Error: rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft
File:                     57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft (raw, json)
Hash identifier:          QJeYDLySQZCGO+D75kgSOBBvB2bq8j55xteB1FrejQ4=
Subject key identifier:   57:6C:41:4E:D9:8F:40:2A:28:AE:0A:8B:26:44:09:04:DA:CE:F8:56
Authority key identifier: 57:13:5F:33:D3:B8:CA:CE:38:71:4D:FB:9D:70:A5:8A:A9:C1:E7:B3
Certificate issuer:       /CN=57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3
Certificate serial:       39F88A821AC220BAF1F97CE315DD25933682F641
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft
Manifest number:          04CC
Signing time:             Tue 13 Oct 2026 09:20:00 +0000
Manifest this update:     Tue 13 Oct 2026 09:15:00 +0000
Manifest next update:     Wed 14 Oct 2026 12:32:00 +0000
Files and hashes:         1: 3136342e3136332e34352e302f32342d3234203d3e20323635393338.roa (hash: lV1oKe747G0n6WRgM1a4dM22y9iZagltIiwr2w1aEBg=)
                          2: 323830343a343032383a3a2f33322d3332203d3e20323635393338.roa (hash: UMKRCX/4qYhc4XNHoqfKV/1ONT4TGbG+lvZt+EzE/0A=)
                          3: 3136342e3136332e34342e302f32322d3232203d3e20323635393338.roa (hash: 1z4/xMozbUx2CPAp5a1G9mTLfzpvBpA70xbCWwQm3IM=)
                          4: 323830343a343032383a3130303a3a2f34302d3430203d3e20323635393338.roa (hash: 1tVL+6B8HhLcFiXsFBeRJ5hySt2gSzAHZgR8EqHAJgk=)
                          5: 3136342e3136332e34342e302f32332d3233203d3e20323635393338.roa (hash: 0kK3z/TrTAaoriZ3GY5WskvHWB4ENyEqA6Wnc3yr+IE=)
                          6: 3136342e3136332e34362e302f32332d3233203d3e20323635393338.roa (hash: Mu0Wn6H9qsU4Z+oCCRBb3/sh2XWemV9Lqf1gWwvHxXo=)
                          7: 3136342e3136332e34342e302f32342d3234203d3e20323635393338.roa (hash: 0ae2f1EZL6HbxhVwcUzw3Me44jF/YDkz9SSwEVRkb24=)
                          8: 57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl (hash: f48jBUd5pA/EkaPu0n+GmcR4uDXRWc1dTQDVR1Kwz6o=)
                          9: 3136342e3136332e34362e302f32342d3234203d3e20323635393338.roa (hash: Fx9VT/BBPrSUohUu7tYHinsNONRM+8cKqY2rlMaecck=)
                          10: 3136342e3136332e34372e302f32342d3234203d3e20323635393338.roa (hash: ECg/+TFC7sOVcDJEnNISsSLO7wDSB/2DnX7fHheA4EU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl
                          rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 12:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f8:8a:82:1a:c2:20:ba:f1:f9:7c:e3:15:dd:25:93:36:82:f6:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3
        Validity
            Not Before: Oct 13 09:15:00 2026 GMT
            Not After : Oct 14 12:32:00 2026 GMT
        Subject: CN=576C414ED98F402A28AE0A8B26440904DACEF856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:83:07:72:66:8f:c5:f0:f3:f8:1d:bf:8a:5d:
                    b7:db:1a:33:2d:47:51:d0:7e:ce:0e:d9:67:7b:33:
                    ad:a5:d7:61:a4:ed:71:aa:27:d6:d2:00:1d:7c:3e:
                    41:53:a5:18:57:c4:10:b8:fa:15:46:6f:bb:be:ed:
                    9f:e3:0a:da:18:1c:7e:b1:0d:1c:8d:88:45:bb:81:
                    93:ab:c8:b3:e0:9a:6a:4c:49:4e:5b:fd:89:64:31:
                    eb:83:36:56:ce:78:54:b5:90:3a:a0:f4:35:f7:7a:
                    8d:9c:a4:61:c0:2d:db:d3:a3:cc:40:e0:09:b4:bd:
                    55:c0:2e:84:ba:80:40:c1:c9:e7:9c:6a:b4:5a:86:
                    c2:0f:84:9c:38:ec:ae:d4:df:59:9e:d5:1d:3f:56:
                    e4:a0:7a:44:f0:71:71:a2:43:01:56:36:46:2a:9f:
                    f5:d4:99:48:57:f0:91:83:1e:59:d0:90:a5:a5:1b:
                    21:d4:bf:6b:46:30:cb:5f:6a:64:b8:f9:d0:ca:c9:
                    01:90:bf:4c:8d:77:9c:6f:b4:c6:35:0a:38:f2:38:
                    7b:b2:a5:6d:0d:9b:56:c7:f1:fe:0e:99:fd:64:ce:
                    99:a9:85:12:87:c2:14:d4:24:05:a4:e6:18:b1:08:
                    65:ec:82:4a:54:b0:01:80:c2:2a:fc:77:6f:14:78:
                    69:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6C:41:4E:D9:8F:40:2A:28:AE:0A:8B:26:44:09:04:DA:CE:F8:56
            X509v3 Authority Key Identifier:
                keyid:57:13:5F:33:D3:B8:CA:CE:38:71:4D:FB:9D:70:A5:8A:A9:C1:E7:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:76:d3:4b:dc:88:ab:b8:d1:bf:2f:b9:16:cf:64:45:c3:a7:
         b3:98:b6:0b:88:36:aa:f8:0c:ae:51:39:69:20:99:51:cb:a9:
         56:64:3e:f5:8b:e2:a0:94:3a:6a:45:ab:b7:e1:98:c4:77:5e:
         c6:4d:f7:3f:c2:2f:f0:f3:ce:4c:0a:8c:62:2e:bc:3e:90:71:
         9b:ea:57:29:92:b1:38:d1:33:e0:b1:09:78:5d:60:9c:f0:1e:
         80:23:e3:ac:18:59:b0:42:98:db:31:52:f9:4a:fa:1d:1e:49:
         09:d2:d7:4f:e8:9a:63:cc:d1:c6:0a:9d:0c:70:c2:57:08:d4:
         97:4e:40:89:18:cc:8f:35:bf:a5:8d:be:0b:d0:cf:79:20:de:
         95:0f:c5:0a:f7:0b:ce:2e:9a:dc:fe:00:da:5b:c5:3f:06:de:
         69:82:6b:01:3f:b1:f1:58:1c:bf:99:74:25:9f:02:9a:16:c8:
         bf:62:cd:42:48:05:e8:80:0e:d7:c9:a4:77:a3:0a:a5:02:5e:
         eb:98:d6:36:a1:31:cd:73:02:01:3f:61:9a:ec:58:5a:07:9a:
         c5:23:89:0b:67:84:68:e3:1c:69:d7:d3:84:9d:94:f5:8f:8e:
         56:fa:c4:82:88:59:93:4e:11:27:a9:75:9a:ee:a2:13:b7:cb:
         48:27:10:c9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOfiKghrCILrx+XzjFd0lkzaC9kEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTcxMzVGMzNEM0I4Q0FDRTM4NzE0REZCOUQ3MEE1OEFB
OUMxRTdCMzAeFw0yNjEwMTMwOTE1MDBaFw0yNjEwMTQxMjMyMDBaMDMxMTAvBgNV
BAMTKDU3NkM0MTRFRDk4RjQwMkEyOEFFMEE4QjI2NDQwOTA0REFDRUY4NTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDgwdyZo/F8PP4Hb+KXbfbGjMt
R1HQfs4O2Wd7M62l12Gk7XGqJ9bSAB18PkFTpRhXxBC4+hVGb7u+7Z/jCtoYHH6x
DRyNiEW7gZOryLPgmmpMSU5b/YlkMeuDNlbOeFS1kDqg9DX3eo2cpGHALdvTo8xA
4Am0vVXALoS6gEDByeecarRahsIPhJw47K7U31me1R0/VuSgekTwcXGiQwFWNkYq
n/XUmUhX8JGDHlnQkKWlGyHUv2tGMMtfamS4+dDKyQGQv0yNd5xvtMY1CjjyOHuy
pW0Nm1bH8f4Omf1kzpmphRKHwhTUJAWk5hixCGXsgkpUsAGAwir8d28UeGkfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUV2xBTtmPQCoorgqLJkQJBNrO+FYwHwYDVR0j
BBgwFoAUVxNfM9O4ys44cU37nXCliqnB57MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNURHaGdNWWpTSmlGQ0MzVkRmVHdDQWRTa0tlcHV5NUx3NnRVQmRzUFJ6
R2QvMS81NzEzNUYzM0QzQjhDQUNFMzg3MTRERkI5RDcwQTU4QUE5QzFFN0IzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU3MTM1RjMzRDNCOENBQ0Uz
ODcxNERGQjlENzBBNThBQTlDMUU3QjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NURHaGdNWWpTSmlGQ0MzVkRmVHdDQWRTa0tlcHV5NUx3NnRVQmRzUFJ6R2QvMS81
NzEzNUYzM0QzQjhDQUNFMzg3MTRERkI5RDcwQTU4QUE5QzFFN0IzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHXbTS9yIq7jRvy+5Fs9kRcOns5i2C4g2qvgMrlE5aSCZUcupVmQ+9YvioJQ6
akWrt+GYxHdexk33P8Iv8PPOTAqMYi68PpBxm+pXKZKxONEz4LEJeF1gnPAegCPj
rBhZsEKY2zFS+Ur6HR5JCdLXT+iaY8zRxgqdDHDCVwjUl05AiRjMjzW/pY2+C9DP
eSDelQ/FCvcLzi6a3P4A2lvFPwbeaYJrAT+x8Vgcv5l0JZ8CmhbIv2LNQkgF6IAO
18mkd6MKpQJe65jWNqExzXMCAT9hmuxYWgeaxSOJC2eEaOMcadfThJ2U9Y+OVvrE
gohZk04RJ6l1mu6iE7fLSCcQyQ==
-----END CERTIFICATE-----
Generated at Wed Oct 14 06:33:15 2026 by rpki-client