Error: rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/2CEE12D044540710A5876E4246E86C0EF8C37663.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/2CEE12D044540710A5876E4246E86C0EF8C37663.mft
File:                     2CEE12D044540710A5876E4246E86C0EF8C37663.mft (raw, json)
Hash identifier:          izm3L7H4vmdAHM/R1ja9TmBD/W7jXFhC6NwjypTKQgw=
Subject key identifier:   61:51:4F:82:19:D4:B8:FF:9F:04:A2:A1:45:6D:A9:89:B8:A5:6A:74
Authority key identifier: 2C:EE:12:D0:44:54:07:10:A5:87:6E:42:46:E8:6C:0E:F8:C3:76:63
Certificate issuer:       /CN=2CEE12D044540710A5876E4246E86C0EF8C37663
Certificate serial:       6C8861F50503DE37BE01C1C4002605670AAFC6ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CEE12D044540710A5876E4246E86C0EF8C37663.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/2CEE12D044540710A5876E4246E86C0EF8C37663.mft
Manifest number:          58
Signing time:             Tue 03 Nov 2026 01:11:31 +0000
Manifest this update:     Tue 03 Nov 2026 01:06:31 +0000
Manifest next update:     Wed 04 Nov 2026 05:06:31 +0000
Files and hashes:         1: 2CEE12D044540710A5876E4246E86C0EF8C37663.crl (hash: 6Deo6IrtvkmDnv2VRVBfUYXzMb7cdkZi5XFg5fT7wrA=)
                          2: 3133312e3139362e3135322e302f32322d3234203d3e20323635393432.roa (hash: MgAyG2HdW+En7WiKeY9+lzuh7ZwZaY72/OezcRL2ApA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/2CEE12D044540710A5876E4246E86C0EF8C37663.crl
                          rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/2CEE12D044540710A5876E4246E86C0EF8C37663.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CEE12D044540710A5876E4246E86C0EF8C37663.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 05:06:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:88:61:f5:05:03:de:37:be:01:c1:c4:00:26:05:67:0a:af:c6:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CEE12D044540710A5876E4246E86C0EF8C37663
        Validity
            Not Before: Nov  3 01:06:31 2026 GMT
            Not After : Nov  4 05:06:31 2026 GMT
        Subject: CN=61514F8219D4B8FF9F04A2A1456DA989B8A56A74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:54:c7:2a:45:eb:c7:c8:d8:1a:e5:a0:5b:3a:
                    0e:69:7f:b8:c6:c2:b7:f2:ac:a1:c9:2e:6e:c4:e3:
                    8a:5d:bc:a4:a7:1d:97:38:01:f4:71:9a:b1:c1:81:
                    9e:14:66:cc:69:e2:ca:e1:ab:2f:a6:bf:b7:71:c0:
                    59:a7:d4:9d:a2:ec:6a:28:04:01:bb:12:03:c7:8c:
                    7a:be:3a:38:6d:fe:c9:49:34:5e:ce:f4:68:c8:3a:
                    c3:89:21:4c:c9:58:3f:14:7b:90:f9:40:46:bf:fb:
                    74:57:5f:50:b1:28:17:f7:59:a9:ba:cd:92:c3:d1:
                    97:4e:46:5d:ee:6a:df:d7:84:f0:bd:db:9f:17:2e:
                    5b:bf:61:69:b3:2f:b1:b9:2e:de:cd:0c:ff:67:d5:
                    8c:79:95:47:63:d0:57:6e:e9:1e:cd:61:1d:e5:b2:
                    a1:6c:51:d3:0b:d7:b6:56:ab:e0:68:f1:64:bd:ca:
                    9e:2a:61:05:7f:97:64:73:25:51:25:96:c6:74:69:
                    b7:b5:34:84:10:74:4e:77:4b:51:fa:a9:eb:5c:ad:
                    1e:49:44:70:ed:71:6c:8f:2f:c2:54:a2:f9:90:24:
                    5e:c1:68:e8:5b:ee:f6:54:9a:93:4b:d0:e0:af:f0:
                    68:a1:81:3e:09:67:6d:47:90:fa:76:d5:5a:6e:45:
                    7c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:51:4F:82:19:D4:B8:FF:9F:04:A2:A1:45:6D:A9:89:B8:A5:6A:74
            X509v3 Authority Key Identifier:
                keyid:2C:EE:12:D0:44:54:07:10:A5:87:6E:42:46:E8:6C:0E:F8:C3:76:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/2CEE12D044540710A5876E4246E86C0EF8C37663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CEE12D044540710A5876E4246E86C0EF8C37663.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/2CEE12D044540710A5876E4246E86C0EF8C37663.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:fe:94:1f:83:ca:f7:12:de:0c:6e:fd:60:40:84:98:77:29:
         b7:57:dc:41:82:df:21:e0:6b:c5:17:01:f8:dd:b1:d4:c6:83:
         6e:af:65:b2:70:bc:35:7d:56:dc:bc:7d:ca:07:ef:45:75:5f:
         25:40:bf:b5:1d:41:73:10:65:70:53:db:c6:5d:f8:7e:9c:c6:
         3e:1e:31:e3:c0:2a:47:6a:36:df:c2:f1:e2:2f:a9:13:73:be:
         36:b6:31:6f:4a:4c:2d:62:cc:24:e0:26:bb:40:0b:db:f5:34:
         f4:c6:a5:6b:dc:66:96:a4:37:0b:3b:94:b2:eb:2b:28:80:73:
         c1:f2:b7:c5:64:bd:85:99:7d:99:b3:f1:a7:c3:70:f6:9e:f5:
         4f:f7:c5:ea:33:ff:d4:78:c1:f3:a2:ce:9e:7e:f4:42:a7:34:
         cf:42:f9:01:ef:56:d3:32:47:ac:bf:7d:84:4e:1a:a4:87:e5:
         1a:19:c0:25:b8:9b:f9:42:43:5b:dc:7a:24:37:a5:36:c4:4a:
         e1:28:c0:81:71:51:64:89:f7:79:c2:da:48:3e:fd:01:ec:c3:
         3d:26:91:2a:54:3d:c9:01:36:53:62:e7:75:7a:28:2f:23:05:
         ce:15:ba:ae:ff:83:52:9a:20:79:a7:98:f6:3c:e2:af:ab:78:
         be:35:b6:6c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUbIhh9QUD3je+AcHEACYFZwqvxu0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNFRTEyRDA0NDU0MDcxMEE1ODc2RTQyNDZFODZDMEVG
OEMzNzY2MzAeFw0yNjExMDMwMTA2MzFaFw0yNjExMDQwNTA2MzFaMDMxMTAvBgNV
BAMTKDYxNTE0RjgyMTlENEI4RkY5RjA0QTJBMTQ1NkRBOTg5QjhBNTZBNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVVMcqRevHyNga5aBbOg5pf7jG
wrfyrKHJLm7E44pdvKSnHZc4AfRxmrHBgZ4UZsxp4srhqy+mv7dxwFmn1J2i7Goo
BAG7EgPHjHq+Ojht/slJNF7O9GjIOsOJIUzJWD8Ue5D5QEa/+3RXX1CxKBf3Wam6
zZLD0ZdORl3uat/XhPC9258XLlu/YWmzL7G5Lt7NDP9n1Yx5lUdj0Fdu6R7NYR3l
sqFsUdML17ZWq+Bo8WS9yp4qYQV/l2RzJVEllsZ0abe1NIQQdE53S1H6qetcrR5J
RHDtcWyPL8JUovmQJF7BaOhb7vZUmpNL0OCv8GihgT4JZ21HkPp21VpuRXwzAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUYVFPghnUuP+fBKKhRW2pibilanQwHwYDVR0j
BBgwFoAULO4S0ERUBxClh25CRuhsDvjDdmMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzRhekViY1Y2Z3lyWHpGdkIxUDhDWVIyV1dMYTluZFRvSHd4WVY3WHNN
QVAvMC8yQ0VFMTJEMDQ0NTQwNzEwQTU4NzZFNDI0NkU4NkMwRUY4QzM3NjYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDRUUxMkQwNDQ1NDA3MTBB
NTg3NkU0MjQ2RTg2QzBFRjhDMzc2NjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QzRhekViY1Y2Z3lyWHpGdkIxUDhDWVIyV1dMYTluZFRvSHd4WVY3WHNNQVAvMC8y
Q0VFMTJEMDQ0NTQwNzEwQTU4NzZFNDI0NkU4NkMwRUY4QzM3NjYzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKP6UH4PK9xLeDG79YECEmHcpt1fcQYLfIeBrxRcB+N2x1MaDbq9lsnC8NX1W
3Lx9ygfvRXVfJUC/tR1BcxBlcFPbxl34fpzGPh4x48AqR2o238Lx4i+pE3O+NrYx
b0pMLWLMJOAmu0AL2/U09Mala9xmlqQ3CzuUsusrKIBzwfK3xWS9hZl9mbPxp8Nw
9p71T/fF6jP/1HjB86LOnn70Qqc0z0L5Ae9W0zJHrL99hE4apIflGhnAJbib+UJD
W9x6JDelNsRK4SjAgXFRZIn3ecLaSD79AezDPSaRKlQ9yQE2U2LndXooLyMFzhW6
rv+DUpogeaeY9jzir6t4vjW2bA==
-----END CERTIFICATE-----
Generated at Tue Nov 3 19:44:41 2026 by rpki-client