Error: rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.mft
File:                     B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.mft (raw, json)
Hash identifier:          WUBfHmHx5rPHP1oW8uuSqJHUVF4UoSwJdRRZ5OwWVqQ=
Subject key identifier:   CA:C8:B1:0A:A7:77:C1:DA:B2:F6:56:4E:F1:16:82:EE:E7:D5:A6:9C
Authority key identifier: B9:2F:5B:16:D8:2D:9F:6A:2A:1E:EA:0D:BB:8A:B0:1E:90:47:2A:C8
Certificate issuer:       /CN=B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8
Certificate serial:       24491330B0FF3380E312F86C500A023951E2B330
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.mft
Manifest number:          61
Signing time:             Sun 11 Oct 2026 04:10:05 +0000
Manifest this update:     Sun 11 Oct 2026 04:05:05 +0000
Manifest next update:     Mon 12 Oct 2026 07:42:05 +0000
Files and hashes:         1: 3137372e3130352e3137392e302f32342d3234203d3e20323632363439.roa (hash: XF4rai6oJ9E3A3GC89Ne07OKmVwTEhiwG+982C1zS68=)
                          2: 3137302e3233382e39342e302f32342d3234203d3e20323632363439.roa (hash: ec943IRQeSO852k5PTrIdAgDCTWAlvxVxB/SssQ+oD8=)
                          3: 3137302e3233382e39332e302f32342d3234203d3e20323632363439.roa (hash: wJpElYmf0R2IEOaiKHcOEYG3UYUlJK54wKzBtFUt6pc=)
                          4: 3137372e3130352e3137362e302f32302d3230203d3e20323632363439.roa (hash: 7ypCwLdMUZVf07vNrHeP00oZqsul9u4ADliRhc5k4JY=)
                          5: 323830343a3737303a3a2f33322d3332203d3e20323632363439.roa (hash: 4f62scxdPskPkoxAxaPF3Q5IKOxlXA8NIHe9i2oLEBg=)
                          6: 3137372e3130352e3138372e302f32342d3332203d3e20323632363439.roa (hash: EuSZVc2HMwSnPv24aNHrTk7i6eNTVsKN8DfyQkwYoBE=)
                          7: 3137372e3130352e3138392e302f32342d3332203d3e20323632363439.roa (hash: SEN8nAeHa8K+Vc86l5tDWqhLU/2Ztmh4qG3Pg+B87Yw=)
                          8: 3133382e3231392e3230342e302f32342d3234203d3e20323632363439.roa (hash: n8aAV3RkN/R2cvgT3MweStBe055M6QUdZ25+uBaP4Us=)
                          9: 3133382e3231392e3230352e302f32342d3234203d3e20323632363439.roa (hash: us7ECi977ZUxSD2VDmJONXXNv9ci7GefaNvMcuQEj2Y=)
                          10: 3137372e3130352e3137382e302f32342d3234203d3e20323632363439.roa (hash: JetLWXvt9jxcEW5udgbH5Kzl5h9YqDTT+kz4qYYdP5k=)
                          11: 3137302e3233382e39322e302f32322d3232203d3e20323632363439.roa (hash: MOUZ2eLOBx+9sBBRvXpwpXnostTUMpyoiPiGNvCMew8=)
                          12: 3137372e3130352e3138382e302f32342d3332203d3e20323632363439.roa (hash: cBDNzMbOUvjJ0B80+q27awBGCyJze/4YP/NOckZez8M=)
                          13: 3137372e3130352e3138362e302f32342d3332203d3e20323632363439.roa (hash: PcDU9AEuUYDxe8LvZHegu3wCYvqCI+a1ajBYsSXaYlM=)
                          14: 3137372e3130352e3138342e302f32342d3332203d3e20323632363439.roa (hash: NQNAiUT/D0EgRUjCp67z5J65/FduIIAbRm86ke9LDU8=)
                          15: 3137302e3233382e39352e302f32342d3234203d3e20323632363439.roa (hash: tWaZD1I/vfH1LfP/4RPmvfU3A2z+yNllu7eAFAospuM=)
                          16: 3137372e3130352e3137362e302f32342d3234203d3e20323632363439.roa (hash: YtI2+j2sUWt5bhVPCStLZshoaRblQSqJWx8cDa2sg7k=)
                          17: 3133382e3231392e3230372e302f32342d3234203d3e20323632363439.roa (hash: wOBofgnHx0aCz2eTZaob9iJLzo3F+qL1xWXcbnX0acQ=)
                          18: B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.crl (hash: 1CEKuDWNNn374bcw7T1RZTbEI09hkY8bZKTueF27l1s=)
                          19: 3137372e3130352e3138322e302f32342d3332203d3e20323632363439.roa (hash: 9yjICV4KojtkKfsRIg7yB8OtJafsyvqkbIoxO4DH+GY=)
                          20: 3137372e3130352e3138332e302f32342d3332203d3e20323632363439.roa (hash: LzhwNLu3Srm9BANHotEWD1fGcnwvGDXgCDbzREDuP6c=)
                          21: 3137372e3130352e3138302e302f32342d3332203d3e20323632363439.roa (hash: CVllnTIFClmEaxoBBhVvDSkNPzkdOyvOk9TgXAJlgl8=)
                          22: 3137372e3130352e3137372e302f32342d3234203d3e20323632363439.roa (hash: bkRXdTO8kCF4mO77il8754qGTnF3E8Xn2oR8G1+zxh0=)
