Error: rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/1/4DBCEA414C97E21ED954E22389E65590C555EEBD.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/1/4DBCEA414C97E21ED954E22389E65590C555EEBD.mft
File:                     4DBCEA414C97E21ED954E22389E65590C555EEBD.mft (raw, json)
Hash identifier:          pdNgUdi2HQFyxZ6pTCA5Sc7N99vO5Kmn6a72iMAAHNw=
Subject key identifier:   90:F1:C1:23:E3:25:CD:C3:2C:66:70:A9:41:AF:AE:6A:1B:11:8C:9F
Authority key identifier: 4D:BC:EA:41:4C:97:E2:1E:D9:54:E2:23:89:E6:55:90:C5:55:EE:BD
Certificate issuer:       /CN=4DBCEA414C97E21ED954E22389E65590C555EEBD
Certificate serial:       6B9F40EA8EA910AB33D008435CB6771487CDC812
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DBCEA414C97E21ED954E22389E65590C555EEBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/1/4DBCEA414C97E21ED954E22389E65590C555EEBD.mft
Manifest number:          056D
Signing time:             Wed 14 Oct 2026 20:50:00 +0000
Manifest this update:     Wed 14 Oct 2026 20:45:00 +0000
Manifest next update:     Thu 15 Oct 2026 20:50:00 +0000
Files and hashes:         1: 4DBCEA414C97E21ED954E22389E65590C555EEBD.crl (hash: m6wR5CMGSm2imvBsaiAiEnRaghSlYNc0qH3tHgPT2EY=)
                          2: 3136302e3233382e3130382e302f32322d3234203d3e20323636323130.roa (hash: +A3hPO1vEqmAQBLFaUVedV+qesyZdchHYQYzHxOy/UM=)
                          3: 323830343a336336633a3a2f33322d3335203d3e20323636323130.roa (hash: 0v1wsaiAm6mHikkaQpsCiHjj5SASNzLzE8l+DeIdI9I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/1/4DBCEA414C97E21ED954E22389E65590C555EEBD.crl
                          rsync://rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/1/4DBCEA414C97E21ED954E22389E65590C555EEBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DBCEA414C97E21ED954E22389E65590C555EEBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 20:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:9f:40:ea:8e:a9:10:ab:33:d0:08:43:5c:b6:77:14:87:cd:c8:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DBCEA414C97E21ED954E22389E65590C555EEBD
        Validity
            Not Before: Oct 14 20:45:00 2026 GMT
            Not After : Oct 15 20:50:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9e:52:a4:63:03:07:95:b3:a9:b3:a8:d1:b8:
                    c3:bf:4d:ba:04:b2:d1:c3:4a:af:16:57:e7:a3:fa:
                    0e:3a:9c:90:0e:a3:53:3e:62:4c:9c:53:8a:4f:d8:
                    93:ed:25:66:e1:eb:66:39:ff:95:6e:e8:01:6b:d4:
                    a6:f1:ea:06:a6:ee:c1:42:07:70:76:ff:e6:c1:58:
                    06:90:7f:5e:0e:51:31:b2:f6:9f:86:22:12:16:b4:
                    3c:9a:0d:c1:56:d8:48:df:02:ed:d9:f2:ec:29:cb:
                    b1:7e:2e:1f:e7:0a:69:28:c7:82:84:dd:58:6c:27:
                    b2:c6:ea:3d:68:2a:29:bd:f6:74:31:56:c7:f3:aa:
                    03:2c:be:5c:ef:7d:40:48:02:11:43:5e:4a:9b:37:
                    6d:29:1e:24:ce:fd:7c:25:43:27:fe:da:e7:af:b4:
                    99:58:55:ef:ef:a8:10:c7:f2:29:83:02:30:67:19:
                    13:be:30:a3:71:fd:cb:b0:92:cf:41:44:72:58:ec:
                    ae:a4:e2:7e:6b:58:83:47:06:4b:2e:9b:cc:81:33:
                    1a:7e:fc:9a:c4:2f:46:00:5a:3f:b0:97:72:46:7a:
                    ca:1b:d5:4c:68:03:bc:fc:c0:2b:3e:6f:aa:62:bd:
                    59:34:43:f9:ba:96:f6:06:b9:e8:0e:a0:61:fb:32:
                    9e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F1:C1:23:E3:25:CD:C3:2C:66:70:A9:41:AF:AE:6A:1B:11:8C:9F
            X509v3 Authority Key Identifier:
