Error: rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.mft
File:                     413DEE2A242256C5C1A9566FD18C03ECF2F0F586.mft (raw, json)
Hash identifier:          mQihvNEaTrGTTUB6YTHNnE1QtBebF73kGNBRTBww5jA=
Subject key identifier:   D5:69:A8:70:3C:E6:F5:30:3C:21:27:A0:4B:BB:8E:8F:55:31:48:92
Authority key identifier: 41:3D:EE:2A:24:22:56:C5:C1:A9:56:6F:D1:8C:03:EC:F2:F0:F5:86
Certificate issuer:       /CN=413DEE2A242256C5C1A9566FD18C03ECF2F0F586
Certificate serial:       480BA9472BFFD97BC6FF4C74044CD482B8243E94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.mft
Manifest number:          056C
Signing time:             Tue 13 Oct 2026 12:30:00 +0000
Manifest this update:     Tue 13 Oct 2026 12:25:00 +0000
Manifest next update:     Wed 14 Oct 2026 12:30:00 +0000
Files and hashes:         1: 34352e3138362e3137362e302f32322d3234203d3e20323639343439.roa (hash: N3eL2aeWVdktkofBaT6E9gkeG3ajWvnfGJnt+5rzKyQ=)
                          2: 413DEE2A242256C5C1A9566FD18C03ECF2F0F586.crl (hash: LFKusSS7rajITHdCEpMQORFDZj51WDliG0u19eG466U=)
                          3: 323830343a363463633a3a2f33322d3334203d3e20323639343439.roa (hash: vbBJksUixaCou3Yg5ly8jM+BIbRBRciatDxLe+wdIUk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.crl
                          rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 12:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:0b:a9:47:2b:ff:d9:7b:c6:ff:4c:74:04:4c:d4:82:b8:24:3e:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413DEE2A242256C5C1A9566FD18C03ECF2F0F586
        Validity
            Not Before: Oct 13 12:25:00 2026 GMT
            Not After : Oct 14 12:30:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fe:c7:8a:11:b5:7b:93:49:40:0a:5e:40:13:
                    dc:a8:19:8b:af:00:2b:cb:2c:1f:dd:ff:63:f7:86:
                    b9:9c:9b:7a:18:6f:2b:ac:15:65:ed:77:13:1a:a1:
                    b8:e5:e2:fb:1a:98:0e:91:09:a9:71:bc:bf:bd:2f:
                    a0:6f:00:bb:fb:60:1d:eb:0f:02:02:93:77:79:56:
                    3a:40:92:fb:e7:63:17:99:0c:20:4e:d0:23:1d:dc:
                    40:53:f2:92:e7:f2:9a:36:c9:c7:95:fd:d5:81:26:
                    3c:86:50:b9:cc:97:c0:2a:05:2d:60:27:56:73:25:
                    6f:57:6f:25:ae:04:f4:d5:97:5e:3c:3f:ae:e3:c2:
                    e0:95:fe:b4:0f:fa:1e:f8:e3:45:3e:07:13:33:66:
                    5a:2c:96:ed:e3:4f:88:26:2b:fe:78:ff:75:5b:b6:
                    44:82:2b:af:d8:cc:d2:42:3c:de:e5:7a:72:4e:08:
                    70:b0:f8:01:ea:a8:18:73:5c:10:20:b1:95:30:c6:
                    ec:77:7a:a3:f5:97:12:0f:ea:69:90:65:32:0e:ea:
                    ec:d6:82:ba:a8:62:bf:ef:dd:00:e3:8a:d9:57:40:
                    25:a3:ae:35:5c:30:85:c1:a3:9a:4f:c5:9a:e1:92:
                    0b:5e:7f:96:4b:77:1c:c5:6a:a6:46:ff:dc:16:df:
                    a2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:69:A8:70:3C:E6:F5:30:3C:21:27:A0:4B:BB:8E:8F:55:31:48:92
            X509v3 Authority Key Identifier:
                keyid:41:3D:EE:2A:24:22:56:C5:C1:A9:56:6F:D1:8C:03:EC:F2:F0:F5:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:84:b7:22:5f:0b:45:1f:1b:d0:9a:9a:ba:ef:4f:03:a1:f5:
         d0:13:e7:0c:50:9b:5f:8c:09:4d:41:a8:d8:18:0f:17:66:fa:
         b9:1a:c4:9a:d9:36:81:9c:88:0f:e9:9e:14:48:04:75:e1:c2:
         e6:54:b2:9d:4c:fe:03:b0:37:44:65:2c:7e:f2:a0:5a:c9:03:
         70:97:92:c5:55:7f:5f:c2:53:34:cd:87:73:5c:fb:a2:45:45:
         58:92:c1:6a:d9:81:00:d8:3b:f4:41:dc:c4:58:5b:c2:ec:9f:
         5b:71:0c:a5:3e:5b:53:87:f2:cd:60:75:32:fa:04:3d:f5:a5:
         3a:d1:2d:ad:a5:5d:3b:70:e8:5b:23:75:94:38:11:4a:20:1d:
         e7:6e:fe:f4:ae:0f:fe:ee:25:cc:25:6d:6d:42:5f:5f:be:67:
         2b:80:44:7a:dd:a1:c5:24:d2:4c:66:fa:49:0e:e7:74:2d:2c:
         fb:94:fb:3a:fe:76:32:ef:97:59:2d:2a:43:2f:91:a2:c3:55:
         9a:e4:70:b1:a0:40:53:4b:8f:9a:c2:d0:7f:53:4f:19:be:53:
         e0:f8:72:75:b2:e6:08:52:8c:10:d2:73:78:9c:97:e0:23:bf:
         ec:ba:0b:18:da:88:0a:76:ac:41:53:45:86:08:f2:c8:a6:ba:
         df:5f:7f:d7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 13 19:45:24 2026 by rpki-client