                          23: 3137372e3130352e3139312e302f32342d3332203d3e20323632363439.roa (hash: mPEv52nz0MtAWvSN+EJn+KiUrPGjn5mBT4mh6tFbqOM=)
                          24: 3137372e3130352e3139302e302f32342d3234203d3e20323632363439.roa (hash: l34MADpGNmV2eDCYCyY2TWw5wEAGkq08MhcIN2hCsW0=)
                          25: 3137372e3130352e3138352e302f32342d3332203d3e20323632363439.roa (hash: ADX3ncTKsyU2+UdMehJZhayqXIHrzlTylhbb2xi8qQA=)
                          26: 3133382e3231392e3230342e302f32322d3232203d3e20323632363439.roa (hash: NHk/STBoHJTLl196RSLGoak1bBUUNazSXKENOx3qt80=)
                          27: 3133382e3231392e3230362e302f32342d3234203d3e20323632363439.roa (hash: s4iR+pTUjZWcbdGGAnzWewD8DdvuzGy3iBSv9i7FJeg=)
                          28: 3137302e3233382e39322e302f32342d3234203d3e20323632363439.roa (hash: f868mguLpk7c5B02pdxPk2Z4iMlA+565LFnoK+AeMX4=)
                          29: 3137372e3130352e3138312e302f32342d3332203d3e20323632363439.roa (hash: JK9N4Orz/J6PhMq9gfCuUS1YTtBmeQZzaNowozfEYkQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.crl
                          rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 07:42:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:49:13:30:b0:ff:33:80:e3:12:f8:6c:50:0a:02:39:51:e2:b3:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8
        Validity
            Not Before: Oct 11 04:05:05 2026 GMT
            Not After : Oct 12 07:42:05 2026 GMT
        Subject: CN=CAC8B10AA777C1DAB2F6564EF11682EEE7D5A69C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9f:01:b0:e5:10:ba:d6:23:24:bc:70:5a:19:
                    5f:73:8c:2b:dc:0a:d2:93:39:aa:f1:f2:ae:dc:a1:
                    a8:c1:28:ad:67:b5:90:03:e0:80:4e:7c:04:e2:d5:
                    67:ee:d4:85:64:77:53:d8:da:fd:d2:ac:fc:6a:9f:
                    94:79:50:8a:2b:23:c5:b9:bf:9f:c6:55:12:cb:2a:
                    77:db:2b:cf:c7:91:8b:28:7d:dc:c4:87:85:8f:09:
                    18:4a:ee:f1:52:4e:e8:95:d3:f7:87:cc:d0:a7:64:
                    fe:7f:20:6d:4f:a7:ba:fa:ca:5d:45:c3:24:4f:dc:
                    f5:66:56:40:e6:f5:c3:12:26:36:42:14:e1:ba:75:
                    0b:4c:dc:75:46:10:df:cf:f4:23:fc:b4:6c:64:14:
                    e1:95:c7:5a:f7:14:3d:10:87:f0:ca:32:f7:0f:7e:
                    16:c4:bb:91:f0:58:6a:97:24:8f:48:31:70:8e:42:
                    86:de:e9:7b:ca:60:f0:31:92:4b:6a:a1:83:36:5f:
                    20:2b:55:a7:4c:64:1f:e5:70:02:b3:30:ac:06:a8:
                    f7:9f:a9:50:70:60:60:d3:01:86:19:b8:8f:ea:9f:
                    77:64:d7:99:39:cd:b8:20:6b:82:7a:00:5c:99:d6:
                    16:70:99:1f:c5:a8:b9:bd:38:00:e0:13:97:11:25:
                    2b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C8:B1:0A:A7:77:C1:DA:B2:F6:56:4E:F1:16:82:EE:E7:D5:A6:9C
            X509v3 Authority Key Identifier:
                keyid:B9:2F:5B:16:D8:2D:9F:6A:2A:1E:EA:0D:BB:8A:B0:1E:90:47:2A:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:43:79:2e:53:57:25:e2:1b:d0:54:2b:d1:f4:38:88:88:31:
         3a:94:e9:47:30:91:d1:39:dc:b1:7b:55:e1:0f:b4:62:7d:8e:
         76:f9:eb:d1:c5:9f:5e:28:ba:f1:b2:cd:bb:cc:c6:4d:5c:47:
         4a:26:5f:1f:99:e1:b3:6d:be:47:bb:55:6a:ef:77:c9:c5:4b:
         5f:d6:24:9b:24:fd:1a:6c:0a:79:6b:ed:20:35:79:d4:83:18:
         db:24:a4:45:97:01:f2:13:89:e5:3f:0d:6e:f8:4a:b0:37:35:
         fe:ba:9c:a5:a4:aa:b7:b0:51:64:1d:53:6f:5c:34:6e:79:99:
         99:6f:ba:68:4b:66:c7:39:a1:f1:76:39:e8:7c:02:85:cc:2b:
         84:59:b6:c1:09:cc:63:41:dc:c8:3e:fe:d8:d4:6b:fc:75:2c:
         4b:c0:a3:10:9d:3f:30:80:fe:36:83:77:e8:b4:a9:fc:35:e1:
         de:5c:4d:7b:e1:7d:b4:56:a8:d5:67:28:0d:7a:27:76:ae:1e:
         ba:67:ee:42:9f:42:b1:ed:9a:b1:a2:c0:82:61:71:01:3f:3d:
         9c:12:d5:89:0e:d8:fb:1c:b2:b2:f5:fa:14:42:67:be:f3:1b:
         a4:f3:3d:2a:56:cb:84:46:e8:ac:c7:42:1c:7a:6c:98:74:b3:
         c5:0f:cf:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:56:43 2026 by rpki-client