Error: rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1/E1470F370CA043FEC72078800782F80E03725DD0.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1/E1470F370CA043FEC72078800782F80E03725DD0.mft
File:                     E1470F370CA043FEC72078800782F80E03725DD0.mft (raw, json)
Hash identifier:          vgFf4O30QDRKGMjU5A5KgEo5i+cXu4V4p14Qn/WBjAo=
Subject key identifier:   C6:17:E0:71:36:28:34:A2:6A:F1:09:95:CE:F3:72:C4:7C:EC:82:58
Authority key identifier: E1:47:0F:37:0C:A0:43:FE:C7:20:78:80:07:82:F8:0E:03:72:5D:D0
Certificate issuer:       /CN=E1470F370CA043FEC72078800782F80E03725DD0
Certificate serial:       2D851A70024BB4744A392DC7CBB56637A24F3C87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1470F370CA043FEC72078800782F80E03725DD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1/E1470F370CA043FEC72078800782F80E03725DD0.mft
Manifest number:          04E2
Signing time:             Sat 31 Oct 2026 19:09:34 +0000
Manifest this update:     Sat 31 Oct 2026 19:04:34 +0000
Manifest next update:     Sun 01 Nov 2026 22:19:34 +0000
Files and hashes:         1: E1470F370CA043FEC72078800782F80E03725DD0.crl (hash: 2cWmSKiLMnI7uGgWiVMhrJNkiBjhgRT6SAOLdTFY/pE=)
                          2: 3137372e3132382e37322e302f32312d3234203d3e203532363433.roa (hash: v90QYSlIRViRyhBe+zGAaBCDPdDLPp2Y3xwP8T8vlAQ=)
                          3: 323830343a336630303a3a2f33322d3438203d3e203532363433.roa (hash: B9VChABabdo/BLEcylidhs1gVrc5tku43bWg5SfsD7M=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1/E1470F370CA043FEC72078800782F80E03725DD0.crl
                          rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1/E1470F370CA043FEC72078800782F80E03725DD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1470F370CA043FEC72078800782F80E03725DD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 22:19:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:85:1a:70:02:4b:b4:74:4a:39:2d:c7:cb:b5:66:37:a2:4f:3c:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1470F370CA043FEC72078800782F80E03725DD0
        Validity
            Not Before: Oct 31 19:04:34 2026 GMT
            Not After : Nov  1 22:19:34 2026 GMT
        Subject: CN=C617E071362834A26AF10995CEF372C47CEC8258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ff:f7:46:ae:d6:69:46:e9:8b:4b:9d:68:ee:
                    e2:25:ce:8d:0c:25:39:eb:cc:f4:21:de:59:6b:30:
                    54:7e:c0:c0:07:1f:c9:42:63:f0:9d:b5:2c:07:0a:
                    72:1a:35:87:4f:6b:aa:54:56:b4:0a:f7:36:74:84:
                    af:df:a7:fa:3c:7b:d3:9a:ed:d9:e6:b0:ca:73:5b:
                    54:50:8e:b7:6a:58:10:1a:4a:de:9a:98:3e:30:d8:
                    2d:d9:d4:57:e2:66:77:0e:fd:b0:57:cd:2f:6b:df:
                    c2:a2:9c:4d:03:4f:97:0a:9a:f4:a9:f9:bf:17:08:
                    17:b7:81:b0:97:f8:4e:fd:97:e4:7e:3c:09:c6:d5:
                    7a:c3:48:1f:29:36:ec:b5:7d:17:c4:49:52:2d:73:
                    e3:13:8d:41:db:92:2d:6e:1a:eb:a1:5d:fa:36:26:
                    cb:ec:08:fa:3f:50:8e:9f:1e:0c:ea:9f:aa:26:40:
                    74:e7:10:ae:03:f9:a2:c8:16:6c:58:41:83:8e:48:
                    3d:73:91:55:fb:47:aa:0b:46:2c:70:dd:f8:3d:69:
                    f8:6c:d9:40:ac:e5:c7:e6:75:cb:96:0b:35:82:e1:
                    39:8d:a6:17:51:52:66:57:8c:1a:49:28:e5:f7:85:
