Error: rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
File:                     4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft (raw, json)
Hash identifier:          3p8kroMoKW9RB3HX+q3VV6M94shySvvIg52iIueHZZs=
Subject key identifier:   3F:50:9A:8E:03:CD:C1:7D:9A:61:3F:8E:50:A2:01:06:ED:9C:CC:CF
Authority key identifier: 43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63
Certificate issuer:       /CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
Certificate serial:       18172B9C8218E873731DC7143DDA8FA8034123DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
Manifest number:          04E8
Signing time:             Wed 04 Nov 2026 06:30:00 +0000
Manifest this update:     Wed 04 Nov 2026 06:25:00 +0000
Manifest next update:     Thu 05 Nov 2026 08:49:00 +0000
Files and hashes:         1: 3137392e3130362e31362e302f32302d3234203d3e20323632353935.roa (hash: JhFgZ9iQt2Ligrxes5osFMqnyFJ6oIUaepakI85FJhs=)
                          2: 323830343a3639303a3a2f33322d3430203d3e20323632353935.roa (hash: XNmpKrhIioidYT0WbDSH+38y4AsFqdpVex8l5oWEx4s=)
                          3: 4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl (hash: j/fKyg4HFOhgL/Jxogv451JBhanZYIPAkXTyB7EH/7A=)
                          4: 3137372e38352e302e302f32312d3234203d3e20323632353935.roa (hash: 1FDPtnL/oiYQzGlPc4ijuZvBayQlDfq3fYmNZ7nmZrg=)
                          5: 3137302e37392e3232342e302f32322d3234203d3e20323632353935.roa (hash: qEL+yyrqlhbf2JPDTvvK2N9DKcJFgre2Wy5/bl9UF6I=)
                          6: 3137302e38332e34342e302f32322d3234203d3e20323632353935.roa (hash: ltlNjmBjNxv/9QTc+0CyILmDJKXwwjOJPrGqWq5UD6s=)
                          7: 3136372e3235302e32302e302f32322d3234203d3e20323632353935.roa (hash: eXgqeb2eJqJb6EmYLX0kled+InXYsUY9wftj5OfeO1k=)
                          8: 34352e3137392e3138302e302f32322d3234203d3e20323632353935.roa (hash: DSIAOHHDtH4HWsBWPwzaFHzBlDruo55nJLmhdype5tA=)
                          9: 3133382e3132312e31362e302f32322d3234203d3e20323632353935.roa (hash: i6QY2N/xunlhLUolwp4NC0xURT380/7IasvrTmTUHKc=)
                          10: 34352e3136322e3138382e302f32322d3234203d3e20323632353935.roa (hash: W6lb5B+mO6JbiZRX0GW1Uhy+hiuO1g15/lQmnXPUJi8=)
                          11: 3133382e302e36342e302f32322d3234203d3e20323632353935.roa (hash: OPoXHe00vBjl8830SVaAnqbieI93+ItDdZaljPUnuH0=)
                          12: 3139312e372e382e302f32312d3234203d3e20323632353935.roa (hash: anK27G2c7vjgfJ1phEjaSMtYINLX8h12I1B+Gxsdj6Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl
                          rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 08:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:17:2b:9c:82:18:e8:73:73:1d:c7:14:3d:da:8f:a8:03:41:23:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
        Validity
            Not Before: Nov  4 06:25:00 2026 GMT
            Not After : Nov  5 08:49:00 2026 GMT
        Subject: CN=3F509A8E03CDC17D9A613F8E50A20106ED9CCCCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2c:f6:f4:21:5a:af:a6:3d:f7:19:cb:d3:23:
                    5f:7b:ea:95:df:c8:8c:fe:da:3f:7f:45:79:b1:db:
                    85:87:6b:b5:44:85:3f:c2:f8:58:b9:9e:92:35:c4:
                    ae:5e:b1:85:b8:49:d6:d0:0a:fd:e5:29:7c:d4:7e:
                    12:4e:9a:ee:e5:36:9a:5f:18:1c:ea:d4:66:85:5f:
                    75:e9:b2:bd:59:fc:4d:05:d6:ae:fc:f2:5d:82:0d:
                    0b:c4:35:df:e4:d2:3e:3d:2f:bd:05:50:b8:f6:1d:
                    89:64:70:b0:9b:d2:a6:05:7f:91:45:9f:8c:75:9a:
                    ab:04:3b:02:1e:d0:40:e5:1b:41:c6:4c:73:7b:e4:
                    5a:10:09:0f:40:fb:7e:b4:01:d4:ae:31:34:22:0a:
                    b2:f8:89:02:a0:e0:0b:f0:7e:6b:51:52:49:19:15:
                    48:ba:71:70:48:b2:fd:06:46:1a:80:c4:78:5b:b6:
                    41:09:9f:01:7e:d7:b6:18:aa:6f:61:ce:e8:db:00:
                    cc:20:f8:ea:66:d3:1e:c1:b6:3b:1d:7c:15:f4:69:
                    ce:66:dc:3d:ff:f2:3e:a4:7a:26:25:49:4d:52:57:
                    98:d0:bb:3b:f1:b7:af:3b:77:f8:b1:66:dd:1b:fb:
                    ce:70:55:53:f7:b0:9c:76:34:b3:b0:ec:81:53:32:
                    08:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:50:9A:8E:03:CD:C1:7D:9A:61:3F:8E:50:A2:01:06:ED:9C:CC:CF
            X509v3 Authority Key Identifier:
                keyid:43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:27:f3:01:a3:25:2e:b9:ee:3b:e6:2d:5d:46:92:7a:e9:53:
         14:0d:6a:90:29:35:bc:55:7b:96:99:20:ae:42:b4:b9:ee:68:
         54:4d:a1:66:0b:78:2b:36:83:4b:8d:d1:09:f7:45:56:88:55:
         0c:6d:71:01:c2:7d:0f:4d:31:d0:6c:01:9f:47:63:36:70:3f:
         4d:59:ed:42:01:85:55:e0:31:03:51:03:37:08:1c:93:a2:d6:
         16:5d:0e:06:36:dc:8b:0d:42:ce:39:af:a4:c5:6d:58:9a:e3:
         ba:7f:ce:6a:d5:15:14:6b:68:64:9b:08:49:29:8c:5c:c7:9d:
         ec:7d:ef:59:8b:18:bc:82:ad:82:05:3f:a9:6f:3e:b4:cf:78:
         81:ce:14:0a:50:3a:a7:e4:a6:2a:91:0f:86:14:72:da:49:f8:
         55:f7:bc:ad:d3:47:e5:15:f9:2b:d9:8d:37:24:96:9c:2d:f6:
         9f:62:1d:76:54:1b:26:53:99:0e:5e:b5:30:3c:46:2c:a3:74:
         1b:4f:4b:d3:d1:6a:91:23:a6:d9:00:21:37:89:3a:ec:62:5b:
         c4:0c:e6:7a:86:1b:51:7c:a3:3b:c0:62:5c:96:da:93:8b:73:
         32:9f:60:15:8a:cb:a1:d0:94:10:df:bf:f2:99:1c:7b:0a:4b:
         1b:c5:06:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:27:57 2026 by rpki-client