Error: rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.mft
File:                     0144765DC0A3D9D0EADA845625C5E7F14C552690.mft (raw, json)
Hash identifier:          igouB3st6pYhtVoG3vvqUbPV0r9CdxY45RCA77aHjoA=
Subject key identifier:   42:20:A4:81:8A:F9:1A:99:26:60:8D:62:E1:6A:1C:29:16:8D:79:AB
Authority key identifier: 01:44:76:5D:C0:A3:D9:D0:EA:DA:84:56:25:C5:E7:F1:4C:55:26:90
Certificate issuer:       /CN=0144765DC0A3D9D0EADA845625C5E7F14C552690
Certificate serial:       1837A77B9E14883910779337FB05FC8857372501
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.mft
Manifest number:          04C2
Signing time:             Wed 14 Oct 2026 19:11:58 +0000
Manifest this update:     Wed 14 Oct 2026 19:06:58 +0000
Manifest next update:     Thu 15 Oct 2026 23:01:58 +0000
Files and hashes:         1: 3139302e31312e3231302e302f32332d3233203d3e20323730363532.roa (hash: FnUMABFm+iWTMtU7fTd5b8RDP2Mwwtt1yuSnL7/O+Os=)
                          2: 323830343a366635303a3a2f34302d3430203d3e20323730363532.roa (hash: oWmYmvtDe1E+af+rhP9hakpmthsKpRFsjoEAopKpt6c=)
                          3: 3139302e31312e3230382e302f32322d3232203d3e20323730363532.roa (hash: V8eliT+hBRgsymXtFyjuorkxzl1l/dghR6F/JEpHFVA=)
                          4: 3139302e31312e3230382e302f32342d3234203d3e20323730363532.roa (hash: JKavBcC+YkWZjlDoTpR/o7xA62BZmC7nXUIkKVie7Mg=)
                          5: 323830343a366635303a343030303a3a2f33342d3334203d3e20323730363532.roa (hash: q6bx/V26fnn1rKQlZjXL9DByBrCnOyKKRWOapvio31M=)
                          6: 3139302e31312e3230392e302f32342d3234203d3e20323730363532.roa (hash: LQ7x5KpsSTNYv+XaOfo9m2p6hIHYACLMd3PIYhHf89w=)
                          7: 323830343a366635303a3130303a3a2f34302d3430203d3e20323730363532.roa (hash: 0bvMOZf/vlqYqQtsMXwwRob7CdL1Ky1zncY2CbyflGs=)
                          8: 3139302e31312e3231302e302f32342d3234203d3e20323730363532.roa (hash: Upc2t48mABVc/B3tiHVEZpNtKpbkYjDV3xXRghrciVg=)
                          9: 0144765DC0A3D9D0EADA845625C5E7F14C552690.crl (hash: nKV7u7uV4svRNfFHQesPi6xJFxfsJGftLbu27bREN/A=)
                          10: 3139302e31312e3231312e302f32342d3234203d3e20323730363532.roa (hash: ciVqttWWvXb4uBVaTr8KxPhVpv2A/P6YHIYuvqe4QbM=)
                          11: 323830343a366635303a3a2f33322d3332203d3e20323730363532.roa (hash: yI8AufnBPd/JAFoluG6sIQxIw45BFskRHoD7Gg5CcgY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.crl
                          rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 23:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:37:a7:7b:9e:14:88:39:10:77:93:37:fb:05:fc:88:57:37:25:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0144765DC0A3D9D0EADA845625C5E7F14C552690
        Validity
            Not Before: Oct 14 19:06:58 2026 GMT
            Not After : Oct 15 23:01:58 2026 GMT
        Subject: CN=4220A4818AF91A9926608D62E16A1C29168D79AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:4e:4a:69:a5:0a:a1:45:2d:ca:d5:9a:1e:b9:
                    63:35:d6:57:d7:47:8a:f3:e5:1e:8d:e1:7a:10:f7:
                    77:79:bc:7b:62:c9:32:38:47:83:2c:f5:ef:cd:b2:
                    39:a7:35:85:b9:e3:c6:7e:66:ec:3b:2c:b3:cd:d6:
                    6d:ab:31:c2:c0:4e:24:62:fe:c3:b4:4c:f3:e5:b9:
                    44:8d:3d:3d:21:cb:cd:e5:23:dd:42:ba:8e:fe:65:
                    23:bc:98:0f:71:a7:69:46:6f:f5:3d:70:c8:dd:7b:
                    8c:6a:db:ca:b0:6a:ca:7d:06:fe:47:c8:5f:77:02:
                    f8:35:82:85:00:66:05:da:4e:a7:95:38:7b:55:1f:
                    32:d9:81:a3:72:ae:9d:a6:5c:74:76:3d:de:74:74:
                    d3:8c:10:20:2d:b7:72:d8:57:c0:67:a7:94:59:c5:
                    f9:7e:c7:4b:aa:c0:9c:22:0d:36:98:81:32:e8:7d:
                    0a:09:10:53:3b:00:19:3e:70:8b:5e:fa:5d:29:81:
                    88:3d:80:7f:6b:96:1b:a4:4f:f9:05:2b:f8:68:d5:
                    fd:8b:a5:d1:79:c3:4b:04:14:ac:92:e0:bd:c8:28:
                    f6:b7:b8:27:35:cb:3f:0b:65:35:d7:d1:18:61:fa:
                    40:f7:9d:db:3a:13:33:97:ae:9d:21:2e:02:82:26:
                    a3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:20:A4:81:8A:F9:1A:99:26:60:8D:62:E1:6A:1C:29:16:8D:79:AB
            X509v3 Authority Key Identifier:
                keyid:01:44:76:5D:C0:A3:D9:D0:EA:DA:84:56:25:C5:E7:F1:4C:55:26:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:81:ec:36:98:46:f5:5c:26:ac:84:2f:21:ee:ff:97:f8:08:
         77:4c:9a:01:15:ff:a0:13:cd:ad:70:4b:98:0b:ea:dc:72:8a:
         02:d8:9e:8b:2b:3f:0c:5a:24:25:08:94:c9:88:4e:b4:f7:d5:
         56:81:7c:3c:02:e4:53:53:25:57:6e:4a:ed:a4:6c:5e:02:03:
         b1:83:b4:5b:93:9e:55:9b:2b:31:b9:88:bc:ce:c5:95:69:96:
         4b:83:19:35:47:06:61:d7:71:3e:79:e1:0a:a6:12:3f:9b:a1:
         bc:27:ec:3c:84:57:c4:99:ae:83:1b:ef:13:60:4d:41:cb:6f:
         4b:39:27:fa:98:1d:09:62:de:a9:5e:95:de:a5:85:65:3a:6d:
         9f:4d:35:aa:e3:fd:57:c5:77:8f:d7:69:a2:57:cf:ad:c7:69:
         fb:4c:da:d4:41:9e:24:be:ea:17:05:56:42:96:65:f9:50:10:
         c7:d1:80:c8:5e:79:ad:03:6b:c1:9a:fd:83:43:86:24:16:4e:
         1c:23:e8:94:98:65:03:c1:fd:6f:28:25:f6:ca:d3:f2:c4:5c:
         c2:f2:96:69:1d:ab:83:f1:30:a5:bd:c5:c6:dd:9b:b1:ae:ca:
         8a:14:0e:ee:8b:2c:f3:5e:63:5d:bd:9b:56:f1:69:15:38:10:
         12:0b:bf:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:45:10 2026 by rpki-client