Error: rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.mft
File:                     FAAF4A0114705E793040DF20B3E879E5974C7C8D.mft (raw, json)
Hash identifier:          xz5eVrixvsAZV0G52RBmskyiodejHCHQWeppkza+RPc=
Subject key identifier:   41:12:2A:41:5D:61:67:86:7D:16:86:25:84:3C:4E:00:78:99:EC:A1
Authority key identifier: FA:AF:4A:01:14:70:5E:79:30:40:DF:20:B3:E8:79:E5:97:4C:7C:8D
Certificate issuer:       /CN=FAAF4A0114705E793040DF20B3E879E5974C7C8D
Certificate serial:       014AE433D2C7D2BB0F5F86C94E82C641B1708704
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.mft
Manifest number:          0378
Signing time:             Thu 15 Oct 2026 17:30:48 +0000
Manifest this update:     Thu 15 Oct 2026 17:25:48 +0000
Manifest next update:     Fri 16 Oct 2026 21:23:48 +0000
Files and hashes:         1: 3137302e38322e3139332e302f32342d3234203d3e20323636343436.roa (hash: ozLzZZg7XiqULtcYrlxT3KI6u7UhdGDGTFt0U6h5bQg=)
                          2: 323830343a333766343a3a2f33322d3332203d3e20323636343436.roa (hash: sWbVGY/Sxxx2BmEuOI9k8fGgZM9rntSRd9tQMU4KH30=)
                          3: FAAF4A0114705E793040DF20B3E879E5974C7C8D.crl (hash: cbMebIKNJ6r8sn9SzAXqlrugq/W8BE98MxZ6H6oa+Rk=)
                          4: 3230302e38302e3131312e302f32342d3234203d3e20323636343436.roa (hash: PQsgNSsgskPeLZQGXPAMXVYKEdP2IuUyHYAUcQCjM68=)
                          5: 3137302e38322e3139322e302f32332d3233203d3e20323636343436.roa (hash: e3J0xu/uOH2YSyTCcHRfi5C9Uu1tiJF3dNGJa2PUX84=)
                          6: 3137302e38322e3139342e302f32332d3233203d3e20323636343436.roa (hash: qEjYvIUXerYqg/H/jFA/E3sYfWsxdbPKx5yQMuPmmNE=)
                          7: 3137302e38322e3139322e302f32322d3232203d3e20323636343436.roa (hash: n1fEcsOFziPEEgBTwztCxhsYMD323C7XWJUMW/imZlg=)
                          8: 3137302e38322e3139322e302f32342d3234203d3e20323636343436.roa (hash: 09SRfpFsNO0JFw/kDfPHQLNH+RzR/qUr4DFC4MVqNVg=)
                          9: 3137302e38322e3139342e302f32342d3234203d3e20323636343436.roa (hash: +jpKSdI6QSqE9PmyHW+I9eLlzus2yZqUJtnxuaINbbQ=)
                          10: 323830343a333766343a3a2f33332d3333203d3e20323636343436.roa (hash: 4l4RIAzeURLug3mkn3zzgcoqz6Sf66d1E+AagBJPygk=)
                          11: 3137302e38322e3139352e302f32342d3234203d3e20323636343436.roa (hash: 82185v5Vdk8fX6C+dbcgxh2Qvq+kL2BL7mMGnXX6c2Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.crl
                          rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 20:28:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:4a:e4:33:d2:c7:d2:bb:0f:5f:86:c9:4e:82:c6:41:b1:70:87:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAAF4A0114705E793040DF20B3E879E5974C7C8D
        Validity
            Not Before: Oct 15 17:25:48 2026 GMT
            Not After : Oct 16 21:23:48 2026 GMT
        Subject: CN=41122A415D6167867D168625843C4E007899ECA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:06:4b:f5:b9:03:18:d9:ae:84:0b:ee:46:15:
                    3b:45:0c:36:b4:1e:91:30:8e:b2:b5:40:3f:eb:9e:
                    dd:cc:f5:71:14:cd:e9:c1:a8:aa:c1:d4:a2:aa:29:
                    ac:aa:59:d2:57:72:ce:a8:ad:56:e3:10:c9:c7:30:
                    07:0c:19:1c:79:15:22:b4:2e:c6:0f:7d:68:c6:72:
                    5a:69:cc:d2:09:ea:25:15:fb:c6:66:fa:8a:fa:18:
                    b3:81:88:b3:55:c9:56:eb:f9:46:e4:c7:a3:1f:74:
                    f0:19:91:48:28:af:0a:25:e1:7b:18:a7:fa:e7:f9:
                    97:dd:8a:9c:6d:42:47:75:ba:77:73:49:2e:92:76:
                    ed:ce:20:f7:72:83:6f:85:fc:4f:c5:c9:01:81:99:
                    b1:a5:f7:d1:67:47:cf:61:ed:e1:7f:f8:b8:1a:ed:
                    da:77:f0:e5:db:0d:9f:96:74:0d:cc:ff:dd:66:75:
                    40:23:10:a8:51:39:6c:52:69:1f:5d:9d:ff:b7:26:
                    d7:4e:b3:f4:b9:3d:e7:77:c5:a3:a7:ac:a5:76:d0:
                    f2:27:2e:08:d1:47:58:98:60:69:77:e2:22:3c:6b:
                    e3:16:08:5d:83:84:d0:44:2e:a2:2e:c4:48:77:af:
                    23:00:b5:49:a1:d1:e0:fd:0c:ab:db:81:45:74:5b:
                    c9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:12:2A:41:5D:61:67:86:7D:16:86:25:84:3C:4E:00:78:99:EC:A1
            X509v3 Authority Key Identifier:
                keyid:FA:AF:4A:01:14:70:5E:79:30:40:DF:20:B3:E8:79:E5:97:4C:7C:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:15:8e:5e:cb:8c:d2:98:1d:3e:bc:76:b1:40:68:61:ee:7d:
         7e:2f:2a:d2:20:a6:ce:0d:e0:f0:eb:c5:11:d4:ec:87:b4:70:
         52:d9:70:cf:8a:6a:5f:12:ee:24:15:34:35:24:90:8a:1f:22:
         6d:92:52:9c:d4:9e:14:65:1c:ec:ef:22:5c:61:4f:aa:f0:e8:
         a6:17:ff:2f:54:60:81:04:ec:c4:bf:0f:48:19:fe:c5:95:da:
         9e:6d:bf:af:cd:40:31:91:3b:5b:20:12:cb:c3:46:bb:6d:b0:
         4b:2a:27:b1:97:d7:4f:8a:67:30:80:fd:2a:54:b4:8f:de:74:
         11:92:b9:34:5b:aa:54:5f:2a:66:2c:bd:83:48:99:6c:07:0c:
         9e:ba:65:a8:cc:f6:70:7d:68:63:3a:1a:4c:0b:4d:c2:ed:fa:
         84:e7:20:06:d9:cf:d1:e8:ab:b4:2e:73:d1:fb:69:d3:52:73:
         5b:7d:d4:9c:28:4f:3a:68:03:73:43:48:c1:b5:45:7e:99:ee:
         2c:98:d2:0e:a2:ad:73:d4:f4:4a:1a:66:cc:ae:69:ea:71:62:
         63:2f:0f:4e:0a:13:27:d3:3e:da:39:8f:4a:53:9f:2b:b4:5d:
         9d:57:89:58:fd:c9:bc:57:9c:de:88:08:87:15:c0:19:a5:fb:
         1a:34:41:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUAUrkM9LH0rsPX4bJToLGQbFwhwQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkFBRjRBMDExNDcwNUU3OTMwNDBERjIwQjNFODc5RTU5
NzRDN0M4RDAeFw0yNjEwMTUxNzI1NDhaFw0yNjEwMTYyMTIzNDhaMDMxMTAvBgNV
BAMTKDQxMTIyQTQxNUQ2MTY3ODY3RDE2ODYyNTg0M0M0RTAwNzg5OUVDQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDABkv1uQMY2a6EC+5GFTtFDDa0
HpEwjrK1QD/rnt3M9XEUzenBqKrB1KKqKayqWdJXcs6orVbjEMnHMAcMGRx5FSK0
LsYPfWjGclppzNIJ6iUV+8Zm+or6GLOBiLNVyVbr+Ubkx6MfdPAZkUgorwol4XsY
p/rn+ZfdipxtQkd1undzSS6Sdu3OIPdyg2+F/E/FyQGBmbGl99FnR89h7eF/+Lga
7dp38OXbDZ+WdA3M/91mdUAjEKhROWxSaR9dnf+3JtdOs/S5Ped3xaOnrKV20PIn
LgjRR1iYYGl34iI8a+MWCF2DhNBELqIuxEh3ryMAtUmh0eD9DKvbgUV0W8lfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUQRIqQV1hZ4Z9FoYlhDxOAHiZ7KEwHwYDVR0j
BBgwFoAU+q9KARRwXnkwQN8gs+h55ZdMfI0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDNRdHA1cWI4ZnJOWEU0b0c1WGZjUXNKUlNOclliVUJhVVQ3UmRrc1Q4
d2EvMC9GQUFGNEEwMTE0NzA1RTc5MzA0MERGMjBCM0U4NzlFNTk3NEM3QzhELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBQUY0QTAxMTQ3MDVFNzkz
MDQwREYyMEIzRTg3OUU1OTc0QzdDOEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NDNRdHA1cWI4ZnJOWEU0b0c1WGZjUXNKUlNOclliVUJhVVQ3UmRrc1Q4d2EvMC9G
QUFGNEEwMTE0NzA1RTc5MzA0MERGMjBCM0U4NzlFNTk3NEM3QzhELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJxWOXsuM0pgdPrx2sUBoYe59fi8q0iCmzg3g8OvFEdTsh7RwUtlwz4pqXxLu
JBU0NSSQih8ibZJSnNSeFGUc7O8iXGFPqvDophf/L1RggQTsxL8PSBn+xZXanm2/
r81AMZE7WyASy8NGu22wSyonsZfXT4pnMID9KlS0j950EZK5NFuqVF8qZiy9g0iZ
bAcMnrplqMz2cH1oYzoaTAtNwu36hOcgBtnP0eirtC5z0ftp01JzW33UnChPOmgD
c0NIwbVFfpnuLJjSDqKtc9T0ShpmzK5p6nFiYy8PTgoTJ9M+2jmPSlOfK7RdnVeJ
WP3JvFec3ogIhxXAGaX7GjRBkw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 21:00:26 2026 by rpki-client