Error: rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
File:                     4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft (raw, json)
Hash identifier:          WnmyKdo979g+sY9BYzTDC11Oov+gno+eUa6/8u5aeCY=
Subject key identifier:   2C:83:C9:5E:36:EA:52:2C:F3:F7:8A:97:9D:0E:7C:3B:6D:7D:BE:C2
Authority key identifier: 43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63
Certificate issuer:       /CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
Certificate serial:       3BD62B6039BE17D805F38B450B9E71339249B8C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
Manifest number:          04D2
Signing time:             Sun 18 Oct 2026 08:40:00 +0000
Manifest this update:     Sun 18 Oct 2026 08:35:00 +0000
Manifest next update:     Mon 19 Oct 2026 09:55:00 +0000
Files and hashes:         1: 4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl (hash: mUa0PZWldnryWiiwKLr6tu58K7/dYfIcbFEndODjkVo=)
                          2: 3137372e38352e302e302f32312d3234203d3e20323632353935.roa (hash: 1FDPtnL/oiYQzGlPc4ijuZvBayQlDfq3fYmNZ7nmZrg=)
                          3: 3137302e38332e34342e302f32322d3234203d3e20323632353935.roa (hash: ltlNjmBjNxv/9QTc+0CyILmDJKXwwjOJPrGqWq5UD6s=)
                          4: 323830343a3639303a3a2f33322d3430203d3e20323632353935.roa (hash: XNmpKrhIioidYT0WbDSH+38y4AsFqdpVex8l5oWEx4s=)
                          5: 3137302e37392e3232342e302f32322d3234203d3e20323632353935.roa (hash: qEL+yyrqlhbf2JPDTvvK2N9DKcJFgre2Wy5/bl9UF6I=)
                          6: 34352e3137392e3138302e302f32322d3234203d3e20323632353935.roa (hash: DSIAOHHDtH4HWsBWPwzaFHzBlDruo55nJLmhdype5tA=)
                          7: 34352e3136322e3138382e302f32322d3234203d3e20323632353935.roa (hash: W6lb5B+mO6JbiZRX0GW1Uhy+hiuO1g15/lQmnXPUJi8=)
                          8: 3139312e372e382e302f32312d3234203d3e20323632353935.roa (hash: anK27G2c7vjgfJ1phEjaSMtYINLX8h12I1B+Gxsdj6Y=)
                          9: 3137392e3130362e31362e302f32302d3234203d3e20323632353935.roa (hash: JhFgZ9iQt2Ligrxes5osFMqnyFJ6oIUaepakI85FJhs=)
                          10: 3136372e3235302e32302e302f32322d3234203d3e20323632353935.roa (hash: eXgqeb2eJqJb6EmYLX0kled+InXYsUY9wftj5OfeO1k=)
                          11: 3133382e3132312e31362e302f32322d3234203d3e20323632353935.roa (hash: i6QY2N/xunlhLUolwp4NC0xURT380/7IasvrTmTUHKc=)
                          12: 3133382e302e36342e302f32322d3234203d3e20323632353935.roa (hash: OPoXHe00vBjl8830SVaAnqbieI93+ItDdZaljPUnuH0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl
                          rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 09:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:d6:2b:60:39:be:17:d8:05:f3:8b:45:0b:9e:71:33:92:49:b8:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
        Validity
            Not Before: Oct 18 08:35:00 2026 GMT
            Not After : Oct 19 09:55:00 2026 GMT
        Subject: CN=2C83C95E36EA522CF3F78A979D0E7C3B6D7DBEC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:84:27:ab:d2:51:19:4f:49:a6:98:22:8b:55:
                    eb:35:19:a3:05:b6:5d:e2:26:20:b4:9d:91:53:3b:
                    c0:7b:73:45:54:ff:18:d5:3e:35:4a:7e:bc:0d:a1:
                    1e:1a:99:5b:62:d7:26:00:41:87:e5:6d:32:6b:2b:
                    4e:1b:52:17:5f:aa:78:cb:93:6c:79:05:bc:de:25:
                    ab:12:bc:20:f3:b8:ef:3c:40:af:d3:d2:88:7b:2b:
                    c5:be:c7:a1:27:74:7f:43:32:88:7b:9c:1e:af:0a:
                    be:48:83:02:8a:97:be:16:a4:55:82:0f:d2:d9:65:
                    b9:70:18:3f:1f:66:88:6e:47:d0:1a:d9:97:ae:93:
                    eb:fd:39:17:50:1a:ba:82:91:ed:03:98:41:10:61:
                    d0:23:53:92:29:91:78:28:28:f7:5f:ca:20:01:45:
                    81:d8:1a:8b:93:75:ad:6f:cf:31:b6:46:fa:16:95:
                    f2:39:99:fb:f9:83:5b:c8:ba:0f:fa:a0:87:93:0a:
                    bd:bb:cd:e8:e0:d1:d8:15:71:54:e3:e0:35:59:48:
                    50:93:dd:d7:84:4d:32:d0:a6:6c:aa:ce:d4:b7:19:
                    31:43:25:0e:2a:54:8b:45:11:63:0d:65:5e:27:5f:
                    fc:9f:47:c1:4e:65:0e:57:59:66:59:68:c1:74:f7:
                    53:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:83:C9:5E:36:EA:52:2C:F3:F7:8A:97:9D:0E:7C:3B:6D:7D:BE:C2
            X509v3 Authority Key Identifier:
                keyid:43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:1c:a8:be:99:d3:75:c5:66:85:e0:12:59:d7:19:bf:57:99:
         78:9f:6a:c3:cc:d1:1c:35:d9:95:67:1a:f3:5e:bd:c6:98:d7:
         50:bb:b1:f7:ac:db:b5:44:60:33:a4:2e:a7:8d:0c:1f:29:27:
         02:da:59:c8:1e:7e:0c:0a:9c:c4:cf:5b:c8:3d:dc:73:fa:9f:
         d8:31:56:75:8f:a0:1c:ab:90:f9:52:a8:38:ef:4f:88:b9:c8:
         78:26:d2:58:ad:d0:4b:b0:4e:a8:94:6c:6a:53:65:2b:8b:f3:
         e1:b4:4d:f8:a9:66:7b:3d:fe:9e:53:26:53:16:4e:e8:48:d0:
         c4:fc:ee:19:d0:6c:07:41:d2:3c:0f:a6:b9:52:fc:42:48:36:
         53:51:8b:a8:5c:50:0f:0a:59:32:c7:9c:a0:21:65:d2:a0:ea:
         89:0d:13:4a:89:68:56:d1:2c:65:6b:fb:36:c2:da:a4:ca:ec:
         68:34:f1:da:9c:27:b8:61:5b:41:ca:6a:4e:84:ea:52:40:d0:
         3a:65:9a:4e:b2:88:40:e8:5c:5d:fd:b0:1c:8e:6e:6a:da:80:
         d4:2f:be:98:d4:81:96:a3:db:c5:24:90:62:eb:8a:0d:ae:89:
         4a:7c:d1:2c:63:d7:85:32:92:a8:95:4e:bb:5e:c9:91:48:5f:
         31:03:e1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 15:21:27 2026 by rpki-client