Error: rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.mft
File:                     7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.mft (raw, json)
Hash identifier:          F7wmVTGcsS5JfTc6NhRVPAFFqxUHTJUrnrFkjRc6834=
Subject key identifier:   D0:0C:1D:2B:17:29:E4:E3:5A:BE:25:EC:9C:15:EF:BA:40:4D:FF:67
Authority key identifier: 7F:7C:D1:E5:D0:C1:63:1E:A3:C9:58:47:8C:77:82:D0:4E:B7:FB:37
Certificate issuer:       /CN=7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37
Certificate serial:       3419D483A4F1D2B94B8CD68C5B1D4079E3CB510C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.mft
Manifest number:          037B
Signing time:             Sun 18 Oct 2026 00:05:33 +0000
Manifest this update:     Sun 18 Oct 2026 00:00:33 +0000
Manifest next update:     Mon 19 Oct 2026 02:39:33 +0000
Files and hashes:         1: 3138362e3233332e302e302f32322d3332203d3e20323730373535.roa (hash: 1vkfAgpzpUHxDLEI5zwricuLiS4Zo0mQ78Jl0UGFCoI=)
                          2: 323830343a373065383a3a2f33322d313238203d3e20323730373535.roa (hash: WFfr+TvX6VUyN+uU+tX9cJIIbzk37xHd/Sm9iaqDzc4=)
                          3: 7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.crl (hash: OZ0mf+UlqxgAYl4SioQB5asDkmlWpyN15WWYcdPDm1k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.crl
                          rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 02:39:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:19:d4:83:a4:f1:d2:b9:4b:8c:d6:8c:5b:1d:40:79:e3:cb:51:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37
        Validity
            Not Before: Oct 18 00:00:33 2026 GMT
            Not After : Oct 19 02:39:33 2026 GMT
        Subject: CN=D00C1D2B1729E4E35ABE25EC9C15EFBA404DFF67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8b:f1:3e:95:8c:20:08:31:20:69:df:2c:1b:
                    f8:6b:18:c5:ec:e9:2e:69:40:cd:9e:fa:2c:3f:58:
                    3b:c1:95:c2:2e:14:45:c2:f3:0b:f1:c1:db:1d:75:
                    4a:f7:6d:ac:b7:42:5f:24:db:58:92:be:14:62:b2:
                    b5:10:1a:46:5c:28:2c:7b:92:4f:c9:a2:5d:79:78:
                    f2:c4:2d:6c:6e:0c:28:39:20:04:18:f5:f9:91:f6:
                    73:32:07:38:cc:f9:57:74:6c:df:3a:2d:e2:29:0d:
                    c8:50:71:dc:ff:4b:b2:97:dc:f7:48:54:29:78:b8:
                    53:be:24:f7:8d:52:e9:4f:39:97:db:8d:81:e9:97:
                    a8:f8:ba:e1:45:c8:78:35:ce:65:57:bf:f1:48:ca:
                    10:0c:95:43:06:33:42:8c:7b:1b:5b:ab:06:dc:86:
                    fb:f3:8a:29:a8:8b:8c:43:08:21:c2:71:c0:44:3c:
                    47:4a:44:a4:ad:42:e4:5e:77:6f:33:5e:e4:74:a8:
                    9b:03:99:66:b4:67:3c:54:10:6c:e5:4a:78:56:c9:
                    14:79:24:b3:18:35:6a:4e:17:de:f1:f7:83:9e:42:
                    bd:dc:9d:f7:f0:7a:a0:d5:d2:ad:66:0f:20:34:3b:
                    1f:09:7b:ad:07:a0:ea:30:b9:f7:70:ee:68:49:13:
                    fd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:0C:1D:2B:17:29:E4:E3:5A:BE:25:EC:9C:15:EF:BA:40:4D:FF:67
            X509v3 Authority Key Identifier:
                keyid:7F:7C:D1:E5:D0:C1:63:1E:A3:C9:58:47:8C:77:82:D0:4E:B7:FB:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:c6:b1:eb:7d:57:82:ae:f2:9a:da:bb:92:d5:22:a4:fb:79:
         5f:cb:c0:c0:77:15:b5:32:35:06:40:b7:7f:5f:9b:28:c2:fd:
         e7:da:d3:4c:85:28:77:b5:2d:9c:cf:1e:ec:f9:6f:33:15:b4:
         05:5b:3a:15:f2:21:19:46:bf:c4:4a:e0:e6:d1:3a:f0:a6:fb:
         5d:59:38:21:f7:ad:4d:8f:21:d3:20:9b:cb:fd:7f:8c:4f:16:
         f9:56:1c:44:38:30:29:50:56:c8:52:77:7e:3f:b9:96:15:be:
         9b:a4:53:88:f7:79:1f:12:98:5e:45:a3:3b:38:94:b6:a3:f3:
         a4:c2:30:bc:71:0d:fb:ca:c7:da:03:ec:2b:09:9b:61:f7:74:
         67:51:1a:9d:a9:8a:d8:d3:5c:82:ce:13:8e:0f:18:c3:44:07:
         26:00:57:34:1c:53:ab:b3:65:00:43:a5:5f:95:a6:3e:c4:33:
         7e:78:1b:4d:a2:37:03:bf:9d:b2:07:5b:05:99:89:e3:c6:5c:
         42:f0:cd:5d:23:ad:55:bc:19:8c:b2:4d:7f:8e:21:74:db:ea:
         87:a7:aa:51:8c:0d:33:37:d2:e0:70:a4:9c:9b:f8:26:e3:51:
         9f:2b:f9:af:36:d1:39:99:a1:6f:58:03:13:ff:52:7f:89:c2:
         c4:76:cf:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 20:49:46 2026 by rpki-client