Error: rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.mft
File:                     1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.mft (raw, json)
Hash identifier:          QEa8OlgLC284JSz5ifnnRftV93XuKrfQskUipsYsxW8=
Subject key identifier:   FD:0A:A3:90:46:6B:C2:AB:7A:5B:AC:67:86:CA:BE:F2:06:09:51:FF
Authority key identifier: 1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30
Certificate issuer:       /CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
Certificate serial:       4EACB9DED9EC466037A55379C64070B45279A98F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.mft
Manifest number:          04E3
Signing time:             Thu 29 Oct 2026 23:00:00 +0000
Manifest this update:     Thu 29 Oct 2026 22:55:00 +0000
Manifest next update:     Sat 31 Oct 2026 01:22:00 +0000
Files and hashes:         1: 3137302e3233382e3133392e302f32342d3234203d3e20323636333230.roa (hash: wReCNSOvpRr55MYLx0kF48lopUIeqRhe1hYSk0MsjVw=)
                          2: 3137302e3233382e3133362e302f32332d3233203d3e20323636333230.roa (hash: FlnQNNut+j/0Vybq1+OCTyV66EdfaaWlQnHDBMZvdfo=)
                          3: 1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl (hash: QTtIkL4B856My3sZdt4EBa1NL4rHmNyhcTM0v5l4svM=)
                          4: 3137302e3233382e3133382e302f32332d3233203d3e20323636333230.roa (hash: UIZgcCnzNJV03SgAICDqQgUVoYxGcAsExp0vll6Aqp4=)
                          5: 323830343a333630303a3a2f33332d3333203d3e20323636333230.roa (hash: pk4pMqMd41bNxhx05Kd3fAZ4Nb7DJqC6I1MCh1tkcBU=)
                          6: 3137302e3233382e3133362e302f32342d3234203d3e20323636333230.roa (hash: n+W/NzrKCg5hQH+zzZEB5dAHWYdefLqRUMqoPIkQw1g=)
                          7: 323830343a333630303a383030303a3a2f33332d3333203d3e20323636333230.roa (hash: E0ifC3KdDyxAVWQUJDn4mRtfPbFKBjFmnadKNx/UJJ8=)
                          8: 323830343a333630303a3a2f33322d3332203d3e20323636333230.roa (hash: KoZmD/idQKS3R1BDmhm+ffCJi5A4XJF92B3jhKYnqtc=)
                          9: 323830343a333630303a633030303a3a2f33342d3334203d3e20323636333230.roa (hash: B0AY3y4oMhTcSBHKaZ3qTJZyiDf8fSO4xoBIBWtmvC8=)
                          10: 3137302e3233382e3133382e302f32342d3234203d3e20323636333230.roa (hash: kiQjBuQGmQTbmcBRBw8xwAtDVwFuGY8XxZQsqYDcAcc=)
                          11: 323830343a333630303a343030303a3a2f33342d3334203d3e20323636333230.roa (hash: 3YOSdlF0/WjO9/uxapKu6mRCUft8cRfun1hmMXKISVQ=)
                          12: 323830343a333630303a383030303a3a2f33342d3334203d3e20323636333230.roa (hash: +KjLadMsgjTBbobRHC1grKlmcpmu0xtrexahEwAWrz8=)
                          13: 3137302e3233382e3133372e302f32342d3234203d3e20323636333230.roa (hash: XmjulZuIkxaorftiuLH8I4UzSP3J5ABUnFIGEmbiL5A=)
                          14: 3137302e3233382e3133362e302f32322d3232203d3e20323636333230.roa (hash: uxKcdFDbS/gG4INWDxln+wc1GAs1dDeKIT8aGIu/qCU=)
                          15: 323830343a333630303a3a2f33342d3334203d3e20323636333230.roa (hash: bs9qNakZHvN+cmLSwXFt1jhxPd5X7PQQV69Wi/Z2Cz8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl
                          rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 01:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ac:b9:de:d9:ec:46:60:37:a5:53:79:c6:40:70:b4:52:79:a9:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
        Validity
            Not Before: Oct 29 22:55:00 2026 GMT
            Not After : Oct 31 01:22:00 2026 GMT
        Subject: CN=FD0AA390466BC2AB7A5BAC6786CABEF2060951FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4c:03:33:5f:be:b5:37:91:9a:0f:c9:c7:0d:
                    9e:7d:89:a6:e4:a1:df:6b:eb:6a:da:ff:e5:5b:69:
                    53:ef:c1:35:bf:f1:50:05:56:12:8b:31:da:12:5a:
                    db:96:65:ff:33:d4:0a:09:8f:7f:e1:71:8a:7c:59:
