Error: rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft
File:                     D2FC8637672F6995F171A261D51674A50FE454A6.mft (raw, json)
Hash identifier:          q0kpo6gk178qFd8zMbz4/HAeDVr2KVQBfPRe04S1AIM=
Subject key identifier:   72:C1:1A:26:36:5A:4E:E9:E6:0B:6D:97:B5:5D:3E:90:43:83:C3:5D
Authority key identifier: D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6
Certificate issuer:       /CN=D2FC8637672F6995F171A261D51674A50FE454A6
Certificate serial:       2A7DC436549C2F0BA8A0B4A34BCDE1A1E7F580A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft
Manifest number:          04DF
Signing time:             Mon 02 Nov 2026 07:50:00 +0000
Manifest this update:     Mon 02 Nov 2026 07:45:00 +0000
Manifest next update:     Tue 03 Nov 2026 08:12:00 +0000
Files and hashes:         1: 323830343a346265303a3a2f33342d3334203d3e20323637333334.roa (hash: G+RNKtP53PWokExgTrWiduE47E7/QZcfxFmzIPS3wvY=)
                          2: 323830343a346265303a383030303a3a2f33332d3333203d3e20323637333334.roa (hash: Uc1aN6iWD8f8P9eEDgxgniCHPV3udq5wKyIMhj5Ggxw=)
                          3: 34352e3233332e3235352e302f32342d3234203d3e20323637333334.roa (hash: UmL9+Do3hDCC9iZvlhbwNAU+BIx24uWbSydpIv4oE5Q=)
                          4: 323830343a346265303a383030303a3a2f33342d3334203d3e20323637333334.roa (hash: dbyHcT+WPlp5FVMKEMjK8+it8GRMeEQdQl+5GHqVSuY=)
                          5: 34352e3233332e3235322e302f32332d3233203d3e20323637333334.roa (hash: ouAK0kg+/aVpVcCbP4bexh8VaG4XPjMUX+oO6I58BDo=)
                          6: D2FC8637672F6995F171A261D51674A50FE454A6.crl (hash: haz91GlrlG0bTQlzvr+EvAGHF4NErDVfhOGiJgEulQM=)
                          7: 323830343a346265303a3a2f33322d3332203d3e20323637333334.roa (hash: bPDjHNBUl/H6ulvwmhReA/RBgXTLcWuKJZY4ftKoDkc=)
                          8: 34352e3233332e3235342e302f32342d3234203d3e20323637333334.roa (hash: j2qGuSPvxexL96NEu1I1xCgoaChpbHCA9ZE87e2oaPQ=)
                          9: 34352e3233332e3235332e302f32342d3234203d3e20323637333334.roa (hash: +RyxeuoxhIKAMJEFMFWIS8Ulh+f+4ywuY0/2h9LL3ZI=)
                          10: 323830343a346265303a343030303a3a2f33342d3334203d3e20323637333334.roa (hash: wrniQHnF8nS0MuQ4m91PKnaCakmlJ1TuIBqSLuoiyQk=)
                          11: 34352e3233332e3235322e302f32342d3234203d3e20323637333334.roa (hash: YOSK2fhrIRrZIoN2z6lFS0rEplWgSdy33jcOY7F+GYA=)
                          12: 34352e3233332e3235322e302f32322d3232203d3e20323637333334.roa (hash: 1UswwfBXHmuieTD6Y4yJlMuOxyZ5tOHFADZLxYj5p+I=)
                          13: 34352e3233332e3235342e302f32332d3233203d3e20323637333334.roa (hash: QCv6+deZd8kWe76fqsJ8iIYvPbvZxchVE1dwaxoIxkw=)
                          14: 323830343a346265303a3a2f33332d3333203d3e20323637333334.roa (hash: xWKs2MipihXxzqW+9K8qFQCXsWQCpHuxCy1DLfFGWOo=)
                          15: 323830343a346265303a633030303a3a2f33342d3334203d3e20323637333334.roa (hash: 6FiIqFD4BA0F4EwSW3P6ekKNWYGR3g9PC/cmQmzMsCY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl
                          rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 08:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:7d:c4:36:54:9c:2f:0b:a8:a0:b4:a3:4b:cd:e1:a1:e7:f5:80:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2FC8637672F6995F171A261D51674A50FE454A6
        Validity
            Not Before: Nov  2 07:45:00 2026 GMT
            Not After : Nov  3 08:12:00 2026 GMT
        Subject: CN=72C11A26365A4EE9E60B6D97B55D3E904383C35D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:67:aa:96:f3:5e:66:b4:bb:be:27:bf:e9:3e:
                    5f:20:a0:07:0d:13:39:b5:65:45:da:83:4e:27:65:
                    8f:8c:9b:4f:a6:f2:59:e2:2b:90:17:af:7e:ed:82:
                    a1:9e:95:b8:38:cd:87:00:be:7e:db:7b:fc:c8:5c:
                    c8:23:45:2c:e6:e6:5c:6b:bc:b1:eb:e0:4d:fb:1a:
                    73:15:ee:2e:33:e7:58:2b:b3:24:b1:b4:1e:20:77:
                    03:c5:3c:f0:33:a4:4c:c3:66:b2:54:45:77:99:aa:
                    e5:01:42:d3:f2:a8:1d:d1:07:2b:d5:3d:1d:d6:7a:
                    76:5e:ef:66:7e:a6:a5:6c:91:35:62:35:39:84:c6:
                    2e:ce:7a:70:cf:a6:e2:c3:56:e1:dc:0d:be:b3:f0:
                    c5:57:de:ee:5d:bd:46:70:73:c7:56:1c:aa:7b:86:
                    8e:33:d0:16:67:04:7f:9c:dd:6e:1f:98:c1:ac:ee:
                    e2:3d:58:f9:8a:b9:99:0e:0a:e8:b4:b4:17:1a:ea:
                    4c:56:86:4e:2b:aa:f4:47:45:b6:65:5d:7e:9f:eb:
                    a2:05:b9:63:87:80:a7:80:49:13:21:74:59:7b:61:
                    49:9a:38:d3:4e:4d:50:92:58:5f:b5:30:a9:fb:00:
                    9e:01:a8:69:2b:e7:f1:88:fa:67:51:95:8b:b0:c1:
                    c0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C1:1A:26:36:5A:4E:E9:E6:0B:6D:97:B5:5D:3E:90:43:83:C3:5D
            X509v3 Authority Key Identifier:
                keyid:D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:7f:2d:06:b8:42:f6:1e:d5:ae:2e:60:49:5e:65:13:5b:7d:
         4c:82:5f:10:d6:c2:c3:c5:e7:f5:95:46:a4:eb:b2:ae:38:1c:
         c2:49:0d:59:73:1b:d6:ad:a6:41:4f:e6:de:ae:2d:85:bb:bb:
         1f:5e:4f:5a:83:42:13:35:f5:bf:24:04:ff:25:86:a9:a5:05:
         95:eb:e8:17:cf:74:e4:52:76:ef:25:80:9e:26:8d:4c:be:8b:
         a8:2a:28:26:45:8f:f0:c3:64:38:39:01:8c:bd:b2:76:f0:19:
         65:b2:53:4c:ca:12:65:bf:e0:b5:a3:fe:30:23:94:ef:91:61:
         82:9e:0f:fc:2c:d8:2f:de:5e:0e:2a:7d:08:36:f4:02:7c:9c:
         cf:43:b0:5e:00:40:3e:a3:74:51:81:dd:af:1b:42:f1:f4:b5:
         b0:54:27:ee:c6:23:41:54:b9:39:f9:dc:77:97:2c:c5:76:d6:
         00:8c:12:4b:19:a9:87:f7:0b:17:0e:aa:6c:c3:17:15:d0:0a:
         1b:95:8f:20:01:91:25:d7:ee:20:ff:59:8b:53:21:e0:cc:23:
         2e:5e:7e:1f:5d:0f:bc:8f:65:e7:6a:d9:ea:3f:88:98:c4:0f:
         3e:3d:42:3b:06:ba:81:3e:02:55:96:d8:bd:51:3c:c7:70:0a:
         a8:bd:dd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 20:55:32 2026 by rpki-client