Error: rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
File:                     D7F3F67EA800504F23795E22991815F9E686C811.mft (raw, json)
Hash identifier:          pGEcGlX7FVo9JCgYSNefzr/RSgqUXzHb6yLzaUzDohw=
Subject key identifier:   07:7E:2A:51:6D:DB:66:FE:60:E2:06:5B:C5:C2:B8:74:03:BA:32:51
Authority key identifier: D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11
Certificate issuer:       /CN=D7F3F67EA800504F23795E22991815F9E686C811
Certificate serial:       614AC3BD3DB015A1229FBD6E2351283BC3B36904
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
Manifest number:          04CD
Signing time:             Wed 14 Oct 2026 08:40:00 +0000
Manifest this update:     Wed 14 Oct 2026 08:35:00 +0000
Manifest next update:     Thu 15 Oct 2026 11:58:00 +0000
Files and hashes:         1: 3139312e3234332e33362e302f32332d3233203d3e20323633343932.roa (hash: MdX+ghWTHdaghn/+1f289WsoGie1puCHwMvayR6UBbo=)
                          2: D7F3F67EA800504F23795E22991815F9E686C811.crl (hash: 7fggeUbxxVkh2sQujmKWaf87r3Kr8KN+UZzKLtxNFG4=)
                          3: 323830343a313262303a3a2f33322d3332203d3e20323633343932.roa (hash: w6x88Y8F2UoFOh2FhmiIRYRACnZ/8l1VFzDF5p6L8sY=)
                          4: 3139312e3234332e33392e302f32342d3234203d3e20323633343932.roa (hash: dT/OQ0caLNJNzu5vr5CsHKBQnF7R/bkS8yGTDfRmzw0=)
                          5: 3139312e3234332e33362e302f32322d3232203d3e20323633343932.roa (hash: q9bc6giK5SahvFhYN5/MsoRGDnh41j9MifCw7Cd12SM=)
                          6: 3139312e3234332e33382e302f32342d3234203d3e20323633343932.roa (hash: 5MtUrib3S8mt5AG/RoO3Nf7Xe8+aMtCoYcP1KGRKM5M=)
                          7: 3139312e3234332e33362e302f32342d3234203d3e20323633343932.roa (hash: ztuK1y6TzrnBV2BGxQ4WtWxNXu99oTuXmP5v0i65W/U=)
                          8: 3139312e3234332e33372e302f32342d3234203d3e20323633343932.roa (hash: gGjNDilJvHg9VXQ5PJNA0dI2kci5BKyslQM81R+6iSk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl
                          rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 11:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:4a:c3:bd:3d:b0:15:a1:22:9f:bd:6e:23:51:28:3b:c3:b3:69:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7F3F67EA800504F23795E22991815F9E686C811
        Validity
            Not Before: Oct 14 08:35:00 2026 GMT
            Not After : Oct 15 11:58:00 2026 GMT
        Subject: CN=077E2A516DDB66FE60E2065BC5C2B87403BA3251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fe:51:af:6b:b4:3b:3e:8a:f8:75:a0:06:fd:
                    44:71:43:38:17:b4:22:43:cf:8a:2a:ae:d5:8f:7e:
                    e4:cf:19:a7:dc:e1:a8:c4:f4:ce:bb:f4:5a:2d:50:
                    b3:df:32:5c:17:19:55:80:68:a5:e7:82:49:19:00:
                    e2:48:a5:29:ec:de:48:1a:a0:85:81:5d:1c:1d:12:
                    0f:10:10:37:a1:6a:3f:9d:9a:a6:c0:22:dc:a5:dc:
                    1c:dc:4c:a6:a1:e3:1d:44:97:fe:c4:a2:b5:35:4a:
                    20:a6:ad:ab:be:f8:46:5f:f7:50:85:0b:be:3b:79:
                    b4:d8:a7:61:a2:92:8c:ce:88:4d:29:68:ec:e0:fa:
                    e3:a0:64:a7:f3:30:bf:21:fb:cc:9f:78:1c:d5:f6:
                    9d:a0:ad:be:a6:12:10:02:5f:2b:4b:c6:a2:b9:03:
                    8f:6f:74:e8:20:17:1e:78:d0:a8:90:4e:27:2a:91:
