Error: rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.mft
File:                     B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.mft (raw, json)
Hash identifier:          RKIJuEvYqSYZMXLZVVdtdMHJw7chasZ8YJvb3OWHcUQ=
Subject key identifier:   4C:C1:60:A3:57:A7:D0:E3:01:A5:A0:EC:F4:56:41:0E:38:20:0C:5C
Authority key identifier: B4:1D:6A:9C:5F:D8:1F:51:C4:F5:E7:3E:59:4F:0C:F0:C9:99:B8:43
Certificate issuer:       /CN=B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843
Certificate serial:       3EE6FEA1C490E1128B9CC3B6689F0B8CD90ACC73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.mft
Manifest number:          033B
Signing time:             Sun 18 Oct 2026 13:52:16 +0000
Manifest this update:     Sun 18 Oct 2026 13:47:16 +0000
Manifest next update:     Mon 19 Oct 2026 17:25:16 +0000
Files and hashes:         1: 323830343a353239633a343030303a3a2f33342d3334203d3e20323638353239.roa (hash: OI7On3DAp4Vwy5bsf24vPkSugWa6IsVlSLYlzTmOYhA=)
                          2: 34352e3136322e34392e302f32342d3234203d3e20323638353239.roa (hash: 0dwLyXzdEN7NjIUYnBYEdG6E3t8kZG2oUycGgZ7HFvc=)
                          3: 323830343a353239633a3a2f33322d3332203d3e20323638353239.roa (hash: yesGEizXRMmDgXlWJRTWWureb+6kZIocTEn+Nslrotw=)
                          4: B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.crl (hash: kJsNYF0I7FEQOpKsOpOphEZ+C6m9lbLcUZCv7oNw73Y=)
                          5: 34352e3136322e34382e302f32322d3232203d3e20323638353239.roa (hash: dm8gvwbEjVCB6uiHvJDtp4FKVPSTe3xtOenrM7yoCqE=)
                          6: 34352e3136322e34382e302f32332d3233203d3e20323638353239.roa (hash: o5k5qPZrQD+R+rjHRByCCsh5If+NR7VenqgIK3M4aBw=)
                          7: 34352e3136322e34382e302f32342d3234203d3e20323638353239.roa (hash: bWAtAMTGoedY8hbmysukuNFzlfcEx28LkrMyr3XzYq0=)
                          8: 323830343a353239633a3a2f33332d3333203d3e20323638353239.roa (hash: GodzEhK38moypx2tU2I8HENxdupkK5F5cBwZx7vPM0M=)
                          9: 323830343a353239633a383030303a3a2f33342d3334203d3e20323638353239.roa (hash: xnXDzoH3/S68frwVKP+UPecXvFgXSM56k4h5r+dt1js=)
                          10: 323830343a353239633a633030303a3a2f33342d3334203d3e20323638353239.roa (hash: ojxetBMWRoOFzU3iX1Vz5o1kbTj96Iatk1KnhwIhlYw=)
                          11: 34352e3136322e35302e302f32332d3233203d3e20323638353239.roa (hash: SPLbf2REHD2aPi7ThPXahU8dEMftG+Q0IgbGOxw/4Mw=)
                          12: 34352e3136322e35312e302f32342d3234203d3e20323638353239.roa (hash: jUYXbsZvnQ/1DQQxFb2AS/5McEXR4349BvfmLJcfjvg=)
                          13: 34352e3136322e35302e302f32342d3234203d3e20323638353239.roa (hash: Kxys4tmihnVJ3lAH1ei6nnjQrKuXjovgEZJwbs2VaV0=)
                          14: 323830343a353239633a3a2f33342d3334203d3e20323638353239.roa (hash: p0NzeAxs+5iOL8D87BoFA759wIsDKp+MPKWi/WzaxE4=)
                          15: 323830343a353239633a383030303a3a2f33332d3333203d3e20323638353239.roa (hash: iRUHJPcqqcsFSIaEWq9vr5fdxN+xA1I2Mi8S0sfFHlg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.crl
