Error: rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.mft
File:                     FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.mft (raw, json)
Hash identifier:          XDE7LetR4DHrvNdnjvu8USSzR3zHEXCkOIsEA714utw=
Subject key identifier:   D6:1A:67:5F:F4:3B:85:4C:C1:74:1D:6B:8C:89:FE:EC:76:E4:29:BF
Authority key identifier: FE:37:39:3A:C5:C8:D2:83:40:27:EE:7B:AE:80:CB:6B:AA:05:1C:AD
Certificate issuer:       /CN=FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD
Certificate serial:       3D58CDBB414012B53DF9880D02E70B8311981922
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.mft
Manifest number:          04CF
Signing time:             Thu 15 Oct 2026 10:50:37 +0000
Manifest this update:     Thu 15 Oct 2026 10:45:37 +0000
Manifest next update:     Fri 16 Oct 2026 11:02:37 +0000
Files and hashes:         1: FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.crl (hash: f+izsK1+HMWlbIm6KmsPnanp+0XQ4CwuIZx3Ye703OY=)
                          2: 323830343a386264383a3a2f33322d313238203d3e20323733373633.roa (hash: LXEaWXWcWiUpACwGRPLQ6lb8i3QatNxytAhakQXdBVk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.crl
                          rsync://rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 11:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:58:cd:bb:41:40:12:b5:3d:f9:88:0d:02:e7:0b:83:11:98:19:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD
        Validity
            Not Before: Oct 15 10:45:37 2026 GMT
            Not After : Oct 16 11:02:37 2026 GMT
        Subject: CN=D61A675FF43B854CC1741D6B8C89FEEC76E429BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e7:a0:1d:ad:7a:2b:37:be:68:00:c5:be:4c:
                    42:3f:50:bb:42:d2:b4:0c:e6:04:fd:ae:b0:e1:39:
                    15:e8:9c:62:e8:ed:f6:06:a9:5d:49:95:8b:7b:95:
                    31:6b:b9:98:c8:ce:39:94:54:07:c8:11:6b:69:8b:
                    59:4d:86:62:4c:63:ea:88:f2:92:a0:af:94:2a:56:
                    00:58:37:43:93:8d:71:ca:90:68:a2:ba:c0:c9:9c:
                    78:57:63:30:7a:b3:82:ed:e0:9e:f7:0a:56:f8:57:
                    d6:4c:1b:56:41:fa:2e:c9:b4:df:26:6b:fc:87:b2:
                    12:67:5a:99:7b:38:d4:18:c7:ee:38:28:7c:58:a4:
                    83:d1:10:b3:d9:cc:8c:c3:4f:a6:a1:b1:95:00:79:
                    00:2c:48:41:22:e6:7b:80:ac:66:a0:d2:4d:ee:a7:
                    43:a7:35:cf:8e:86:aa:9c:c6:f8:ad:e0:62:a5:74:
                    32:1a:85:8d:40:97:33:a2:8f:a8:8b:f7:58:78:54:
                    09:f3:d5:6f:c5:80:58:73:ae:35:19:dc:a2:e6:45:
                    da:95:9a:ff:f6:20:1b:dc:37:05:89:e5:4f:27:33:
                    ed:e3:65:33:e2:26:26:26:29:b6:68:6d:bd:52:cb:
                    e6:10:c7:f0:e4:68:9c:bc:3f:95:13:68:ad:4c:59:
                    87:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:1A:67:5F:F4:3B:85:4C:C1:74:1D:6B:8C:89:FE:EC:76:E4:29:BF
