Error: rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.mft
File:                     40636332B02FA344DE75686E874C7425B2C58624.mft (raw, json)
Hash identifier:          cDIoz+66hBmUIM3qrD1ytsAPvnydDmJZ3p1F6im+xtY=
Subject key identifier:   EB:1F:B1:7D:CE:E9:DB:22:C5:B5:25:59:E2:85:B6:00:EB:11:F6:29
Authority key identifier: 40:63:63:32:B0:2F:A3:44:DE:75:68:6E:87:4C:74:25:B2:C5:86:24
Certificate issuer:       /CN=40636332B02FA344DE75686E874C7425B2C58624
Certificate serial:       7935550725A50A294AB9B7368582E8838A8BB0BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40636332B02FA344DE75686E874C7425B2C58624.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.mft
Manifest number:          04E8
Signing time:             Tue 03 Nov 2026 22:38:26 +0000
Manifest this update:     Tue 03 Nov 2026 22:33:26 +0000
Manifest next update:     Wed 04 Nov 2026 23:22:26 +0000
Files and hashes:         1: 40636332B02FA344DE75686E874C7425B2C58624.crl (hash: cOabzh6xetaTaFk8+sPu+8DtgTAq8kihiQK9lXHCTSk=)
                          2: 3137372e3132352e3235342e302f32342d3234203d3e20323633333936.roa (hash: 14gDW6bEJ9nJvPx8geN4NCkeLK5VnotpToXU6B74rok=)
                          3: 3137372e3132352e3235322e302f32332d3233203d3e20323633333936.roa (hash: TsrN8pTw6ZoFMtakcgirSnXXXiQlJtEA8lLaO/9aSf8=)
                          4: 3137372e3132352e3235322e302f32342d3234203d3e20323633333936.roa (hash: 1zlZh1RIyKIORzy/QdPKcAzVf4S4RmInWHqoPdIt8qs=)
                          5: 3137372e3132352e3235352e302f32342d3234203d3e20323633333936.roa (hash: /f1V0+9KbBzDlBJGGbpsQIfjbnVsZ4ioE+6Q7Tknrh4=)
                          6: 323830343a313539343a3a2f33332d3333203d3e20323633333936.roa (hash: 6jOZ/akJsCcydY98wvMjgXw/yMnB/On87tVhv/IQqHo=)
                          7: 3137372e3132352e3235322e302f32322d3232203d3e20323633333936.roa (hash: ZutIjgA9rply9urf4o/OjFFNcP6znXGqJErFQUef1dc=)
                          8: 323830343a313539343a3a2f33322d3332203d3e20323633333936.roa (hash: 10EDhCZ/lsgtyh2/uvnbJQXhbfL58osWesEEi3zL6B0=)
                          9: 323830343a313539343a383030303a3a2f33332d3333203d3e20323633333936.roa (hash: hLzqmsCKgsDSOYYsfd9uplhuDbU2l7wN+x1Gqbuga7Y=)
                          10: 3137372e3132352e3235342e302f32332d3233203d3e20323633333936.roa (hash: pFcTTFEs7PFgDKngTK+jG96Za1sfiHeBOPiCfu6eDWE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.crl
                          rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40636332B02FA344DE75686E874C7425B2C58624.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 23:22:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:35:55:07:25:a5:0a:29:4a:b9:b7:36:85:82:e8:83:8a:8b:b0:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40636332B02FA344DE75686E874C7425B2C58624
        Validity
            Not Before: Nov  3 22:33:26 2026 GMT
            Not After : Nov  4 23:22:26 2026 GMT
        Subject: CN=EB1FB17DCEE9DB22C5B52559E285B600EB11F629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:22:14:0b:08:81:77:78:fc:07:df:25:54:d5:
                    09:5e:58:85:42:7a:c6:83:38:5b:bb:44:0f:cf:20:
                    eb:fc:7d:70:65:27:37:84:59:67:1b:91:a7:81:9b:
                    b0:76:c6:fd:e3:db:0f:af:bd:e8:e5:f6:c8:2b:2c:
                    c4:9a:99:53:dd:be:96:0d:0e:82:34:40:0f:4d:3f:
                    89:d6:b3:b6:36:fe:b4:d0:77:52:dd:42:93:fd:d8:
                    9f:2d:30:2b:1c:ad:75:65:63:43:ec:ec:11:9f:5d:
                    8f:f6:50:af:c8:df:28:db:bd:f1:c3:2f:04:ae:b8:
                    46:d9:76:fa:0a:ad:0d:9b:3f:4a:9e:90:8c:a8:b3:
                    b2:6f:fa:bb:17:b5:9b:73:8a:94:ed:e6:a6:1a:e1:
                    32:2e:10:48:85:0a:03:4f:ec:14:87:da:42:0c:f0:
                    60:ce:df:16:c1:0d:f6:bc:c4:93:d7:16:b3:98:48:
                    57:be:14:b2:d2:06:06:de:a9:11:94:8c:ec:52:a5:
                    9b:a3:a4:eb:f8:ee:bf:7c:7f:44:96:8b:b7:80:c1:
                    67:47:58:78:05:7b:61:29:f1:d1:2c:d7:20:9a:e8:
                    12:02:18:ed:b5:04:5d:e4:53:ec:1e:3b:5c:80:ff:
                    a0:a3:9c:1d:36:1a:81:87:48:56:2d:0f:6a:1d:8a:
                    20:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:1F:B1:7D:CE:E9:DB:22:C5:B5:25:59:E2:85:B6:00:EB:11:F6:29
            X509v3 Authority Key Identifier:
                keyid:40:63:63:32:B0:2F:A3:44:DE:75:68:6E:87:4C:74:25:B2:C5:86:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40636332B02FA344DE75686E874C7425B2C58624.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:14:a9:24:a4:03:57:8c:3d:a4:cc:42:ea:ae:28:9a:d3:ff:
         8a:2a:33:44:32:39:94:62:12:38:78:11:a7:33:cd:d2:d5:cb:
         e0:81:c9:fd:21:4d:36:ac:d3:77:4c:f1:84:c6:ab:e1:63:43:
         24:65:83:fd:fd:c6:14:45:87:24:cd:da:71:21:fd:0e:d1:84:
         a6:ad:0a:f6:1c:e5:07:a4:48:36:6a:d6:24:85:46:06:99:60:
         9b:13:4b:c0:a5:fa:ab:f6:60:45:aa:5a:a7:f5:cc:98:6b:20:
         84:2a:bc:b6:43:dc:52:5b:06:4f:f0:cb:f4:85:07:3e:ed:7a:
         d1:11:c3:d7:4b:d4:55:53:fe:85:29:38:9d:86:77:e6:38:84:
         02:2c:f7:23:a1:3a:68:69:23:08:46:33:6c:56:12:7d:06:32:
         1d:ba:af:ea:30:56:32:35:d0:9d:a9:08:a5:ff:9f:02:d6:c6:
         2c:a7:33:a6:76:4d:3b:1a:2f:17:78:06:68:61:c2:f3:52:f8:
         8e:06:65:18:1c:7e:e0:c7:a0:14:48:33:d9:e9:91:93:4d:bf:
         3b:48:f3:40:be:5e:27:bc:2b:94:a4:e0:05:ce:70:e0:6c:a8:
         93:4b:e9:f1:4a:a7:33:40:5b:b3:66:7d:b8:86:21:31:24:11:
         26:08:fe:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 17:15:13 2026 by rpki-client