Error: rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.mft
File:                     0144765DC0A3D9D0EADA845625C5E7F14C552690.mft (raw, json)
Hash identifier:          wkvGQ0/nf9UHqCE2090aH1QUz3tMnZntZY6pMzIohFo=
Subject key identifier:   4C:89:6D:52:9D:AF:B9:E0:6C:40:E7:D0:71:EA:A3:79:63:4B:43:8C
Authority key identifier: 01:44:76:5D:C0:A3:D9:D0:EA:DA:84:56:25:C5:E7:F1:4C:55:26:90
Certificate issuer:       /CN=0144765DC0A3D9D0EADA845625C5E7F14C552690
Certificate serial:       718291B096BB66313D8E1129C4A4B2268BD91570
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.mft
Manifest number:          04D7
Signing time:             Fri 30 Oct 2026 14:09:40 +0000
Manifest this update:     Fri 30 Oct 2026 14:04:40 +0000
Manifest next update:     Sat 31 Oct 2026 14:21:40 +0000
Files and hashes:         1: 3139302e31312e3231302e302f32332d3233203d3e20323730363532.roa (hash: FnUMABFm+iWTMtU7fTd5b8RDP2Mwwtt1yuSnL7/O+Os=)
                          2: 323830343a366635303a3130303a3a2f34302d3430203d3e20323730363532.roa (hash: 0bvMOZf/vlqYqQtsMXwwRob7CdL1Ky1zncY2CbyflGs=)
                          3: 323830343a366635303a3a2f34302d3430203d3e20323730363532.roa (hash: oWmYmvtDe1E+af+rhP9hakpmthsKpRFsjoEAopKpt6c=)
                          4: 323830343a366635303a3a2f33322d3332203d3e20323730363532.roa (hash: yI8AufnBPd/JAFoluG6sIQxIw45BFskRHoD7Gg5CcgY=)
                          5: 3139302e31312e3231312e302f32342d3234203d3e20323730363532.roa (hash: ciVqttWWvXb4uBVaTr8KxPhVpv2A/P6YHIYuvqe4QbM=)
                          6: 0144765DC0A3D9D0EADA845625C5E7F14C552690.crl (hash: GTJSMxk7iGtqQCUh9/GPfb1Kx+EcEb/mAJNeyPnPIeQ=)
                          7: 323830343a366635303a343030303a3a2f33342d3334203d3e20323730363532.roa (hash: q6bx/V26fnn1rKQlZjXL9DByBrCnOyKKRWOapvio31M=)
                          8: 3139302e31312e3230392e302f32342d3234203d3e20323730363532.roa (hash: LQ7x5KpsSTNYv+XaOfo9m2p6hIHYACLMd3PIYhHf89w=)
                          9: 3139302e31312e3230382e302f32342d3234203d3e20323730363532.roa (hash: JKavBcC+YkWZjlDoTpR/o7xA62BZmC7nXUIkKVie7Mg=)
                          10: 3139302e31312e3230382e302f32322d3232203d3e20323730363532.roa (hash: V8eliT+hBRgsymXtFyjuorkxzl1l/dghR6F/JEpHFVA=)
                          11: 3139302e31312e3231302e302f32342d3234203d3e20323730363532.roa (hash: Upc2t48mABVc/B3tiHVEZpNtKpbkYjDV3xXRghrciVg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.crl
                          rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 14:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:82:91:b0:96:bb:66:31:3d:8e:11:29:c4:a4:b2:26:8b:d9:15:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0144765DC0A3D9D0EADA845625C5E7F14C552690
        Validity
            Not Before: Oct 30 14:04:40 2026 GMT
            Not After : Oct 31 14:21:40 2026 GMT
        Subject: CN=4C896D529DAFB9E06C40E7D071EAA379634B438C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9b:a5:37:10:1d:ea:c8:99:c5:2c:9b:c4:6d:
                    66:a6:d1:9b:fc:cd:44:85:3d:4a:f0:39:a7:0b:57:
                    7f:cf:c1:72:c0:ac:46:e3:fc:e7:c0:fb:72:a7:d1:
                    b5:d5:37:65:8c:12:94:86:27:84:a1:be:02:a3:2c:
                    6a:c8:ff:78:15:7c:43:41:f3:90:d8:c9:03:6e:de:
                    d2:8d:82:a1:a5:64:e8:15:9c:53:32:e2:1d:4a:4f:
                    85:e7:fa:3a:d2:24:a8:d6:ef:ac:d5:61:ed:1e:71:
                    10:df:ff:f4:65:cf:b4:68:5e:86:e9:82:ed:23:87:
                    aa:c4:4b:4a:e4:30:b0:d4:73:48:c6:28:95:c1:d6:
                    72:de:5c:09:c9:4a:3b:eb:f5:08:e6:c3:02:79:77:
                    1e:6b:5f:9b:e4:7d:05:8a:47:f1:8c:da:97:c7:ff:
                    ce:8c:de:47:d7:eb:d4:16:e8:d4:af:3f:1a:0d:38:
                    b6:5c:f2:cd:42:33:9e:44:7b:d9:93:48:3f:08:36:
                    4f:e2:3a:fd:38:25:37:4b:fc:7d:af:4c:eb:54:ca:
                    48:dc:c6:72:4e:86:6e:74:79:0f:00:14:32:ae:b8:
                    a7:9b:cf:e2:31:41:2d:27:84:be:96:4e:d5:dd:88:
                    a7:1a:da:2e:fd:f2:b0:9a:c5:cd:9a:73:51:e8:bd:
                    61:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:89:6D:52:9D:AF:B9:E0:6C:40:E7:D0:71:EA:A3:79:63:4B:43:8C
            X509v3 Authority Key Identifier:
                keyid:01:44:76:5D:C0:A3:D9:D0:EA:DA:84:56:25:C5:E7:F1:4C:55:26:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:cd:f8:f8:11:27:e0:f9:95:15:79:dd:3c:9b:2c:d1:2e:ac:
         60:c0:c1:55:d4:bc:d2:8c:4a:c4:b2:e5:64:3c:1b:21:4c:fa:
         56:69:52:65:5d:d8:d7:77:9a:bb:d9:10:5f:70:f4:89:08:ab:
         91:e2:c6:38:4a:38:96:44:87:9e:92:c8:5f:03:af:f9:46:f5:
         d6:37:0e:e6:ae:12:52:9f:5a:6d:5a:fd:d0:a3:63:59:9c:9f:
         67:51:53:1a:d7:d3:46:dd:a4:1a:be:ea:76:39:c4:9f:2c:95:
         c4:4b:ae:2b:1c:37:bd:59:57:c5:cf:54:1e:b1:db:06:48:2b:
         fc:3b:c2:0b:dc:aa:a8:a5:ab:53:10:60:70:0d:0c:83:32:86:
         cf:98:50:ff:ba:5a:08:56:51:8a:4e:3f:ca:86:96:46:a5:24:
         af:a1:88:bd:19:fe:a5:33:42:7a:12:34:b1:c9:b4:61:c0:ee:
         59:74:8a:b5:9c:fc:b1:61:72:02:73:63:69:fa:5e:bc:ec:f3:
         1d:11:e0:be:06:53:06:fe:6c:49:07:ec:43:37:77:79:2e:b7:
         a2:c3:d0:68:39:37:78:e3:85:97:c7:3c:1a:fd:79:36:70:12:
         40:35:0c:07:be:e1:a6:63:7f:da:18:18:88:a2:b3:5c:68:ee:
         8b:00:51:e0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcYKRsJa7ZjE9jhEpxKSyJovZFXAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE0NDc2NURDMEEzRDlEMEVBREE4NDU2MjVDNUU3RjE0
QzU1MjY5MDAeFw0yNjEwMzAxNDA0NDBaFw0yNjEwMzExNDIxNDBaMDMxMTAvBgNV
BAMTKDRDODk2RDUyOURBRkI5RTA2QzQwRTdEMDcxRUFBMzc5NjM0QjQzOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSm6U3EB3qyJnFLJvEbWam0Zv8
zUSFPUrwOacLV3/PwXLArEbj/OfA+3Kn0bXVN2WMEpSGJ4ShvgKjLGrI/3gVfENB
85DYyQNu3tKNgqGlZOgVnFMy4h1KT4Xn+jrSJKjW76zVYe0ecRDf//Rlz7RoXobp
gu0jh6rES0rkMLDUc0jGKJXB1nLeXAnJSjvr9QjmwwJ5dx5rX5vkfQWKR/GM2pfH
/86M3kfX69QW6NSvPxoNOLZc8s1CM55Ee9mTSD8INk/iOv04JTdL/H2vTOtUykjc
xnJOhm50eQ8AFDKuuKebz+IxQS0nhL6WTtXdiKca2i798rCaxc2ac1HovWEfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUTIltUp2vueBsQOfQceqjeWNLQ4wwHwYDVR0j
BBgwFoAUAUR2XcCj2dDq2oRWJcXn8UxVJpAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnpvaUxNWmduVlhaVWRkUjloQ1JVY2tWaWtMaFA4ZWhFVTVoeFJlTFk3
bkMvMS8wMTQ0NzY1REMwQTNEOUQwRUFEQTg0NTYyNUM1RTdGMTRDNTUyNjkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxNDQ3NjVEQzBBM0Q5RDBF
QURBODQ1NjI1QzVFN0YxNEM1NTI2OTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NnpvaUxNWmduVlhaVWRkUjloQ1JVY2tWaWtMaFA4ZWhFVTVoeFJlTFk3bkMvMS8w
MTQ0NzY1REMwQTNEOUQwRUFEQTg0NTYyNUM1RTdGMTRDNTUyNjkwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACM34+BEn4PmVFXndPJss0S6sYMDBVdS80oxKxLLlZDwbIUz6VmlSZV3Y13ea
u9kQX3D0iQirkeLGOEo4lkSHnpLIXwOv+Ub11jcO5q4SUp9abVr90KNjWZyfZ1FT
GtfTRt2kGr7qdjnEnyyVxEuuKxw3vVlXxc9UHrHbBkgr/DvCC9yqqKWrUxBgcA0M
gzKGz5hQ/7paCFZRik4/yoaWRqUkr6GIvRn+pTNCehI0scm0YcDuWXSKtZz8sWFy
AnNjafpevOzzHRHgvgZTBv5sSQfsQzd3eS63osPQaDk3eOOFl8c8Gv15NnASQDUM
B77hpmN/2hgYiKKzXGjuiwBR4A==
-----END CERTIFICATE-----
Generated at Fri Oct 30 20:29:23 2026 by rpki-client