Error: rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.mft
File:                     2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.mft (raw, json)
Hash identifier:          h1hMKeP7yGzlR4CxbMOh/wnURAr5gZQP8N7bJ5vKlp4=
Subject key identifier:   C2:30:14:5D:15:E9:6B:52:D7:3B:5B:AE:44:77:7A:0E:EC:24:0A:A3
Authority key identifier: 2B:4E:D5:7C:FB:A9:25:5B:84:24:7A:7F:FB:F2:FD:92:3A:36:5F:DB
Certificate issuer:       /CN=2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB
Certificate serial:       0C7C05A66EF262295F7CF765ED85B4B47432CDF0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.mft
Manifest number:          04C3
Signing time:             Sat 17 Oct 2026 22:10:00 +0000
Manifest this update:     Sat 17 Oct 2026 22:05:00 +0000
Manifest next update:     Sun 18 Oct 2026 22:10:00 +0000
Files and hashes:         1: 323830343a356638383a633030303a3a2f33342d3334203d3e20323639313037.roa (hash: NUScZ+Q8UxhoPp3FQA5ELis+f4zQvCeDC6yyFzJ6EmY=)
                          2: 323830343a356638383a633030303a3a2f33352d3335203d3e20323639313037.roa (hash: e9kTsbt+YRAYQ0uIluUGz/IpFdRuBLaULEu4MOk75uw=)
                          3: 323830343a356638383a3a2f33342d3334203d3e20323639313037.roa (hash: phqbYlKSmQDqClLZiIb1B1lSQiOAfexIUFwAABhCGD4=)
                          4: 34352e3137392e3135302e302f32342d3234203d3e20323639313037.roa (hash: Gb7izMJfOmC+W8mgFvy+FwjRs/FFU5IQCvnkAEylLD8=)
                          5: 323830343a356638383a383030303a3a2f33342d3334203d3e20323639313037.roa (hash: WpVkXou7kTJduQxNBNSnfqro0GIfuyA37C7WISrzXqg=)
                          6: 34352e3137392e3134382e302f32342d3234203d3e20323639313037.roa (hash: mV+5OafIn5EHxPGKE4RQdKeyYczSU9OsHoe2kjtySeE=)
                          7: 2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl (hash: DKexTEf8pg+dkl/392d0ylpJz4zFNKn+946uCzSmd1E=)
                          8: 323830343a356638383a3a2f33332d3333203d3e20323639313037.roa (hash: iW7jDRft8aCprzuW+y9tYt3vuHqM23tAVTTpxjGAqaI=)
                          9: 323830343a356638383a3a2f33322d3332203d3e20323639313037.roa (hash: e8mJ0IhqQ5rgIyCsFAW7r7LUqGTiftJ58DN2h+VHFqA=)
                          10: 34352e3137392e3135312e302f32342d3234203d3e20323639313037.roa (hash: gD0nfDuVuji17HIFfCsl5/mhfHsfstZ59DrniOTSYh0=)
                          11: 323830343a356638383a343030303a3a2f33342d3334203d3e20323639313037.roa (hash: voNJdqpR2WW3/uxxKkYJoYeikkbkoH4HoVlbwiCz5u0=)
                          12: 34352e3137392e3134392e302f32342d3234203d3e20323639313037.roa (hash: sX6fe6Uc13EncAXqWxynj3Pk7E35e1utSTPF5CqKjZo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl
                          rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 22:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:7c:05:a6:6e:f2:62:29:5f:7c:f7:65:ed:85:b4:b4:74:32:cd:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB
        Validity
            Not Before: Oct 17 22:05:00 2026 GMT
            Not After : Oct 24 22:10:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3c:02:50:5d:76:ba:b2:08:6e:07:a9:51:e6:
                    98:c8:ad:e8:68:d3:17:88:38:14:f4:42:8d:40:33:
                    a9:27:cf:c4:86:ed:b0:de:e3:81:df:d3:f6:d1:3f:
                    60:1e:6a:ed:68:e6:21:b4:c0:99:8c:1a:d5:41:ef:
                    3e:33:7f:d3:22:33:57:b0:e9:a9:8c:fe:c2:44:ff:
                    12:b0:29:0f:7a:02:80:f6:d7:14:b3:5d:31:d9:13:
                    97:4c:55:28:63:33:04:c7:5d:ca:b9:14:ba:4b:38:
                    90:84:8e:8b:4e:b1:96:fa:fc:b2:ac:3a:ce:78:19:
                    2a:c9:f9:e0:01:c5:e5:fd:30:45:fe:83:1b:4c:88:
                    5c:bc:54:5a:96:08:aa:4f:56:05:37:dc:45:4a:2f:
                    fb:0d:b8:03:50:f3:67:32:b2:4c:45:5e:06:ab:17:
                    9a:5e:c8:4b:85:e6:21:85:5f:89:06:f9:e6:f3:d5:
                    8e:22:ff:0f:07:44:fa:5d:41:bf:ea:dd:75:d9:1d:
                    a7:06:55:9b:c6:67:b9:2d:6c:84:e7:93:19:ab:95:
                    8f:77:54:b2:53:22:9d:6b:5c:bb:51:a9:1e:0a:66:
                    39:4e:45:94:2f:16:db:81:9d:b6:66:b3:90:bc:6a:
                    1f:9c:7e:97:52:37:cb:b5:e9:f9:a7:4e:b5:ca:e3:
                    32:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:30:14:5D:15:E9:6B:52:D7:3B:5B:AE:44:77:7A:0E:EC:24:0A:A3
            X509v3 Authority Key Identifier:
                keyid:2B:4E:D5:7C:FB:A9:25:5B:84:24:7A:7F:FB:F2:FD:92:3A:36:5F:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:4c:a2:55:07:04:3b:7d:8c:c3:7d:14:d6:6b:2a:ac:df:bd:
         bf:34:fc:1f:82:82:aa:76:85:68:d3:d0:3e:e5:21:65:35:d3:
         09:6b:88:c7:ca:5a:84:29:9f:fa:9b:e5:fb:46:7d:aa:2c:2d:
         22:dc:5e:5f:de:08:72:aa:89:07:9b:c4:fa:0e:ea:1e:13:7f:
         87:da:d3:9a:5a:95:0e:07:d1:42:43:85:4b:c0:c7:7e:c2:7a:
         e2:28:d3:eb:d7:f7:64:f2:5b:d2:5d:01:87:9d:7a:ae:30:44:
         5d:7c:b1:02:39:32:82:0a:62:98:de:3f:15:d0:ec:4c:93:d1:
         49:67:f3:46:ef:11:ac:c7:ee:15:bd:b5:9a:af:d2:2b:1b:2a:
         74:46:3c:e1:cb:66:24:2b:40:c7:e6:45:eb:f6:90:9c:e2:7b:
         a9:2d:ef:c3:55:86:86:cd:27:ad:b9:55:3b:59:4a:f3:8a:23:
         a1:b2:7b:aa:52:45:fc:6a:74:18:e5:fa:8d:95:ca:8a:c1:97:
         39:fc:a2:43:9a:a1:d3:6c:77:db:cd:0b:72:35:83:6e:0f:02:
         b0:52:c7:61:da:0d:ca:2e:f5:bc:c8:14:bc:9f:cf:4f:ac:ca:
         b8:ed:59:cc:54:6b:eb:65:c1:39:4a:5e:a2:09:d0:39:1d:27:
         b7:e1:de:1c
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUDHwFpm7yYilffPdl7YW0tHQyzfAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI0RUQ1N0NGQkE5MjU1Qjg0MjQ3QTdGRkJGMkZEOTIz
QTM2NUZEQjAeFw0yNjEwMTcyMjA1MDBaFw0yNjEwMjQyMjEwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkYzQzAyNTA1RDc2QkFCMjA4
NkUwN0E5NTFFNjk4QzhBREU4NjhEMzE3ODgzODE0RjQ0MjhENDAzM0E5MjdDRkM0
ODZFREIwREVFMzgxREZEM0Y2RDEzRjYwMUU2QUVENjhFNjIxQjRDMDk5OEMxQUQ1
NDFFRjNFMzM3RkQzMjIzMzU3QjBFOUE5OENGRUMyNDRGRjEyQjAyOTBGN0EwMjgw
RjZENzE0QjM1RDMxRDkxMzk3NEM1NTI4NjMzMzA0Qzc1RENBQjkxNEJBNEIzODkw
ODQ4RThCNEVCMTk2RkFGQ0IyQUMzQUNFNzgxOTJBQzlGOUUwMDFDNUU1RkQzMDQ1
RkU4MzFCNEM4ODVDQkM1NDVBOTYwOEFBNEY1NjA1MzdEQzQ1NEEyRkZCMERCODAz
NTBGMzY3MzJCMjRDNDU1RTA2QUIxNzlBNUVDODRCODVFNjIxODU1Rjg5MDZGOUU2
RjNENThFMjJGRjBGMDc0NEZBNUQ0MUJGRUFERDc1RDkxREE3MDY1NTlCQzY2N0I5
MkQ2Qzg0RTc5MzE5QUI5NThGNzc1NEIyNTMyMjlENkI1Q0JCNTFBOTFFMEE2NjM5
NEU0NTk0MkYxNkRCODE5REI2NjZCMzkwQkM2QTFGOUM3RTk3NTIzN0NCQjVFOUY5
QTc0RUI1Q0FFMzMyNjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvzwCUF12urIIbgepUeaYyK3oaNMXiDgU9EKNQDOpJ8/Ehu2w3uOB
39P20T9gHmrtaOYhtMCZjBrVQe8+M3/TIjNXsOmpjP7CRP8SsCkPegKA9tcUs10x
2ROXTFUoYzMEx13KuRS6SziQhI6LTrGW+vyyrDrOeBkqyfngAcXl/TBF/oMbTIhc
vFRalgiqT1YFN9xFSi/7DbgDUPNnMrJMRV4GqxeaXshLheYhhV+JBvnm89WOIv8P
B0T6XUG/6t112R2nBlWbxme5LWyE55MZq5WPd1SyUyKda1y7UakeCmY5TkWULxbb
gZ22ZrOQvGofnH6XUjfLten5p061yuMyaQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FMIwFF0V6WtS1ztbrkR3eg7sJAqjMB8GA1UdIwQYMBaAFCtO1Xz7qSVbhCR6f/vy
/ZI6Nl/bMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VZWUM5aFpabjkzbTI4
elpERk5SYjh6dGE3b1hvNnlFTnZCR0tTTGQyWnM5LzAvMkI0RUQ1N0NGQkE5MjU1
Qjg0MjQ3QTdGRkJGMkZEOTIzQTM2NUZEQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8yQjRFRDU3Q0ZCQTkyNTVCODQyNDdBN0ZGQkYyRkQ5MjNBMzY1
RkRCLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VZWUM5aFpabjkzbTI4elpERk5S
Yjh6dGE3b1hvNnlFTnZCR0tTTGQyWnM5LzAvMkI0RUQ1N0NGQkE5MjU1Qjg0MjQ3
QTdGRkJGMkZEOTIzQTM2NUZEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHBMolUHBDt9jMN9FNZrKqzf
vb80/B+Cgqp2hWjT0D7lIWU10wlriMfKWoQpn/qb5ftGfaosLSLcXl/eCHKqiQeb
xPoO6h4Tf4fa05palQ4H0UJDhUvAx37CeuIo0+vX92TyW9JdAYedeq4wRF18sQI5
MoIKYpjePxXQ7EyT0Uln80bvEazH7hW9tZqv0isbKnRGPOHLZiQrQMfmRev2kJzi
e6kt78NVhobNJ625VTtZSvOKI6Gye6pSRfxqdBjl+o2VyorBlzn8okOaodNsd9vN
C3I1g24PArBSx2HaDcou9bzIFLyfz0+syrjtWcxUa+tlwTlKXqIJ0DkdJ7fh3hw=
-----END CERTIFICATE-----
Generated at Sun Oct 18 01:00:07 2026 by rpki-client