                          rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 17:25:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e6:fe:a1:c4:90:e1:12:8b:9c:c3:b6:68:9f:0b:8c:d9:0a:cc:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843
        Validity
            Not Before: Oct 18 13:47:16 2026 GMT
            Not After : Oct 19 17:25:16 2026 GMT
        Subject: CN=4CC160A357A7D0E301A5A0ECF456410E38200C5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:72:0c:4d:62:f1:0d:9f:3f:6a:bb:0a:f8:12:
                    62:41:87:a7:0d:a7:d3:b8:d4:51:07:88:07:f4:60:
                    f3:46:b3:70:72:33:ec:70:00:63:e2:a9:bc:3f:77:
                    60:54:ed:12:b5:a5:1d:42:78:68:d1:46:f8:9e:db:
                    c7:3c:32:18:d5:d2:68:24:6a:f3:01:60:21:8c:9b:
                    ec:e1:a6:85:ca:3f:66:f4:d4:44:7c:41:7d:df:bc:
                    fe:cb:dc:dc:70:dc:46:79:b2:2f:67:97:ef:3a:ec:
                    fc:3b:34:50:48:4a:c3:06:e4:f7:2e:c2:c2:63:68:
                    70:01:31:5e:fa:62:53:bb:bd:ee:b6:01:cb:cf:b2:
                    fa:02:db:5e:b4:18:a8:d0:ce:4c:e3:b1:9e:b4:0d:
                    2a:1d:57:98:93:2c:c9:1a:5a:bb:56:9a:da:7b:ca:
                    93:4b:f2:4a:ed:53:fb:61:15:15:9b:d5:a1:08:d7:
                    51:2c:b7:53:b4:41:c2:93:94:78:b7:f1:7c:fa:76:
                    a3:78:22:c0:87:d0:12:8a:c1:38:cb:86:65:30:d1:
                    ec:cd:cc:f6:8e:04:90:62:d7:40:a9:b3:71:2f:82:
                    bd:57:8e:4c:05:23:70:5c:3d:99:12:6b:a6:40:b9:
                    f6:5c:e6:6e:35:39:dc:b7:a7:3a:31:51:02:9d:b2:
                    ac:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C1:60:A3:57:A7:D0:E3:01:A5:A0:EC:F4:56:41:0E:38:20:0C:5C
            X509v3 Authority Key Identifier:
                keyid:B4:1D:6A:9C:5F:D8:1F:51:C4:F5:E7:3E:59:4F:0C:F0:C9:99:B8:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:fb:3a:1c:09:c5:a0:0c:ae:d6:d1:9c:63:34:ca:04:a6:d2:
         db:75:07:16:10:da:6d:93:0e:5e:2f:ce:98:e3:9a:38:70:95:
         a2:cf:b5:0d:8c:d1:0b:b7:c2:85:47:d1:a5:f4:a6:a1:c0:02:
         72:5f:d4:33:f2:d0:67:7a:28:c3:f1:e2:06:25:7d:ea:58:8d:
         84:3e:d7:ed:25:2b:b8:f2:13:5c:3f:61:57:97:f3:4d:84:de:
         72:ce:b9:14:8c:8e:bd:d3:20:ab:26:c6:95:75:27:a9:8a:5d:
         e0:84:d1:20:08:29:35:1b:86:76:88:de:e1:b6:0c:67:3f:74:
         7a:0e:92:8a:07:02:b3:bc:f7:65:3a:d1:48:15:01:dc:5e:f5:
         1c:7a:e2:63:9c:be:64:b2:a2:c9:48:ba:51:12:ea:7a:3e:6a:
         e9:3d:52:d8:7d:16:d6:60:38:5d:31:36:4c:ff:09:fc:cc:52:
         ec:e3:81:9b:66:57:05:bb:cf:d9:21:fc:82:08:18:0c:2f:94:
         76:dd:33:b2:03:90:06:5a:4d:59:01:13:d4:7e:cb:cc:a5:a0:
         c2:0a:04:70:f7:41:f2:46:55:c8:e4:4d:2e:e7:74:a5:8b:3f:
         e5:36:a1:82:e0:d9:f7:7c:a6:76:92:44:63:54:40:14:af:52:
         70:d0:f0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 06:17:56 2026 by rpki-client