Error: rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/79798C354EE82F89133F9F2BDCA4F8220483498E.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/79798C354EE82F89133F9F2BDCA4F8220483498E.mft
File:                     79798C354EE82F89133F9F2BDCA4F8220483498E.mft (raw, json)
Hash identifier:          5pj48X/yrYWYfp1vsUbcMxYo9nALDmW7AeWCcdLVpNY=
Subject key identifier:   79:D0:52:BA:CA:28:28:07:77:5A:CF:8B:09:0C:49:24:56:FD:49:11
Authority key identifier: 79:79:8C:35:4E:E8:2F:89:13:3F:9F:2B:DC:A4:F8:22:04:83:49:8E
Certificate issuer:       /CN=79798C354EE82F89133F9F2BDCA4F8220483498E
Certificate serial:       48F50D2D81C1D01E4E3F3053519A546E4B49A450
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79798C354EE82F89133F9F2BDCA4F8220483498E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/79798C354EE82F89133F9F2BDCA4F8220483498E.mft
Manifest number:          04E8
Signing time:             Thu 29 Oct 2026 07:11:41 +0000
Manifest this update:     Thu 29 Oct 2026 07:06:41 +0000
Manifest next update:     Fri 30 Oct 2026 09:22:41 +0000
Files and hashes:         1: 34352e37312e34332e302f32342d3234203d3e20323733333136.roa (hash: e4J+Fw1eyC+eqex3b+uJiFKLDiz9bz+zdCw/X0Tg/s8=)
                          2: 323830343a386364343a3a2f33332d3333203d3e20323733333136.roa (hash: 4Foa+6MF1596f5yQUT5TFrcrZuKZYBLzw6t78BD2FuE=)
                          3: 34352e37312e34322e302f32342d3234203d3e20323733333136.roa (hash: 3FJKbXRdLqXVCrgDA+3lHP4ssZe8XwigTj5c6lBijUo=)
                          4: 34352e37312e34322e302f32332d3233203d3e20323733333136.roa (hash: Ddze6vMYAB0T26hqSxME4BtgMhYfp/HKjhDHWUOM4tI=)
                          5: 323830343a386364343a383030303a3a2f33332d3333203d3e20323733333136.roa (hash: Up49QadphzI+/2W/2K3sviBsajQ23whLmQKvEcAREtQ=)
                          6: 79798C354EE82F89133F9F2BDCA4F8220483498E.crl (hash: p9KSTM5RFdyf0CD9tRh+/GLZMlAvPIUBhdaIV9DaK/Y=)
                          7: 323830343a386364343a3a2f33342d3334203d3e20323733333136.roa (hash: TvtKcrP0AgbokfzVapaDW6K9Xbrt2iGZKHyMFjMiOvQ=)
                          8: 323830343a386364343a633030303a3a2f33342d3334203d3e20323733333136.roa (hash: /3zE/d8GN2vqtd7C5Hx6McLRDnCSzB3xmoEM/W7DuW4=)
                          9: 323830343a386364343a383030303a3a2f33342d3334203d3e20323733333136.roa (hash: 9cIE/6MWbe4rlFTFC2Tcz3P0bZhvn0cuD0e+kk1Nmuo=)
                          10: 323830343a386364343a3a2f33322d3332203d3e20323733333136.roa (hash: PDGJXtzB5EUAlOVFhqBEE6U0s+YhbaBqoPgeEUMB8Tc=)
                          11: 323830343a386364343a343030303a3a2f33342d3334203d3e20323733333136.roa (hash: cGxHcShnvYMpzeYkm+xbbVpbKK9QkUQRYTLUCwC7SVA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/79798C354EE82F89133F9F2BDCA4F8220483498E.crl
                          rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/79798C354EE82F89133F9F2BDCA4F8220483498E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79798C354EE82F89133F9F2BDCA4F8220483498E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 09:22:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:f5:0d:2d:81:c1:d0:1e:4e:3f:30:53:51:9a:54:6e:4b:49:a4:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79798C354EE82F89133F9F2BDCA4F8220483498E
