Error: rpki-repo.registro.br/repo/6zwou2pBNSuBJXMvVbp3BUt8JbAzFewaKwmC9NWkkw3E/0/982DA19AC0848799D2A301B47824DBA97B1A2364.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/6zwou2pBNSuBJXMvVbp3BUt8JbAzFewaKwmC9NWkkw3E/0/982DA19AC0848799D2A301B47824DBA97B1A2364.mft
File:                     982DA19AC0848799D2A301B47824DBA97B1A2364.mft (raw, json)
Hash identifier:          wYnuIQq5czB2xOPaWwQpFuo6iDYIJsjle/G5urt1NUk=
Subject key identifier:   C1:04:5F:8E:92:8E:1F:1B:1C:2A:51:33:DF:2A:D6:6F:F7:9D:48:A9
Authority key identifier: 98:2D:A1:9A:C0:84:87:99:D2:A3:01:B4:78:24:DB:A9:7B:1A:23:64
Certificate issuer:       /CN=982DA19AC0848799D2A301B47824DBA97B1A2364
Certificate serial:       68C413E4EAE0B4A4B90E1280B9DFB07DC0329D66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/982DA19AC0848799D2A301B47824DBA97B1A2364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6zwou2pBNSuBJXMvVbp3BUt8JbAzFewaKwmC9NWkkw3E/0/982DA19AC0848799D2A301B47824DBA97B1A2364.mft
Manifest number:          9A
Signing time:             Tue 03 Nov 2026 20:42:01 +0000
Manifest this update:     Tue 03 Nov 2026 20:37:01 +0000
Manifest next update:     Thu 05 Nov 2026 00:13:01 +0000
Files and hashes:         1: 3136302e31392e3234382e302f32322d3332203d3e20323636313732.roa (hash: 9f0oFi/ZpXJ7QD77X3+z3uYD8LbthEoY8chloEIDekk=)
                          2: 323830343a336264303a3a2f33322d313238203d3e20323636313732.roa (hash: xY46l5QylFb62Zix0LAterhabTPKDDw5COVLT/gFsqo=)
                          3: 982DA19AC0848799D2A301B47824DBA97B1A2364.crl (hash: ZbPBSk3ye5xH5DjQwr332pNP5bWBerE6Q8Ty2YIBQbM=)
                          4: 323830343a343134343a3a2f33322d313238203d3e20323637343234.roa (hash: tgZ4VopM3img2Gz+ARBDvJaQr6bsppHTqiT1sFZuhE4=)
                          5: 3138312e3139312e3133322e302f32322d3332203d3e20323637343234.roa (hash: 6wiGxMTXjvsQvktiiiy72uUWPbGAqhkXSYPa4QnhVPY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6zwou2pBNSuBJXMvVbp3BUt8JbAzFewaKwmC9NWkkw3E/0/982DA19AC0848799D2A301B47824DBA97B1A2364.crl
                          rsync://rpki-repo.registro.br/repo/6zwou2pBNSuBJXMvVbp3BUt8JbAzFewaKwmC9NWkkw3E/0/982DA19AC0848799D2A301B47824DBA97B1A2364.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/982DA19AC0848799D2A301B47824DBA97B1A2364.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 00:13:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c4:13:e4:ea:e0:b4:a4:b9:0e:12:80:b9:df:b0:7d:c0:32:9d:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=982DA19AC0848799D2A301B47824DBA97B1A2364
        Validity
            Not Before: Nov  3 20:37:01 2026 GMT
            Not After : Nov  5 00:13:01 2026 GMT
        Subject: CN=C1045F8E928E1F1B1C2A5133DF2AD66FF79D48A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e8:a7:f0:fe:8e:d5:85:b0:96:d5:fc:0c:bb:
                    4d:18:b7:52:0a:87:8e:24:66:6b:c6:99:70:9b:68:
                    e1:3a:a6:ba:5d:ce:43:79:da:57:2f:57:3a:f7:d9:
                    43:14:25:dd:f8:bc:7e:38:1f:7d:ec:ba:19:bd:85:
                    6c:84:e3:df:dc:b0:a2:15:fd:ea:7a:58:c1:19:70:
                    26:45:9f:d5:aa:05:bf:a4:5b:96:0e:08:97:e9:6a:
                    62:98:25:ea:d4:60:2b:dc:e5:d1:f7:3c:ad:a7:97:
                    f4:dd:58:96:2d:be:b4:7d:91:fe:c5:37:09:6e:e9:
                    61:9c:56:70:07:ee:d1:0f:41:d3:a7:41:15:87:b2:
                    1d:e5:8f:16:57:6a:80:bd:1d:48:29:49:31:3a:8d:
                    cf:73:28:46:15:19:1c:2b:16:31:19:ef:2a:cc:9b:
                    86:68:1d:08:2f:07:88:db:af:2b:65:35:e4:89:f4:
                    16:00:0b:5b:e1:5f:13:93:f8:22:d2:b1:8a:ee:ef:
                    51:a9:30:6f:7d:a4:a9:30:26:6f:c5:a6:a8:42:53:
                    78:b4:7f:87:fb:4f:62:b1:34:04:f3:c9:68:95:7d:
                    6e:e7:88:ad:89:42:ad:10:8c:bc:17:a4:69:da:85:
                    7b:1f:4e:8d:7c:bf:84:55:6d:05:07:ca:f4:e7:af:
                    19:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:04:5F:8E:92:8E:1F:1B:1C:2A:51:33:DF:2A:D6:6F:F7:9D:48:A9
            X509v3 Authority Key Identifier:
                keyid:98:2D:A1:9A:C0:84:87:99:D2:A3:01:B4:78:24:DB:A9:7B:1A:23:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6zwou2pBNSuBJXMvVbp3BUt8JbAzFewaKwmC9NWkkw3E/0/982DA19AC0848799D2A301B47824DBA97B1A2364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/982DA19AC0848799D2A301B47824DBA97B1A2364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zwou2pBNSuBJXMvVbp3BUt8JbAzFewaKwmC9NWkkw3E/0/982DA19AC0848799D2A301B47824DBA97B1A2364.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:eb:74:f3:33:8d:19:44:da:90:c1:1c:1e:29:22:a2:6f:ec:
         91:eb:7e:8c:10:40:28:4c:ef:4a:2a:d7:2f:63:09:30:1f:1f:
         f1:9d:4f:be:de:c4:54:81:8b:c7:29:02:91:2d:55:77:7d:6d:
         6d:72:a4:f5:dc:c0:ec:0b:6a:ef:d4:b4:ce:90:3b:c1:3e:72:
         7c:8a:99:9c:0d:b8:a0:86:b8:1c:12:df:70:e6:2c:07:5c:60:
         d2:d5:b6:91:d3:0a:86:f4:22:32:f2:e3:b9:b4:90:b5:54:af:
         d9:cc:0c:c6:29:c8:6e:aa:e8:a2:d1:1d:92:ef:9a:4d:5e:49:
         0f:82:13:fb:68:3b:c8:07:f5:55:fd:55:10:d4:bc:5a:7f:c0:
         3d:5f:5b:1d:21:64:f6:69:53:f7:44:5d:c7:05:0a:63:ed:05:
         bc:92:b2:1f:65:95:a6:d7:c0:3b:6b:4c:1f:79:34:eb:6c:6a:
         ce:c4:4b:14:b5:f6:62:72:ba:d4:e1:9a:27:d1:ba:76:5e:ba:
         14:dc:22:89:da:06:1f:9a:5f:91:52:f8:15:c0:9e:c7:3a:61:
         17:0d:9b:dc:9c:83:0d:38:e4:9e:69:58:92:b5:2a:f4:69:ac:
         0d:7c:a5:fb:a7:7e:fd:a5:25:48:70:e1:9d:b6:59:d5:27:67:
         8b:0c:f2:3f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUaMQT5OrgtKS5DhKAud+wfcAynWYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTgyREExOUFDMDg0ODc5OUQyQTMwMUI0NzgyNERCQTk3
QjFBMjM2NDAeFw0yNjExMDMyMDM3MDFaFw0yNjExMDUwMDEzMDFaMDMxMTAvBgNV
BAMTKEMxMDQ1RjhFOTI4RTFGMUIxQzJBNTEzM0RGMkFENjZGRjc5RDQ4QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC16Kfw/o7VhbCW1fwMu00Yt1IK
h44kZmvGmXCbaOE6prpdzkN52lcvVzr32UMUJd34vH44H33suhm9hWyE49/csKIV
/ep6WMEZcCZFn9WqBb+kW5YOCJfpamKYJerUYCvc5dH3PK2nl/TdWJYtvrR9kf7F
Nwlu6WGcVnAH7tEPQdOnQRWHsh3ljxZXaoC9HUgpSTE6jc9zKEYVGRwrFjEZ7yrM
m4ZoHQgvB4jbrytlNeSJ9BYAC1vhXxOT+CLSsYru71GpMG99pKkwJm/FpqhCU3i0
f4f7T2KxNATzyWiVfW7niK2JQq0QjLwXpGnahXsfTo18v4RVbQUHyvTnrxmHAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUwQRfjpKOHxscKlEz3yrWb/edSKkwHwYDVR0j
BBgwFoAUmC2hmsCEh5nSowG0eCTbqXsaI2QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnp3b3UycEJOU3VCSlhNdlZicDNCVXQ4SmJBekZld2FLd21DOU5Xa2t3
M0UvMC85ODJEQTE5QUMwODQ4Nzk5RDJBMzAxQjQ3ODI0REJBOTdCMUEyMzY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4MkRBMTlBQzA4NDg3OTlE
MkEzMDFCNDc4MjREQkE5N0IxQTIzNjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Nnp3b3UycEJOU3VCSlhNdlZicDNCVXQ4SmJBekZld2FLd21DOU5Xa2t3M0UvMC85
ODJEQTE5QUMwODQ4Nzk5RDJBMzAxQjQ3ODI0REJBOTdCMUEyMzY0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtet08zONGUTakMEcHikiom/sket+jBBAKEzvSirXL2MJMB8f8Z1Pvt7EVIGL
xykCkS1Vd31tbXKk9dzA7Atq79S0zpA7wT5yfIqZnA24oIa4HBLfcOYsB1xg0tW2
kdMKhvQiMvLjubSQtVSv2cwMxinIbqrootEdku+aTV5JD4IT+2g7yAf1Vf1VENS8
Wn/APV9bHSFk9mlT90RdxwUKY+0FvJKyH2WVptfAO2tMH3k062xqzsRLFLX2YnK6
1OGaJ9G6dl66FNwiidoGH5pfkVL4FcCexzphFw2b3JyDDTjknmlYkrUq9GmsDXyl
+6d+/aUlSHDhnbZZ1SdniwzyPw==
-----END CERTIFICATE-----
Generated at Wed Nov 4 17:05:00 2026 by rpki-client