Error: rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.mft
File:                     8F7C897DFF70774947A63DAC93567C79586D1B6C.mft (raw, json)
Hash identifier:          Zwo/sot6Co+GqmxjtY5XeMV6i4LZFaiuvGk/y6RDrzs=
Subject key identifier:   C1:27:FC:F4:C3:FB:BB:AB:79:3F:53:1C:6A:D5:C3:34:A8:03:B4:F8
Authority key identifier: 8F:7C:89:7D:FF:70:77:49:47:A6:3D:AC:93:56:7C:79:58:6D:1B:6C
Certificate issuer:       /CN=8F7C897DFF70774947A63DAC93567C79586D1B6C
Certificate serial:       38357144AC9134191CA892D825F5447637931382
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.mft
Manifest number:          04E4
Signing time:             Thu 29 Oct 2026 04:32:56 +0000
Manifest this update:     Thu 29 Oct 2026 04:27:56 +0000
Manifest next update:     Fri 30 Oct 2026 07:53:56 +0000
Files and hashes:         1: 3137302e3234352e3136302e302f32322d3234203d3e20323635303433.roa (hash: GqN5IX+bmxqmm+8/1bjCat4WBG3v7hsNsZkjjn96TaQ=)
                          2: 323830343a333165343a3a2f33322d3438203d3e20323635303433.roa (hash: UjzRcYc/0vB4I0K2cDjkR6rb7/AVeHCSES4Q4zPEgPE=)
                          3: 8F7C897DFF70774947A63DAC93567C79586D1B6C.crl (hash: /JfvgAYV3yCsZP/rfQZQeaRe/WvsFEsDA1IC5sC94yI=)
                          4: 3137302e3233312e32382e302f32322d3234203d3e20323635303433.roa (hash: OS68o1TGNwneKN/uHeQ3QEUgEwYru5Aj5p0IxB/BEwc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.crl
                          rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 07:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:35:71:44:ac:91:34:19:1c:a8:92:d8:25:f5:44:76:37:93:13:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F7C897DFF70774947A63DAC93567C79586D1B6C
        Validity
            Not Before: Oct 29 04:27:56 2026 GMT
            Not After : Oct 30 07:53:56 2026 GMT
        Subject: CN=C127FCF4C3FBBBAB793F531C6AD5C334A803B4F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ef:70:65:96:c6:18:1d:4f:0c:21:9d:9a:fc:
                    d2:c1:d1:8d:88:f5:67:e0:e8:75:51:88:bf:84:d3:
                    92:0f:39:f9:2f:4a:4a:3a:47:e4:97:32:56:94:47:
                    ff:a0:dc:d6:af:1f:23:00:81:fa:ca:cb:d4:2b:30:
                    d1:1a:83:b1:32:da:10:b5:ea:09:93:58:e5:2d:7c:
                    cb:10:8f:d2:95:59:31:f5:1b:fe:59:71:88:03:4d:
                    23:f3:fe:41:e9:30:ea:27:43:f8:c3:9f:c3:45:b3:
                    d8:5d:78:33:0c:a3:82:93:34:9e:63:2e:87:f2:6e:
                    a8:1c:35:d3:4c:d1:2f:b7:43:ad:57:bb:61:8d:7a:
                    70:24:b0:d7:59:33:52:8a:c5:53:c2:92:37:92:6c:
                    fd:64:c3:43:0c:32:a4:77:28:27:82:36:2f:f8:a8:
                    fe:4a:01:5b:f2:be:87:97:81:7e:b2:ab:70:5f:ee:
                    16:88:30:c1:18:89:f0:c3:2d:74:86:8b:63:06:26:
                    7e:e3:73:e6:46:4a:96:41:fd:74:50:b7:51:2a:e5:
                    fe:82:4d:ab:5d:e5:92:05:df:93:46:9b:9e:69:84:
                    f4:56:32:ba:72:d7:0f:83:ba:b3:fc:46:39:37:16:
                    06:72:dc:b9:b2:3e:3b:10:18:05:10:11:ab:6c:b2:
                    fe:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:27:FC:F4:C3:FB:BB:AB:79:3F:53:1C:6A:D5:C3:34:A8:03:B4:F8
            X509v3 Authority Key Identifier:
                keyid:8F:7C:89:7D:FF:70:77:49:47:A6:3D:AC:93:56:7C:79:58:6D:1B:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:27:96:b2:dd:e7:7c:d9:17:4e:50:74:b2:7f:ad:8f:aa:20:
         5d:00:81:a5:dc:b9:18:1f:31:82:cb:aa:0b:8f:82:c9:0c:17:
         55:05:17:a8:ea:88:65:b6:60:70:5b:9b:2e:94:00:b7:91:f6:
         f0:a0:0e:b9:ff:ca:62:d3:08:88:e5:fe:86:43:9b:d9:99:90:
         80:b1:36:24:cd:f5:8b:f8:39:ff:d7:c3:8b:6e:64:e5:bb:09:
         bf:b0:d8:38:a0:3a:ee:ce:ca:ed:5c:51:24:15:6b:97:48:ff:
         1f:0f:fc:19:67:ca:0b:d4:c0:78:ba:13:df:8b:19:d0:96:2c:
         ff:c7:ce:ed:bd:d0:fc:8b:34:a2:a4:3e:18:0c:ba:43:30:9f:
         1a:f4:1a:b2:41:a3:09:ae:17:a0:86:ed:aa:4e:14:ef:46:f5:
         dd:8b:c4:af:5c:05:af:dc:45:40:7f:c0:cb:ca:52:61:00:e1:
         60:a9:7e:3b:ef:f8:24:74:5d:8d:b1:20:ee:8c:1d:26:8e:5e:
         a2:b4:c9:d5:3c:5a:62:c8:d7:c8:74:42:d0:5e:b8:ca:5e:c3:
         76:a3:40:68:2d:2a:9f:9e:4e:da:09:1c:00:a5:ea:c8:50:48:
         e2:02:15:80:66:cb:c8:7e:6b:ca:67:07:a8:50:20:29:e0:e9:
         f2:b7:f8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 08:31:13 2026 by rpki-client