Error: rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/5231FD6C4CBC5F5E1F81F181C4D682B126B3C620.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/5231FD6C4CBC5F5E1F81F181C4D682B126B3C620.mft
File:                     5231FD6C4CBC5F5E1F81F181C4D682B126B3C620.mft (raw, json)
Hash identifier:          EiIJzd95BzyanNbb5RYSuq3pLXHwUfhLuVap66Wm92s=
Subject key identifier:   7A:45:C4:B7:67:BB:7C:40:5A:4D:D0:75:A8:06:71:E0:91:09:4A:C4
Authority key identifier: 52:31:FD:6C:4C:BC:5F:5E:1F:81:F1:81:C4:D6:82:B1:26:B3:C6:20
Certificate issuer:       /CN=5231FD6C4CBC5F5E1F81F181C4D682B126B3C620
Certificate serial:       2C6D3BE2F0A19043B142034672FC546E12004B9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5231FD6C4CBC5F5E1F81F181C4D682B126B3C620.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/5231FD6C4CBC5F5E1F81F181C4D682B126B3C620.mft
Manifest number:          1C
Signing time:             Wed 14 Oct 2026 08:45:56 +0000
Manifest this update:     Wed 14 Oct 2026 08:40:56 +0000
Manifest next update:     Thu 15 Oct 2026 12:23:56 +0000
Files and hashes:         1: 3138362e3139342e302e302f32332d3233203d3e20323730383738.roa (hash: /NeAPGCMSChirH9e7OpsygHZfBaLd+MCYboBfDjQcGg=)
                          2: 3138362e3139342e302e302f32342d3234203d3e20323730383738.roa (hash: 6tdH+lFiXCM6MUJfpMndWXNU8MYtyZH6Quxe7zxnMjw=)
                          3: 323830343a373264343a3a2f33332d3333203d3e20323730383738.roa (hash: cTvx/aXpv5bLpj2bfLJ4LezDY6omjKn24MdWVtNyR24=)
                          4: 5231FD6C4CBC5F5E1F81F181C4D682B126B3C620.crl (hash: +vyAhButfTctOzBCPelsA/7X3rJtO5F+1S/YPoPERwo=)
                          5: 3138362e3139342e332e302f32342d3234203d3e20323730383738.roa (hash: YXyYZev4kJmGMTwSRAZVX2J4QxEgUFnisSAIdxhBR+Y=)
                          6: 3138362e3139342e322e302f32342d3234203d3e20323730383738.roa (hash: YRFUYxW/80vM7a2nYgDrr6lyUsPjvMJldOoyOX6dj3g=)
                          7: 323830343a373264343a3a2f33322d3332203d3e20323730383738.roa (hash: 92SBn+bW7wsy4tZgm1ypkLThOAvyH6ynOAiKQsFLHRs=)
                          8: 3138362e3139342e322e302f32332d3233203d3e20323730383738.roa (hash: QTrwz66kUxNV40wDX9aDDVf3JonN0iRW8JJVBpQmLwo=)
                          9: 323830343a373264343a383030303a3a2f33332d3333203d3e20323730383738.roa (hash: ycAQKZp1f9w+AewlGl9/gWELn/FwKQ7miDb+hgYmZVY=)
                          10: 3138362e3139342e312e302f32342d3234203d3e20323730383738.roa (hash: pLJ3WIoAhs1dRr+cxMfAfJ1qLt/EwtRkUYTJXn6oSPo=)
                          11: 3138362e3139342e302e302f32322d3232203d3e20323730383738.roa (hash: cwEByblRIRu+xRyMnXGD7w/N9irJhsEbGYnZzn+Sx1Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/5231FD6C4CBC5F5E1F81F181C4D682B126B3C620.crl
                          rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/5231FD6C4CBC5F5E1F81F181C4D682B126B3C620.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5231FD6C4CBC5F5E1F81F181C4D682B126B3C620.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 12:23:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:6d:3b:e2:f0:a1:90:43:b1:42:03:46:72:fc:54:6e:12:00:4b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5231FD6C4CBC5F5E1F81F181C4D682B126B3C620
