Error: rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.mft
File:                     D108A6A498B3839B4F3F805ACCAE934F8CF79D90.mft (raw, json)
Hash identifier:          OKWnViI0gzBANRvzuiYrDQvzMnWcUwyiAUQ4m/mm4ZA=
Subject key identifier:   A6:A4:50:5A:F0:D3:73:F2:3D:B2:57:3F:FD:C1:D0:95:B0:0B:6F:57
Authority key identifier: D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90
Certificate issuer:       /CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
Certificate serial:       4F905BECE047FE03533E07F5F331D5BCD7DB8749
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.mft
Manifest number:          04E7
Signing time:             Mon 02 Nov 2026 08:55:33 +0000
Manifest this update:     Mon 02 Nov 2026 08:50:33 +0000
Manifest next update:     Tue 03 Nov 2026 10:19:33 +0000
Files and hashes:         1: 323830343a323736633a633030303a3a2f33342d3334203d3e20323633393030.roa (hash: 0LTOlOaeRbA6/uTvNnoDtgblixUDN38x7QxfLrsO258=)
                          2: 3133382e3230342e3134382e302f32332d3233203d3e20323633393030.roa (hash: cJJCDcLUZx6EPTfQDymU//IFP82JMnjWgsuGz1LDzqQ=)
                          3: 323830343a323736633a3a2f33342d3334203d3e20323633393030.roa (hash: oCva+oHNv0+ZJbU38LJdRQuA2Ql50pRjCVyxuoOcQCE=)
                          4: D108A6A498B3839B4F3F805ACCAE934F8CF79D90.crl (hash: 9WoeawpQrWPVWWekjycphDWvwwn1hztMRjuvpxH2H84=)
                          5: 3133382e3230342e3134382e302f32322d3232203d3e20323633393030.roa (hash: 9kINISilKbVpCuVffTnjEFQOnfALJ+brWxwdDZjx9Ik=)
                          6: 3133382e3230342e3135302e302f32342d3234203d3e20323633393030.roa (hash: vKokGfaWt6xT5kLhAun8xGXYKr5p3um+3fjdcXQmIZc=)
                          7: 323830343a323736633a343030303a3a2f33342d3334203d3e20323633393030.roa (hash: kcYyvBNUpYklcFyLBq1gp5/8Cb1F0qrv9/QI+k1yj1w=)
                          8: 3133382e3230342e3134382e302f32342d3234203d3e20323633393030.roa (hash: dq6l5KCN+TRaZYIyMUPjw4fxNEul9GhojkOls1lGoPs=)
                          9: 323830343a323736633a383030303a3a2f33342d3334203d3e20323633393030.roa (hash: a0RllXBae1ClBRB57zhrjRVGuL+DJ9+WrdCJ9zwyRK4=)
                          10: 3133382e3230342e3135312e302f32342d3234203d3e20323633393030.roa (hash: XF/QLY4cY/YDUBw6TYeh+yp6b5zNaggBxj5gHtrQtNA=)
                          11: 3133382e3230342e3134392e302f32342d3234203d3e20323633393030.roa (hash: d0CFGKDNfYO1pdTW+ggUvXhj8wT7ILhxMmDII1vJjZY=)
                          12: 3133382e3230342e3135302e302f32332d3233203d3e20323633393030.roa (hash: l/AtKOd3MwCWF4uiQHBduktRq3R4Xl2PyvJoAzrkphE=)
                          13: 323830343a323736633a3a2f33322d3332203d3e20323633393030.roa (hash: fPfObtuEK9bIx/ehW1NrWCQz9S2s+7JGbbaFqAKjnLA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.crl
