Error: rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft
File:                     F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft (raw, json)
Hash identifier:          UebSMW0NU3cJOXtmaZHbsexmiK7o+ajiZ57F+QH1vbU=
Subject key identifier:   C5:F3:85:CC:8E:85:4C:B2:96:7C:EA:68:A4:77:A2:8D:32:D3:ED:3A
Authority key identifier: F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C
Certificate issuer:       /CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
Certificate serial:       02859A1457258F4C8654142637A386C02D1A2FBA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft
Manifest number:          04E2
Signing time:             Wed 28 Oct 2026 07:20:00 +0000
Manifest this update:     Wed 28 Oct 2026 07:15:00 +0000
Manifest next update:     Thu 29 Oct 2026 08:16:00 +0000
Files and hashes:         1: 323830343a346633383a3a2f33322d3332203d3e20323638333132.roa (hash: T0Qf0he0SYVvTvjV370TqIwbc6SDf9zX4gvBac0AK9s=)
                          2: 34352e3233382e34342e302f32322d3234203d3e20323638333132.roa (hash: IxMrlJRkC8v2eylM6QsE0ye8sdZaJsWBQVuLVfRChqI=)
                          3: 34352e3233382e34362e302f32332d3233203d3e20323638333132.roa (hash: A75zmI/ex04b104tCPbJGkdoEO9oc+eRvHmtvkt/s1s=)
                          4: 34352e3233382e34342e302f32322d3232203d3e20323638333132.roa (hash: qlvvK7Eq5/lWUhPKseppGgxaush80fH+JFg/2kEwrkU=)
                          5: F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl (hash: dkYNten6hG8+FVMFJRzEpxfyAtGBykMJ61yYbya1doM=)
                          6: 34352e3233382e34342e302f32332d3233203d3e20323638333132.roa (hash: PU0K7/XMSSbezDxadQezP8Hn/SQTmyf6LQrHDh8Y72A=)
                          7: 34352e3233382e34342e302f32342d3234203d3e20323638333132.roa (hash: p8H/GRkW5V1qWf2jewXlHEMjzNIQZUgqEqSh46nQha8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl
                          rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 08:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:85:9a:14:57:25:8f:4c:86:54:14:26:37:a3:86:c0:2d:1a:2f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
        Validity
            Not Before: Oct 28 07:15:00 2026 GMT
            Not After : Oct 29 08:16:00 2026 GMT
        Subject: CN=C5F385CC8E854CB2967CEA68A477A28D32D3ED3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:97:31:65:cf:ae:1c:b4:67:a7:ce:09:26:58:
                    fe:52:28:5b:f0:ab:f8:5a:c8:c8:9f:05:47:86:04:
                    1d:a8:da:4c:33:40:e5:5e:a7:a1:58:11:59:8e:3a:
                    41:6a:0c:de:81:90:e2:a5:84:26:e1:0d:e5:3c:13:
                    bc:24:d7:1b:bf:92:13:3a:48:39:ab:d1:8d:cd:2e:
                    94:a4:aa:51:9d:ba:17:62:ae:93:8b:d9:4f:a6:f0:
                    5b:11:ee:14:07:36:23:a0:ca:82:d8:65:57:ec:e7:
                    8d:90:ac:ad:c2:e6:b6:22:52:f7:5b:5c:e5:d0:07:
                    1c:a6:bb:f4:2a:06:69:44:d8:25:3f:f2:09:3a:2c:
                    e1:19:ca:2a:c3:48:16:8f:41:35:1f:3e:50:a6:cf:
                    ab:0d:80:d4:e4:a2:f2:d5:cc:a7:8c:d9:1e:9a:ad:
                    08:31:69:66:30:90:7e:4e:1a:f5:76:c4:76:ed:eb:
                    49:e3:05:2e:62:d0:07:bd:7a:06:6e:62:d3:0a:2b:
                    6c:97:33:ef:14:92:0c:bf:11:65:e7:4a:3c:19:d3:
                    6b:1b:8e:d6:87:db:b2:81:09:ba:e1:e7:15:88:ee:
                    f2:73:d8:78:a2:e2:15:c5:97:2a:4d:a5:f7:20:3b:
                    3f:90:e7:41:19:da:a1:55:20:f2:2b:f6:98:d0:83:
                    ad:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F3:85:CC:8E:85:4C:B2:96:7C:EA:68:A4:77:A2:8D:32:D3:ED:3A
            X509v3 Authority Key Identifier:
                keyid:F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:22:8b:7e:22:07:77:c9:11:7c:d0:2f:9e:c5:b7:7e:2d:2b:
         fd:75:5a:93:ce:46:d8:cf:c0:04:18:0a:be:50:20:25:c1:b1:
         81:89:96:b5:b0:bb:57:01:08:92:2a:1f:74:ff:27:b1:cb:3c:
         fa:09:d0:1e:00:41:02:f4:3c:d3:bd:62:5c:9b:bf:19:58:b9:
         b2:cf:26:78:8c:f1:0b:58:bb:14:84:15:b4:ba:dd:57:70:ee:
         40:e1:bf:fa:a8:0a:af:7d:2c:09:41:e0:81:19:95:86:52:10:
         3f:42:c7:5c:18:11:fd:1f:6b:71:2c:5b:19:a8:b2:29:46:9e:
         10:c8:b2:8a:89:d6:92:a0:8f:43:99:c9:59:7e:8e:7d:0f:5c:
         e3:b0:d6:05:0e:9e:bc:8e:4c:0a:bc:c9:4b:d5:8a:15:8a:c6:
         ab:ed:fe:a2:4c:30:3b:2f:9d:18:17:23:4d:e2:75:a8:55:eb:
         3d:50:4a:ae:cc:d0:ec:cf:4e:d5:17:dd:87:60:87:d7:53:d3:
         fd:43:0a:af:b9:5f:30:0f:18:25:ed:d4:65:87:12:b2:47:3e:
         7c:8a:45:83:78:48:d4:40:b2:49:89:ba:85:b5:b0:d3:e1:e9:
         8e:b5:09:a6:70:08:ad:79:d5:96:c8:5e:dc:a5:93:97:25:c7:
         8e:c7:43:7d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUAoWaFFclj0yGVBQmN6OGwC0aL7owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjk3N0NDRjQ0MjhBNDU2ODM3OUVGRjhEQzdGOUYxQTQ1
QzkyRDQwQzAeFw0yNjEwMjgwNzE1MDBaFw0yNjEwMjkwODE2MDBaMDMxMTAvBgNV
BAMTKEM1RjM4NUNDOEU4NTRDQjI5NjdDRUE2OEE0NzdBMjhEMzJEM0VEM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTlzFlz64ctGenzgkmWP5SKFvw
q/hayMifBUeGBB2o2kwzQOVep6FYEVmOOkFqDN6BkOKlhCbhDeU8E7wk1xu/khM6
SDmr0Y3NLpSkqlGduhdirpOL2U+m8FsR7hQHNiOgyoLYZVfs542QrK3C5rYiUvdb
XOXQBxymu/QqBmlE2CU/8gk6LOEZyirDSBaPQTUfPlCmz6sNgNTkovLVzKeM2R6a
rQgxaWYwkH5OGvV2xHbt60njBS5i0Ae9egZuYtMKK2yXM+8Ukgy/EWXnSjwZ02sb
jtaH27KBCbrh5xWI7vJz2Hii4hXFlypNpfcgOz+Q50EZ2qFVIPIr9pjQg63vAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUxfOFzI6FTLKWfOpopHeijTLT7TowHwYDVR0j
BBgwFoAU+XfM9EKKRWg3nv+Nx/nxpFyS1AwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1JqMjQ5eGVzbXVMN2lYNkFkQ2VqSmN4ZjY1U21QcXNGMkNBSDhSVlQ1
alAvMS9GOTc3Q0NGNDQyOEE0NTY4Mzc5RUZGOERDN0Y5RjFBNDVDOTJENDBDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5NzdDQ0Y0NDI4QTQ1Njgz
NzlFRkY4REM3RjlGMUE0NUM5MkQ0MEMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M1JqMjQ5eGVzbXVMN2lYNkFkQ2VqSmN4ZjY1U21QcXNGMkNBSDhSVlQ1alAvMS9G
OTc3Q0NGNDQyOEE0NTY4Mzc5RUZGOERDN0Y5RjFBNDVDOTJENDBDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYiKLfiIHd8kRfNAvnsW3fi0r/XVak85G2M/ABBgKvlAgJcGxgYmWtbC7VwEI
kiofdP8nscs8+gnQHgBBAvQ8071iXJu/GVi5ss8meIzxC1i7FIQVtLrdV3DuQOG/
+qgKr30sCUHggRmVhlIQP0LHXBgR/R9rcSxbGaiyKUaeEMiyionWkqCPQ5nJWX6O
fQ9c47DWBQ6evI5MCrzJS9WKFYrGq+3+okwwOy+dGBcjTeJ1qFXrPVBKrszQ7M9O
1Rfdh2CH11PT/UMKr7lfMA8YJe3UZYcSskc+fIpFg3hI1ECySYm6hbWw0+HpjrUJ
pnAIrXnVlshe3KWTlyXHjsdDfQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 14:14:52 2026 by rpki-client