QIRLiXgnYMfb4NQLMga6l9oGFV4HRi7LxF1Dsm3IXgo=)
                          3: 323830313a38653a3a2f33322d313236203d3e203131393933.roa (hash: Ey7Imlr5pLL+DH2mMRpmrRyRdOVVI3qVj9OnEUUXico=)
                          4: 6321913B8F265DB266263684C1BC420640061E1A.crl (hash: b3bB06ci2czeRf0ou/VYWUczg4CbmIFNoilTn6S+oIY=)
                          5: 3137302e36362e302e302f31362d3234203d3e20313938393439.roa (hash: 072VEbaI7xB9Jhovu0RQAyYnQXYwsrJAt5OhwHYTOLE=)
                          6: 323830313a38653a3a2f33322d3438203d3e20313938393439.roa (hash: CxBZcVcs0zRokgf5NsuyeWExlz9SeC4w5+lGEh2FhQ0=)
                          7: 3230312e33332e3134342e302f32302d3234203d3e203131393933.roa (hash: TdA9895ONLIzi4qc+d1f2GAp2J5CYRUmZoT7qlO38BY=)
                          8: 3139382e3138342e3136312e302f32342d3234203d3e20313938393439.roa (hash: 4Z9cha3sVBOlzTrT0dVMcvNNK+EHRcrGLqWw2BwB8zA=)
                          9: 3230312e33332e3134342e302f32302d3234203d3e20313938393439.roa (hash: lI2E/VYVJ+2wUZmeC41kZFySZrgdHxD6/s3ruqb3rk4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.crl
                          rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6321913B8F265DB266263684C1BC420640061E1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Sep 2026 11:20:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:f3:3d:bf:b6:8f:d5:1b:81:18:77:c6:1f:43:5b:e8:48:ec:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6321913B8F265DB266263684C1BC420640061E1A
        Validity
            Not Before: Sep 20 07:58:35 2026 GMT
            Not After : Sep 21 11:20:35 2026 GMT
        Subject: CN=B32EC03E19DAADD81BD7905EFCDFE772E7C56907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c5:19:6b:bf:3f:b6:4f:c4:8d:03:bc:bd:c5:
                    31:0d:94:bb:49:6e:17:6f:d5:25:46:61:8c:e3:e1:
                    52:1a:e6:d1:c3:44:e9:e4:fe:0a:7d:0b:a7:c3:21:
                    86:63:f8:2c:d8:0f:5f:28:99:a0:0c:38:7c:b2:de:
                    94:d3:06:d1:d3:0a:a2:18:1b:1e:3a:41:62:20:ec:
                    0f:df:f6:43:b3:0c:f0:83:ce:a2:ac:07:e0:de:5b:
                    14:84:63:b9:1f:21:f9:d5:67:e4:1d:64:d1:12:2b:
                    1c:fd:ff:04:0e:94:75:2c:3f:4f:91:2f:89:e9:c5:
                    0a:d9:8b:fc:57:a1:77:68:67:d9:60:d7:ff:ef:6b:
                    62:d3:ef:dd:e3:07:40:93:9a:ec:e7:97:ea:6f:c8:
                    1a:93:e2:7c:9f:ca:93:a4:f1:bf:ed:4d:6a:3e:e2:
                    02:03:33:07:28:a1:ae:9d:db:76:c8:72:76:c8:57:
                    44:49:43:cb:49:d0:6c:90:5c:46:76:6b:e4:2c:25:
                    ad:db:77:24:74:b8:af:c1:11:b2:34:3e:e6:9e:4b:
                    b3:60:cc:97:87:bc:7c:e1:16:ca:2f:83:46:97:28:
                    d4:88:9a:8e:65:5e:90:7b:15:aa:75:b5:08:7d:59:
                    08:d4:d6:dc:95:41:7e:f5:dd:f3:25:97:30:d9:7a:
                    ad:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2E:C0:3E:19:DA:AD:D8:1B:D7:90:5E:FC:DF:E7:72:E7:C5:69:07
            X509v3 Authority Key Identifier:
                keyid:63:21:91:3B:8F:26:5D:B2:66:26:36:84:C1:BC:42:06:40:06:1E:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6321913B8F265DB266263684C1BC420640061E1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:8d:bb:d3:32:47:e9:c5:11:2b:e4:0b:ac:2f:70:82:5f:2c:
         f5:29:ae:42:a2:da:1c:f0:01:5b:18:25:c0:9d:fe:ff:c9:f5:
         d6:9e:6e:69:95:9b:85:34:23:93:4e:81:03:63:99:73:5e:2a:
         64:c8:31:60:df:07:23:d7:48:3c:ab:c5:13:19:39:09:a7:f4:
         9f:cd:4c:e3:3c:c3:09:da:c7:26:b1:ad:c7:0f:74:e2:b9:75:
         49:80:2b:f2:26:1d:d4:d4:ad:5c:5b:89:a6:dc:9f:e1:a1:da:
         1a:7a:b5:06:56:af:59:a7:c9:05:a0:01:ef:69:82:a7:ce:c9:
         81:7b:69:26:07:74:a5:b8:ce:b9:8d:cc:5f:07:d0:94:da:32:
         65:83:81:9e:15:31:cc:cb:e6:9e:21:5e:24:b9:62:0f:96:1d:
         50:0c:4c:85:16:a7:e0:5c:91:d9:69:f0:07:12:b6:38:4f:ca:
         d9:07:8a:09:38:89:15:2f:95:7f:80:5f:1f:9b:1c:6c:30:58:
         8b:b6:a4:c7:70:c6:94:81:12:c1:9e:39:84:db:e5:5c:45:54:
         d9:da:58:52:78:90:e8:9a:33:53:44:13:4b:be:a9:f8:95:9f:
         0f:aa:7b:38:52:bb:38:d3:1d:06:f1:fb:31:bb:f0:36:98:8e:
         79:64:45:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:19:59 2026 by rpki-client