                          rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 10:19:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:90:5b:ec:e0:47:fe:03:53:3e:07:f5:f3:31:d5:bc:d7:db:87:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
        Validity
            Not Before: Nov  2 08:50:33 2026 GMT
            Not After : Nov  3 10:19:33 2026 GMT
        Subject: CN=A6A4505AF0D373F23DB2573FFDC1D095B00B6F57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:af:d9:49:ba:3d:e4:aa:ef:fc:8f:85:6c:e3:
                    26:c9:77:3a:e1:ee:8d:bd:59:69:f6:36:50:97:7d:
                    e7:74:c5:ff:9b:2d:ec:15:f7:35:f5:56:50:6e:ba:
                    a0:3d:fe:0d:1c:bd:bf:c2:b8:b1:6d:dc:c4:4c:4d:
                    18:60:8b:76:1d:d1:fa:93:01:49:3f:bf:f1:58:65:
                    53:9a:2b:f7:d5:1f:b5:53:f5:63:dd:c2:c0:58:e2:
                    86:9f:ae:97:56:b3:9d:8b:02:66:50:63:74:0e:d0:
                    e5:38:5e:5f:54:37:14:3c:27:6f:d4:88:99:40:50:
                    e8:16:0d:10:32:96:26:79:da:1e:78:12:2f:bc:cc:
                    ec:93:27:51:29:3f:9b:ff:80:08:c1:5e:cb:18:4b:
                    5a:72:56:7d:a0:f7:96:02:c5:c6:8d:0e:93:17:7b:
                    cc:4f:2e:39:e7:84:5c:45:1e:63:a1:70:17:5d:c9:
                    35:35:21:50:8c:85:35:b7:59:49:5d:84:72:e4:f2:
                    89:3e:e4:23:22:eb:ca:30:b3:1a:42:0a:99:3b:e3:
                    ab:cf:57:70:4c:59:eb:4a:d4:8f:3e:c8:f7:09:cd:
                    e2:f1:93:c7:e6:d4:f5:a1:ec:48:1e:7e:14:3f:ca:
                    de:8f:53:7f:f0:3a:0b:32:0b:a8:3c:04:71:b7:fa:
                    58:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A4:50:5A:F0:D3:73:F2:3D:B2:57:3F:FD:C1:D0:95:B0:0B:6F:57
            X509v3 Authority Key Identifier:
                keyid:D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:e4:f7:0b:a5:31:aa:e1:e3:dd:14:3f:23:f4:53:33:56:d8:
         49:38:bb:6d:c5:b1:4e:7c:63:0d:80:1b:52:12:e1:50:25:17:
         a7:31:ce:85:79:bc:1a:cc:22:9c:5c:ea:e8:ad:79:e4:68:c4:
         f0:7f:35:a4:8f:6c:2d:66:4a:a9:7c:85:e9:82:d6:49:58:d2:
         89:4f:cd:97:76:09:0c:70:fd:00:31:2b:d1:19:41:2a:7b:a9:
         2b:90:e8:d8:9b:fe:a9:42:25:de:e9:c6:e2:47:26:ca:d4:29:
         26:fc:8a:f7:25:4e:4a:86:c4:d0:65:3b:98:85:f2:3b:89:b6:
         b8:5d:9c:6e:56:a2:92:3a:c2:ff:cc:23:ea:0c:33:75:50:27:
         58:6b:b0:fc:0b:50:f3:31:81:1b:6d:ad:58:38:c7:b7:73:e4:
         ea:7d:76:ad:aa:c1:6d:ca:5b:a6:d2:2e:8f:08:9e:fc:de:de:
         17:9b:24:cc:a8:a8:2a:f8:5f:73:83:09:10:00:e2:44:e0:f0:
         01:5f:f6:18:03:a1:d1:4e:4b:ed:a4:db:7a:c4:20:2d:97:b7:
         b7:ec:aa:5e:fe:8c:67:f3:47:7c:b0:c2:e6:4b:70:d0:82:53:
         0c:c4:92:94:22:06:38:43:fa:d8:f7:92:cd:11:e4:9a:bd:cf:
         22:6a:cc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 14:30:05 2026 by rpki-client