        Validity
            Not Before: Oct 14 08:40:56 2026 GMT
            Not After : Oct 15 12:23:56 2026 GMT
        Subject: CN=7A45C4B767BB7C405A4DD075A80671E091094AC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e5:f1:83:f0:5b:ab:f9:4c:71:63:7d:42:fd:
                    14:bb:7d:2d:40:72:6d:41:dc:c9:8e:e7:84:ec:05:
                    17:99:6f:27:bb:14:c9:8f:98:25:8c:3a:df:19:b6:
                    58:e0:24:c2:84:fd:7b:18:5d:3d:66:e8:8c:a9:4d:
                    24:28:33:01:17:a2:ab:27:63:db:db:70:7a:82:69:
                    c9:93:44:d6:6e:87:6b:41:1d:98:87:dc:c0:c4:ef:
                    9b:32:13:6b:c0:9f:99:96:80:1a:c9:27:24:4d:ed:
                    d2:89:06:9d:78:47:ab:8e:d0:ee:6c:c8:82:09:b3:
                    2d:60:b0:95:e1:c4:7c:32:b2:c0:1a:8d:5c:8f:09:
                    5f:b1:84:08:f0:96:61:a8:aa:06:a1:2b:67:0a:5f:
                    c3:4d:83:25:8a:19:cd:8a:1d:65:1c:fe:78:d8:a3:
                    4f:d8:2f:5a:69:cf:0b:95:e5:2c:29:9b:e9:bb:ed:
                    12:86:04:13:fb:37:e4:3c:14:2d:b5:3e:79:fe:e4:
                    75:45:81:78:34:2a:90:83:c5:6f:20:e0:03:8b:32:
                    dd:90:ae:5a:c0:9b:88:80:18:27:f4:76:20:5b:1e:
                    88:75:ae:63:cd:af:a2:da:df:59:ab:4e:05:6f:aa:
                    e8:47:0b:42:48:08:84:3c:e4:d8:6b:8e:f0:cb:46:
                    1e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:45:C4:B7:67:BB:7C:40:5A:4D:D0:75:A8:06:71:E0:91:09:4A:C4
            X509v3 Authority Key Identifier:
                keyid:52:31:FD:6C:4C:BC:5F:5E:1F:81:F1:81:C4:D6:82:B1:26:B3:C6:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/5231FD6C4CBC5F5E1F81F181C4D682B126B3C620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5231FD6C4CBC5F5E1F81F181C4D682B126B3C620.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/5231FD6C4CBC5F5E1F81F181C4D682B126B3C620.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:91:c4:88:8f:ef:a8:9e:4e:b0:14:04:b0:b8:3c:65:68:12:
         d8:55:3f:10:68:55:b5:b7:1d:3c:25:46:6b:37:0b:77:ed:6e:
         d2:8c:a1:81:66:c4:a7:49:0d:9c:dd:31:45:d8:c1:e1:41:07:
         23:bb:f2:b9:e5:d6:36:af:ec:b1:d1:e1:84:c2:cc:2a:d7:c9:
         f8:a3:6f:0d:1e:70:16:1c:c1:4c:f3:dc:d6:6f:ab:09:43:86:
         fa:02:63:6b:42:58:1a:9e:44:bf:7f:80:87:83:aa:79:5f:0f:
         13:75:91:98:30:7e:44:48:12:bc:b2:5e:42:77:9e:16:28:64:
         e4:fc:83:30:64:0a:92:9e:ee:21:f3:88:1f:97:2c:a8:c4:5f:
         0c:26:d4:46:df:0a:cf:5f:81:44:11:37:34:ca:a1:f3:ef:91:
         43:19:77:14:ed:08:c9:f5:b7:83:53:e9:b8:83:4b:5e:e2:2d:
         49:cb:eb:89:a0:24:ee:ba:a5:47:45:a0:56:df:84:2a:f7:77:
         3b:34:43:6c:39:53:d6:d7:d3:f7:b6:b5:90:8b:cd:4e:f7:47:
         b1:1c:a5:d4:74:3f:d8:d5:10:61:a8:8b:f3:d5:ea:41:44:5a:
         64:7a:f1:b1:5c:d6:78:61:fb:84:5f:6f:a0:b7:a3:16:52:ab:
         80:c7:81:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 22:37:53 2026 by rpki-client