Error: rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.mft
File:                     A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.mft (raw, json)
Hash identifier:          8NPoiEatDksB2yTMxxG1hDJFA68f4P0pH4EPhmSOKkM=
Subject key identifier:   DE:18:F6:40:76:39:9B:18:7D:0A:97:98:34:C2:4A:A0:1E:20:93:4C
Authority key identifier: A0:A8:EF:33:7A:CF:86:96:4B:1E:46:A7:D6:BA:5B:0F:94:D8:74:F4
Certificate issuer:       /CN=A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4
Certificate serial:       7801C0DF77370122CBD77E2DD28C7987CFE83C47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.mft
Manifest number:          04E4
Signing time:             Fri 30 Oct 2026 19:19:20 +0000
Manifest this update:     Fri 30 Oct 2026 19:14:20 +0000
Manifest next update:     Sat 31 Oct 2026 22:10:20 +0000
Files and hashes:         1: 323830343a386434303a3a2f33322d3438203d3e20323733333435.roa (hash: g6OZSpwen1cePyDlND9tKg+HeJctA2FCr4CbcxbWtE4=)
                          2: 34352e372e35322e302f32322d3234203d3e20323733333435.roa (hash: NiZJYVVGZ0ftfwXmx9j8c/iOChmGAdbQaXcJVtzmGF0=)
                          3: A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.crl (hash: FL/vZ28DcLfJd7PpraOy+Pi+Hjj+RjO4mD3dvFC+OSE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.crl
                          rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 22:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:01:c0:df:77:37:01:22:cb:d7:7e:2d:d2:8c:79:87:cf:e8:3c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4
        Validity
            Not Before: Oct 30 19:14:20 2026 GMT
            Not After : Oct 31 22:10:20 2026 GMT
        Subject: CN=DE18F64076399B187D0A979834C24AA01E20934C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:66:0f:72:56:af:7d:f1:1f:81:e9:c5:d8:4b:
                    49:70:8e:ae:42:75:ed:e1:e6:fc:8d:43:db:41:4d:
                    c5:bb:be:1d:6f:7d:c3:5a:74:30:b1:76:fc:d7:03:
                    f9:9f:e2:e2:9d:5a:17:f3:56:80:9e:0b:bf:90:af:
                    61:10:93:86:a2:b3:02:28:1f:83:d1:29:28:4b:91:
                    9c:cd:21:7f:78:57:a6:fa:4c:37:4c:90:f2:de:58:
                    a3:30:92:c3:c3:b2:de:5f:84:83:f3:cd:d9:67:82:
                    9a:f9:7e:76:26:bf:14:3a:46:d0:28:28:38:94:d1:
                    ea:c2:a8:fc:ea:6e:d4:94:18:d0:a5:d7:3d:25:d9:
                    7e:4d:07:5a:6a:71:b5:29:de:4d:7a:9a:ad:cd:6f:
                    ab:7b:3b:a1:fb:81:7f:d2:7d:6b:d7:f9:13:64:b9:
                    cd:ae:55:b7:3b:e6:c9:06:ad:e2:c7:82:7f:ef:72:
                    37:79:0f:05:dc:28:96:c7:01:e2:6a:2f:79:c4:c6:
                    db:a8:27:2a:03:68:74:c2:9c:f9:d8:77:df:5e:4a:
                    08:30:83:5a:04:3c:73:59:e3:5a:5a:08:9f:aa:8a:
                    b1:5f:35:4f:e5:02:aa:81:6e:b1:2c:b3:81:a8:90:
                    38:c7:4e:7e:d0:f7:f1:bd:bf:9c:43:9b:d4:0e:c2:
