Error: rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.mft
File:                     16F81DF06319D01EB676C8B7D68D31AD3664B3B9.mft (raw, json)
Hash identifier:          6sqUmCJs6BhYvQF2U4G1X2GQ/2u9375YWoYDvcrK6e8=
Subject key identifier:   64:62:C8:6E:38:2B:CD:CE:F1:30:46:36:04:B5:F2:90:83:3A:C9:10
Authority key identifier: 16:F8:1D:F0:63:19:D0:1E:B6:76:C8:B7:D6:8D:31:AD:36:64:B3:B9
Certificate issuer:       /CN=16F81DF06319D01EB676C8B7D68D31AD3664B3B9
Certificate serial:       778DFA72503D0FD67009E5C6C73F23E0D7E9B4F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.mft
Manifest number:          04D3
Signing time:             Mon 12 Oct 2026 10:51:17 +0000
Manifest this update:     Mon 12 Oct 2026 10:46:17 +0000
Manifest next update:     Tue 13 Oct 2026 11:33:17 +0000
Files and hashes:         1: 3139302e38392e37362e302f32322d3234203d3e20323730333539.roa (hash: RjWIFsjZwH1iMVrEhfnhup1rqYKPdqgk3lykrEApvsg=)
                          2: 3139302e38392e37372e302f32342d3234203d3e20323730333539.roa (hash: 5LNV7K5rL22C4Qn6TC3w2sHeyhzI7QVJfZAIIM7oG0g=)
                          3: 16F81DF06319D01EB676C8B7D68D31AD3664B3B9.crl (hash: Cr9rgEtIQ/CtRSR+4/eAsG1SY7dmC2BuoP/wSBHAVkw=)
                          4: 3139302e38392e37392e302f32342d3234203d3e20323730333539.roa (hash: g1AFjzgYgGi/CH9bgR6BJnqv+gBBFlkmaAXhyZlKWoc=)
                          5: 3139302e38392e37382e302f32342d3234203d3e20323730333539.roa (hash: m1nxOpPqsQqimhKOmkMp6cEXHc3mS9isox5C8xI12Yw=)
                          6: 3139302e38392e37362e302f32342d3234203d3e20323730333539.roa (hash: 9i4dd49d0W+ZtJORU2YnFFff3Tvhu6EM+YU/XkAgkgU=)
                          7: 323830343a366163633a3a2f33322d313238203d3e20323730333539.roa (hash: i7GQ72208CGuR10zu8EtpVkTFFXQfmr1OmoRJZ2gOU0=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:8d:fa:72:50:3d:0f:d6:70:09:e5:c6:c7:3f:23:e0:d7:e9:b4:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16F81DF06319D01EB676C8B7D68D31AD3664B3B9
        Validity
            Not Before: Oct 12 10:46:17 2026 GMT
            Not After : Oct 13 11:33:17 2026 GMT
        Subject: CN=6462C86E382BCDCEF130463604B5F290833AC910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:21:11:55:3b:d5:57:dc:5f:37:10:f6:3f:75:
                    d2:21:b4:fb:40:ee:55:f4:ba:90:61:93:78:02:4d:
                    35:20:2a:f3:e1:69:0c:b6:da:4f:91:d3:72:48:36:
                    36:28:57:56:3b:b5:2e:ac:72:45:83:50:b4:85:51:
                    d5:b5:8e:62:fd:d4:e8:c8:39:dd:5d:d0:62:66:f4:
                    fd:7b:4e:3e:4c:e5:14:7e:30:7e:24:b2:73:4a:58:
                    4e:1a:3d:74:1d:92:dd:f9:85:01:09:69:89:f5:2c:
                    e3:fd:36:54:03:7e:d2:c9:87:07:b6:52:fb:e9:4a:
                    94:4d:8e:4b:f0:d4:7c:aa:7a:ff:fe:cf:31:27:a7:
                    4a:91:98:24:ba:3a:aa:16:cb:ba:02:2a:fb:24:1c:
                    6e:c2:e6:b1:66:66:07:a1:68:48:f8:63:ce:81:7f:
                    22:c6:0f:ea:99:ea:87:17:f4:8a:9d:fa:da:2a:e3:
                    f2:fb:b6:bd:4b:1a:17:d5:20:c7:93:6c:7e:e7:5e:
                    8b:f5:cc:3f:21:f1:0d:d0:fd:ad:37:cb:0b:31:4d:
                    67:18:72:d2:0a:ba:97:69:99:2c:ac:4b:42:c0:f7:
                    60:19:f9:f6:1b:08:f8:50:5a:26:1b:0f:76:68:8e:
                    7a:26:97:0f:54:f9:24:5e:b3:37:b8:80:1c:3e:16:
                    10:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:62:C8:6E:38:2B:CD:CE:F1:30:46:36:04:B5:F2:90:83:3A:C9:10
            X509v3 Authority Key Identifier:
                keyid:16:F8:1D:F0:63:19:D0:1E:B6:76:C8:B7:D6:8D:31:AD:36:64:B3:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:a1:57:02:4d:08:5a:51:3c:fc:b6:5d:9c:d2:81:c9:8b:97:
         a1:b6:ca:22:87:0d:ae:b8:54:eb:8a:ad:bb:16:3b:ac:dc:62:
         df:1a:93:77:de:ae:17:33:b9:e6:ce:0d:4c:3d:c6:8e:b1:be:
         07:51:36:2f:fe:15:95:8d:5f:34:8a:86:9d:43:77:0d:f5:46:
         7f:37:6c:c2:69:f7:60:e5:f7:74:05:c4:b2:39:a8:77:80:a6:
         54:f8:19:94:70:3b:4e:04:4f:0d:34:a1:c2:cf:9e:d3:b2:3e:
         08:74:05:d6:e8:54:3f:4f:cd:f5:5e:c4:f9:82:6f:96:5a:ad:
         2b:58:cd:00:60:fd:1b:32:7e:61:ad:24:b5:71:15:4a:18:e1:
         bc:ef:02:b6:52:17:41:94:20:f0:ad:ba:c8:cd:b1:a9:58:21:
         45:34:8c:df:01:c7:96:66:36:6c:4f:fa:a5:f7:18:71:be:8b:
         6a:88:29:da:2a:cb:e9:38:24:4d:96:4a:e4:1f:15:1f:6c:5a:
         bb:d7:26:ac:eb:d3:32:c6:4d:9b:83:e5:4c:c1:43:2f:fd:f9:
         52:97:90:a6:5d:1a:d5:72:48:0e:98:94:b3:51:2b:64:90:b4:
         fa:19:9f:1e:87:6f:ca:65:ca:fc:4c:ab:ca:47:d6:22:f9:13:
         70:1a:e0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 08:06:05 2026 by rpki-client