Error: rpki-repo.registro.br/repo/4gq3SDQcuJcmQwTzNmgf5o3zY9oHw7bFNN7netiuizMm/1/E4CC883D424B3F78EF4AE46288059D5FB1F48DB7.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4gq3SDQcuJcmQwTzNmgf5o3zY9oHw7bFNN7netiuizMm/1/E4CC883D424B3F78EF4AE46288059D5FB1F48DB7.mft
File:                     E4CC883D424B3F78EF4AE46288059D5FB1F48DB7.mft (raw, json)
Hash identifier:          n0n70Ex1ALDs30zgndi9OLgHtkHjKp03Kp17fGEw9qo=
Subject key identifier:   8A:C4:3D:40:BE:CD:E3:20:15:BC:3D:3C:F2:6D:49:0D:95:3E:48:DD
Authority key identifier: E4:CC:88:3D:42:4B:3F:78:EF:4A:E4:62:88:05:9D:5F:B1:F4:8D:B7
Certificate issuer:       /CN=E4CC883D424B3F78EF4AE46288059D5FB1F48DB7
Certificate serial:       505991DB301D042289F155A71B265D473D3CFBB0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4CC883D424B3F78EF4AE46288059D5FB1F48DB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4gq3SDQcuJcmQwTzNmgf5o3zY9oHw7bFNN7netiuizMm/1/E4CC883D424B3F78EF4AE46288059D5FB1F48DB7.mft
Manifest number:          CF
Signing time:             Tue 13 Oct 2026 11:30:33 +0000
Manifest this update:     Tue 13 Oct 2026 11:25:33 +0000
Manifest next update:     Wed 14 Oct 2026 14:03:33 +0000
Files and hashes:         1: 3138392e38352e3131362e302f32342d3234203d3e20323730353631.roa (hash: xsIYnhu+xyFeBn/i4v0UREHNiLhuJHH9qVlw13mjcg0=)
                          2: 323830343a366465303a3a2f33322d3332203d3e20323730353631.roa (hash: xVr7qUpTk1bQ95mJEovRsMC/lCDGu4FipByI6bhuDTA=)
                          3: 3138392e38352e3131382e302f32332d3233203d3e20323730353631.roa (hash: uPxY3uYZ/vY2Rwcz+GpGMmAr1nJbSWbn2t1IePpHT+0=)
                          4: 323830343a366465303a343030303a3a2f33342d3334203d3e20323730353631.roa (hash: eYuAgWCWIDJNn5fS6D3ZGudnj2eg+OD9thV3POseyEc=)
                          5: 3138392e38352e3131382e302f32342d3234203d3e20323730353631.roa (hash: i/p84J8bPACOgr223x72/eJLNPhXFe2EQ0p0SYDhX8g=)
                          6: 3138392e38352e3131362e302f32322d3232203d3e20323730353631.roa (hash: c/BjeeKHNgrcmv6i1TVDPsjvh/5suqwiaaK48b4ReLs=)
                          7: 323830343a366465303a633030303a3a2f33342d3334203d3e20323730353631.roa (hash: /3nFB9suTFnA4XroM0cFZ8LA+frtjcpoi7dO9SWEQfk=)
                          8: 3138392e38352e3131372e302f32342d3234203d3e20323730353631.roa (hash: JiU79MN7I3hpTOLyi8gmgoIkRODK/NIEU+yXItKhSyA=)
                          9: 3138392e38352e3131392e302f32342d3234203d3e20323730353631.roa (hash: 2A3ecKmxLmCD7ul3/CjKZKyMitunC64KdSY5pN4N+5I=)
                          10: 323830343a366465303a383030303a3a2f33342d3334203d3e20323730353631.roa (hash: 78Xb7fAT1jdevX3gk2nEUKXiGtQtFBSCVz64vq5mZjg=)
                          11: E4CC883D424B3F78EF4AE46288059D5FB1F48DB7.crl (hash: XZLLNJlAmc0uBSHwZONHYLEaTNCNv/esqkv3spUVMa0=)
                          12: 3138392e38352e3131362e302f32332d3233203d3e20323730353631.roa (hash: 56qvCwhxiOkK/0TSCiRqI7zHwBdcpZup2gwpKGpmRD4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4gq3SDQcuJcmQwTzNmgf5o3zY9oHw7bFNN7netiuizMm/1/E4CC883D424B3F78EF4AE46288059D5FB1F48DB7.crl
