Error: rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/1/F204F7A503A8093CC6560627483C5834D61956E8.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/1/F204F7A503A8093CC6560627483C5834D61956E8.mft
File:                     F204F7A503A8093CC6560627483C5834D61956E8.mft (raw, json)
Hash identifier:          zdEkAey+MhLPe6QzjJl448dSGZ/ahJ7kPrrkoYSwLQU=
Subject key identifier:   B9:33:A8:17:DD:E1:0D:46:70:DA:D7:46:78:56:A4:CD:FE:0A:A1:F1
Authority key identifier: F2:04:F7:A5:03:A8:09:3C:C6:56:06:27:48:3C:58:34:D6:19:56:E8
Certificate issuer:       /CN=F204F7A503A8093CC6560627483C5834D61956E8
Certificate serial:       5EA33F9F2E600C36B44C3C509F08CC03C082ED6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F204F7A503A8093CC6560627483C5834D61956E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/1/F204F7A503A8093CC6560627483C5834D61956E8.mft
Manifest number:          03D7
Signing time:             Tue 13 Oct 2026 04:28:44 +0000
Manifest this update:     Tue 13 Oct 2026 04:23:44 +0000
Manifest next update:     Wed 14 Oct 2026 07:35:44 +0000
Files and hashes:         1: 3139302e3130322e34342e302f32322d3234203d3e20323731353134.roa (hash: ypfHZxlYifbG9wbuFOfOm0xw6aI/nHEvkPoYXZ0rA+o=)
                          2: F204F7A503A8093CC6560627483C5834D61956E8.crl (hash: Lgd/6i6JduYbfYUb3oZ4LffPKrUXZIJn3VlnBolNW1Y=)
                          3: 323830343a376362383a3a2f33322d3332203d3e20323731353134.roa (hash: t02YOdmpbJ/gwvjY0C9XmZek2ku53g07yCKvizaOO9E=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/1/F204F7A503A8093CC6560627483C5834D61956E8.crl
                          rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/1/F204F7A503A8093CC6560627483C5834D61956E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F204F7A503A8093CC6560627483C5834D61956E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 07:35:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a3:3f:9f:2e:60:0c:36:b4:4c:3c:50:9f:08:cc:03:c0:82:ed:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F204F7A503A8093CC6560627483C5834D61956E8
        Validity
            Not Before: Oct 13 04:23:44 2026 GMT
            Not After : Oct 14 07:35:44 2026 GMT
        Subject: CN=B933A817DDE10D4670DAD7467856A4CDFE0AA1F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ba:21:8e:9a:a9:83:29:b3:41:10:11:56:34:
                    00:5d:38:22:ef:4c:08:a1:2b:98:a5:62:68:74:b2:
                    28:b5:a1:b5:be:63:c9:3f:7a:81:25:eb:dd:c5:ff:
                    64:86:b6:1c:2b:28:b4:23:4c:ed:ae:29:45:2f:b7:
                    fe:87:49:52:c3:77:90:e8:5b:3c:e8:bf:2e:48:66:
                    d5:14:23:03:30:fa:3d:b3:d8:1d:c2:42:7c:2f:58:
                    df:5a:59:45:fe:ed:5a:27:ac:18:16:af:d6:14:89:
                    44:47:62:e7:d3:c8:26:93:a8:97:62:c6:4b:18:84:
                    6c:85:7e:a1:81:0f:04:62:04:2a:3a:10:c1:76:94:
                    b1:2c:40:8d:e9:d6:6e:b6:b5:0c:4d:57:6e:51:b1:
                    1e:cc:a1:f9:82:67:71:86:89:e9:28:6f:be:64:77:
                    6b:a1:b5:0b:e3:01:7e:04:1e:29:90:bf:c1:95:c1:
                    5d:3c:17:61:49:0f:e5:dd:28:97:b2:98:25:72:4c:
                    d9:52:96:7b:7c:58:85:f0:ad:fa:2a:7e:56:90:fe:
                    0a:70:65:0e:1f:a1:cd:de:74:d7:46:2a:9e:e4:5e:
                    2c:a3:ce:78:fa:d2:21:0a:d5:88:07:08:4d:08:1d:
                    d0:ab:b2:a8:32:a5:02:07:79:47:82:9b:6d:2e:0c:
                    d8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:33:A8:17:DD:E1:0D:46:70:DA:D7:46:78:56:A4:CD:FE:0A:A1:F1
            X509v3 Authority Key Identifier:
                keyid:F2:04:F7:A5:03:A8:09:3C:C6:56:06:27:48:3C:58:34:D6:19:56:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/1/F204F7A503A8093CC6560627483C5834D61956E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F204F7A503A8093CC6560627483C5834D61956E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/1/F204F7A503A8093CC6560627483C5834D61956E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:f8:d2:b0:1c:59:da:52:51:2a:be:39:71:9a:74:b8:3d:45:
         2f:39:f0:25:dd:e1:6a:c2:43:18:66:ef:eb:1c:28:70:42:a3:
         53:30:a7:3e:f5:53:8f:00:4c:4d:4a:ed:eb:6e:73:ca:2e:5b:
         82:6e:88:59:ba:dd:61:a2:25:29:bf:15:a0:6e:88:13:72:5d:
         e9:88:cd:ba:4e:76:97:7c:94:e5:6a:d1:d2:ef:d2:51:96:31:
         71:10:a2:e2:7e:d9:31:be:6d:41:93:db:64:ad:23:bc:de:12:
         74:ef:2e:61:30:5b:b0:3b:00:8d:af:3e:9e:62:a4:0c:05:33:
         6f:3f:83:c1:e5:2a:68:49:f6:fb:aa:bc:b2:d6:22:a2:b8:dc:
         08:aa:8c:c8:8d:27:9d:11:20:55:b0:78:3d:f7:a0:ea:f7:0a:
         0b:84:3c:81:9f:d1:0a:a5:a1:33:c1:8a:d2:78:d3:7d:9e:4e:
         ae:63:a7:90:7d:82:6e:39:b7:4d:1b:9e:9a:e4:d6:09:aa:f8:
         17:41:44:c4:88:24:da:7b:35:b3:7b:13:b2:9f:90:de:77:00:
         31:db:09:44:99:39:1c:c6:03:32:bc:c9:e8:ce:6f:54:0f:a5:
         d9:a4:3f:f4:ae:b7:12:1b:ed:90:50:49:ac:33:99:12:e3:0a:
         f0:73:1b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:06:15 2026 by rpki-client