                keyid:4D:BC:EA:41:4C:97:E2:1E:D9:54:E2:23:89:E6:55:90:C5:55:EE:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/1/4DBCEA414C97E21ED954E22389E65590C555EEBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DBCEA414C97E21ED954E22389E65590C555EEBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/1/4DBCEA414C97E21ED954E22389E65590C555EEBD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:f7:32:f0:70:04:b4:16:6a:31:8c:a5:94:bf:a1:2c:58:fb:
         8a:c2:3f:40:24:57:e5:e4:5a:43:1d:6b:94:ab:da:bd:15:02:
         47:e2:4e:3b:07:ff:23:64:5f:7a:b6:9d:20:1e:8d:b9:09:f4:
         cf:cf:98:10:37:11:d2:65:0c:81:df:bc:ac:75:67:37:32:fe:
         c6:98:b0:44:d8:19:cd:1d:99:aa:6e:b0:73:0d:08:76:af:61:
         7c:90:5e:8c:5d:df:4b:65:41:70:39:9c:bc:c1:cc:c3:f1:86:
         5d:69:04:78:41:15:16:8f:ff:7c:43:48:74:42:68:ff:c8:9f:
         24:6b:14:83:f9:b9:25:40:c7:b0:40:39:6a:bf:80:97:a6:73:
         b9:2d:b8:62:e8:29:c0:85:97:3d:d2:df:0c:72:92:f9:3b:ba:
         8e:dc:9d:fa:94:ed:d7:a7:3b:ef:60:a7:ea:5a:42:a7:d6:89:
         7d:84:62:e4:1d:c8:80:07:53:05:fc:78:24:5c:f0:f5:3e:0c:
         e3:39:75:68:04:7c:d6:31:97:e3:5c:5b:af:27:d8:49:51:7e:
         c1:4d:8a:92:1d:7a:21:7c:41:32:45:81:66:1f:24:20:54:ac:
         67:1f:96:aa:f0:cf:d9:7b:06:5b:2f:e1:1d:fc:78:ff:83:bf:
         41:9f:98:e7
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUa59A6o6pEKsz0AhDXLZ3FIfNyBIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNERCQ0VBNDE0Qzk3RTIxRUQ5NTRFMjIzODlFNjU1OTBD
NTU1RUVCRDAeFw0yNjEwMTQyMDQ1MDBaFw0yNjEwMTUyMDUwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzk5RTUyQTQ2MzAzMDc5NUIz
QTlCM0E4RDFCOEMzQkY0REJBMDRCMkQxQzM0QUFGMTY1N0U3QTNGQTBFM0E5Qzkw
MEVBMzUzM0U2MjRDOUM1MzhBNEZEODkzRUQyNTY2RTFFQjY2MzlGRjk1NkVFODAx
NkJENEE2RjFFQTA2QTZFRUMxNDIwNzcwNzZGRkU2QzE1ODA2OTA3RjVFMEU1MTMx
QjJGNjlGODYyMjEyMTZCNDNDOUEwREMxNTZEODQ4REYwMkVERDlGMkVDMjlDQkIx
N0UyRTFGRTcwQTY5MjhDNzgyODRERDU4NkMyN0IyQzZFQTNENjgyQTI5QkRGNjc0
MzE1NkM3RjNBQTAzMkNCRTVDRUY3RDQwNDgwMjExNDM1RTRBOUIzNzZEMjkxRTI0
Q0VGRDdDMjU0MzI3RkVEQUU3QUZCNDk5NTg1NUVGRUZBODEwQzdGMjI5ODMwMjMw
NjcxOTEzQkUzMEEzNzFGRENCQjA5MkNGNDE0NDcyNThFQ0FFQTRFMjdFNkI1ODgz
NDcwNjRCMkU5QkNDODEzMzFBN0VGQzlBQzQyRjQ2MDA1QTNGQjA5NzcyNDY3QUNB
MUJENTRDNjgwM0JDRkNDMDJCM0U2RkFBNjJCRDU5MzQ0M0Y5QkE5NkY2MDZCOUU4
MEVBMDYxRkIzMjlFOTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyZ5SpGMDB5WzqbOo0bjDv026BLLRw0qvFlfno/oOOpyQDqNTPmJM
nFOKT9iT7SVm4etmOf+VbugBa9Sm8eoGpu7BQgdwdv/mwVgGkH9eDlExsvafhiIS
FrQ8mg3BVthI3wLt2fLsKcuxfi4f5wppKMeChN1YbCeyxuo9aCopvfZ0MVbH86oD
LL5c731ASAIRQ15KmzdtKR4kzv18JUMn/trnr7SZWFXv76gQx/IpgwIwZxkTvjCj
cf3LsJLPQURyWOyupOJ+a1iDRwZLLpvMgTMafvyaxC9GAFo/sJdyRnrKG9VMaAO8
/MArPm+qYr1ZNEP5upb2BrnoDqBh+zKekwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FJDxwSPjJc3DLGZwqUGvrmobEYyfMB8GA1UdIwQYMBaAFE286kFMl+Ie2VTiI4nm
VZDFVe69MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRxQW5hWEJ3a1l4TGh1
UkxRODhzZWt4anVGSDJud21Wd3BlM3VaZEFEajF5LzEvNERCQ0VBNDE0Qzk3RTIx
RUQ5NTRFMjIzODlFNjU1OTBDNTU1RUVCRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80REJDRUE0MTRDOTdFMjFFRDk1NEUyMjM4OUU2NTU5MEM1NTVF
RUJELmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRxQW5hWEJ3a1l4TGh1UkxRODhz
ZWt4anVGSDJud21Wd3BlM3VaZEFEajF5LzEvNERCQ0VBNDE0Qzk3RTIxRUQ5NTRF
MjIzODlFNjU1OTBDNTU1RUVCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAI/3MvBwBLQWajGMpZS/oSxY
+4rCP0AkV+XkWkMda5Sr2r0VAkfiTjsH/yNkX3q2nSAejbkJ9M/PmBA3EdJlDIHf
vKx1Zzcy/saYsETYGc0dmapusHMNCHavYXyQXoxd30tlQXA5nLzBzMPxhl1pBHhB
FRaP/3xDSHRCaP/InyRrFIP5uSVAx7BAOWq/gJemc7ktuGLoKcCFlz3S3wxykvk7
uo7cnfqU7denO+9gp+paQqfWiX2EYuQdyIAHUwX8eCRc8PU+DOM5dWgEfNYxl+Nc
W68n2ElRfsFNipIdeiF8QTJFgWYfJCBUrGcflqrwz9l7Blsv4R38eP+Dv0GfmOc=
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:23:25 2026 by rpki-client