Error: rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.mft
File:                     8F7C897DFF70774947A63DAC93567C79586D1B6C.mft (raw, json)
Hash identifier:          XXZXkodt72xnT/yWSF0tkmZ0ME2Gq4WPGmeubpxZHsU=
Subject key identifier:   7E:A6:D3:26:4E:B9:4E:E2:CD:65:8E:B5:9A:5B:91:6B:6E:EC:78:27
Authority key identifier: 8F:7C:89:7D:FF:70:77:49:47:A6:3D:AC:93:56:7C:79:58:6D:1B:6C
Certificate issuer:       /CN=8F7C897DFF70774947A63DAC93567C79586D1B6C
Certificate serial:       4DFE4BB457A463FCD1146BECD14195A7CE0705A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.mft
Manifest number:          04E6
Signing time:             Fri 30 Oct 2026 19:41:03 +0000
Manifest this update:     Fri 30 Oct 2026 19:36:03 +0000
Manifest next update:     Sat 31 Oct 2026 20:18:03 +0000
Files and hashes:         1: 3137302e3234352e3136302e302f32322d3234203d3e20323635303433.roa (hash: GqN5IX+bmxqmm+8/1bjCat4WBG3v7hsNsZkjjn96TaQ=)
                          2: 8F7C897DFF70774947A63DAC93567C79586D1B6C.crl (hash: PVik1Ox6Nu0pyqQAOoVyzfk6b35P2TB4TlESHOj5dZY=)
                          3: 323830343a333165343a3a2f33322d3438203d3e20323635303433.roa (hash: UjzRcYc/0vB4I0K2cDjkR6rb7/AVeHCSES4Q4zPEgPE=)
                          4: 3137302e3233312e32382e302f32322d3234203d3e20323635303433.roa (hash: OS68o1TGNwneKN/uHeQ3QEUgEwYru5Aj5p0IxB/BEwc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.crl
                          rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 20:18:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:fe:4b:b4:57:a4:63:fc:d1:14:6b:ec:d1:41:95:a7:ce:07:05:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F7C897DFF70774947A63DAC93567C79586D1B6C
        Validity
            Not Before: Oct 30 19:36:03 2026 GMT
            Not After : Oct 31 20:18:03 2026 GMT
        Subject: CN=7EA6D3264EB94EE2CD658EB59A5B916B6EEC7827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ac:e1:d4:22:3a:6c:c1:2e:3a:2b:1a:02:71:
                    86:f1:85:63:21:43:85:4c:f9:f0:a7:f3:02:42:74:
                    d2:55:fb:d5:8d:24:98:62:a8:05:bb:fd:d9:f3:0b:
                    1c:94:a0:1a:58:b8:27:2d:83:34:91:f6:2a:8b:41:
                    4c:d5:86:9d:8c:2a:c0:88:e1:ad:60:3d:a2:b4:16:
                    fc:88:fb:16:d9:35:28:d6:57:ae:24:68:75:c2:54:
                    46:5f:6c:3b:35:66:05:63:74:2e:14:30:1b:48:21:
                    15:28:2d:b4:d1:a7:66:9a:41:43:5c:cd:cb:83:3d:
                    5b:9d:51:13:e0:bd:3a:2e:bf:35:ae:12:5f:82:bd:
                    4c:0f:73:e5:ae:05:d4:0c:24:f6:ab:76:47:e1:60:
                    bf:ea:c4:30:3e:f3:48:be:a4:5c:5d:ab:c1:03:8f:
                    9c:a8:d1:f5:af:b2:e0:03:0f:14:82:14:35:95:60:
                    9f:ec:f9:40:f0:c8:81:0f:73:13:86:42:54:16:b2:
                    df:05:49:2a:09:b8:44:1b:75:57:a0:32:78:5c:68:
                    6a:8c:4a:ac:24:75:02:c6:57:eb:33:fd:db:3e:d1:
                    e9:3b:f2:6f:da:09:79:09:07:55:07:ec:cc:60:fa:
                    80:09:5a:09:20:09:7a:7c:d2:e4:ed:d2:3d:cf:9b:
                    6e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A6:D3:26:4E:B9:4E:E2:CD:65:8E:B5:9A:5B:91:6B:6E:EC:78:27
            X509v3 Authority Key Identifier:
                keyid:8F:7C:89:7D:FF:70:77:49:47:A6:3D:AC:93:56:7C:79:58:6D:1B:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:b1:dd:84:da:8b:c9:ce:cd:70:33:5f:9a:15:2a:b0:a0:df:
         8b:02:0a:cf:65:75:3b:a7:03:cc:ea:8a:ac:4d:cc:1b:83:4e:
         09:24:5b:02:de:8d:9a:62:d3:1d:a8:ff:7c:2f:6b:2e:45:ca:
         25:9b:70:9f:59:a1:40:16:8b:6a:30:7e:39:8c:fe:39:9c:4d:
         d2:6f:06:9b:0e:0f:82:50:68:1b:35:7a:f6:dd:6f:af:81:72:
         69:fb:b2:24:80:b1:8a:ec:39:7b:b3:50:30:7a:63:6f:df:1f:
         cc:49:63:80:ae:70:b5:aa:17:fb:1d:e8:a0:18:86:2a:95:66:
         41:fe:f7:ca:25:97:52:b5:f0:ca:73:65:a4:77:ba:06:22:58:
         2d:be:98:f6:48:32:47:b4:60:ec:b2:4a:6e:1a:57:a8:46:ee:
         0f:f3:b1:d2:be:e9:27:c7:92:d2:b1:0f:81:96:3c:e3:16:e3:
         14:59:8c:a3:51:52:ce:c1:99:42:d9:77:42:68:05:f3:4a:68:
         9b:8a:fa:6e:b1:60:b6:2c:ef:cf:ab:94:1b:08:55:7b:45:41:
         cb:99:5c:b0:be:80:c6:ff:fa:0a:c6:b9:67:21:60:79:67:8b:
         1f:48:bd:b4:67:b9:13:bc:c1:fe:ab:67:22:53:cc:22:51:60:
         79:b2:ae:d0
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUTf5LtFekY/zRFGvs0UGVp84HBakwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY3Qzg5N0RGRjcwNzc0OTQ3QTYzREFDOTM1NjdDNzk1
ODZEMUI2QzAeFw0yNjEwMzAxOTM2MDNaFw0yNjEwMzEyMDE4MDNaMDMxMTAvBgNV
BAMTKDdFQTZEMzI2NEVCOTRFRTJDRDY1OEVCNTlBNUI5MTZCNkVFQzc4MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyrOHUIjpswS46KxoCcYbxhWMh
Q4VM+fCn8wJCdNJV+9WNJJhiqAW7/dnzCxyUoBpYuCctgzSR9iqLQUzVhp2MKsCI
4a1gPaK0FvyI+xbZNSjWV64kaHXCVEZfbDs1ZgVjdC4UMBtIIRUoLbTRp2aaQUNc
zcuDPVudURPgvTouvzWuEl+CvUwPc+WuBdQMJPardkfhYL/qxDA+80i+pFxdq8ED
j5yo0fWvsuADDxSCFDWVYJ/s+UDwyIEPcxOGQlQWst8FSSoJuEQbdVegMnhcaGqM
SqwkdQLGV+sz/ds+0ek78m/aCXkJB1UH7Mxg+oAJWgkgCXp80uTt0j3Pm25vAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUfqbTJk65TuLNZY61mluRa27seCcwHwYDVR0j
BBgwFoAUj3yJff9wd0lHpj2sk1Z8eVhtG2wwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9QckY4V0VnVW16dTVlNjNEWlRjVFdueEdqRG1iZThIWFRCcm9yeHVLN2Zm
LzEvOEY3Qzg5N0RGRjcwNzc0OTQ3QTYzREFDOTM1NjdDNzk1ODZEMUI2Qy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84RjdDODk3REZGNzA3NzQ5NDdB
NjNEQUM5MzU2N0M3OTU4NkQxQjZDLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1By
RjhXRWdVbXp1NWU2M0RaVGNUV254R2pEbWJlOEhYVEJyb3J4dUs3ZmYvMS84RjdD
ODk3REZGNzA3NzQ5NDdBNjNEQUM5MzU2N0M3OTU4NkQxQjZDLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
i7HdhNqLyc7NcDNfmhUqsKDfiwIKz2V1O6cDzOqKrE3MG4NOCSRbAt6NmmLTHaj/
fC9rLkXKJZtwn1mhQBaLajB+OYz+OZxN0m8Gmw4PglBoGzV69t1vr4FyafuyJICx
iuw5e7NQMHpjb98fzEljgK5wtaoX+x3ooBiGKpVmQf73yiWXUrXwynNlpHe6BiJY
Lb6Y9kgyR7Rg7LJKbhpXqEbuD/Ox0r7pJ8eS0rEPgZY84xbjFFmMo1FSzsGZQtl3
QmgF80pom4r6brFgtizvz6uUGwhVe0VBy5lcsL6Axv/6Csa5ZyFgeWeLH0i9tGe5
E7zB/qtnIlPMIlFgebKu0A==
-----END CERTIFICATE-----
Generated at Sat Oct 31 08:21:05 2026 by rpki-client