        Validity
            Not Before: Oct 29 07:06:41 2026 GMT
            Not After : Oct 30 09:22:41 2026 GMT
        Subject: CN=79D052BACA282807775ACF8B090C492456FD4911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2c:e6:1b:a5:b2:20:ec:96:6b:08:70:a4:c7:
                    f9:52:1d:bf:c0:2e:b5:fc:8e:6e:28:63:37:85:aa:
                    89:ae:dd:ab:cc:52:c3:bf:1c:26:35:a3:39:2b:ec:
                    77:14:c4:d1:5f:71:5d:30:e1:84:5d:a3:21:ab:d4:
                    e3:b3:84:d1:62:8b:6f:d7:66:e5:26:9b:1b:30:c3:
                    b8:6b:3f:d1:5b:d3:00:1b:e2:03:7a:2b:74:c0:13:
                    54:fb:4e:25:82:62:7a:6a:30:b7:bb:66:2f:97:78:
                    f4:0f:d2:61:8d:17:31:17:d1:58:7c:84:ef:c2:cf:
                    26:33:47:48:00:67:8d:ca:3b:35:34:a6:11:ab:4b:
                    bc:2f:e1:93:c2:3d:75:ca:f1:e0:e0:30:c3:9d:f5:
                    f2:e7:4c:01:aa:19:dc:8a:6d:2c:8c:e3:d7:49:87:
                    47:fc:d0:23:63:a1:b7:9d:29:35:fc:ca:1e:b4:1c:
                    fe:68:42:5d:49:94:a5:77:4b:ae:3c:7d:43:8b:86:
                    6d:31:ab:e2:8d:77:70:1f:89:a6:3b:85:7c:33:7a:
                    fd:bc:b7:aa:76:d2:3c:83:ad:8f:a4:39:07:1d:aa:
                    5b:34:90:5a:1f:4f:04:c5:c9:67:70:9b:1f:14:00:
                    b5:8a:b9:6a:03:e4:25:00:61:53:e4:35:6b:1a:ea:
                    f1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D0:52:BA:CA:28:28:07:77:5A:CF:8B:09:0C:49:24:56:FD:49:11
            X509v3 Authority Key Identifier:
                keyid:79:79:8C:35:4E:E8:2F:89:13:3F:9F:2B:DC:A4:F8:22:04:83:49:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/79798C354EE82F89133F9F2BDCA4F8220483498E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79798C354EE82F89133F9F2BDCA4F8220483498E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/79798C354EE82F89133F9F2BDCA4F8220483498E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:25:fa:1d:68:75:53:96:04:ca:5f:64:4b:25:25:80:d9:5a:
         5b:55:4a:58:93:ce:72:ed:a6:58:76:87:94:ab:0a:9c:b5:13:
         94:2b:45:46:6e:21:cd:d0:bc:23:d0:78:4c:06:28:9f:40:c8:
         50:db:f6:69:1e:2b:7a:9d:8e:03:6f:a3:87:cd:d1:c0:0a:57:
         4d:43:c7:1d:2b:d7:ab:14:f3:3f:9e:92:19:0b:49:69:29:f8:
         9b:eb:dc:74:ce:89:31:3a:2e:78:cf:6e:f0:b2:3a:d1:61:e8:
         76:7d:49:e4:84:6e:d4:33:f3:2d:9b:f6:a7:d1:b9:e7:1a:37:
         56:50:fd:3a:bc:80:73:89:64:33:6f:28:c7:06:56:5a:fe:62:
         02:f3:fb:be:3b:13:d5:50:0f:d8:02:c9:a7:5c:f0:7c:91:9e:
         f6:be:c1:5f:93:83:4e:aa:39:4e:21:5d:79:bd:a1:0f:3a:c4:
         32:b6:eb:63:55:5d:c8:d1:b8:81:d5:67:a5:73:a9:e9:cd:3d:
         35:79:d4:94:93:cc:9f:c6:fa:68:be:ed:f0:3b:0f:d2:1c:9f:
         39:79:85:d1:51:ab:c9:93:cb:5a:c1:50:6d:00:1b:53:5f:26:
         3e:4b:86:f5:fa:5e:0f:e5:00:47:ea:52:00:c5:a3:d7:db:4b:
         2a:4d:cc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 14:07:19 2026 by rpki-client