Error: rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.mft
File:                     810076D4984418ED05F03F761B6CBE5D6F00DC86.mft (raw, json)
Hash identifier:          7jdA44o/Lao+ulgkLYfWjkaNzYjI3Z4uIToNiM9nbX8=
Subject key identifier:   1E:6D:D3:DF:61:4D:50:23:05:C1:32:A2:79:9A:F6:9C:52:7F:C3:AE
Authority key identifier: 81:00:76:D4:98:44:18:ED:05:F0:3F:76:1B:6C:BE:5D:6F:00:DC:86
Certificate issuer:       /CN=810076D4984418ED05F03F761B6CBE5D6F00DC86
Certificate serial:       4220611EBDDAF096E581FDB786C68BFD5B4F2530
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.mft
Manifest number:          04C7
Signing time:             Sat 10 Oct 2026 22:25:02 +0000
Manifest this update:     Sat 10 Oct 2026 22:20:02 +0000
Manifest next update:     Mon 12 Oct 2026 01:14:02 +0000
Files and hashes:         1: 323830343a376662383a3a2f33322d3438203d3e20323731373035.roa (hash: VyymUYxLBuq4LNhc03tc5cATTlqQ2WLMAR2Y4LwkkmU=)
                          2: 3137372e32312e3135362e302f32322d3234203d3e20323731373035.roa (hash: rbZYOfJRddAk9LwnFp4nOdPQwEySvJEo6840fEgXSI8=)
                          3: 810076D4984418ED05F03F761B6CBE5D6F00DC86.crl (hash: +poLrbV8jswwEY7TpRiB1/gecaaairJdIhTBF+0V0LA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.crl
                          rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 00:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:20:61:1e:bd:da:f0:96:e5:81:fd:b7:86:c6:8b:fd:5b:4f:25:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=810076D4984418ED05F03F761B6CBE5D6F00DC86
        Validity
            Not Before: Oct 10 22:20:02 2026 GMT
            Not After : Oct 12 01:14:02 2026 GMT
        Subject: CN=1E6DD3DF614D502305C132A2799AF69C527FC3AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:39:36:e3:0e:03:61:d2:a0:a9:35:80:31:76:
                    0e:59:37:4d:3f:6f:14:c6:3a:1b:87:aa:51:55:55:
                    47:f4:ba:fd:ca:34:30:0a:4c:06:6f:7e:02:d3:31:
                    6b:59:52:55:12:13:94:90:8e:6f:4b:ad:ee:5f:20:
                    2b:1c:1f:55:6a:91:5f:fc:79:ae:ce:1f:0a:77:1e:
                    9c:7f:69:90:b0:0b:70:d1:9a:60:16:81:51:23:51:
                    e6:16:56:27:78:93:d7:29:a1:18:b7:0e:98:63:da:
                    5d:21:fd:92:df:c4:57:e4:94:8f:39:22:a9:8d:d5:
                    79:32:b1:97:af:82:5e:6d:9b:9f:40:14:d9:66:cf:
                    02:f6:07:09:63:6c:a6:33:e8:b1:e4:5c:55:c9:96:
                    61:91:19:ff:ab:4d:3b:1e:cf:44:28:46:f6:26:56:
                    1b:6a:4f:a6:a4:9d:9b:a8:93:a2:3c:b4:91:9e:ed:
                    f9:ad:08:17:15:b4:1b:d1:c7:6c:5d:64:77:a0:ce:
                    59:eb:61:3f:7a:fa:71:4a:e7:0d:73:a8:9c:0a:ea:
                    d6:c5:a7:13:1f:ce:5f:93:87:00:ce:a5:ab:a0:03:
                    7d:af:33:e2:13:b6:99:e3:a5:32:53:09:8a:3a:cc:
                    49:28:d7:1c:71:fa:8f:75:c5:63:d7:06:b0:81:99:
                    27:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:6D:D3:DF:61:4D:50:23:05:C1:32:A2:79:9A:F6:9C:52:7F:C3:AE
            X509v3 Authority Key Identifier:
                keyid:81:00:76:D4:98:44:18:ED:05:F0:3F:76:1B:6C:BE:5D:6F:00:DC:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:09:c3:12:1f:6f:20:66:7b:ff:80:65:88:a6:73:f8:91:62:
         c7:1a:5c:53:4a:09:ea:b1:d1:c8:bc:ef:40:84:da:52:e7:24:
         2c:89:c1:78:86:45:e3:ae:90:38:a9:cb:45:fb:f2:69:f7:ec:
         2b:f6:ec:d0:cb:ef:ea:2a:0f:c2:c7:ca:f9:c0:b7:3f:98:de:
         25:d2:7a:09:21:53:16:5e:cd:44:5d:aa:55:45:3f:ae:d5:44:
         84:f7:75:42:54:10:6e:c0:f6:69:69:ca:c5:29:75:c1:f9:45:
         fa:5c:5e:46:5a:1d:a9:c2:e1:48:af:68:0e:aa:e5:2c:59:ea:
         af:4f:84:03:ba:ba:82:6f:a5:ad:ec:90:ad:34:05:dd:b0:57:
         be:b5:81:11:c8:46:46:66:7d:e3:8c:63:1f:6b:4e:c5:c0:43:
         46:8b:4e:03:15:1e:e4:98:8b:db:46:39:7f:87:bd:13:b4:77:
         86:fa:3d:dc:41:81:d5:66:a2:f7:2a:3b:b2:04:42:11:60:68:
         98:53:b6:39:00:ad:91:65:02:20:ab:3c:69:1a:0b:24:31:32:
         0e:e8:e6:54:f7:9c:7e:24:e7:20:c3:3e:05:cc:5f:c9:e1:19:
         cb:d9:34:35:80:b9:51:f6:71:09:1b:1a:cb:d8:ad:97:5c:3a:
         5c:6b:71:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:21:54 2026 by rpki-client