                          rsync://rpki-repo.registro.br/repo/4gq3SDQcuJcmQwTzNmgf5o3zY9oHw7bFNN7netiuizMm/1/E4CC883D424B3F78EF4AE46288059D5FB1F48DB7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4CC883D424B3F78EF4AE46288059D5FB1F48DB7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 14:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:59:91:db:30:1d:04:22:89:f1:55:a7:1b:26:5d:47:3d:3c:fb:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4CC883D424B3F78EF4AE46288059D5FB1F48DB7
        Validity
            Not Before: Oct 13 11:25:33 2026 GMT
            Not After : Oct 14 14:03:33 2026 GMT
        Subject: CN=8AC43D40BECDE32015BC3D3CF26D490D953E48DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2b:e8:08:50:d6:a7:4c:09:b0:31:cd:a1:eb:
                    b8:f8:7b:da:50:0d:c6:09:fc:38:c9:5c:c0:27:ec:
                    06:dc:3f:b0:d0:11:12:a2:02:4a:65:7e:57:c3:4a:
                    57:cd:bd:79:b3:d8:ec:3c:a9:a1:bf:5b:a7:5e:7f:
                    70:92:f4:cd:26:b5:d1:57:1f:71:34:fa:18:11:03:
                    fb:89:92:be:ff:5d:ae:2a:b2:1b:c1:63:21:83:c9:
                    9f:01:28:a8:09:ab:b9:79:4a:c2:51:b4:69:50:75:
                    ec:c9:e4:fd:a3:50:3b:5f:ae:1b:58:f4:8d:40:7b:
                    6f:bf:a5:77:59:98:14:9e:49:27:72:62:72:4f:73:
                    0b:e3:e1:f1:fb:a9:e6:76:6f:45:d0:a7:99:ef:60:
                    66:85:92:83:01:6b:17:16:d7:4b:a0:f7:e8:df:70:
                    19:90:57:34:c8:d2:b1:21:f1:f9:16:10:fa:87:ef:
                    54:f5:f7:9f:5a:72:d3:29:1e:5c:65:e4:fe:48:1c:
                    7b:0f:1f:fc:cb:5d:d4:d2:8b:b5:d0:24:06:37:1d:
                    ac:82:4d:e1:bc:a6:44:b8:fe:32:0f:cd:9b:87:c5:
                    72:15:4f:1a:85:87:f5:4a:31:3f:42:61:73:e5:da:
                    eb:bd:99:84:85:fe:8a:07:8f:41:89:77:51:65:4e:
                    47:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C4:3D:40:BE:CD:E3:20:15:BC:3D:3C:F2:6D:49:0D:95:3E:48:DD
            X509v3 Authority Key Identifier:
                keyid:E4:CC:88:3D:42:4B:3F:78:EF:4A:E4:62:88:05:9D:5F:B1:F4:8D:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4gq3SDQcuJcmQwTzNmgf5o3zY9oHw7bFNN7netiuizMm/1/E4CC883D424B3F78EF4AE46288059D5FB1F48DB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4CC883D424B3F78EF4AE46288059D5FB1F48DB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4gq3SDQcuJcmQwTzNmgf5o3zY9oHw7bFNN7netiuizMm/1/E4CC883D424B3F78EF4AE46288059D5FB1F48DB7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:d1:d1:59:6c:ae:3d:c6:9b:2a:9e:45:b8:e8:6b:12:14:b8:
         e0:b1:7f:79:9f:c6:c6:10:80:c2:1d:e1:e3:fe:9f:56:ae:cb:
         c3:b4:54:88:22:d4:8e:20:d5:ad:f1:df:7b:17:31:90:29:9f:
         9c:6f:d4:b6:5c:f8:00:2f:a7:5d:58:6e:ab:a1:ba:c1:01:66:
         3d:ba:bd:fe:2a:c6:29:7b:7a:ae:d0:ff:74:4b:9f:03:2d:68:
         63:3a:7b:97:00:79:30:4e:d5:f1:91:9f:f9:f5:ad:e5:c4:e4:
         48:94:b5:64:81:a5:48:b2:85:7d:ef:d7:ad:68:87:9a:5c:db:
         a0:ef:64:8e:45:39:68:d1:90:a0:c5:3d:1b:5b:a4:df:98:fd:
         df:07:d3:67:af:a3:a9:03:58:7c:de:10:5a:7d:a0:eb:2e:56:
         33:f0:76:5f:8f:5d:01:46:c1:59:f5:ec:bb:86:df:35:39:3c:
         d4:3f:87:bc:c1:43:eb:ee:4a:29:35:51:5d:d1:f1:e8:8f:dc:
         c3:36:8b:28:fe:b4:2f:66:19:1f:16:9e:5f:52:37:fa:f6:2b:
         2c:f3:27:f9:7f:fe:cf:98:7d:5f:9c:31:f6:b2:37:98:58:77:
         38:c7:c5:57:ef:87:0d:8a:a5:54:23:c2:82:dc:67:2f:9a:c1:
         dc:25:d6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 00:49:12 2026 by rpki-client