Error: rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/1/777AF1144189B88FDF022922157DD65E18F5A179.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/1/777AF1144189B88FDF022922157DD65E18F5A179.mft
File:                     777AF1144189B88FDF022922157DD65E18F5A179.mft (raw, json)
Hash identifier:          u6MpIkDPv6cnpYO5vsuaR1LTnzQdfSPpqz+Aqy39UUk=
Subject key identifier:   18:CC:E5:9E:6B:F0:83:E3:E4:81:7D:36:B7:59:89:22:39:4C:4B:2B
Authority key identifier: 77:7A:F1:14:41:89:B8:8F:DF:02:29:22:15:7D:D6:5E:18:F5:A1:79
Certificate issuer:       /CN=777AF1144189B88FDF022922157DD65E18F5A179
Certificate serial:       2B7FFC9CDFB507E3EA1DEADE102EEFA3C488ED0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777AF1144189B88FDF022922157DD65E18F5A179.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/1/777AF1144189B88FDF022922157DD65E18F5A179.mft
Manifest number:          048C
Signing time:             Tue 25 Aug 2026 08:45:00 +0000
Manifest this update:     Tue 25 Aug 2026 08:40:00 +0000
Manifest next update:     Wed 26 Aug 2026 11:27:00 +0000
Files and hashes:         1: 777AF1144189B88FDF022922157DD65E18F5A179.crl (hash: knePy4+DJMckgkAgZT/nofcG/CsINS7TkjxKOCk2/BU=)
                          2: 323830343a376561343a383030303a3a2f33332d3333203d3e20323731363337.roa (hash: h09Cb6GTAcfCKw29QVNwLuOTwE+0hcNjwKOwd5M1QW8=)
                          3: 3137392e36332e302e302f32322d3234203d3e20323731363337.roa (hash: byaCPA5KAWO8fQZQUSKmLd+oaodCexSQIQS/X+oSFzU=)
                          4: 323830343a376561343a3a2f33322d3332203d3e20323731363337.roa (hash: wi8AogR+JHlEwWBVZS62wd3qhWUy9jg17BgAvtPq/Bc=)
                          5: 323830343a376561343a3a2f33332d3333203d3e20323731363337.roa (hash: wZcmR3dGyewkAIhOQv/0atQLTXEz3NJIZfqtor6EM5g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/1/777AF1144189B88FDF022922157DD65E18F5A179.crl
                          rsync://rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/1/777AF1144189B88FDF022922157DD65E18F5A179.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777AF1144189B88FDF022922157DD65E18F5A179.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 11:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:7f:fc:9c:df:b5:07:e3:ea:1d:ea:de:10:2e:ef:a3:c4:88:ed:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=777AF1144189B88FDF022922157DD65E18F5A179
        Validity
            Not Before: Aug 25 08:40:00 2026 GMT
            Not After : Aug 26 11:27:00 2026 GMT
        Subject: CN=18CCE59E6BF083E3E4817D36B7598922394C4B2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:24:4a:c2:f5:ed:86:f2:4e:bf:4e:a4:9d:39:
                    35:43:90:0b:a4:b1:e9:48:e9:07:7a:7d:20:10:87:
                    fd:d0:15:fd:90:71:a9:a0:d0:04:49:70:16:8a:17:
                    9c:58:27:96:7e:ea:a3:06:5e:69:89:f7:fe:05:50:
                    41:e6:38:c7:0e:85:be:b1:b9:f3:15:40:8d:85:f0:
                    91:b0:e6:0c:27:4b:21:7b:d0:85:2d:f2:9e:94:b1:
                    01:3a:78:b2:6b:b2:9c:bd:71:e8:d4:6b:6c:ad:5a:
                    be:b8:f1:53:7a:bb:7d:18:2d:ce:6c:5a:d1:22:c7:
                    9f:b6:b1:af:92:17:10:7f:ae:e2:e5:d8:25:8d:a6:
                    58:6a:b5:e5:d9:a1:6e:c9:58:88:0b:c9:b5:df:80:
                    03:07:ee:99:d8:82:a2:29:28:2a:ab:6f:89:a7:a9:
                    44:67:12:72:65:04:c0:51:67:c2:74:91:cb:3c:6a:
                    91:2b:5a:51:95:dc:d2:a4:2a:69:2c:dd:da:80:5d:
                    7e:93:b8:fe:3a:a0:46:b8:48:6a:4f:4c:42:5c:38:
