Error: rpki-repo.registro.br/repo/Dj4xP4JG7S5qTtXG5gGeSJG4Xx56qZjrmuM9SoATxjAP/1/26B7D5260C62C15C63A0B39E27C08F865C46DA6B.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Dj4xP4JG7S5qTtXG5gGeSJG4Xx56qZjrmuM9SoATxjAP/1/26B7D5260C62C15C63A0B39E27C08F865C46DA6B.mft
File:                     26B7D5260C62C15C63A0B39E27C08F865C46DA6B.mft (raw, json)
Hash identifier:          n22/hY7PE3G9lFpkDCW34iQrPUTHqFb9AcOA6O3gUMs=
Subject key identifier:   38:E9:8C:09:81:9F:C6:5C:0F:03:C3:2E:82:52:9D:DF:D2:18:0E:1F
Authority key identifier: 26:B7:D5:26:0C:62:C1:5C:63:A0:B3:9E:27:C0:8F:86:5C:46:DA:6B
Certificate issuer:       /CN=26B7D5260C62C15C63A0B39E27C08F865C46DA6B
Certificate serial:       54FC387EC00D58F1C513BD373FD6ED808C79AE9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26B7D5260C62C15C63A0B39E27C08F865C46DA6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dj4xP4JG7S5qTtXG5gGeSJG4Xx56qZjrmuM9SoATxjAP/1/26B7D5260C62C15C63A0B39E27C08F865C46DA6B.mft
Manifest number:          04D2
Signing time:             Thu 15 Oct 2026 08:14:04 +0000
Manifest this update:     Thu 15 Oct 2026 08:09:04 +0000
Manifest next update:     Fri 16 Oct 2026 11:25:04 +0000
Files and hashes:         1: 26B7D5260C62C15C63A0B39E27C08F865C46DA6B.crl (hash: lOI9IhUq+yYlJw+VBFs7OAgmVQiXRipRkASGjfn0yZk=)
                          2: 3139312e372e3138382e302f32322d3234203d3e20323633333239.roa (hash: sqKWxWnC02WpR3TiQw+pQYYq76Tuu/ytNImrgtQCkJU=)
                          3: 323830343a313436633a3a2f33322d3438203d3e20323633333239.roa (hash: pAb8Bc7hBehgoHQsvq7eSLVRAv8oCMMItUZFizCoHBs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dj4xP4JG7S5qTtXG5gGeSJG4Xx56qZjrmuM9SoATxjAP/1/26B7D5260C62C15C63A0B39E27C08F865C46DA6B.crl
                          rsync://rpki-repo.registro.br/repo/Dj4xP4JG7S5qTtXG5gGeSJG4Xx56qZjrmuM9SoATxjAP/1/26B7D5260C62C15C63A0B39E27C08F865C46DA6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26B7D5260C62C15C63A0B39E27C08F865C46DA6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 11:25:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:fc:38:7e:c0:0d:58:f1:c5:13:bd:37:3f:d6:ed:80:8c:79:ae:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26B7D5260C62C15C63A0B39E27C08F865C46DA6B
        Validity
            Not Before: Oct 15 08:09:04 2026 GMT
            Not After : Oct 16 11:25:04 2026 GMT
        Subject: CN=38E98C09819FC65C0F03C32E82529DDFD2180E1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8d:34:eb:11:72:cf:e4:99:da:b8:58:2f:14:
                    fc:0b:e8:45:bd:78:70:29:90:cc:f6:e4:fd:a4:24:
                    bb:f8:88:01:93:b6:32:fd:1b:f0:53:84:0f:13:dc:
                    78:20:b2:25:a0:d6:d2:c3:0b:bb:8a:d7:ae:9a:28:
                    28:8e:a4:6d:be:a4:9a:76:85:cd:c1:70:d1:6f:04:
                    c0:cc:2a:25:53:a8:59:84:8f:d1:5a:cc:8d:27:5e:
                    b4:31:23:66:2b:a2:3a:c1:38:7e:60:12:95:64:20:
                    8d:9d:90:1a:cf:90:83:a7:eb:9b:6a:da:8c:4e:af:
                    e6:3d:59:63:df:eb:76:0b:00:83:5b:a0:73:88:fa:
                    0a:e0:58:7e:95:e6:9a:a1:89:6f:e4:6a:2c:55:cd:
                    ba:d1:42:e9:26:4e:de:60:d2:a8:ea:ee:06:1d:4a:
                    f5:d2:8d:20:bf:0a:7f:01:dd:be:e3:73:4c:1c:4f:
                    e3:80:e5:15:e7:8a:4d:65:30:ed:a3:d2:d1:fe:2e:
                    c0:59:53:42:55:7e:7b:b1:01:07:e4:79:ec:5b:28:
                    d6:66:57:58:a4:e7:d2:66:1a:60:c5:90:c6:8c:38:
                    d5:fd:91:64:1a:c1:1c:42:b2:f9:43:d8:a3:51:0f:
                    2a:36:8c:8e:eb:95:d5:fa:7c:e0:b6:09:ee:14:d2:
                    06:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E9:8C:09:81:9F:C6:5C:0F:03:C3:2E:82:52:9D:DF:D2:18:0E:1F
            X509v3 Authority Key Identifier:
                keyid:26:B7:D5:26:0C:62:C1:5C:63:A0:B3:9E:27:C0:8F:86:5C:46:DA:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dj4xP4JG7S5qTtXG5gGeSJG4Xx56qZjrmuM9SoATxjAP/1/26B7D5260C62C15C63A0B39E27C08F865C46DA6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26B7D5260C62C15C63A0B39E27C08F865C46DA6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dj4xP4JG7S5qTtXG5gGeSJG4Xx56qZjrmuM9SoATxjAP/1/26B7D5260C62C15C63A0B39E27C08F865C46DA6B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:50:db:9e:c9:cc:7d:3e:d6:23:26:b3:9e:54:67:7c:a3:4b:
         9d:88:1f:18:34:f7:12:04:69:eb:b3:0f:79:c4:33:42:06:a1:
         38:d8:3a:d5:6a:d2:82:61:c3:da:0f:4d:a0:cb:a4:cf:86:22:
         ec:fd:ce:92:d6:20:15:0c:f8:2b:ea:64:01:10:3b:ed:cc:65:
         d5:01:45:1e:8f:95:99:10:52:fd:a3:1f:40:3d:90:c3:51:a7:
         e6:7a:ab:23:8e:b3:17:71:4e:52:2c:86:8d:1c:ba:8c:f6:6f:
         a9:f0:de:92:52:4f:ac:41:d3:4e:4c:08:b4:a4:0d:55:25:b4:
         86:b9:e4:81:93:18:8c:a9:bf:a1:f9:47:59:a6:fe:b9:68:5b:
         91:60:c2:88:32:e0:ec:0f:87:0d:1b:2f:74:a5:08:c4:37:13:
         6d:f3:a0:a0:54:c7:ab:fb:51:e8:ef:04:34:e1:fb:92:09:33:
         10:4e:56:ad:bf:00:62:99:19:7b:ab:12:9d:0d:0d:9b:81:1f:
         36:b5:f3:b0:0b:b3:6f:32:81:29:11:ed:fd:7f:ae:c4:87:01:
         b5:65:ba:76:a8:e9:08:10:f2:ac:37:26:dc:34:a6:3c:0b:9e:
         50:b7:9c:e3:1b:ae:1e:b6:59:82:0f:ab:42:56:3e:40:48:c4:
         28:fb:fb:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUVPw4fsANWPHFE703P9btgIx5rpowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjZCN0Q1MjYwQzYyQzE1QzYzQTBCMzlFMjdDMDhGODY1
QzQ2REE2QjAeFw0yNjEwMTUwODA5MDRaFw0yNjEwMTYxMTI1MDRaMDMxMTAvBgNV
BAMTKDM4RTk4QzA5ODE5RkM2NUMwRjAzQzMyRTgyNTI5RERGRDIxODBFMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYjTTrEXLP5JnauFgvFPwL6EW9
eHApkMz25P2kJLv4iAGTtjL9G/BThA8T3HggsiWg1tLDC7uK166aKCiOpG2+pJp2
hc3BcNFvBMDMKiVTqFmEj9FazI0nXrQxI2YrojrBOH5gEpVkII2dkBrPkIOn65tq
2oxOr+Y9WWPf63YLAINboHOI+grgWH6V5pqhiW/kaixVzbrRQukmTt5g0qjq7gYd
SvXSjSC/Cn8B3b7jc0wcT+OA5RXnik1lMO2j0tH+LsBZU0JVfnuxAQfkeexbKNZm
V1ik59JmGmDFkMaMONX9kWQawRxCsvlD2KNRDyo2jI7rldX6fOC2Ce4U0gbTAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUOOmMCYGfxlwPA8MuglKd39IYDh8wHwYDVR0j
BBgwFoAUJrfVJgxiwVxjoLOeJ8CPhlxG2mswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGo0eFA0Skc3UzVxVHRYRzVnR2VTSkc0WHg1NnFaanJtdU05U29BVHhq
QVAvMS8yNkI3RDUyNjBDNjJDMTVDNjNBMEIzOUUyN0MwOEY4NjVDNDZEQTZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI2QjdENTI2MEM2MkMxNUM2
M0EwQjM5RTI3QzA4Rjg2NUM0NkRBNkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RGo0eFA0Skc3UzVxVHRYRzVnR2VTSkc0WHg1NnFaanJtdU05U29BVHhqQVAvMS8y
NkI3RDUyNjBDNjJDMTVDNjNBMEIzOUUyN0MwOEY4NjVDNDZEQTZCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHlDbnsnMfT7WIyaznlRnfKNLnYgfGDT3EgRp67MPecQzQgahONg61WrSgmHD
2g9NoMukz4Yi7P3OktYgFQz4K+pkARA77cxl1QFFHo+VmRBS/aMfQD2Qw1Gn5nqr
I46zF3FOUiyGjRy6jPZvqfDeklJPrEHTTkwItKQNVSW0hrnkgZMYjKm/oflHWab+
uWhbkWDCiDLg7A+HDRsvdKUIxDcTbfOgoFTHq/tR6O8ENOH7kgkzEE5Wrb8AYpkZ
e6sSnQ0Nm4EfNrXzsAuzbzKBKRHt/X+uxIcBtWW6dqjpCBDyrDcm3DSmPAueULec
4xuuHrZZgg+rQlY+QEjEKPv7kw==
-----END CERTIFICATE-----
Generated at Fri Oct 16 00:04:58 2026 by rpki-client