                    d9:7f:93:b0:02:bd:1d:1b:14:72:bf:f0:d4:40:ef:
                    5f:5d:e8:db:9b:29:2a:a9:aa:a8:52:3b:5f:5a:1b:
                    54:d6:d6:c4:a7:62:5f:f4:96:c6:e7:4b:04:9c:47:
                    42:64:c0:f9:16:36:db:18:4d:9d:ac:af:1e:8f:f5:
                    82:ad:3a:64:c4:4b:24:21:33:65:ee:8d:a1:83:64:
                    45:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:7E:2A:51:6D:DB:66:FE:60:E2:06:5B:C5:C2:B8:74:03:BA:32:51
            X509v3 Authority Key Identifier:
                keyid:D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:da:95:cc:02:6f:17:11:81:8c:7e:46:ce:dd:a1:d0:18:da:
         3b:ed:6c:65:4d:1f:da:c4:15:ee:69:50:1c:6a:34:d2:de:cf:
         f9:68:e9:c0:a6:a5:1e:46:ec:3c:c3:43:ee:23:d9:46:4d:fa:
         11:4e:07:8c:67:ca:e9:73:b5:6a:22:f5:c6:44:bb:64:e2:23:
         67:9f:d3:34:cc:63:6c:5c:d9:3f:0d:bb:48:a9:d5:07:cc:8e:
         5f:d5:38:2f:40:37:ea:34:2e:9a:d4:60:6a:00:71:ec:b4:8a:
         70:79:e9:c2:f2:40:eb:a0:36:4b:27:39:58:c4:40:33:74:cd:
         5b:6c:45:f2:57:bd:c8:ed:95:cf:82:33:e2:7c:e3:9f:e3:4d:
         f7:e2:6f:00:13:90:f4:d0:e5:54:05:c4:12:af:4a:c2:d4:36:
         fc:14:a7:19:eb:e8:f8:07:ac:d0:c0:cf:5f:46:ac:bb:fe:9b:
         d0:76:84:af:5a:08:21:81:ac:82:95:32:98:81:24:75:b0:fa:
         10:63:2c:e7:63:a4:a7:78:7f:cb:92:b0:f4:12:f5:46:f1:d1:
         3d:78:a3:91:84:fc:68:9f:f6:f5:cd:a8:56:da:38:08:7e:ea:
         0a:85:92:54:54:5c:e4:cc:68:88:ea:7b:02:02:b4:5f:53:f3:
         2f:86:36:76
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYUrDvT2wFaEin71uI1EoO8OzaQQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdGM0Y2N0VBODAwNTA0RjIzNzk1RTIyOTkxODE1RjlF
Njg2QzgxMTAeFw0yNjEwMTQwODM1MDBaFw0yNjEwMTUxMTU4MDBaMDMxMTAvBgNV
BAMTKDA3N0UyQTUxNkREQjY2RkU2MEUyMDY1QkM1QzJCODc0MDNCQTMyNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj/lGva7Q7Por4daAG/URxQzgX
tCJDz4oqrtWPfuTPGafc4ajE9M679FotULPfMlwXGVWAaKXngkkZAOJIpSns3kga
oIWBXRwdEg8QEDehaj+dmqbAItyl3BzcTKah4x1El/7EorU1SiCmrau++EZf91CF
C747ebTYp2GikozOiE0paOzg+uOgZKfzML8h+8yfeBzV9p2grb6mEhACXytLxqK5
A49vdOggFx540KiQTicqkdl/k7ACvR0bFHK/8NRA719d6NubKSqpqqhSO19aG1TW
1sSnYl/0lsbnSwScR0JkwPkWNtsYTZ2srx6P9YKtOmTESyQhM2XujaGDZEXnAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUB34qUW3bZv5g4gZbxcK4dAO6MlEwHwYDVR0j
BBgwFoAU1/P2fqgAUE8jeV4imRgV+eaGyBEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRk1mUG9rVHJ0OUVmRzFVbWlaNUFRM2t2eW15NUF4dHRzbkRpTmlOaHdx
dWUvMS9EN0YzRjY3RUE4MDA1MDRGMjM3OTVFMjI5OTE4MTVGOUU2ODZDODExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3RjNGNjdFQTgwMDUwNEYy
Mzc5NUUyMjk5MTgxNUY5RTY4NkM4MTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Rk1mUG9rVHJ0OUVmRzFVbWlaNUFRM2t2eW15NUF4dHRzbkRpTmlOaHdxdWUvMS9E
N0YzRjY3RUE4MDA1MDRGMjM3OTVFMjI5OTE4MTVGOUU2ODZDODExLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAutqVzAJvFxGBjH5Gzt2h0BjaO+1sZU0f2sQV7mlQHGo00t7P+WjpwKalHkbs
PMND7iPZRk36EU4HjGfK6XO1aiL1xkS7ZOIjZ5/TNMxjbFzZPw27SKnVB8yOX9U4
L0A36jQumtRgagBx7LSKcHnpwvJA66A2Syc5WMRAM3TNW2xF8le9yO2Vz4Iz4nzj
n+NN9+JvABOQ9NDlVAXEEq9KwtQ2/BSnGevo+Aes0MDPX0asu/6b0HaEr1oIIYGs
gpUymIEkdbD6EGMs52Okp3h/y5Kw9BL1RvHRPXijkYT8aJ/29c2oVto4CH7qCoWS
VFRc5MxoiOp7AgK0X1PzL4Y2dg==
-----END CERTIFICATE-----
Generated at Wed Oct 14 21:02:34 2026 by rpki-client