            X509v3 Authority Key Identifier:
                keyid:FE:37:39:3A:C5:C8:D2:83:40:27:EE:7B:AE:80:CB:6B:AA:05:1C:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:1f:72:e0:82:14:ed:75:25:56:9e:ee:ed:15:0f:ca:e3:53:
         48:74:c1:24:5f:f2:20:ec:82:81:39:92:7c:0c:81:74:9b:cf:
         73:ea:3f:78:77:54:81:27:a9:e8:d2:88:a2:32:47:d6:70:69:
         45:d1:63:cc:b8:24:3c:58:aa:7c:c7:0f:74:9f:fb:ff:fc:3b:
         e1:52:01:64:0f:73:c4:fb:e2:b6:9a:3c:c1:df:b7:3d:32:d4:
         a7:35:30:fd:d7:39:b0:7d:93:28:8f:24:18:b6:08:20:a5:31:
         bc:50:b7:18:f4:05:15:11:43:99:cb:b2:7f:09:9c:90:16:43:
         21:7f:ce:66:0d:d2:6e:95:11:4b:26:d7:c4:19:9e:5e:fd:82:
         13:89:d6:ef:c4:17:f3:9a:54:db:a7:49:f2:38:cd:25:70:d3:
         13:00:e8:80:64:91:4e:33:71:1a:75:ea:81:86:8a:8e:fb:35:
         32:9f:a2:46:e7:14:b6:08:81:ae:3c:03:2a:b6:08:3e:ae:5b:
         38:15:7c:db:ba:89:2d:b4:8c:fc:1a:24:55:0e:be:74:5b:81:
         33:28:e8:c2:05:56:f1:a6:bf:b1:50:80:2f:0f:84:a9:92:15:
         50:28:b4:03:f0:06:4d:9f:eb:29:04:da:89:97:c2:ea:27:33:
         6c:e7:2c:73
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUPVjNu0FAErU9+YgNAucLgxGYGSIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkUzNzM5M0FDNUM4RDI4MzQwMjdFRTdCQUU4MENCNkJB
QTA1MUNBRDAeFw0yNjEwMTUxMDQ1MzdaFw0yNjEwMTYxMTAyMzdaMDMxMTAvBgNV
BAMTKEQ2MUE2NzVGRjQzQjg1NENDMTc0MUQ2QjhDODlGRUVDNzZFNDI5QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE56AdrXorN75oAMW+TEI/ULtC
0rQM5gT9rrDhORXonGLo7fYGqV1JlYt7lTFruZjIzjmUVAfIEWtpi1lNhmJMY+qI
8pKgr5QqVgBYN0OTjXHKkGiiusDJnHhXYzB6s4Lt4J73Clb4V9ZMG1ZB+i7JtN8m
a/yHshJnWpl7ONQYx+44KHxYpIPRELPZzIzDT6ahsZUAeQAsSEEi5nuArGag0k3u
p0OnNc+Ohqqcxvit4GKldDIahY1AlzOij6iL91h4VAnz1W/FgFhzrjUZ3KLmRdqV
mv/2IBvcNwWJ5U8nM+3jZTPiJiYmKbZobb1Sy+YQx/DkaJy8P5UTaK1MWYfNAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU1hpnX/Q7hUzBdB1rjIn+7HbkKb8wHwYDVR0j
BBgwFoAU/jc5OsXI0oNAJ+57roDLa6oFHK0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9NcVlXU2Z5R2dKbWMzcEJ0R2NpN2dOcU1ZYlllZTNvajRpZzM3WjhtekN6
LzEvRkUzNzM5M0FDNUM4RDI4MzQwMjdFRTdCQUU4MENCNkJBQTA1MUNBRC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9GRTM3MzkzQUM1QzhEMjgzNDAy
N0VFN0JBRTgwQ0I2QkFBMDUxQ0FELmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL01x
WVdTZnlHZ0ptYzNwQnRHY2k3Z05xTVliWWVlM29qNGlnMzdaOG16Q3ovMS9GRTM3
MzkzQUM1QzhEMjgzNDAyN0VFN0JBRTgwQ0I2QkFBMDUxQ0FELm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
kR9y4IIU7XUlVp7u7RUPyuNTSHTBJF/yIOyCgTmSfAyBdJvPc+o/eHdUgSep6NKI
ojJH1nBpRdFjzLgkPFiqfMcPdJ/7//w74VIBZA9zxPvitpo8wd+3PTLUpzUw/dc5
sH2TKI8kGLYIIKUxvFC3GPQFFRFDmcuyfwmckBZDIX/OZg3SbpURSybXxBmeXv2C
E4nW78QX85pU26dJ8jjNJXDTEwDogGSRTjNxGnXqgYaKjvs1Mp+iRucUtgiBrjwD
KrYIPq5bOBV827qJLbSM/BokVQ6+dFuBMyjowgVW8aa/sVCALw+EqZIVUCi0A/AG
TZ/rKQTaiZfC6iczbOcscw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 18:57:31 2026 by rpki-client