                    46:af:db:3c:eb:3d:1b:70:11:39:56:00:a0:55:dc:
                    67:b4:f2:70:7f:01:7f:b2:e8:7c:27:e3:dd:2d:17:
                    c5:91:3b:3d:a0:d1:17:ff:db:de:f0:63:47:86:98:
                    dd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:CC:E5:9E:6B:F0:83:E3:E4:81:7D:36:B7:59:89:22:39:4C:4B:2B
            X509v3 Authority Key Identifier:
                keyid:77:7A:F1:14:41:89:B8:8F:DF:02:29:22:15:7D:D6:5E:18:F5:A1:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/1/777AF1144189B88FDF022922157DD65E18F5A179.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777AF1144189B88FDF022922157DD65E18F5A179.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/1/777AF1144189B88FDF022922157DD65E18F5A179.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:27:c2:18:39:70:8b:49:4b:f3:fb:37:5d:bf:82:aa:1c:31:
         35:7b:ba:7f:0e:b7:42:9b:2b:71:ec:99:fb:83:ee:0f:3f:9f:
         20:26:b6:68:13:e0:12:10:42:d4:35:b9:8b:0a:f9:d6:17:7d:
         6d:35:ec:cb:c0:14:44:b2:9e:6a:a4:ac:9d:54:1a:27:2f:c6:
         20:30:b6:7e:eb:da:63:91:47:c4:3a:3c:cf:a5:16:da:cc:fe:
         a3:84:85:95:bc:95:38:d2:61:f2:6a:7c:8a:2c:9b:2e:98:4f:
         97:29:32:34:6a:ab:37:48:99:c4:09:e6:13:81:dc:e4:12:d4:
         b9:74:7d:f1:c8:14:96:4f:33:db:fb:f4:c9:fc:29:86:73:c8:
         18:d5:81:c2:38:43:75:9f:06:d5:4d:d8:c2:23:f2:ac:7c:a1:
         13:21:7a:61:ed:1d:3e:9c:d2:18:d3:9b:d1:43:fa:94:77:5c:
         3e:3a:f4:ac:e8:48:ee:2c:bb:1d:4f:14:57:5b:6e:f5:84:81:
         88:be:2c:96:14:4c:fc:db:c6:a5:41:ea:5e:42:28:c2:13:60:
         77:23:da:cd:07:f2:62:71:12:35:07:28:0a:f2:51:9b:e8:d5:
         68:bb:bd:c5:4e:17:ac:bb:20:b5:79:3b:09:e4:c8:8b:0d:32:
         fd:22:ba:71
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUK3/8nN+1B+PqHereEC7vo8SI7Q0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzc3QUYxMTQ0MTg5Qjg4RkRGMDIyOTIyMTU3REQ2NUUx
OEY1QTE3OTAeFw0yNjA4MjUwODQwMDBaFw0yNjA4MjYxMTI3MDBaMDMxMTAvBgNV
BAMTKDE4Q0NFNTlFNkJGMDgzRTNFNDgxN0QzNkI3NTk4OTIyMzk0QzRCMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsJErC9e2G8k6/TqSdOTVDkAuk
selI6Qd6fSAQh/3QFf2Qcamg0ARJcBaKF5xYJ5Z+6qMGXmmJ9/4FUEHmOMcOhb6x
ufMVQI2F8JGw5gwnSyF70IUt8p6UsQE6eLJrspy9cejUa2ytWr648VN6u30YLc5s
WtEix5+2sa+SFxB/ruLl2CWNplhqteXZoW7JWIgLybXfgAMH7pnYgqIpKCqrb4mn
qURnEnJlBMBRZ8J0kcs8apErWlGV3NKkKmks3dqAXX6TuP46oEa4SGpPTEJcOEav
2zzrPRtwETlWAKBV3Ge08nB/AX+y6Hwn490tF8WROz2g0Rf/297wY0eGmN1jAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUGMzlnmvwg+PkgX02t1mJIjlMSyswHwYDVR0j
BBgwFoAUd3rxFEGJuI/fAikiFX3WXhj1oXkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2h0dDNIUnJ6VnlaYVl4bXliR3F3eWZZeGd6V28xWW1wa3ZHRFhDbVZm
TDQvMS83NzdBRjExNDQxODlCODhGREYwMjI5MjIxNTdERDY1RTE4RjVBMTc5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc3N0FGMTE0NDE4OUI4OEZE
RjAyMjkyMjE1N0RENjVFMThGNUExNzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R2h0dDNIUnJ6VnlaYVl4bXliR3F3eWZZeGd6V28xWW1wa3ZHRFhDbVZmTDQvMS83
NzdBRjExNDQxODlCODhGREYwMjI5MjIxNTdERDY1RTE4RjVBMTc5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAISfCGDlwi0lL8/s3Xb+CqhwxNXu6fw63QpsrceyZ+4PuDz+fICa2aBPgEhBC
1DW5iwr51hd9bTXsy8AURLKeaqSsnVQaJy/GIDC2fuvaY5FHxDo8z6UW2sz+o4SF
lbyVONJh8mp8iiybLphPlykyNGqrN0iZxAnmE4Hc5BLUuXR98cgUlk8z2/v0yfwp
hnPIGNWBwjhDdZ8G1U3YwiPyrHyhEyF6Ye0dPpzSGNOb0UP6lHdcPjr0rOhI7iy7
HU8UV1tu9YSBiL4slhRM/NvGpUHqXkIowhNgdyPazQfyYnESNQcoCvJRm+jVaLu9
xU4XrLsgtXk7CeTIiw0y/SK6cQ==
-----END CERTIFICATE-----
Generated at Tue Aug 25 18:36:54 2026 by rpki-client