Error: rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft
File:                     68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft (raw, json)
Hash identifier:          6Ift2ggniAYqmUcoM2yqPP0e3SYAULyDoGjQ5aSqgLA=
Subject key identifier:   E8:38:1D:6E:1D:79:FB:BC:19:63:BA:7F:8A:C4:4C:09:16:BA:95:58
Authority key identifier: 68:04:0A:EB:3A:C9:8B:5F:F3:C0:3D:98:E9:01:AB:81:77:34:3C:76
Certificate issuer:       /CN=68040AEB3AC98B5FF3C03D98E901AB8177343C76
Certificate serial:       10ED01AA9FBEC6BB3FBE1E3377E7248F71BD0DA2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft
Manifest number:          037E
Signing time:             Sat 22 Aug 2026 08:24:18 +0000
Manifest this update:     Sat 22 Aug 2026 08:19:18 +0000
Manifest next update:     Sun 23 Aug 2026 11:19:18 +0000
Files and hashes:         1: 323830343a333564343a3a2f33332d3333203d3e20323636333039.roa (hash: 1pTCIOevx4+GBb/1dDf+1g8UakVD5vhidbrKlgedvyk=)
                          2: 68040AEB3AC98B5FF3C03D98E901AB8177343C76.crl (hash: LXnDhEAm38knoBhfUtoYHhw+OcwWWgzQHI9vR99q1R8=)
                          3: 323830343a333564343a3a2f33322d3332203d3e20323636333039.roa (hash: IMbAQjtKNKCBxCPVMOT2Ftgk2dkbemX5qfuR0h3xEhI=)
                          4: 323830343a333564343a383030303a3a2f33332d3333203d3e20323636333039.roa (hash: oH0zhdTzdOCeBZCkbJRb+h1ytVO1ihmSo9HnvMwSx9c=)
                          5: 3137302e37392e3137362e302f32322d3232203d3e20323636333039.roa (hash: OOf095CLKM7SyV2IJGlU27bKqAZvsPZ1DQfWXk+UKZI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.crl
                          rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 11:19:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ed:01:aa:9f:be:c6:bb:3f:be:1e:33:77:e7:24:8f:71:bd:0d:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68040AEB3AC98B5FF3C03D98E901AB8177343C76
        Validity
            Not Before: Aug 22 08:19:18 2026 GMT
            Not After : Aug 23 11:19:18 2026 GMT
        Subject: CN=E8381D6E1D79FBBC1963BA7F8AC44C0916BA9558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b0:98:d9:01:c9:20:b0:97:0b:5e:90:d2:60:
                    01:ba:20:cf:18:4d:1f:98:2d:a5:00:85:db:9c:a5:
                    f0:b0:e0:08:74:e0:23:67:93:95:84:4d:6f:4f:ba:
                    d4:83:6e:30:2e:19:3e:e5:00:b3:46:c7:8a:3f:87:
                    49:6c:2c:83:17:7c:a2:b2:27:bd:c5:a8:47:81:3f:
                    a0:97:68:91:ab:e8:4e:37:af:2a:61:b7:0c:f2:db:
                    28:b8:b2:ba:c9:fb:7d:6e:a2:85:94:a8:14:c1:54:
                    15:a4:03:b8:f6:ea:2b:75:c0:01:d6:0c:b6:2d:b8:
                    37:5d:9a:e4:01:e0:70:db:9f:5b:f4:83:f6:28:b2:
                    44:05:d0:20:91:82:c4:ad:dc:f6:54:7e:9f:8e:23:
                    4b:7a:c3:af:1d:a1:4e:8f:e4:49:a7:ca:9f:3e:19:
                    cf:95:50:b9:13:8e:06:17:d7:c7:25:2f:18:96:c3:
                    7c:2a:48:39:9e:cf:3f:99:f8:ca:cf:33:72:08:4b:
                    c4:b9:82:70:05:48:cf:7d:bf:ba:c0:ae:f0:a9:27:
                    fc:81:b4:95:63:e8:31:84:dc:9a:fe:a3:aa:25:c1:
