Error: rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
File:                     D7F3F67EA800504F23795E22991815F9E686C811.mft (raw, json)
Hash identifier:          liM5PPZcmRwppAZCUXUAG83wAl7FamR8i4IRBB2WvZM=
Subject key identifier:   24:CC:D2:29:26:1E:F3:C4:8B:8E:69:81:FD:1D:73:83:41:1E:DB:97
Authority key identifier: D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11
Certificate issuer:       /CN=D7F3F67EA800504F23795E22991815F9E686C811
Certificate serial:       44BF0A819A0FD69F63A2478242FE34D0A5B62918
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
Manifest number:          04E6
Signing time:             Sun 01 Nov 2026 15:20:00 +0000
Manifest this update:     Sun 01 Nov 2026 15:15:00 +0000
Manifest next update:     Mon 02 Nov 2026 19:10:00 +0000
Files and hashes:         1: 3139312e3234332e33382e302f32342d3234203d3e20323633343932.roa (hash: 5MtUrib3S8mt5AG/RoO3Nf7Xe8+aMtCoYcP1KGRKM5M=)
                          2: 3139312e3234332e33362e302f32332d3233203d3e20323633343932.roa (hash: MdX+ghWTHdaghn/+1f289WsoGie1puCHwMvayR6UBbo=)
                          3: 3139312e3234332e33372e302f32342d3234203d3e20323633343932.roa (hash: gGjNDilJvHg9VXQ5PJNA0dI2kci5BKyslQM81R+6iSk=)
                          4: 323830343a313262303a3a2f33322d3332203d3e20323633343932.roa (hash: w6x88Y8F2UoFOh2FhmiIRYRACnZ/8l1VFzDF5p6L8sY=)
                          5: 3139312e3234332e33392e302f32342d3234203d3e20323633343932.roa (hash: dT/OQ0caLNJNzu5vr5CsHKBQnF7R/bkS8yGTDfRmzw0=)
                          6: D7F3F67EA800504F23795E22991815F9E686C811.crl (hash: 5qZtm2f0DQjgiOAg9vajLJhevTikhbotKYrAJA2esy4=)
                          7: 3139312e3234332e33362e302f32342d3234203d3e20323633343932.roa (hash: ztuK1y6TzrnBV2BGxQ4WtWxNXu99oTuXmP5v0i65W/U=)
                          8: 3139312e3234332e33362e302f32322d3232203d3e20323633343932.roa (hash: q9bc6giK5SahvFhYN5/MsoRGDnh41j9MifCw7Cd12SM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl
                          rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:bf:0a:81:9a:0f:d6:9f:63:a2:47:82:42:fe:34:d0:a5:b6:29:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7F3F67EA800504F23795E22991815F9E686C811
        Validity
            Not Before: Nov  1 15:15:00 2026 GMT
            Not After : Nov  2 19:10:00 2026 GMT
        Subject: CN=24CCD229261EF3C48B8E6981FD1D7383411EDB97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e4:be:cc:02:9c:ef:b9:25:64:f9:db:42:36:
                    8d:bf:72:e3:07:cd:82:b6:a8:bf:33:49:bd:d5:a7:
                    e6:55:96:7f:2b:ef:38:10:bc:a7:25:ac:71:af:86:
                    49:55:68:c7:c6:3b:13:4b:f2:73:d8:8b:8c:ed:11:
                    92:8b:d5:15:31:89:85:fc:6e:33:5c:22:0a:cc:41:
                    a8:9d:c6:fd:37:27:e9:b5:cd:3b:75:08:48:86:7d:
                    28:29:10:81:16:a7:d7:6a:e2:8a:ea:3c:9e:82:e2:
                    c1:00:e0:fc:a4:37:55:5f:a9:2d:48:1c:86:d4:60:
                    78:26:48:84:e8:dc:88:0d:8d:64:ff:c7:3c:75:95:
                    6a:59:7c:34:c9:61:08:8a:cb:fc:9f:30:13:e5:8d:
                    20:ac:7f:65:15:fc:15:9b:c8:34:c6:ac:56:81:19:
                    76:11:8f:dc:b9:3b:d5:3a:9f:08:72:b0:48:a7:5e:
                    ed:7d:9a:14:30:3f:3a:38:a3:66:60:0e:8d:28:f7:
                    3e:8a:81:d3:e1:24:5a:94:45:ff:cb:89:35:f4:15:
                    48:bb:90:b6:48:e1:0b:a8:81:e3:08:b1:77:2a:e9:
                    b7:26:87:a6:1f:3f:eb:5e:7b:18:29:d8:46:6e:db:
                    fa:14:dc:a9:d9:9d:12:20:94:57:26:42:6b:00:1c:
                    37:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CC:D2:29:26:1E:F3:C4:8B:8E:69:81:FD:1D:73:83:41:1E:DB:97
            X509v3 Authority Key Identifier:
                keyid:D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:ab:38:f4:2c:83:2f:b3:c6:20:f8:65:4f:be:3d:e1:d9:b3:
         18:0b:a5:99:11:fb:de:17:b3:3d:31:63:ef:55:47:dc:e6:43:
         ee:9b:19:15:04:56:fd:45:87:e7:de:da:7e:1e:d1:49:71:3c:
         31:9a:61:4e:cc:6a:1f:b8:94:bf:9e:93:22:fd:bb:bc:40:a7:
         8d:4a:3d:f2:8d:6a:17:18:f7:99:b9:55:f5:a6:5e:4d:67:1e:
         d3:1b:b1:f2:0e:6d:04:7d:5d:fe:ee:1d:fd:43:02:6e:1a:13:
         53:95:95:8c:c1:3f:96:72:9f:63:b6:c3:c5:05:4c:92:45:3c:
         e4:54:d8:ef:d0:35:a0:b4:8c:6b:d9:2a:46:6a:a2:ce:bb:cf:
         1a:2b:4f:69:b7:57:bf:95:f6:c3:13:33:37:e2:0a:b7:72:a7:
         a7:13:5c:64:b7:4b:bd:da:93:bc:d9:78:ed:ed:06:f1:58:01:
         1b:0b:19:43:ed:13:3b:ab:f0:38:74:3d:e1:96:6e:ba:ee:40:
         df:b4:d6:9b:53:6c:8a:f4:72:8f:d3:5b:8d:cb:79:26:95:2d:
         9f:a3:9e:c8:8c:29:d4:08:9e:af:c0:1d:3d:1f:25:0c:08:0d:
         75:67:0d:80:8d:3e:6f:e8:1c:a9:fe:88:94:eb:ce:c4:f1:75:
         3e:80:4b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 07:13:15 2026 by rpki-client