Error: rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.mft
File:                     0EC8EAC7F1F5A216824B37118697748825F314D9.mft (raw, json)
Hash identifier:          xTvpzlsOtKb35jTSTV1kU4e61BYtdihYoW9rd0ASeM4=
Subject key identifier:   37:0A:BD:88:F7:A0:82:29:0C:96:95:5B:58:45:62:C5:55:97:F9:AA
Authority key identifier: 0E:C8:EA:C7:F1:F5:A2:16:82:4B:37:11:86:97:74:88:25:F3:14:D9
Certificate issuer:       /CN=0EC8EAC7F1F5A216824B37118697748825F314D9
Certificate serial:       61D7652129B4FA5153875F020FFFC4804E6B0C23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.mft
Manifest number:          04C7
Signing time:             Mon 19 Oct 2026 03:08:17 +0000
Manifest this update:     Mon 19 Oct 2026 03:03:17 +0000
Manifest next update:     Tue 20 Oct 2026 06:47:17 +0000
Files and hashes:         1: 3139322e31322e3131322e302f32322d3234203d3e203631393432.roa (hash: 5AlfVOEKh4aGDgamW6LgPBzM9IIMT2YGRydnyqqOrhA=)
                          2: 3136382e3139362e37322e302f32322d3234203d3e203631393432.roa (hash: mwSV4AsrionZd6ucwU2XTnQDI1FeF1RXfyJry+mNJBE=)
                          3: 3133312e3235352e36382e302f32322d3234203d3e203631393432.roa (hash: 9P2w7BtRiGunbE7Dhl819E+nMHeQGNGRIZd1Oc/GcCA=)
                          4: 3230312e3133312e36382e302f32322d3234203d3e203631393432.roa (hash: oTj7b9bhH6RiSTQ8IwoCGUPpjxzPMpOXUR545PqouwU=)
                          5: 0EC8EAC7F1F5A216824B37118697748825F314D9.crl (hash: 3j3nFdb8x5bZYg6qKWCDSYWbVgkO+3bc9DxBt9w3p0s=)
                          6: 3137302e3233392e382e302f32322d3234203d3e203631393432.roa (hash: PD7H74uB42C5FlUCcIhjDyZK1EARVfc0do0yGt8ctg4=)
                          7: 34352e3233392e3130302e302f32322d3234203d3e203631393432.roa (hash: LUDr48xTpx4WCKeX1gnuj4FThy0qQoXGwUVL2TBdP10=)
                          8: 3137302e3233332e3136342e302f32322d3234203d3e203631393432.roa (hash: RQs3auMT7WMmlvqSiPqhEHjFJdNIhqeq2j9N65JdYuk=)
                          9: 323830343a313839383a3a2f33322d3430203d3e203631393432.roa (hash: MTSIW9OG/6g79JqNzXOS6suIJzY+iyX6qIWY52vA9V0=)
                          10: 3136382e3230352e34302e302f32322d3234203d3e203631393432.roa (hash: IEOVkq/MiFbe9kSiq1vq9xeON4CdOaPUnC31voI+IqY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.crl
                          rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 06:47:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:d7:65:21:29:b4:fa:51:53:87:5f:02:0f:ff:c4:80:4e:6b:0c:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EC8EAC7F1F5A216824B37118697748825F314D9
        Validity
            Not Before: Oct 19 03:03:17 2026 GMT
            Not After : Oct 20 06:47:17 2026 GMT
        Subject: CN=370ABD88F7A082290C96955B584562C55597F9AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:62:d9:c6:9a:60:c6:a1:24:3c:a0:da:a4:d5:
                    3b:d5:3c:14:72:e1:44:d0:61:36:af:24:7c:39:ea:
                    f5:aa:49:e4:8a:26:25:ec:fa:0f:e3:e8:c5:19:aa:
                    55:ea:1d:3c:eb:1b:b7:51:f2:1d:00:97:9d:d7:28:
                    13:23:79:e1:19:bd:3b:7a:ec:b3:f5:5b:52:e6:66:
                    ce:ac:a8:8d:2d:e1:45:30:0d:4a:28:cf:69:15:15:
                    f8:b4:57:ca:eb:f3:78:91:8a:9b:a9:a0:f7:b8:4d:
                    ce:67:0b:ee:1b:6f:48:a6:9b:a6:10:18:01:f8:5d:
                    de:2d:5c:43:b7:57:9c:77:89:29:aa:db:ae:bd:1a:
                    0d:a4:73:23:cd:4a:13:46:d0:6d:70:f2:8d:d6:c8:
                    1b:fc:38:7d:e2:05:41:ae:b2:cc:85:50:b3:8f:2f:
                    2f:c7:a6:f9:84:c4:50:fd:39:6c:9f:af:54:9a:3f:
                    83:c2:25:e3:e0:41:a8:03:e5:df:04:17:64:dc:aa:
                    8b:be:77:c8:81:0c:74:0b:0c:5e:7f:a7:05:76:55:
                    8e:93:d9:4f:7f:9b:a5:d4:f2:eb:87:1c:f7:28:84:
                    54:09:b0:2b:af:02:3c:e1:d8:3f:61:ca:32:05:af:
                    2c:84:6b:b7:18:89:21:8a:7d:9e:d6:47:27:39:97:
                    87:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:0A:BD:88:F7:A0:82:29:0C:96:95:5B:58:45:62:C5:55:97:F9:AA
            X509v3 Authority Key Identifier:
                keyid:0E:C8:EA:C7:F1:F5:A2:16:82:4B:37:11:86:97:74:88:25:F3:14:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:ee:cb:1a:3c:30:02:f8:84:57:22:7c:d7:d2:88:83:db:50:
         3c:61:8f:a6:db:a0:9c:01:00:b8:10:4a:43:5a:94:31:db:eb:
         26:0f:23:36:89:a5:e1:21:01:70:fb:35:03:a5:fa:57:7d:11:
         0f:63:21:04:e7:26:f1:b5:86:12:ae:e4:05:7c:3a:0e:58:39:
         49:29:e4:3b:09:ea:03:9b:26:9f:75:6a:ee:f9:fc:fa:88:66:
         94:ab:4b:a4:a2:c3:27:1c:18:81:3c:ab:4b:fb:89:94:dc:83:
         eb:e5:cc:6a:0d:93:0a:f5:ea:72:70:10:da:3c:20:47:05:2a:
         af:1c:3f:10:6e:1a:85:da:77:78:de:b4:93:28:ad:b8:e2:b5:
         59:59:41:b5:2f:77:d2:35:d0:c4:a2:5b:62:60:27:66:50:83:
         d8:0e:cd:34:fb:c3:3a:d0:b1:20:a4:38:ca:e4:7c:89:19:aa:
         56:97:3f:07:e2:a8:67:e6:71:c6:98:1b:56:1d:99:b9:e1:df:
         d4:20:45:10:44:cd:0a:0d:24:08:df:74:12:ea:d2:96:d3:b8:
         9f:ca:15:71:17:39:63:2e:bf:6a:9a:37:59:71:9d:37:1a:fa:
         be:20:71:51:81:f0:c5:a1:70:0f:3b:f5:35:c5:bc:43:24:f6:
         e6:60:fb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:36:32 2026 by rpki-client