Error: rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.mft
File:                     66DCAA5522EEEC15CC978DE673986E897244B698.mft (raw, json)
Hash identifier:          UGqvSyvDio9pJnIEZHoh1/hOlFXosVTRBbihYqfi2lo=
Subject key identifier:   15:0D:C1:5F:D5:2D:5E:C6:D6:A6:5D:4E:3E:FC:1F:1E:2C:FA:CC:8A
Authority key identifier: 66:DC:AA:55:22:EE:EC:15:CC:97:8D:E6:73:98:6E:89:72:44:B6:98
Certificate issuer:       /CN=66DCAA5522EEEC15CC978DE673986E897244B698
Certificate serial:       18713F7706B13FA4C889DBB3454CD475D0E63661
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66DCAA5522EEEC15CC978DE673986E897244B698.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.mft
Manifest number:          04B7
Signing time:             Mon 02 Nov 2026 09:58:39 +0000
Manifest this update:     Mon 02 Nov 2026 09:53:39 +0000
Manifest next update:     Tue 03 Nov 2026 10:47:39 +0000
Files and hashes:         1: 34352e3233352e302e302f32322d3234203d3e20323637333930.roa (hash: x84RGPPkt0sU6lKdwenGp4sAlumzGUiPtCRVvZsh/S4=)
                          2: 66DCAA5522EEEC15CC978DE673986E897244B698.crl (hash: 9ugaW1x4C84SJe9XwARDVTHuFH+fdEjXNgZ5O8LUKrQ=)
                          3: 323830343a346363343a3a2f33322d3438203d3e20323637333930.roa (hash: I9gHK0OPZNSJDH24XSoutl8irH0yInPQz+/ZuTKvWxY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.crl
                          rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66DCAA5522EEEC15CC978DE673986E897244B698.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 10:47:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:71:3f:77:06:b1:3f:a4:c8:89:db:b3:45:4c:d4:75:d0:e6:36:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66DCAA5522EEEC15CC978DE673986E897244B698
        Validity
            Not Before: Nov  2 09:53:39 2026 GMT
            Not After : Nov  3 10:47:39 2026 GMT
        Subject: CN=150DC15FD52D5EC6D6A65D4E3EFC1F1E2CFACC8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:16:b1:54:d7:cd:9d:3e:75:1a:aa:63:17:cb:
                    96:8e:d1:0d:1b:96:40:dc:0f:8c:3a:66:6e:7e:d4:
                    84:14:d7:ab:3c:c0:56:9b:8d:4a:96:96:36:72:88:
                    35:eb:46:77:61:ec:08:e0:14:3e:92:fc:37:64:a8:
                    98:dd:58:d4:b3:cb:a3:b4:22:98:b2:d8:f8:5d:0c:
                    7a:57:d3:65:c9:16:52:4d:4b:c3:8e:72:cf:5d:0d:
                    22:25:12:99:15:a5:46:6d:90:a6:4a:d4:54:0d:24:
                    64:44:5f:ed:60:5b:a2:f8:91:b7:46:17:d2:41:1b:
                    92:4c:40:61:5c:bd:af:7a:7f:ad:9f:ac:47:30:36:
                    f8:ba:87:b6:88:d0:58:4a:1e:2d:09:f3:87:fa:77:
                    4b:30:68:76:71:81:99:f9:91:bf:6e:3c:93:73:f8:
                    30:4d:43:74:27:91:06:98:19:02:bd:e0:23:69:ae:
                    76:29:d2:8f:af:d1:57:8d:64:4b:6d:38:33:98:9e:
                    29:05:dd:7b:74:cb:42:7f:ea:e7:70:02:97:f3:91:
                    c7:1f:56:75:20:cb:86:57:b4:38:93:0d:30:2b:36:
                    c0:e6:56:4a:d8:a1:49:14:a7:b0:21:7c:a5:f4:73:
                    c2:7d:ee:f3:9c:10:73:06:2e:c7:f9:c4:70:9e:cc:
                    4e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0D:C1:5F:D5:2D:5E:C6:D6:A6:5D:4E:3E:FC:1F:1E:2C:FA:CC:8A
            X509v3 Authority Key Identifier:
                keyid:66:DC:AA:55:22:EE:EC:15:CC:97:8D:E6:73:98:6E:89:72:44:B6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66DCAA5522EEEC15CC978DE673986E897244B698.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:af:9e:ad:1d:2e:7a:71:e8:af:79:0d:45:76:bc:bd:05:1f:
         bb:8f:2f:df:cf:11:89:47:a4:b4:65:b8:9b:63:51:2e:4b:41:
         2c:73:57:c8:52:28:4a:fb:af:4f:64:f6:49:c8:f6:76:e9:31:
         f7:e8:9c:83:6b:b7:00:88:2b:32:21:3f:a9:90:78:8d:be:2c:
         26:a8:0e:c7:a3:e7:6b:d6:41:d0:a8:c6:0d:16:3b:f5:f1:01:
         81:6e:5e:1f:1d:6a:80:5a:fe:30:57:33:81:03:e0:9e:c0:90:
         77:22:16:6c:0f:52:2b:84:b1:97:cc:b8:d8:a1:90:21:c0:a5:
         03:3a:ce:8f:74:24:38:62:e6:d5:4d:af:b2:53:c1:31:aa:27:
         80:2c:01:95:cc:a7:7c:54:1a:77:ed:b6:ad:50:49:21:32:94:
         b7:88:9e:bf:d1:cf:72:9d:1b:ea:c9:c1:9b:1a:86:b2:d7:79:
         60:74:9a:b9:27:06:32:ec:27:08:d2:80:f9:d9:65:af:c0:03:
         26:5a:13:50:16:cb:5f:b5:06:2f:8d:f0:4c:06:3d:c1:e7:45:
         72:d8:14:eb:ab:1e:66:ae:9d:55:13:01:7c:14:75:27:54:b7:
         ca:96:5d:50:82:5e:e7:df:a6:ac:55:22:88:dd:10:d3:c7:99:
         9f:83:e6:97
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGHE/dwaxP6TIiduzRUzUddDmNmEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZEQ0FBNTUyMkVFRUMxNUNDOTc4REU2NzM5ODZFODk3
MjQ0QjY5ODAeFw0yNjExMDIwOTUzMzlaFw0yNjExMDMxMDQ3MzlaMDMxMTAvBgNV
BAMTKDE1MERDMTVGRDUyRDVFQzZENkE2NUQ0RTNFRkMxRjFFMkNGQUNDOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpFrFU182dPnUaqmMXy5aO0Q0b
lkDcD4w6Zm5+1IQU16s8wFabjUqWljZyiDXrRndh7AjgFD6S/DdkqJjdWNSzy6O0
Ipiy2PhdDHpX02XJFlJNS8OOcs9dDSIlEpkVpUZtkKZK1FQNJGREX+1gW6L4kbdG
F9JBG5JMQGFcva96f62frEcwNvi6h7aI0FhKHi0J84f6d0swaHZxgZn5kb9uPJNz
+DBNQ3QnkQaYGQK94CNprnYp0o+v0VeNZEttODOYnikF3Xt0y0J/6udwApfzkccf
VnUgy4ZXtDiTDTArNsDmVkrYoUkUp7AhfKX0c8J97vOcEHMGLsf5xHCezE4/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUFQ3BX9UtXsbWpl1OPvwfHiz6zIowHwYDVR0j
BBgwFoAUZtyqVSLu7BXMl43mc5huiXJEtpgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGhGUXV6TVJXb2NzM0Nzb1FDOHJrRkJFdkZ5enNiQzc1ajJZeXZVWU5W
YmsvMC82NkRDQUE1NTIyRUVFQzE1Q0M5NzhERTY3Mzk4NkU4OTcyNDRCNjk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2RENBQTU1MjJFRUVDMTVD
Qzk3OERFNjczOTg2RTg5NzI0NEI2OTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NGhGUXV6TVJXb2NzM0Nzb1FDOHJrRkJFdkZ5enNiQzc1ajJZeXZVWU5WYmsvMC82
NkRDQUE1NTIyRUVFQzE1Q0M5NzhERTY3Mzk4NkU4OTcyNDRCNjk4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoK+erR0uenHor3kNRXa8vQUfu48v388RiUektGW4m2NRLktBLHNXyFIoSvuv
T2T2Scj2dukx9+icg2u3AIgrMiE/qZB4jb4sJqgOx6Pna9ZB0KjGDRY79fEBgW5e
Hx1qgFr+MFczgQPgnsCQdyIWbA9SK4Sxl8y42KGQIcClAzrOj3QkOGLm1U2vslPB
MaongCwBlcynfFQad+22rVBJITKUt4iev9HPcp0b6snBmxqGstd5YHSauScGMuwn
CNKA+dllr8ADJloTUBbLX7UGL43wTAY9wedFctgU66seZq6dVRMBfBR1J1S3ypZd
UIJe59+mrFUiiN0Q08eZn4Pmlw==
-----END CERTIFICATE-----
Generated at Tue Nov 3 02:09:08 2026 by rpki-client