                    36:30:1a:5b:b3:8b:57:e4:19:42:92:de:6b:73:41:
                    e0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:17:E0:71:36:28:34:A2:6A:F1:09:95:CE:F3:72:C4:7C:EC:82:58
            X509v3 Authority Key Identifier:
                keyid:E1:47:0F:37:0C:A0:43:FE:C7:20:78:80:07:82:F8:0E:03:72:5D:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1/E1470F370CA043FEC72078800782F80E03725DD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1470F370CA043FEC72078800782F80E03725DD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1/E1470F370CA043FEC72078800782F80E03725DD0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:be:3d:17:ee:89:74:8e:2c:c8:b5:0a:c7:78:85:56:36:1a:
         43:d7:24:d6:b2:16:bc:a5:0d:4a:5b:a8:8c:ab:7b:4f:12:24:
         58:4f:db:d3:9a:17:f7:cd:f1:8e:f4:ca:37:3b:ff:b9:0f:7e:
         0d:1b:7f:6f:fe:c3:a5:ef:bf:34:a4:96:1c:97:19:78:66:6b:
         08:7e:79:c8:b3:a9:13:c9:56:93:74:9f:14:8e:0c:a0:1f:2c:
         63:23:75:a5:67:ad:81:5e:bb:b9:eb:04:87:fe:de:24:58:8b:
         a0:ef:22:d7:ae:77:c4:34:e5:16:02:9e:c8:df:75:f8:8d:32:
         11:0e:16:e1:3d:d3:a6:3a:c4:f0:fe:36:58:66:f3:d9:da:14:
         f7:4d:29:f1:33:2a:50:c5:46:56:9d:21:89:42:f2:6b:7b:70:
         29:90:ba:15:a1:e5:e0:5d:3b:2d:28:79:cf:8a:ff:0d:92:f2:
         db:25:ef:f5:13:9f:d4:98:cb:4b:96:6b:d2:1b:40:85:43:b1:
         2a:69:d9:2c:74:18:5f:57:bd:d7:0f:88:71:58:12:ad:57:2e:
         e3:fc:b9:6a:ef:1c:25:b7:8d:01:83:b9:4b:c9:16:74:34:a4:
         65:e9:e6:d0:be:2f:53:8a:37:1a:50:0f:b0:40:3b:b2:06:de:
         26:a4:21:31
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULYUacAJLtHRKOS3Hy7VmN6JPPIcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTE0NzBGMzcwQ0EwNDNGRUM3MjA3ODgwMDc4MkY4MEUw
MzcyNUREMDAeFw0yNjEwMzExOTA0MzRaFw0yNjExMDEyMjE5MzRaMDMxMTAvBgNV
BAMTKEM2MTdFMDcxMzYyODM0QTI2QUYxMDk5NUNFRjM3MkM0N0NFQzgyNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO//dGrtZpRumLS51o7uIlzo0M
JTnrzPQh3llrMFR+wMAHH8lCY/CdtSwHCnIaNYdPa6pUVrQK9zZ0hK/fp/o8e9Oa
7dnmsMpzW1RQjrdqWBAaSt6amD4w2C3Z1FfiZncO/bBXzS9r38KinE0DT5cKmvSp
+b8XCBe3gbCX+E79l+R+PAnG1XrDSB8pNuy1fRfESVItc+MTjUHbki1uGuuhXfo2
JsvsCPo/UI6fHgzqn6omQHTnEK4D+aLIFmxYQYOOSD1zkVX7R6oLRixw3fg9afhs
2UCs5cfmdcuWCzWC4TmNphdRUmZXjBpJKOX3hTYwGluzi1fkGUKS3mtzQeCbAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUxhfgcTYoNKJq8QmVzvNyxHzsglgwHwYDVR0j
BBgwFoAU4UcPNwygQ/7HIHiAB4L4DgNyXdAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmdTRzY2YjNOZEJkdzFSS3JLc1JrZ0hVVGtmb1hEMVY3RE5vOFdXc0Uy
d20vMS9FMTQ3MEYzNzBDQTA0M0ZFQzcyMDc4ODAwNzgyRjgwRTAzNzI1REQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UxNDcwRjM3MENBMDQzRkVD
NzIwNzg4MDA3ODJGODBFMDM3MjVERDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RmdTRzY2YjNOZEJkdzFSS3JLc1JrZ0hVVGtmb1hEMVY3RE5vOFdXc0Uyd20vMS9F
MTQ3MEYzNzBDQTA0M0ZFQzcyMDc4ODAwNzgyRjgwRTAzNzI1REQwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAT749F+6JdI4syLUKx3iFVjYaQ9ck1rIWvKUNSluojKt7TxIkWE/b05oX983x
jvTKNzv/uQ9+DRt/b/7Dpe+/NKSWHJcZeGZrCH55yLOpE8lWk3SfFI4MoB8sYyN1
pWetgV67uesEh/7eJFiLoO8i1653xDTlFgKeyN91+I0yEQ4W4T3TpjrE8P42WGbz
2doU900p8TMqUMVGVp0hiULya3twKZC6FaHl4F07LSh5z4r/DZLy2yXv9ROf1JjL
S5Zr0htAhUOxKmnZLHQYX1e91w+IcVgSrVcu4/y5au8cJbeNAYO5S8kWdDSkZenm
0L4vU4o3GlAPsEA7sgbeJqQhMQ==
-----END CERTIFICATE-----
Generated at Sun Nov 1 01:53:30 2026 by rpki-client