                    bf:85:18:b0:4b:8b:85:9c:15:65:44:12:ae:1a:76:
                    77:ac:a4:1e:5c:1e:77:a0:28:1f:44:75:4a:d3:18:
                    6e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:38:1D:6E:1D:79:FB:BC:19:63:BA:7F:8A:C4:4C:09:16:BA:95:58
            X509v3 Authority Key Identifier:
                keyid:68:04:0A:EB:3A:C9:8B:5F:F3:C0:3D:98:E9:01:AB:81:77:34:3C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:57:ab:c0:ed:e5:17:5a:75:0c:21:b9:90:79:b4:60:1a:f4:
         21:d9:4b:c6:5e:92:b2:81:fe:c5:3c:93:93:b3:59:ef:d9:3d:
         ff:56:02:91:a6:e9:fe:34:06:23:05:02:b0:83:a0:72:9c:f6:
         c5:7e:b1:70:72:68:b7:b3:58:57:a4:10:b0:09:0d:04:45:ed:
         13:db:f8:80:ec:59:5e:d9:09:3a:64:19:51:96:78:ee:e8:9d:
         96:cb:8e:b5:0f:24:6e:96:de:ec:fc:fc:17:44:82:cc:8a:d2:
         90:ab:65:12:85:de:ea:b6:9c:ee:f8:ee:1f:26:81:8f:62:e6:
         a7:83:ad:ce:7d:64:01:d3:e2:b1:20:58:3d:bf:d3:66:27:ab:
         19:26:2d:f3:08:7f:49:aa:3a:2e:c1:35:a3:c4:38:39:c5:8c:
         c0:87:ec:ba:cb:34:7b:59:01:ab:7f:6b:73:ee:aa:ae:d3:53:
         ab:da:8b:1a:9f:b2:c7:7c:58:40:8a:ee:42:f1:72:34:10:43:
         23:fb:77:2a:d4:71:2e:12:36:74:c8:c9:90:8f:33:94:94:25:
         3a:c2:b5:6b:46:f1:ce:a8:16:b5:04:0c:ab:51:eb:a2:f5:d7:
         8f:28:73:4a:b0:d0:af:d5:62:a0:48:3a:9f:22:99:14:0a:16:
         8a:2c:66:ff
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEO0Bqp++xrs/vh4zd+ckj3G9DaIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjgwNDBBRUIzQUM5OEI1RkYzQzAzRDk4RTkwMUFCODE3
NzM0M0M3NjAeFw0yNjA4MjIwODE5MThaFw0yNjA4MjMxMTE5MThaMDMxMTAvBgNV
BAMTKEU4MzgxRDZFMUQ3OUZCQkMxOTYzQkE3RjhBQzQ0QzA5MTZCQTk1NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7sJjZAckgsJcLXpDSYAG6IM8Y
TR+YLaUAhducpfCw4Ah04CNnk5WETW9PutSDbjAuGT7lALNGx4o/h0lsLIMXfKKy
J73FqEeBP6CXaJGr6E43ryphtwzy2yi4srrJ+31uooWUqBTBVBWkA7j26it1wAHW
DLYtuDddmuQB4HDbn1v0g/YoskQF0CCRgsSt3PZUfp+OI0t6w68doU6P5Emnyp8+
Gc+VULkTjgYX18clLxiWw3wqSDmezz+Z+MrPM3IIS8S5gnAFSM99v7rArvCpJ/yB
tJVj6DGE3Jr+o6olwb+FGLBLi4WcFWVEEq4adnespB5cHnegKB9EdUrTGG6xAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU6Dgdbh15+7wZY7p/isRMCRa6lVgwHwYDVR0j
BBgwFoAUaAQK6zrJi1/zwD2Y6QGrgXc0PHYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWFGbzhZa1ZxODVGTm81ejd2b1FBcloyTHdGQ3A3R3hqNjEzZUg4UG5x
ejkvMC82ODA0MEFFQjNBQzk4QjVGRjNDMDNEOThFOTAxQUI4MTc3MzQzQzc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4MDQwQUVCM0FDOThCNUZG
M0MwM0Q5OEU5MDFBQjgxNzczNDNDNzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NWFGbzhZa1ZxODVGTm81ejd2b1FBcloyTHdGQ3A3R3hqNjEzZUg4UG5xejkvMC82
ODA0MEFFQjNBQzk4QjVGRjNDMDNEOThFOTAxQUI4MTc3MzQzQzc2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeVerwO3lF1p1DCG5kHm0YBr0IdlLxl6SsoH+xTyTk7NZ79k9/1YCkabp/jQG
IwUCsIOgcpz2xX6xcHJot7NYV6QQsAkNBEXtE9v4gOxZXtkJOmQZUZZ47uidlsuO
tQ8kbpbe7Pz8F0SCzIrSkKtlEoXe6rac7vjuHyaBj2Lmp4Otzn1kAdPisSBYPb/T
ZierGSYt8wh/Sao6LsE1o8Q4OcWMwIfsuss0e1kBq39rc+6qrtNTq9qLGp+yx3xY
QIruQvFyNBBDI/t3KtRxLhI2dMjJkI8zlJQlOsK1a0bxzqgWtQQMq1HrovXXjyhz
SrDQr9VioEg6nyKZFAoWiixm/w==
-----END CERTIFICATE-----
Generated at Sat Aug 22 22:53:35 2026 by rpki-client