                    4e:ae:05:93:b8:10:44:e3:98:39:55:60:17:0c:50:
                    e5:81:75:0c:dc:5f:e8:d8:ff:22:71:61:0c:fc:5b:
                    c6:dc:bc:2d:96:0d:dc:09:00:e1:1b:7f:18:03:1a:
                    a3:e9:fc:4c:58:a2:d5:aa:c4:0c:6e:ed:be:84:d9:
                    00:8b:2d:72:8f:7c:72:fb:81:0c:bf:f0:51:c7:0e:
                    3c:46:f0:5b:55:54:e7:9f:0a:81:46:ad:9d:dc:5a:
                    d8:47:49:4e:db:b4:0e:cc:de:02:e8:30:53:11:5c:
                    91:8f:21:d8:8b:c7:07:e2:44:58:2d:2d:49:4f:1d:
                    41:b3:d6:d4:d5:f3:00:80:43:66:62:87:57:6c:94:
                    a3:1e:29:53:0c:91:12:63:a4:75:07:21:b4:34:ab:
                    9e:bf:47:4b:a7:b2:12:51:26:32:27:99:f4:77:a7:
                    f2:80:71:3c:43:40:5a:86:9f:ef:64:2a:88:75:68:
                    32:ac:f1:b0:05:6d:32:20:7a:6c:20:15:c7:0c:f8:
                    19:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:0A:A3:90:46:6B:C2:AB:7A:5B:AC:67:86:CA:BE:F2:06:09:51:FF
            X509v3 Authority Key Identifier:
                keyid:1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:a4:9f:78:31:d7:12:a7:67:35:0b:74:74:e1:1a:19:b4:77:
         aa:0b:44:62:cf:5a:6f:70:cd:a5:ab:95:f3:b9:32:90:14:e6:
         81:af:32:4e:d1:1c:15:7f:b8:db:99:b0:3c:ec:81:f3:93:7b:
         12:71:9a:42:fe:75:10:0b:9d:f4:90:c2:ad:4f:3d:eb:af:32:
         16:f1:e6:46:fb:86:8f:ec:a3:3a:6d:a8:99:68:8e:cc:4a:77:
         7a:a0:2f:d7:b8:a0:99:08:ae:43:e9:9a:64:88:ff:fc:34:cb:
         d4:d2:ba:17:df:36:00:32:67:a4:60:65:91:ef:0b:0a:23:bd:
         78:5c:e7:aa:1b:ac:13:1d:e9:3d:69:40:a6:b2:f9:a7:16:d5:
         27:99:26:1b:57:1c:70:7d:ce:69:70:7c:95:b6:0a:68:ba:03:
         fd:0a:99:a8:c5:44:cb:76:26:28:3a:4b:9b:83:77:65:29:f4:
         a4:76:27:06:80:a9:22:cd:ee:27:2b:bb:0e:08:0c:4b:a2:cd:
         ec:40:22:8b:03:72:bc:26:fc:78:cf:77:48:e2:95:c5:68:a6:
         22:3d:92:23:82:4c:3b:26:96:9f:cd:6d:d3:19:a5:6d:4d:cd:
         a7:3e:8d:b9:fa:ca:0e:e2:21:3d:6c:29:fc:0a:c3:3d:a6:3d:
         2f:62:c9:e2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTqy53tnsRmA3pVN5xkBwtFJ5qY8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM3RDgzOEYxQjU5ODk5RDQ0QjRGQzQwMEZCQzFEREEz
QzBCM0QzMDAeFw0yNjEwMjkyMjU1MDBaFw0yNjEwMzEwMTIyMDBaMDMxMTAvBgNV
BAMTKEZEMEFBMzkwNDY2QkMyQUI3QTVCQUM2Nzg2Q0FCRUYyMDYwOTUxRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXTAMzX761N5GaD8nHDZ59iabk
od9r62ra/+VbaVPvwTW/8VAFVhKLMdoSWtuWZf8z1AoJj3/hcYp8WU6uBZO4EETj
mDlVYBcMUOWBdQzcX+jY/yJxYQz8W8bcvC2WDdwJAOEbfxgDGqPp/ExYotWqxAxu
7b6E2QCLLXKPfHL7gQy/8FHHDjxG8FtVVOefCoFGrZ3cWthHSU7btA7M3gLoMFMR
XJGPIdiLxwfiRFgtLUlPHUGz1tTV8wCAQ2Zih1dslKMeKVMMkRJjpHUHIbQ0q56/
R0unshJRJjInmfR3p/KAcTxDQFqGn+9kKoh1aDKs8bAFbTIgemwgFccM+BlNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU/QqjkEZrwqt6W6xnhsq+8gYJUf8wHwYDVR0j
BBgwFoAUHH2DjxtZiZ1EtPxAD7wd2jwLPTAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzZSTnlWamlxWkhRSnM0eGU5OVBuaTU1WndjMzZhcldhdHpEVFIzM0I1
OFcvMS8xQzdEODM4RjFCNTk4OTlENDRCNEZDNDAwRkJDMUREQTNDMEIzRDMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDN0Q4MzhGMUI1OTg5OUQ0
NEI0RkM0MDBGQkMxRERBM0MwQjNEMzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RzZSTnlWamlxWkhRSnM0eGU5OVBuaTU1WndjMzZhcldhdHpEVFIzM0I1OFcvMS8x
QzdEODM4RjFCNTk4OTlENDRCNEZDNDAwRkJDMUREQTNDMEIzRDMwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqaSfeDHXEqdnNQt0dOEaGbR3qgtEYs9ab3DNpauV87kykBTmga8yTtEcFX+4
25mwPOyB85N7EnGaQv51EAud9JDCrU89668yFvHmRvuGj+yjOm2omWiOzEp3eqAv
17igmQiuQ+maZIj//DTL1NK6F982ADJnpGBlke8LCiO9eFznqhusEx3pPWlAprL5
pxbVJ5kmG1cccH3OaXB8lbYKaLoD/QqZqMVEy3YmKDpLm4N3ZSn0pHYnBoCpIs3u
Jyu7DggMS6LN7EAiiwNyvCb8eM93SOKVxWimIj2SI4JMOyaWn81t0xmlbU3Npz6N
ufrKDuIhPWwp/ArDPaY9L2LJ4g==
-----END CERTIFICATE-----
Generated at Fri Oct 30 02:53:11 2026 by rpki-client