Error: rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.mft
File:                     7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.mft (raw, json)
Hash identifier:          SkxhcXjbB0xISGygRotpUU4BtrXUG8i9ulOzog1Of9A=
Subject key identifier:   76:D9:E9:ED:6B:1A:E6:3C:D9:F1:C1:6F:98:84:EF:F5:7F:B6:11:62
Authority key identifier: 7F:7C:D1:E5:D0:C1:63:1E:A3:C9:58:47:8C:77:82:D0:4E:B7:FB:37
Certificate issuer:       /CN=7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37
Certificate serial:       7BAAC713839BC12F803B860A3656E1D313931A12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.mft
Manifest number:          0379
Signing time:             Fri 16 Oct 2026 10:52:08 +0000
Manifest this update:     Fri 16 Oct 2026 10:47:08 +0000
Manifest next update:     Sat 17 Oct 2026 14:04:08 +0000
Files and hashes:         1: 323830343a373065383a3a2f33322d313238203d3e20323730373535.roa (hash: WFfr+TvX6VUyN+uU+tX9cJIIbzk37xHd/Sm9iaqDzc4=)
                          2: 7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.crl (hash: 0vLz9+0O8hkrAJlMFmmnSJS3f1JeonwdbLoWMJjZW3A=)
                          3: 3138362e3233332e302e302f32322d3332203d3e20323730373535.roa (hash: 1vkfAgpzpUHxDLEI5zwricuLiS4Zo0mQ78Jl0UGFCoI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.crl
                          rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 14:04:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:aa:c7:13:83:9b:c1:2f:80:3b:86:0a:36:56:e1:d3:13:93:1a:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37
        Validity
            Not Before: Oct 16 10:47:08 2026 GMT
            Not After : Oct 17 14:04:08 2026 GMT
        Subject: CN=76D9E9ED6B1AE63CD9F1C16F9884EFF57FB61162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e8:a9:b5:ef:61:7d:59:a6:a1:cc:c7:25:92:
                    19:39:26:90:c0:89:e6:c9:25:91:5c:ba:b2:ae:9b:
                    e3:38:a5:b9:92:7a:17:47:de:e5:83:18:50:51:aa:
                    d4:98:02:00:53:62:43:76:f2:ce:4c:97:d5:be:66:
                    d0:78:7d:cc:10:05:90:d9:76:f7:79:19:3d:8f:34:
                    09:2c:dd:53:42:48:9f:12:cd:65:7f:98:30:72:2f:
                    a0:21:d8:29:4b:3d:00:d5:f8:99:54:62:9f:5c:ec:
                    4c:3a:fe:37:4f:65:72:e2:43:98:fc:50:7d:07:35:
                    98:f9:ac:62:53:d2:c0:e7:13:73:73:78:27:ec:76:
                    44:29:67:ed:14:a9:f5:d9:5c:e1:a3:80:2f:9c:57:
                    92:ff:bc:ed:eb:be:ab:26:50:af:01:e8:7a:ee:7b:
                    9f:23:67:f4:c6:60:9e:bf:55:28:07:70:3e:31:31:
                    1b:f5:68:c5:76:33:db:17:c6:fb:49:71:f4:01:eb:
                    fd:40:9c:16:96:2d:0e:24:28:44:d8:45:4e:64:34:
                    7a:6d:49:ac:64:40:a6:d2:ee:3a:1e:63:29:98:41:
                    58:f2:01:b3:26:8f:d9:a1:d0:bb:5f:e0:a5:78:ed:
                    3a:96:55:23:a4:4b:d8:67:ab:c2:fb:0d:fe:5e:8a:
                    f6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D9:E9:ED:6B:1A:E6:3C:D9:F1:C1:6F:98:84:EF:F5:7F:B6:11:62
            X509v3 Authority Key Identifier:
                keyid:7F:7C:D1:E5:D0:C1:63:1E:A3:C9:58:47:8C:77:82:D0:4E:B7:FB:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:4e:52:af:16:a2:c2:c3:30:46:7b:ef:00:6f:fd:98:60:48:
         59:f3:e9:69:fb:95:7a:73:e2:80:85:76:d7:32:f5:02:86:09:
         7e:6a:81:cd:9e:91:f1:75:a2:57:7f:d8:4d:e8:8e:2e:53:84:
         e6:7e:fd:be:bc:de:aa:4b:b0:4f:91:87:43:0e:aa:ca:5d:54:
         c9:76:38:ac:01:08:47:aa:91:d2:0d:36:6f:eb:e0:05:41:7b:
         39:78:32:78:e9:87:47:4f:d3:f1:a2:95:09:b7:db:21:c7:19:
         e0:4f:a7:22:da:46:8b:b6:7b:08:cc:3d:cc:c6:4b:92:55:3d:
         ad:9c:95:ac:c7:bd:86:c1:57:b9:19:c3:15:bb:45:97:f9:47:
         1f:71:c8:44:42:bc:d4:86:bd:5d:5d:e0:47:b8:44:0c:14:11:
         f7:84:2a:0e:6c:68:02:39:40:70:a6:c5:20:76:c8:67:a6:3e:
         6f:e3:cd:d2:40:bc:ce:23:ce:d2:04:ab:74:c1:b0:03:48:07:
         9e:2c:57:48:a0:f3:09:01:48:5c:72:35:54:29:99:21:91:e0:
         09:b2:a6:3e:94:f2:d0:9f:53:40:3b:fc:b1:cf:39:fb:52:2a:
         f9:6f:7f:b6:ff:bd:78:b6:7a:dd:ab:82:60:2d:ff:1a:28:60:
         26:82:ae:ac
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUe6rHE4ObwS+AO4YKNlbh0xOTGhIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Y3Q0QxRTVEMEMxNjMxRUEzQzk1ODQ3OEM3NzgyRDA0
RUI3RkIzNzAeFw0yNjEwMTYxMDQ3MDhaFw0yNjEwMTcxNDA0MDhaMDMxMTAvBgNV
BAMTKDc2RDlFOUVENkIxQUU2M0NEOUYxQzE2Rjk4ODRFRkY1N0ZCNjExNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX6Km172F9WaahzMclkhk5JpDA
iebJJZFcurKum+M4pbmSehdH3uWDGFBRqtSYAgBTYkN28s5Ml9W+ZtB4fcwQBZDZ
dvd5GT2PNAks3VNCSJ8SzWV/mDByL6Ah2ClLPQDV+JlUYp9c7Ew6/jdPZXLiQ5j8
UH0HNZj5rGJT0sDnE3NzeCfsdkQpZ+0UqfXZXOGjgC+cV5L/vO3rvqsmUK8B6Hru
e58jZ/TGYJ6/VSgHcD4xMRv1aMV2M9sXxvtJcfQB6/1AnBaWLQ4kKETYRU5kNHpt
SaxkQKbS7joeYymYQVjyAbMmj9mh0Ltf4KV47TqWVSOkS9hnq8L7Df5eivZ/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUdtnp7Wsa5jzZ8cFvmITv9X+2EWIwHwYDVR0j
BBgwFoAUf3zR5dDBYx6jyVhHjHeC0E63+zcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnZ3eWNncWVpTm5HYlNkOVhCSEttdHQzaHd5ekpHOHE0cEdDWWNNaVJj
Q1MvMC83RjdDRDFFNUQwQzE2MzFFQTNDOTU4NDc4Qzc3ODJEMDRFQjdGQjM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdGN0NEMUU1RDBDMTYzMUVB
M0M5NTg0NzhDNzc4MkQwNEVCN0ZCMzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MnZ3eWNncWVpTm5HYlNkOVhCSEttdHQzaHd5ekpHOHE0cEdDWWNNaVJjQ1MvMC83
RjdDRDFFNUQwQzE2MzFFQTNDOTU4NDc4Qzc3ODJEMDRFQjdGQjM3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANk5SrxaiwsMwRnvvAG/9mGBIWfPpafuVenPigIV21zL1AoYJfmqBzZ6R8XWi
V3/YTeiOLlOE5n79vrzeqkuwT5GHQw6qyl1UyXY4rAEIR6qR0g02b+vgBUF7OXgy
eOmHR0/T8aKVCbfbIccZ4E+nItpGi7Z7CMw9zMZLklU9rZyVrMe9hsFXuRnDFbtF
l/lHH3HIREK81Ia9XV3gR7hEDBQR94QqDmxoAjlAcKbFIHbIZ6Y+b+PN0kC8ziPO
0gSrdMGwA0gHnixXSKDzCQFIXHI1VCmZIZHgCbKmPpTy0J9TQDv8sc85+1Iq+W9/
tv+9eLZ63auCYC3/GihgJoKurA==
-----END CERTIFICATE-----
Generated at Fri Oct 16 15:31:49 2026 by rpki-client