Error: rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.mft
File:                     B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.mft (raw, json)
Hash identifier:          rMcQynND1oqkmyO+3YqqrAuVHW0hrujt3BxfWektQ4M=
Subject key identifier:   E9:04:67:F5:87:78:05:75:E1:4D:E6:68:02:CC:48:F4:A1:3C:E0:1F
Authority key identifier: B4:1D:6A:9C:5F:D8:1F:51:C4:F5:E7:3E:59:4F:0C:F0:C9:99:B8:43
Certificate issuer:       /CN=B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843
Certificate serial:       3784CE4A9E489ECA0926F6348ECC9A11A9FBB748
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.mft
Manifest number:          033C
Signing time:             Mon 19 Oct 2026 09:26:55 +0000
Manifest this update:     Mon 19 Oct 2026 09:21:55 +0000
Manifest next update:     Tue 20 Oct 2026 09:55:55 +0000
Files and hashes:         1: 323830343a353239633a3a2f33342d3334203d3e20323638353239.roa (hash: p0NzeAxs+5iOL8D87BoFA759wIsDKp+MPKWi/WzaxE4=)
                          2: 34352e3136322e34382e302f32322d3232203d3e20323638353239.roa (hash: dm8gvwbEjVCB6uiHvJDtp4FKVPSTe3xtOenrM7yoCqE=)
                          3: 323830343a353239633a633030303a3a2f33342d3334203d3e20323638353239.roa (hash: ojxetBMWRoOFzU3iX1Vz5o1kbTj96Iatk1KnhwIhlYw=)
                          4: 323830343a353239633a3a2f33332d3333203d3e20323638353239.roa (hash: GodzEhK38moypx2tU2I8HENxdupkK5F5cBwZx7vPM0M=)
                          5: 34352e3136322e34392e302f32342d3234203d3e20323638353239.roa (hash: 0dwLyXzdEN7NjIUYnBYEdG6E3t8kZG2oUycGgZ7HFvc=)
                          6: 323830343a353239633a3a2f33322d3332203d3e20323638353239.roa (hash: yesGEizXRMmDgXlWJRTWWureb+6kZIocTEn+Nslrotw=)
                          7: 323830343a353239633a383030303a3a2f33332d3333203d3e20323638353239.roa (hash: iRUHJPcqqcsFSIaEWq9vr5fdxN+xA1I2Mi8S0sfFHlg=)
                          8: 34352e3136322e35312e302f32342d3234203d3e20323638353239.roa (hash: jUYXbsZvnQ/1DQQxFb2AS/5McEXR4349BvfmLJcfjvg=)
                          9: B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.crl (hash: JTy3VoN5srSYsy2CX8QQSVknNASC9aUf4eh7vVHY2pM=)
                          10: 34352e3136322e34382e302f32342d3234203d3e20323638353239.roa (hash: bWAtAMTGoedY8hbmysukuNFzlfcEx28LkrMyr3XzYq0=)
                          11: 323830343a353239633a343030303a3a2f33342d3334203d3e20323638353239.roa (hash: OI7On3DAp4Vwy5bsf24vPkSugWa6IsVlSLYlzTmOYhA=)
                          12: 34352e3136322e34382e302f32332d3233203d3e20323638353239.roa (hash: o5k5qPZrQD+R+rjHRByCCsh5If+NR7VenqgIK3M4aBw=)
                          13: 34352e3136322e35302e302f32332d3233203d3e20323638353239.roa (hash: SPLbf2REHD2aPi7ThPXahU8dEMftG+Q0IgbGOxw/4Mw=)
                          14: 34352e3136322e35302e302f32342d3234203d3e20323638353239.roa (hash: Kxys4tmihnVJ3lAH1ei6nnjQrKuXjovgEZJwbs2VaV0=)
                          15: 323830343a353239633a383030303a3a2f33342d3334203d3e20323638353239.roa (hash: xnXDzoH3/S68frwVKP+UPecXvFgXSM56k4h5r+dt1js=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.crl
                          rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 09:55:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:84:ce:4a:9e:48:9e:ca:09:26:f6:34:8e:cc:9a:11:a9:fb:b7:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843
        Validity
            Not Before: Oct 19 09:21:55 2026 GMT
            Not After : Oct 20 09:55:55 2026 GMT
        Subject: CN=E90467F587780575E14DE66802CC48F4A13CE01F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3b:a1:1d:31:58:19:d3:94:63:8a:97:56:b0:
                    ff:9f:f6:5f:8f:51:f0:38:19:48:01:29:c5:32:fb:
                    a6:f3:19:51:4f:cd:7b:fd:00:56:ac:f0:b1:17:fa:
                    de:fa:ff:1f:5c:81:1f:88:f8:6a:46:71:1a:86:43:
                    2f:9a:ad:3c:2b:55:ed:14:69:13:24:4e:d6:89:23:
                    71:de:68:c9:22:7b:e8:43:bc:fe:df:f2:de:c8:fb:
                    65:7a:30:66:cd:bf:02:46:b0:9a:3e:23:a6:64:57:
                    c5:c2:d4:91:c9:ef:9d:03:48:c4:22:2e:4b:18:af:
                    6c:74:1d:8b:a9:16:93:4a:b6:9f:99:d1:84:0e:af:
                    96:09:72:6d:e4:69:59:d0:1f:f9:e4:c9:03:91:16:
                    c7:e0:7e:4d:db:8c:84:53:ee:5b:26:1e:4f:b1:aa:
                    d1:72:84:9b:44:1f:ba:c7:6a:0b:86:de:b2:41:c5:
                    d4:c3:b0:7d:ba:ab:33:77:60:be:3b:f9:d5:e1:52:
                    29:9f:59:dc:32:ac:2b:81:26:14:c3:7c:9a:2e:da:
                    c6:83:f4:14:cc:a1:f6:c0:1b:ca:59:fe:ae:3c:2f:
                    a0:c1:97:d2:3e:d6:c4:dd:97:c6:f5:06:c6:c6:0d:
                    e2:e7:15:c2:44:5b:05:60:8c:e7:21:a3:3f:6d:0a:
                    7d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:04:67:F5:87:78:05:75:E1:4D:E6:68:02:CC:48:F4:A1:3C:E0:1F
            X509v3 Authority Key Identifier:
                keyid:B4:1D:6A:9C:5F:D8:1F:51:C4:F5:E7:3E:59:4F:0C:F0:C9:99:B8:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:9a:f7:b5:d3:8a:77:58:65:f5:e1:77:40:d4:15:55:95:51:
         8f:d5:91:4a:ac:75:39:50:b0:e5:9e:20:ed:ea:67:42:62:0f:
         79:f4:a9:51:fc:1e:04:30:f1:46:c8:04:7b:ff:0c:08:db:bd:
         39:25:2f:a2:74:9c:b3:95:9f:64:1d:d1:5a:17:72:cf:e8:cd:
         47:2b:ea:00:49:63:d9:76:5f:10:f1:20:6b:5b:95:3a:fc:6b:
         bb:41:71:08:47:5c:45:84:e1:b0:fe:bb:db:a3:20:c0:50:a2:
         ef:47:9e:4c:27:97:39:28:48:b4:bb:19:49:09:97:86:48:a6:
         94:d4:79:c0:45:bd:90:f2:cd:d3:f7:8c:95:75:0b:af:55:05:
         ff:8f:48:df:1d:9b:87:a1:31:05:78:ad:8a:5e:29:5d:c5:aa:
         1b:95:a7:95:a8:06:6a:2b:01:a2:33:fe:aa:33:c2:9c:80:7e:
         85:14:ec:c6:ac:28:82:16:59:6d:0a:b8:bf:7e:f7:34:9f:0f:
         f1:f8:61:1d:f2:78:58:60:cd:93:04:23:de:15:06:83:62:34:
         5f:89:1a:94:ce:7b:46:3b:95:34:39:4c:07:c4:70:57:c8:e6:
         47:25:ae:6c:ec:5e:a5:7d:61:06:7e:9c:78:37:9b:db:7e:d0:
         e1:e9:95:83
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUN4TOSp5InsoJJvY0jsyaEan7t0gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQxRDZBOUM1RkQ4MUY1MUM0RjVFNzNFNTk0RjBDRjBD
OTk5Qjg0MzAeFw0yNjEwMTkwOTIxNTVaFw0yNjEwMjAwOTU1NTVaMDMxMTAvBgNV
BAMTKEU5MDQ2N0Y1ODc3ODA1NzVFMTRERTY2ODAyQ0M0OEY0QTEzQ0UwMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlO6EdMVgZ05RjipdWsP+f9l+P
UfA4GUgBKcUy+6bzGVFPzXv9AFas8LEX+t76/x9cgR+I+GpGcRqGQy+arTwrVe0U
aRMkTtaJI3HeaMkie+hDvP7f8t7I+2V6MGbNvwJGsJo+I6ZkV8XC1JHJ750DSMQi
LksYr2x0HYupFpNKtp+Z0YQOr5YJcm3kaVnQH/nkyQORFsfgfk3bjIRT7lsmHk+x
qtFyhJtEH7rHaguG3rJBxdTDsH26qzN3YL47+dXhUimfWdwyrCuBJhTDfJou2saD
9BTMofbAG8pZ/q48L6DBl9I+1sTdl8b1BsbGDeLnFcJEWwVgjOchoz9tCn0zAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU6QRn9Yd4BXXhTeZoAsxI9KE84B8wHwYDVR0j
BBgwFoAUtB1qnF/YH1HE9ec+WU8M8MmZuEMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzlIS0tRVG8xZ2NjVlZrV200a1lIN0JjZkdCUnliTGFnMUhCandzM29K
YjEvMC9CNDFENkE5QzVGRDgxRjUxQzRGNUU3M0U1OTRGMENGMEM5OTlCODQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0MUQ2QTlDNUZEODFGNTFD
NEY1RTczRTU5NEYwQ0YwQzk5OUI4NDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QzlIS0tRVG8xZ2NjVlZrV200a1lIN0JjZkdCUnliTGFnMUhCandzM29KYjEvMC9C
NDFENkE5QzVGRDgxRjUxQzRGNUU3M0U1OTRGMENGMEM5OTlCODQzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAppr3tdOKd1hl9eF3QNQVVZVRj9WRSqx1OVCw5Z4g7epnQmIPefSpUfweBDDx
RsgEe/8MCNu9OSUvonScs5WfZB3RWhdyz+jNRyvqAElj2XZfEPEga1uVOvxru0Fx
CEdcRYThsP6726MgwFCi70eeTCeXOShItLsZSQmXhkimlNR5wEW9kPLN0/eMlXUL
r1UF/49I3x2bh6ExBXitil4pXcWqG5WnlagGaisBojP+qjPCnIB+hRTsxqwoghZZ
bQq4v373NJ8P8fhhHfJ4WGDNkwQj3hUGg2I0X4kalM57RjuVNDlMB8RwV8jmRyWu
bOxepX1hBn6ceDeb237Q4emVgw==
-----END CERTIFICATE-----
Generated at Mon Oct 19 22:26:09 2026 by rpki-client