Error: rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.mft
File:                     E4A60880B8D4EC0024322D87A27CBCBDC2192A65.mft (raw, json)
Hash identifier:          X74NwFhRvqyc0yvU+Wn83SndJjKzocjh9HxNo9nQZp8=
Subject key identifier:   75:8B:DD:9B:47:E0:17:FA:4A:C4:56:EE:C1:42:41:53:C0:14:88:00
Authority key identifier: E4:A6:08:80:B8:D4:EC:00:24:32:2D:87:A2:7C:BC:BD:C2:19:2A:65
Certificate issuer:       /CN=E4A60880B8D4EC0024322D87A27CBCBDC2192A65
Certificate serial:       13A2EB6A147B9F800ADB64AAA1A9B2280FBFF4B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.mft
Manifest number:          0440
Signing time:             Tue 13 Oct 2026 03:30:00 +0000
Manifest this update:     Tue 13 Oct 2026 03:25:00 +0000
Manifest next update:     Wed 14 Oct 2026 04:34:00 +0000
Files and hashes:         1: 3230312e3231362e38382e302f32342d3234203d3e20323731373236.roa (hash: ddj46mnb7eTvDVjCdxVf0wbUhaaTDWoBzMZ6G4gSbaQ=)
                          2: 323830343a383030633a383030303a3a2f33332d3333203d3e20323731373236.roa (hash: T+AcJrtRg1VWVZKmk4rV5DX81Mx0tzdGomlRhkCNIK4=)
                          3: 323830343a383030633a3a2f33322d3332203d3e20323731373236.roa (hash: v5huIVzwJf1JBa5qkFeOcVf0xlyfj6P01I9mFi9DYGI=)
                          4: 3230312e3231362e38382e302f32322d3232203d3e20323731373236.roa (hash: jGjxaUj+S3if2/88ZdKhONgpTTEvXHT55cgOsns96IM=)
                          5: 3230312e3231362e39302e302f32342d3234203d3e20323731373236.roa (hash: USkyhYcAFzXRIeH+GkfnM8GAlmwYqFmyCW/4EmF9OGc=)
                          6: 3230312e3231362e39302e302f32332d3233203d3e20323731373236.roa (hash: nSun74JaUBzLI1foR5bTCIbvQTtwU77A41JjDbGbo8c=)
                          7: 3230312e3231362e38392e302f32342d3234203d3e20323731373236.roa (hash: H/7NNhy0uxDVNKm8KPxpg4IMAoW5kOKLJKzK89jJsiA=)
                          8: 3230312e3231362e39312e302f32342d3234203d3e20323731373236.roa (hash: 9zoLuThzGMPsq5VcJwQwBjKJuhRbFtXF0KE0Yy6PkUA=)
                          9: 3230312e3231362e38382e302f32332d3233203d3e20323731373236.roa (hash: Rk0C3nrmxHub3fKIhGoMRif6ygZyYYqNphwWED1cq7Q=)
                          10: E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl (hash: 9aktQZV7pRV1ZaI5covNTZQRMLFBi+gLV7GCGaav9yQ=)
                          11: 323830343a383030633a3a2f33332d3333203d3e20323731373236.roa (hash: 3GQOOR6NlnNQZIuTpw1+gkfOHYB76NTSRM51LUcXPxk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl
                          rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 04:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a2:eb:6a:14:7b:9f:80:0a:db:64:aa:a1:a9:b2:28:0f:bf:f4:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4A60880B8D4EC0024322D87A27CBCBDC2192A65
        Validity
            Not Before: Oct 13 03:25:00 2026 GMT
            Not After : Oct 14 04:34:00 2026 GMT
        Subject: CN=758BDD9B47E017FA4AC456EEC1424153C0148800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:16:4e:31:43:75:d3:8a:98:8c:52:04:d6:19:
                    43:10:a3:02:1d:24:fd:75:98:d8:1b:56:8e:40:1d:
                    7c:16:7b:e5:e1:7a:71:70:97:b3:d3:ec:97:ca:d1:
                    4b:c0:ad:38:8d:37:4e:6a:9c:46:06:fe:62:41:fb:
                    cb:69:c6:00:ac:82:93:09:a1:e3:d5:24:0f:7f:bd:
                    8b:ea:4a:8f:4a:01:49:d1:18:30:6f:9b:3f:ff:68:
                    28:7c:e6:a0:21:01:f1:ac:71:68:7d:6e:e3:ee:45:
                    81:cd:dc:84:04:71:57:27:38:a4:5b:d3:62:20:b1:
                    70:6a:75:60:87:23:81:31:e3:4a:d0:fa:80:53:2c:
                    b2:74:fe:7f:d7:91:5c:84:86:7b:78:15:1b:da:0a:
                    3b:d6:3e:7e:ea:fa:44:7a:39:7b:14:eb:a3:12:1b:
                    8c:d8:4c:22:a3:6c:44:89:52:d5:45:09:e7:6a:59:
                    c4:89:cc:36:c6:bd:dc:8b:76:df:08:7b:41:43:f5:
                    85:98:6e:67:5f:80:1a:20:f2:27:1f:e7:26:5b:6d:
                    40:8e:a3:ac:ae:4b:02:25:25:e6:60:6e:c4:99:c1:
                    d9:14:c9:60:c5:f9:21:27:41:a9:9c:39:3b:6e:4d:
                    ba:ae:ba:9f:b7:9e:bc:e1:63:ca:a3:3e:33:41:dd:
                    b6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:8B:DD:9B:47:E0:17:FA:4A:C4:56:EE:C1:42:41:53:C0:14:88:00
            X509v3 Authority Key Identifier:
                keyid:E4:A6:08:80:B8:D4:EC:00:24:32:2D:87:A2:7C:BC:BD:C2:19:2A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:d8:c8:20:8a:71:f3:b3:83:5f:71:2a:8c:ba:0d:1b:d2:a0:
         a0:c0:ca:c9:d5:a4:35:43:f2:35:92:8f:b1:da:3f:48:3d:bb:
         fa:02:65:7f:0b:ab:27:a6:48:68:13:01:5b:63:35:0c:e6:24:
         72:de:5a:ca:53:18:29:f0:9d:bc:5f:ad:0a:33:06:df:d6:77:
         8b:d4:7b:d3:b2:f7:e0:2f:64:ba:ad:19:05:64:0a:e4:7b:50:
         ae:eb:56:fa:13:32:bb:13:16:7b:e3:2b:e6:ec:d5:a2:26:9a:
         a3:57:56:81:3b:a5:79:5d:3c:02:c9:dc:00:51:bd:4a:f3:77:
         c2:28:29:9e:5f:49:a5:69:78:26:66:e5:54:e2:87:0b:dd:fb:
         15:7d:69:b0:ff:ba:64:35:41:e6:28:dc:ba:f5:5b:23:06:9d:
         3b:b9:18:26:f3:13:06:2a:f4:e2:d2:b8:4a:60:27:9d:35:2e:
         6f:72:6e:8a:26:49:a9:5c:46:f2:2e:61:74:b0:fc:25:16:d7:
         9a:41:22:a6:f6:e3:f5:15:8f:4b:3b:dc:98:c1:ef:ab:64:72:
         ee:01:ae:d8:40:d0:f0:76:00:ed:ef:b2:ca:5b:1b:d2:eb:83:
         a1:2b:ef:ac:e8:55:65:ca:46:cd:e3:5b:26:75:99:a4:f4:3f:
         b0:df:32:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:57:19 2026 by rpki-client