Error: rpki-repo.registro.br/repo/FqYrcWJv1W6ob3UY3JtoYUzSLHi9kNmB4rSKv7WgqZVG/1/6C7679787D87682B47C417682C4086A5AC940329.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/FqYrcWJv1W6ob3UY3JtoYUzSLHi9kNmB4rSKv7WgqZVG/1/6C7679787D87682B47C417682C4086A5AC940329.mft
File:                     6C7679787D87682B47C417682C4086A5AC940329.mft (raw, json)
Hash identifier:          SC10X1TtStg6TxegHH3OSdNS/Gbr0qpCVNRO8G16zZ8=
Subject key identifier:   52:82:92:77:2B:33:0D:B6:10:17:72:73:29:CD:66:42:75:1C:DB:F3
Authority key identifier: 6C:76:79:78:7D:87:68:2B:47:C4:17:68:2C:40:86:A5:AC:94:03:29
Certificate issuer:       /CN=6C7679787D87682B47C417682C4086A5AC940329
Certificate serial:       1E5B88CBA9341F486ABB5CBFAED2C066ED0E00F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C7679787D87682B47C417682C4086A5AC940329.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FqYrcWJv1W6ob3UY3JtoYUzSLHi9kNmB4rSKv7WgqZVG/1/6C7679787D87682B47C417682C4086A5AC940329.mft
Manifest number:          04E8
Signing time:             Sun 01 Nov 2026 22:55:50 +0000
Manifest this update:     Sun 01 Nov 2026 22:50:50 +0000
Manifest next update:     Tue 03 Nov 2026 00:32:50 +0000
Files and hashes:         1: 34352e3233362e31322e302f32322d3332203d3e20323638323139.roa (hash: hcfu8kPgJFgIM0ymgwUGS8aS9Y3OrWOMZPTsbai51bI=)
                          2: 6C7679787D87682B47C417682C4086A5AC940329.crl (hash: NvpcOFNo7AxGBt0mWA0sfk6AFM/VX9giAOlZSxVYJ4Y=)
                          3: 323830343a346463383a3a2f33322d313238203d3e20323638323139.roa (hash: jjJ478wTU7m63j5s/is1PLYovZllviXuNMeDinrEd+k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FqYrcWJv1W6ob3UY3JtoYUzSLHi9kNmB4rSKv7WgqZVG/1/6C7679787D87682B47C417682C4086A5AC940329.crl
                          rsync://rpki-repo.registro.br/repo/FqYrcWJv1W6ob3UY3JtoYUzSLHi9kNmB4rSKv7WgqZVG/1/6C7679787D87682B47C417682C4086A5AC940329.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C7679787D87682B47C417682C4086A5AC940329.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 00:32:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:5b:88:cb:a9:34:1f:48:6a:bb:5c:bf:ae:d2:c0:66:ed:0e:00:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C7679787D87682B47C417682C4086A5AC940329
        Validity
            Not Before: Nov  1 22:50:50 2026 GMT
            Not After : Nov  3 00:32:50 2026 GMT
        Subject: CN=528292772B330DB61017727329CD6642751CDBF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f3:ec:85:40:7e:3c:19:04:f4:fc:89:78:e2:
                    62:e1:11:a4:06:c1:79:36:1f:84:36:bd:92:90:5b:
                    59:69:00:58:5e:13:6c:00:64:20:33:34:d1:9a:8c:
                    c9:5b:c9:dc:76:e6:d3:3b:68:1f:07:0c:41:96:4b:
                    09:74:13:99:42:29:8a:a4:e0:94:fb:d1:81:aa:ce:
                    b7:d5:f7:23:02:42:6b:4c:25:4a:89:fa:8f:2f:43:
                    e2:e3:22:ac:be:fc:eb:20:c1:0f:1f:ca:14:e1:ee:
                    4d:72:cd:00:20:23:17:bf:57:87:61:bd:92:aa:fb:
                    2c:75:1c:f5:8c:6b:40:fa:4c:07:f0:a6:fe:5d:dd:
                    95:fa:a3:11:ff:8a:d0:44:d3:3a:4f:31:81:17:d4:
                    5e:d4:67:81:00:ff:d7:f7:76:83:db:a4:84:b8:2e:
                    65:76:69:6a:f3:4e:37:5e:5d:ec:69:00:2c:f1:ba:
                    3c:1f:60:67:7e:70:8e:ac:1a:60:63:47:03:ce:40:
                    ee:4b:0a:b4:4c:cf:15:c1:88:bc:f4:c9:a4:c5:6d:
                    fa:3f:ec:76:67:89:63:6d:ca:f0:1d:b9:6b:03:9b:
