Error: rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/1/9F9D1F012D6555CCF9E1B7BFD22CA281237FAD3E.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/1/9F9D1F012D6555CCF9E1B7BFD22CA281237FAD3E.mft
File:                     9F9D1F012D6555CCF9E1B7BFD22CA281237FAD3E.mft (raw, json)
Hash identifier:          VXduehSGoiRIUQPbRF952Iu2SyYTV9/TNQs1Ud5HssA=
Subject key identifier:   17:46:54:E7:1D:DD:7E:ED:E7:B4:AC:6F:0E:DF:14:03:59:6B:CE:DF
Authority key identifier: 9F:9D:1F:01:2D:65:55:CC:F9:E1:B7:BF:D2:2C:A2:81:23:7F:AD:3E
Certificate issuer:       /CN=9F9D1F012D6555CCF9E1B7BFD22CA281237FAD3E
Certificate serial:       4BB325E6B4ACEC1C6A7B609E719144C33DB40332
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F9D1F012D6555CCF9E1B7BFD22CA281237FAD3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/1/9F9D1F012D6555CCF9E1B7BFD22CA281237FAD3E.mft
Manifest number:          026D
Signing time:             Sun 11 Oct 2026 05:00:00 +0000
Manifest this update:     Sun 11 Oct 2026 04:55:00 +0000
Manifest next update:     Mon 12 Oct 2026 05:29:00 +0000
Files and hashes:         1: 323830343a353235383a3a2f33322d3334203d3e20323638353132.roa (hash: wyLr0mMkvjA0DluvFzfJcBmt53xCvAuD4aDa4B7jgLo=)
                          2: 34352e3136312e3138342e302f32322d3234203d3e20323638353132.roa (hash: YBFhk13W0YXloMxVTULOMFrIKRjkB0ODjvZI8qfU3nU=)
                          3: 9F9D1F012D6555CCF9E1B7BFD22CA281237FAD3E.crl (hash: iYMPck39h52bdEnweOEgZaEkS0cKuysBg79DhS1lTwQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/1/9F9D1F012D6555CCF9E1B7BFD22CA281237FAD3E.crl
                          rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/1/9F9D1F012D6555CCF9E1B7BFD22CA281237FAD3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F9D1F012D6555CCF9E1B7BFD22CA281237FAD3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 05:29:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b3:25:e6:b4:ac:ec:1c:6a:7b:60:9e:71:91:44:c3:3d:b4:03:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F9D1F012D6555CCF9E1B7BFD22CA281237FAD3E
        Validity
            Not Before: Oct 11 04:55:00 2026 GMT
            Not After : Oct 12 05:29:00 2026 GMT
        Subject: CN=174654E71DDD7EEDE7B4AC6F0EDF1403596BCEDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6a:93:fb:34:76:16:b4:f4:2f:24:86:eb:0e:
                    c1:4d:5c:36:a6:9c:d6:89:d8:5d:8a:de:a7:16:2a:
                    eb:99:a7:dc:80:f5:0b:bc:ed:1c:22:8f:53:07:ee:
                    31:65:11:e7:ad:76:70:64:5f:e2:42:51:ba:9f:cb:
                    48:28:7c:36:8c:ed:31:74:ba:cb:64:ae:e6:b0:fb:
                    83:17:0b:a6:0f:9c:dc:63:27:33:f3:d2:f3:16:4a:
                    bd:23:6f:2c:69:74:5d:06:5d:48:75:96:61:40:25:
                    21:9c:4c:fc:af:79:53:f2:bb:24:62:ed:8f:8a:fc:
                    22:2f:7d:f2:10:22:3d:ff:a2:33:f7:a7:7b:4c:12:
                    0d:42:8a:82:ee:22:aa:6a:6f:c6:a5:19:b0:58:89:
                    17:ae:51:a3:c5:46:14:50:3d:84:39:d1:b3:fc:22:
                    64:da:b8:1e:0a:96:96:2a:d1:ef:de:43:54:b9:7e:
                    13:f9:2e:5a:21:b6:57:b5:de:c5:57:15:40:70:5d:
                    c7:93:2d:6b:5b:32:f6:a0:ea:bc:03:9b:88:30:30:
                    f0:f7:e2:97:e3:e6:d3:ae:bc:f8:f5:4b:9e:3d:be:
                    dc:37:73:19:3d:64:47:e5:52:88:69:e5:32:c4:83:
                    ea:03:94:18:fd:36:71:73:ed:48:3d:63:a0:d0:4e:
                    44:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:46:54:E7:1D:DD:7E:ED:E7:B4:AC:6F:0E:DF:14:03:59:6B:CE:DF
            X509v3 Authority Key Identifier:
                keyid:9F:9D:1F:01:2D:65:55:CC:F9:E1:B7:BF:D2:2C:A2:81:23:7F:AD:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/1/9F9D1F012D6555CCF9E1B7BFD22CA281237FAD3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F9D1F012D6555CCF9E1B7BFD22CA281237FAD3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/1/9F9D1F012D6555CCF9E1B7BFD22CA281237FAD3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:7d:5b:fe:39:8f:ab:80:8c:e3:e1:5a:2f:41:00:ef:06:ce:
         84:85:38:b4:bd:e2:55:79:a1:3d:12:03:0a:7b:49:0b:40:f3:
         83:ea:e7:ca:5c:61:6b:ee:5f:d5:d3:0a:0c:85:37:ca:df:d8:
         40:d0:e7:42:61:9a:64:2c:37:7d:ca:aa:49:c7:5c:16:33:45:
         dd:b5:8c:24:a1:50:16:16:38:d1:76:41:58:89:0f:89:0f:98:
         5a:3d:9b:c2:23:a0:da:4a:47:37:87:59:ad:4b:ce:bb:3f:cf:
         6b:53:a2:79:c5:f5:3a:af:1f:5b:94:3b:66:b5:20:0f:5d:1e:
         b0:e1:e3:09:5a:1c:6e:d7:ac:cf:a4:51:74:81:ad:fa:b4:22:
         2a:8d:c0:84:e9:8e:70:31:71:64:c8:85:0b:8d:b2:0d:dc:e7:
         77:c6:6e:3e:54:48:08:70:27:5a:11:d6:4e:52:ec:c5:74:13:
         3c:62:d6:38:3d:c6:61:e3:ae:2e:1c:ee:93:ff:cb:a7:30:6d:
         0d:ac:6f:ef:0b:3e:eb:ae:fa:d5:c7:1f:c5:85:d6:87:a9:fd:
         96:4d:65:23:c9:19:2a:c8:43:9a:d5:86:08:3a:4c:cd:eb:6f:
         20:3b:85:22:61:38:10:16:26:7c:92:ae:f4:26:a8:5f:be:1e:
         01:9a:5e:13
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUS7Ml5rSs7Bxqe2CecZFEwz20AzIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY5RDFGMDEyRDY1NTVDQ0Y5RTFCN0JGRDIyQ0EyODEy
MzdGQUQzRTAeFw0yNjEwMTEwNDU1MDBaFw0yNjEwMTIwNTI5MDBaMDMxMTAvBgNV
BAMTKDE3NDY1NEU3MURERDdFRURFN0I0QUM2RjBFREYxNDAzNTk2QkNFREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxapP7NHYWtPQvJIbrDsFNXDam
nNaJ2F2K3qcWKuuZp9yA9Qu87Rwij1MH7jFlEeetdnBkX+JCUbqfy0gofDaM7TF0
ustkruaw+4MXC6YPnNxjJzPz0vMWSr0jbyxpdF0GXUh1lmFAJSGcTPyveVPyuyRi
7Y+K/CIvffIQIj3/ojP3p3tMEg1CioLuIqpqb8alGbBYiReuUaPFRhRQPYQ50bP8
ImTauB4KlpYq0e/eQ1S5fhP5Llohtle13sVXFUBwXceTLWtbMvag6rwDm4gwMPD3
4pfj5tOuvPj1S549vtw3cxk9ZEflUohp5TLEg+oDlBj9NnFz7Ug9Y6DQTkRfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUF0ZU5x3dfu3ntKxvDt8UA1lrzt8wHwYDVR0j
BBgwFoAUn50fAS1lVcz54be/0iyigSN/rT4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3pyV3RHTW1ieW1veVJlUk1pYk56NlRVVHdZSDh3VG40RGs3U1BWWFky
WTUvMS85RjlEMUYwMTJENjU1NUNDRjlFMUI3QkZEMjJDQTI4MTIzN0ZBRDNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlGOUQxRjAxMkQ2NTU1Q0NG
OUUxQjdCRkQyMkNBMjgxMjM3RkFEM0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N3pyV3RHTW1ieW1veVJlUk1pYk56NlRVVHdZSDh3VG40RGs3U1BWWFkyWTUvMS85
RjlEMUYwMTJENjU1NUNDRjlFMUI3QkZEMjJDQTI4MTIzN0ZBRDNFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPn1b/jmPq4CM4+FaL0EA7wbOhIU4tL3iVXmhPRIDCntJC0Dzg+rnylxha+5f
1dMKDIU3yt/YQNDnQmGaZCw3fcqqScdcFjNF3bWMJKFQFhY40XZBWIkPiQ+YWj2b
wiOg2kpHN4dZrUvOuz/Pa1OiecX1Oq8fW5Q7ZrUgD10esOHjCVocbtesz6RRdIGt
+rQiKo3AhOmOcDFxZMiFC42yDdznd8ZuPlRICHAnWhHWTlLsxXQTPGLWOD3GYeOu
Lhzuk//LpzBtDaxv7ws+66761ccfxYXWh6n9lk1lI8kZKshDmtWGCDpMzetvIDuF
ImE4EBYmfJKu9CaoX74eAZpeEw==
-----END CERTIFICATE-----
Generated at Sun Oct 11 20:12:09 2026 by rpki-client