                    75:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:18:F6:40:76:39:9B:18:7D:0A:97:98:34:C2:4A:A0:1E:20:93:4C
            X509v3 Authority Key Identifier:
                keyid:A0:A8:EF:33:7A:CF:86:96:4B:1E:46:A7:D6:BA:5B:0F:94:D8:74:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:8f:5d:b5:b2:27:2e:6b:6d:e2:60:c2:cc:77:23:2e:e1:c9:
         c6:40:f5:1b:4b:b2:38:51:18:3d:a2:7e:eb:a9:9d:06:c1:98:
         e8:69:ca:56:47:8a:7e:a6:43:77:c3:22:0a:74:e4:03:1b:b6:
         2a:39:c1:96:ea:59:a0:0a:45:9e:5a:af:0d:45:4a:57:63:0f:
         03:f1:ed:fd:df:24:10:72:c3:1c:36:08:6e:21:bc:ef:bc:41:
         1b:ab:b2:cf:e3:55:58:56:14:ab:78:6f:5f:be:80:1b:ff:1f:
         31:49:a2:6b:e5:d4:0d:b0:24:53:fc:93:bf:1d:5c:08:df:70:
         9c:4b:3a:70:c2:4b:91:2b:6f:67:e5:d0:12:f3:cb:a7:71:02:
         7f:ff:7a:c5:eb:ab:66:67:cb:12:b7:86:80:94:5b:be:26:d1:
         ce:2d:12:65:b3:f7:de:10:68:5b:db:94:33:90:df:1c:ca:9d:
         8c:84:ee:b0:2d:8b:21:92:b6:72:08:ee:ec:bb:e1:a0:b2:c7:
         b6:73:27:f7:12:16:d9:ce:5b:f4:cd:f4:b5:54:94:d3:9c:5f:
         6d:17:6f:c1:a7:94:b7:9a:4a:ab:11:46:94:98:b4:56:a0:dc:
         f6:a8:d1:e7:ad:ed:dd:bb:0a:b6:5d:7a:6d:4e:b6:11:2f:a5:
         f4:79:37:92
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUeAHA33c3ASLL134t0ox5h8/oPEcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBBOEVGMzM3QUNGODY5NjRCMUU0NkE3RDZCQTVCMEY5
NEQ4NzRGNDAeFw0yNjEwMzAxOTE0MjBaFw0yNjEwMzEyMjEwMjBaMDMxMTAvBgNV
BAMTKERFMThGNjQwNzYzOTlCMTg3RDBBOTc5ODM0QzI0QUEwMUUyMDkzNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Zg9yVq998R+B6cXYS0lwjq5C
de3h5vyNQ9tBTcW7vh1vfcNadDCxdvzXA/mf4uKdWhfzVoCeC7+Qr2EQk4aiswIo
H4PRKShLkZzNIX94V6b6TDdMkPLeWKMwksPDst5fhIPzzdlngpr5fnYmvxQ6RtAo
KDiU0erCqPzqbtSUGNCl1z0l2X5NB1pqcbUp3k16mq3Nb6t7O6H7gX/SfWvX+RNk
uc2uVbc75skGreLHgn/vcjd5DwXcKJbHAeJqL3nExtuoJyoDaHTCnPnYd99eSggw
g1oEPHNZ41paCJ+qirFfNU/lAqqBbrEss4GokDjHTn7Q9/G9v5xDm9QOwnXNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU3hj2QHY5mxh9CpeYNMJKoB4gk0wwHwYDVR0j
BBgwFoAUoKjvM3rPhpZLHkan1rpbD5TYdPQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXhhbVJHZTN6QmlKcHBDUkJUNUFYVTJXdzVGVWI0dFlobVVIeUwzTlJj
cGgvMS9BMEE4RUYzMzdBQ0Y4Njk2NEIxRTQ2QTdENkJBNUIwRjk0RDg3NEY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwQThFRjMzN0FDRjg2OTY0
QjFFNDZBN0Q2QkE1QjBGOTREODc0RjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RXhhbVJHZTN6QmlKcHBDUkJUNUFYVTJXdzVGVWI0dFlobVVIeUwzTlJjcGgvMS9B
MEE4RUYzMzdBQ0Y4Njk2NEIxRTQ2QTdENkJBNUIwRjk0RDg3NEY0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoY9dtbInLmtt4mDCzHcjLuHJxkD1G0uyOFEYPaJ+66mdBsGY6GnKVkeKfqZD
d8MiCnTkAxu2KjnBlupZoApFnlqvDUVKV2MPA/Ht/d8kEHLDHDYIbiG877xBG6uy
z+NVWFYUq3hvX76AG/8fMUmia+XUDbAkU/yTvx1cCN9wnEs6cMJLkStvZ+XQEvPL
p3ECf/96xeurZmfLEreGgJRbvibRzi0SZbP33hBoW9uUM5DfHMqdjITusC2LIZK2
cgju7LvhoLLHtnMn9xIW2c5b9M30tVSU05xfbRdvwaeUt5pKqxFGlJi0VqDc9qjR
563t3bsKtl16bU62ES+l9Hk3kg==
-----END CERTIFICATE-----
Generated at Sat Oct 31 11:22:01 2026 by rpki-client