                    fa:d1:63:4f:9a:13:78:e5:a3:45:f7:25:f5:ca:b2:
                    27:fb:28:c9:87:a6:62:c0:7c:e5:f6:3f:c0:92:be:
                    ec:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:82:92:77:2B:33:0D:B6:10:17:72:73:29:CD:66:42:75:1C:DB:F3
            X509v3 Authority Key Identifier:
                keyid:6C:76:79:78:7D:87:68:2B:47:C4:17:68:2C:40:86:A5:AC:94:03:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FqYrcWJv1W6ob3UY3JtoYUzSLHi9kNmB4rSKv7WgqZVG/1/6C7679787D87682B47C417682C4086A5AC940329.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C7679787D87682B47C417682C4086A5AC940329.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FqYrcWJv1W6ob3UY3JtoYUzSLHi9kNmB4rSKv7WgqZVG/1/6C7679787D87682B47C417682C4086A5AC940329.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:b2:af:83:10:c7:08:2f:76:ff:ed:0a:0d:a1:15:95:d7:c9:
         a7:5e:75:fe:84:8d:ff:53:a3:8f:03:59:8c:65:22:e0:d4:e4:
         fc:09:0d:e3:eb:67:49:59:d3:0b:ff:fe:29:b2:78:be:cf:ae:
         91:83:18:cf:0f:4f:b4:2a:4f:8b:31:c0:bb:09:03:93:d9:b9:
         c4:0b:a3:ee:a8:2c:49:cc:8f:c2:f4:56:24:02:49:e5:f6:a7:
         5d:c1:64:85:6b:9e:ea:1e:7c:84:68:1a:a6:cc:5d:27:0a:cf:
         15:4a:bc:e4:23:3b:95:0c:03:3c:e7:ca:d5:53:19:91:70:fd:
         0e:65:c1:2e:c6:ca:2d:be:da:80:52:9a:f4:af:81:35:84:b9:
         b7:4a:02:b0:28:f6:77:74:ac:9c:3a:f8:c1:fb:bd:84:55:85:
         ae:8e:b7:a4:c0:7f:a9:64:bd:bb:cd:4c:aa:ab:54:88:bc:e4:
         48:7b:fc:47:d6:1d:14:83:43:9c:a4:7f:cf:c8:38:26:df:cd:
         47:18:7a:e7:b8:f2:9d:1f:c2:11:f2:71:86:69:69:f9:95:70:
         d4:6d:72:27:32:8b:6a:12:95:f1:4d:7e:fb:6a:bb:d8:a5:ff:
         b4:e1:4b:18:08:67:74:9d:2f:bb:79:4d:ce:dd:b6:2b:a3:39:
         8d:86:0b:8e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUHluIy6k0H0hqu1y/rtLAZu0OAPMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkM3Njc5Nzg3RDg3NjgyQjQ3QzQxNzY4MkM0MDg2QTVB
Qzk0MDMyOTAeFw0yNjExMDEyMjUwNTBaFw0yNjExMDMwMDMyNTBaMDMxMTAvBgNV
BAMTKDUyODI5Mjc3MkIzMzBEQjYxMDE3NzI3MzI5Q0Q2NjQyNzUxQ0RCRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/8+yFQH48GQT0/Il44mLhEaQG
wXk2H4Q2vZKQW1lpAFheE2wAZCAzNNGajMlbydx25tM7aB8HDEGWSwl0E5lCKYqk
4JT70YGqzrfV9yMCQmtMJUqJ+o8vQ+LjIqy+/OsgwQ8fyhTh7k1yzQAgIxe/V4dh
vZKq+yx1HPWMa0D6TAfwpv5d3ZX6oxH/itBE0zpPMYEX1F7UZ4EA/9f3doPbpIS4
LmV2aWrzTjdeXexpACzxujwfYGd+cI6sGmBjRwPOQO5LCrRMzxXBiLz0yaTFbfo/
7HZniWNtyvAduWsDm/rRY0+aE3jlo0X3JfXKsif7KMmHpmLAfOX2P8CSvuyDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUUoKSdyszDbYQF3JzKc1mQnUc2/MwHwYDVR0j
BBgwFoAUbHZ5eH2HaCtHxBdoLECGpayUAykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnFZcmNXSnYxVzZvYjNVWTNKdG9ZVXpTTEhpOWtObUI0clNLdjdXZ3Fa
VkcvMS82Qzc2Nzk3ODdEODc2ODJCNDdDNDE3NjgyQzQwODZBNUFDOTQwMzI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZDNzY3OTc4N0Q4NzY4MkI0
N0M0MTc2ODJDNDA4NkE1QUM5NDAzMjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RnFZcmNXSnYxVzZvYjNVWTNKdG9ZVXpTTEhpOWtObUI0clNLdjdXZ3FaVkcvMS82
Qzc2Nzk3ODdEODc2ODJCNDdDNDE3NjgyQzQwODZBNUFDOTQwMzI5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtrKvgxDHCC92/+0KDaEVldfJp151/oSN/1OjjwNZjGUi4NTk/AkN4+tnSVnT
C//+KbJ4vs+ukYMYzw9PtCpPizHAuwkDk9m5xAuj7qgsScyPwvRWJAJJ5fanXcFk
hWue6h58hGgapsxdJwrPFUq85CM7lQwDPOfK1VMZkXD9DmXBLsbKLb7agFKa9K+B
NYS5t0oCsCj2d3SsnDr4wfu9hFWFro63pMB/qWS9u81MqqtUiLzkSHv8R9YdFIND
nKR/z8g4Jt/NRxh657jynR/CEfJxhmlp+ZVw1G1yJzKLahKV8U1++2q72KX/tOFL
GAhndJ0vu3lNzt22K6M5jYYLjg==
-----END CERTIFICATE-----
Generated at Mon Nov 2 09:51:02 2026 by rpki-client