Error: rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft
File:                     8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft (raw, json)
Hash identifier:          Ga6yZxfqK5A/1PdnxRBQTkMLk6n8byW1cMxMbe1SVNw=
Subject key identifier:   77:86:7C:6B:88:52:15:FB:F8:06:55:43:90:92:F9:88:17:18:6C:44
Authority key identifier: 8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05
Certificate issuer:       /CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505
Certificate serial:       36467422E5F1CFB016CC4D27341BCAE66681BD88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft
Manifest number:          04EC
Signing time:             Mon 02 Nov 2026 04:29:35 +0000
Manifest this update:     Mon 02 Nov 2026 04:24:35 +0000
Manifest next update:     Tue 03 Nov 2026 07:21:35 +0000
Files and hashes:         1: 3230302e3138372e3130322e302f32342d3234203d3e20323730363833.roa (hash: XMLyq2dAbGIyZ6lZ4SeWxD+qV8Qs9N/LKDkGubMOGNs=)
                          2: 3230302e3138372e3130322e302f32332d3233203d3e20323730363833.roa (hash: wAvaywQnjwFJ95f/TexWU+SA7aoRJUr2oFNuLMihWr4=)
                          3: 3230302e3138372e3130332e302f32342d3234203d3e20323730363833.roa (hash: 1cqNO15N6eNaEXlcpCnSfHKJEutcsSDYzbNoRtaMQuM=)
                          4: 3230302e3138372e3130302e302f32342d3234203d3e20323730363833.roa (hash: Q6/yWisOchn6EFM7vBp4N6LLHz/4HDyS0TxSqPP65E4=)
                          5: 3230302e3138372e3130302e302f32332d3233203d3e20323730363833.roa (hash: 8vy6ldD4k7NncOwKDI71u4sQAWBsEKwD+qUNTAS/wHo=)
                          6: 3230302e3138372e3130312e302f32342d3234203d3e20323730363833.roa (hash: VIC/HBtHMm4xzqjiv7mqBktq0HTJjjn38udMhY5LxS4=)
                          7: 3230302e3138372e3130302e302f32322d3232203d3e20323730363833.roa (hash: Oe3c8DVwNNzmUdFxPaemoHcvV71iS0a7xXZt2MQnUtc=)
                          8: 323830343a366663343a3a2f33322d3438203d3e20323730363833.roa (hash: T7iXjjixdspp5/mdttkjf+mUdvzxGKFuGGMLWC6cxoo=)
                          9: 8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl (hash: 8PdtBf54vQqDC4SR7dOpX30XdjZ0R0K2gfgcTkLQb7U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl
                          rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 07:21:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:46:74:22:e5:f1:cf:b0:16:cc:4d:27:34:1b:ca:e6:66:81:bd:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505
        Validity
            Not Before: Nov  2 04:24:35 2026 GMT
            Not After : Nov  3 07:21:35 2026 GMT
        Subject: CN=77867C6B885215FBF80655439092F98817186C44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:28:58:17:ba:94:fa:19:92:c3:4a:d5:4f:62:
                    68:cd:ee:59:3b:57:f5:91:12:89:2d:48:99:a9:af:
                    92:e9:eb:93:ed:c7:58:8d:d2:0a:35:28:5d:8e:11:
                    1e:70:d5:f3:de:5f:65:81:4f:a1:87:04:5c:03:bd:
                    6f:1d:10:1c:b3:c4:8d:e3:e5:21:6a:27:86:a7:a3:
                    41:d2:8d:f1:e3:d7:2c:43:c4:78:cb:26:12:39:0d:
                    d9:46:78:9b:e4:9d:fe:dc:24:fd:77:a8:1f:57:5d:
                    4d:5e:2d:80:dd:aa:d4:0c:4e:68:bf:12:5e:ff:c0:
                    45:8d:0d:7b:a0:e2:42:46:01:41:61:e6:fa:45:f7:
                    7d:f2:67:e3:5b:fb:5f:b6:1c:0f:13:8b:c9:de:19:
                    8a:96:88:4d:d2:ee:0c:7a:c8:de:b4:91:7c:f2:0f:
                    53:20:10:08:4a:90:22:76:6d:d3:8c:e9:6f:2d:71:
                    3a:31:69:7a:1f:a4:6d:37:33:30:3c:c2:e8:71:31:
                    04:f3:68:d9:3a:0a:a0:bb:6a:29:6b:52:d6:40:95:
                    f1:13:b5:7e:e2:0c:13:45:91:5b:a2:65:7e:4b:9a:
                    3b:af:b3:bf:16:21:20:62:a1:9a:4b:64:b1:4b:b7:
                    67:f2:17:ab:2f:1b:a5:d8:63:92:a9:82:08:e1:34:
                    c4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:86:7C:6B:88:52:15:FB:F8:06:55:43:90:92:F9:88:17:18:6C:44
            X509v3 Authority Key Identifier:
                keyid:8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:67:e2:76:17:a5:58:c0:d3:de:dd:ab:a1:48:3a:6d:69:77:
         90:16:0b:7b:00:dc:45:92:df:87:bd:05:5c:1d:2e:4e:6b:d2:
         0c:81:2a:77:55:d5:44:b8:0e:e0:7f:77:9f:4d:04:d4:8b:2f:
         42:64:25:a5:a0:58:f5:fa:5c:54:c7:87:08:6f:71:af:bb:89:
         44:64:57:b8:5a:30:24:24:d8:50:e4:fa:85:3b:35:17:0b:10:
         ef:00:ca:d8:02:96:12:ab:6f:76:7c:37:7e:67:c6:96:da:ff:
         86:3f:8d:66:db:9c:14:86:3f:4c:88:0f:1f:f9:c6:1a:0a:c4:
         e3:c5:ad:e6:59:de:be:97:12:36:e2:37:6b:18:32:aa:d8:9c:
         d3:19:00:d0:92:7e:75:af:b7:3e:5e:14:81:1e:c8:d2:f2:5f:
         6a:8b:16:0d:15:85:b2:a1:74:9e:25:a0:03:d3:5c:08:f0:ce:
         69:2b:e0:c9:f8:d2:4b:43:ad:20:19:9e:f2:b4:47:14:36:c2:
         2f:0a:42:45:52:6f:57:0d:3c:77:e7:42:a4:94:1e:0f:24:d2:
         be:00:d4:8d:90:87:0b:ce:37:06:a6:96:e6:ed:cb:8d:ab:0c:
         55:27:56:fa:4d:9b:ed:41:cb:ab:13:e4:da:1d:3a:8a:fa:5b:
         da:28:16:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 07:36:21 2026 by rpki-client