Error: rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.mft
File:                     67B531125B42B4898E018F1D5F2837CCA874EB8B.mft (raw, json)
Hash identifier:          9ioZPFoks9i2uBITVdiK5CdaOjenN/K63XcgD40nRwI=
Subject key identifier:   D3:63:CC:94:E0:2E:0A:B3:A1:85:BA:E1:ED:58:37:1C:C8:18:53:84
Authority key identifier: 67:B5:31:12:5B:42:B4:89:8E:01:8F:1D:5F:28:37:CC:A8:74:EB:8B
Certificate issuer:       /CN=67B531125B42B4898E018F1D5F2837CCA874EB8B
Certificate serial:       0B178242A2569B6416F4F3D0C4C976C2A2E2F1A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.mft
Manifest number:          04E1
Signing time:             Fri 30 Oct 2026 02:00:01 +0000
Manifest this update:     Fri 30 Oct 2026 01:55:01 +0000
Manifest next update:     Sat 31 Oct 2026 03:01:01 +0000
Files and hashes:         1: 3138392e31342e3131322e302f32322d3232203d3e20323730383336.roa (hash: MDZyTHgsLgarvCPzGzGC1QzDxqxpu++bLAFRLA4J6is=)
                          2: 3138392e31342e3131342e302f32342d3234203d3e20323730383336.roa (hash: oJ69g6TXNgwcHL8cuQIAh4IsQa7UgPzvJVeZvMZIfGM=)
                          3: 67B531125B42B4898E018F1D5F2837CCA874EB8B.crl (hash: HL6/wuq7DG2ZdmiGlkt1xBB+fLat39DR3gbr4Wua9bM=)
                          4: 323830343a373232383a383030303a3a2f33332d3333203d3e20323730383336.roa (hash: uD7WRoZLcmo+outcewmGFgmTv0AA0bEqYU4/pt9dMds=)
                          5: 323830343a373232383a3a2f33332d3333203d3e20323730383336.roa (hash: o8DsR84ySCcmgQbVb+6wGnkF8G00RHhfvZ7ZtMW/H4k=)
                          6: 3138392e31342e3131322e302f32342d3234203d3e20323730383336.roa (hash: NlATU+ceN9HqgjsrWOdyfDeKgK+iQgtyTwmcFWMYwQA=)
                          7: 3138392e31342e3131332e302f32342d3234203d3e20323730383336.roa (hash: hMRUyvsmY7W0EhlSRIqa507Bmp6ZvpUByLqkXo3l5uc=)
                          8: 3138392e31342e3131322e302f32332d3233203d3e20323730383336.roa (hash: VhhOpSLsQ2jnYaQM38sCaybStfIg67HtHs9XXdmdmS8=)
                          9: 3138392e31342e3131342e302f32332d3233203d3e20323730383336.roa (hash: uij2lSqkvrvUdnBcfGL4CXNmV8ZiX1l/tcm7NoVtSTo=)
                          10: 3138392e31342e3131352e302f32342d3234203d3e20323730383336.roa (hash: mxRtd0lsy+Tabwc269ZEvNB/VTAnW71BW5e7ucTdIXs=)
                          11: 323830343a373232383a3a2f33322d3332203d3e20323730383336.roa (hash: mrBCmPVuoJFQQCBSx4HJsbkZiZXbORtlKym90BqSXU4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.crl
                          rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 03:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:17:82:42:a2:56:9b:64:16:f4:f3:d0:c4:c9:76:c2:a2:e2:f1:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67B531125B42B4898E018F1D5F2837CCA874EB8B
        Validity
            Not Before: Oct 30 01:55:01 2026 GMT
            Not After : Oct 31 03:01:01 2026 GMT
        Subject: CN=D363CC94E02E0AB3A185BAE1ED58371CC8185384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a9:06:13:3e:02:15:34:66:d7:2f:9e:a7:d3:
                    91:c6:af:4b:eb:74:89:d7:ea:40:59:07:b7:6b:a3:
                    71:76:08:4e:1b:45:52:98:62:97:5a:f2:83:54:48:
                    53:3c:d5:07:32:56:f6:8b:6f:59:4e:50:ed:ad:3b:
                    db:6c:f7:87:65:22:2c:51:f0:45:69:76:95:ac:cc:
                    5a:56:8b:9c:61:84:0a:33:dc:c3:a6:f3:1e:45:df:
                    37:65:34:70:5b:91:c9:02:a9:b1:93:05:ab:c7:d9:
                    0c:4f:99:09:60:1e:5d:91:52:2f:15:4c:a9:04:88:
                    b3:7a:fd:a2:05:8e:42:8b:64:f9:90:3a:03:9a:a9:
                    1a:47:dd:ba:12:e6:e2:cd:e4:e2:9b:4d:2f:19:0c:
                    b9:9d:fa:5f:f9:7b:a7:08:5d:bb:b6:e1:ce:b6:22:
                    6f:64:90:ac:2a:11:cb:9d:8a:c4:de:1e:53:8f:ed:
                    e5:f8:b1:d2:df:27:41:34:bb:c3:cc:08:98:af:ad:
                    f9:5c:20:05:ad:f5:42:04:b1:80:28:06:1f:75:e8:
                    9a:8b:46:8e:39:f6:dc:70:8a:ae:b3:df:a8:bd:44:
                    a3:e6:e4:c2:f6:2f:af:6f:37:52:5f:fb:4a:09:36:
                    d7:08:a5:3b:81:c4:8d:b9:37:c1:d8:62:c4:13:96:
                    71:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:63:CC:94:E0:2E:0A:B3:A1:85:BA:E1:ED:58:37:1C:C8:18:53:84
            X509v3 Authority Key Identifier:
                keyid:67:B5:31:12:5B:42:B4:89:8E:01:8F:1D:5F:28:37:CC:A8:74:EB:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:09:a0:08:05:99:1a:a6:3c:d9:1f:42:f7:fa:9f:99:ae:00:
         38:a3:f6:c2:38:43:a8:0c:00:ff:a1:27:87:6a:f7:34:58:f3:
         f2:b1:56:74:1c:db:e9:ad:04:c3:64:ed:42:3d:3c:68:70:3c:
         24:04:d4:d3:ce:83:4f:c1:96:8c:35:db:0e:64:46:b1:6d:69:
         ea:9e:23:bc:ea:1d:20:35:15:89:7d:31:26:e2:70:e7:df:d8:
         83:9f:88:36:44:54:9d:5f:e6:06:29:72:a6:e2:05:f2:23:8a:
         17:5d:6e:b6:4e:a0:f8:bb:e8:cb:03:69:3a:bd:ec:17:a8:7f:
         6c:32:f4:5b:4c:ca:36:c1:df:c5:66:ff:bc:ca:34:95:5d:66:
         46:03:ef:ab:1c:ba:60:9d:4b:d5:df:db:da:08:75:e9:2d:41:
         c1:e0:c9:7e:ed:64:73:98:2d:fc:ed:6b:64:30:61:80:cf:4f:
         19:a5:d6:3e:a2:37:9d:c4:9b:b8:10:5b:dc:30:e8:39:dd:29:
         e9:97:b9:b5:b8:4b:ca:73:56:4d:ce:ea:b4:f1:34:ba:11:af:
         32:ee:b9:cd:ed:da:80:fe:de:82:87:eb:3b:8f:c7:d7:60:1e:
         7c:e3:81:a5:a8:89:0f:4d:8a:d2:4e:1a:c3:dc:01:13:2b:13:
         ea:0b:14:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:27:44 2026 by rpki-client