Error: rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/1/13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/1/13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE.mft
File:                     13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE.mft (raw, json)
Hash identifier:          MmOq1Jzy/OJEj7/aBpohCi7+dWUsftADcmUfpIPLxFM=
Subject key identifier:   82:28:E4:7A:FF:9F:DC:A6:24:34:49:37:A9:24:0C:22:01:6E:C8:CF
Authority key identifier: 13:A7:F6:C1:A7:DF:9B:0A:1A:93:E5:01:C5:79:1D:83:5F:C2:61:EE
Certificate issuer:       /CN=13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE
Certificate serial:       4944D644CC486B903FB2BD5AD3ACA05212ED487E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/1/13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE.mft
Manifest number:          04D0
Signing time:             Thu 15 Oct 2026 01:20:17 +0000
Manifest this update:     Thu 15 Oct 2026 01:15:17 +0000
Manifest next update:     Fri 16 Oct 2026 01:38:17 +0000
Files and hashes:         1: 3137372e38362e32382e302f32322d3234203d3e20323632343932.roa (hash: DJTR34xaPLjzWOJLXNn8NlcUZasPYJo2cLGioqRm5H4=)
                          2: 13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE.crl (hash: WgPQmBVT0mvW2aWJ6dIOeraC0EHr6q/4q2O5e5ukdsc=)
                          3: 3136382e3132312e3130382e302f32322d3234203d3e20323632343932.roa (hash: RYKvI1EyGzbDwGhJH7Mjqlxmsck9eVOzdAZKvHbFNNc=)
                          4: 323830343a313433343a3a2f33322d3438203d3e20323632343932.roa (hash: NfjM6HDee60MW1eGNVc7k8l94uWFJCqlvZahL/QFr7c=)
                          5: 3137372e36362e3130342e302f32322d3234203d3e20323632343932.roa (hash: SbFXDFNTROotBgt6t4e0avECffvv17yR+l6XztD4SZY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/1/13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE.crl
                          rsync://rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/1/13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 01:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:44:d6:44:cc:48:6b:90:3f:b2:bd:5a:d3:ac:a0:52:12:ed:48:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE
        Validity
            Not Before: Oct 15 01:15:17 2026 GMT
            Not After : Oct 16 01:38:17 2026 GMT
        Subject: CN=8228E47AFF9FDCA624344937A9240C22016EC8CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2f:07:2b:a1:2a:36:14:55:c9:16:95:a4:f5:
                    c8:52:43:63:f8:3e:67:7e:4f:bd:b3:89:12:d9:57:
                    8b:b1:f7:f1:ba:80:b9:2d:07:24:c0:29:13:84:1f:
                    a1:63:9c:e9:3a:5b:50:18:99:01:13:5d:46:d2:37:
                    ff:a9:e2:c9:95:43:97:d8:8a:0d:70:25:57:4d:ab:
                    86:69:e8:91:77:9b:a4:11:cd:81:00:ab:44:5d:4e:
                    0d:4e:e9:58:a6:f5:f0:5d:91:ec:71:ea:d3:a1:e3:
                    8a:fd:2d:44:dc:01:d4:5f:f1:c5:73:7c:0c:b0:eb:
                    ce:95:df:7d:bc:ba:f8:31:52:16:6f:38:f9:bd:78:
                    5a:e9:f3:2e:0b:3e:32:38:b9:dc:6a:ec:66:62:91:
                    eb:96:50:c7:43:54:41:2e:b3:fc:64:26:df:2f:49:
                    d9:a6:99:dd:f8:70:03:c1:16:3c:7a:fd:5e:5e:7d:
                    73:84:a9:49:ee:45:49:10:56:c5:49:25:9d:88:9d:
                    6b:d9:e5:89:f8:bc:2a:91:64:94:1d:29:33:38:a9:
                    14:2b:80:63:3b:e8:b4:8a:6f:f5:9c:26:6f:98:3c:
                    a8:e3:8b:ad:8c:5a:17:75:b1:a9:46:7e:5f:3f:2a:
                    a5:a6:c8:5c:e6:dd:29:6f:07:b7:c5:8e:3c:a4:a1:
                    d7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:28:E4:7A:FF:9F:DC:A6:24:34:49:37:A9:24:0C:22:01:6E:C8:CF
            X509v3 Authority Key Identifier:
                keyid:13:A7:F6:C1:A7:DF:9B:0A:1A:93:E5:01:C5:79:1D:83:5F:C2:61:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/1/13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/1/13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:dd:0f:a4:b5:ee:50:d6:64:48:a2:62:3c:71:49:e9:0c:67:
         4f:84:64:ad:b5:c3:68:cc:86:45:ec:d7:8f:00:47:78:a6:64:
         1e:f7:0a:e0:4f:50:23:a0:eb:b2:ad:aa:fa:19:30:59:d9:95:
         fd:03:bc:0e:bf:8f:9f:30:f5:e3:85:34:91:67:4c:53:8d:6e:
         64:07:b2:4a:48:31:76:7a:86:98:34:4b:55:53:5f:9b:b3:3b:
         a7:06:34:42:a2:bf:7d:74:4f:ce:c1:e7:45:1b:26:1e:2d:b3:
         ae:99:8c:8a:ee:aa:f9:28:ec:45:c0:7a:87:36:74:d1:6f:ed:
         82:f0:f1:11:d5:08:19:ef:74:36:12:86:ac:f8:33:e5:e3:c4:
         cd:1d:b8:eb:b4:a0:81:83:1f:77:73:1f:64:32:fb:e3:0a:33:
         4f:41:cd:4c:cc:73:7d:81:47:48:69:53:65:13:50:b8:d6:cc:
         d6:18:39:80:4b:90:bd:01:8a:08:69:0a:76:72:a0:cc:28:2d:
         79:38:97:59:35:72:fc:26:57:49:a3:6e:ae:a8:04:44:66:c1:
         c8:f7:39:8a:7f:58:7d:7e:c7:c0:e4:bc:53:2b:89:83:19:e7:
         4e:a7:73:95:fc:e9:8b:f6:09:be:9e:35:77:88:5c:23:dc:9d:
         20:ba:1a:f5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSUTWRMxIa5A/sr1a06ygUhLtSH4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNBN0Y2QzFBN0RGOUIwQTFBOTNFNTAxQzU3OTFEODM1
RkMyNjFFRTAeFw0yNjEwMTUwMTE1MTdaFw0yNjEwMTYwMTM4MTdaMDMxMTAvBgNV
BAMTKDgyMjhFNDdBRkY5RkRDQTYyNDM0NDkzN0E5MjQwQzIyMDE2RUM4Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrLwcroSo2FFXJFpWk9chSQ2P4
Pmd+T72ziRLZV4ux9/G6gLktByTAKROEH6FjnOk6W1AYmQETXUbSN/+p4smVQ5fY
ig1wJVdNq4Zp6JF3m6QRzYEAq0RdTg1O6Vim9fBdkexx6tOh44r9LUTcAdRf8cVz
fAyw686V3328uvgxUhZvOPm9eFrp8y4LPjI4udxq7GZikeuWUMdDVEEus/xkJt8v
Sdmmmd34cAPBFjx6/V5efXOEqUnuRUkQVsVJJZ2InWvZ5Yn4vCqRZJQdKTM4qRQr
gGM76LSKb/WcJm+YPKjji62MWhd1salGfl8/KqWmyFzm3SlvB7fFjjykoddbAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUgijkev+f3KYkNEk3qSQMIgFuyM8wHwYDVR0j
BBgwFoAUE6f2waffmwoak+UBxXkdg1/CYe4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWtheWhnRjNNZnBpWFc1MVVtVzRLMzJVSHExUkpiZTg4ZTJWdFBmd2tw
YmEvMS8xM0E3RjZDMUE3REY5QjBBMUE5M0U1MDFDNTc5MUQ4MzVGQzI2MUVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzQTdGNkMxQTdERjlCMEEx
QTkzRTUwMUM1NzkxRDgzNUZDMjYxRUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NWtheWhnRjNNZnBpWFc1MVVtVzRLMzJVSHExUkpiZTg4ZTJWdFBmd2twYmEvMS8x
M0E3RjZDMUE3REY5QjBBMUE5M0U1MDFDNTc5MUQ4MzVGQzI2MUVFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJN0PpLXuUNZkSKJiPHFJ6QxnT4RkrbXDaMyGRezXjwBHeKZkHvcK4E9QI6Dr
sq2q+hkwWdmV/QO8Dr+PnzD144U0kWdMU41uZAeySkgxdnqGmDRLVVNfm7M7pwY0
QqK/fXRPzsHnRRsmHi2zrpmMiu6q+SjsRcB6hzZ00W/tgvDxEdUIGe90NhKGrPgz
5ePEzR2467SggYMfd3MfZDL74wozT0HNTMxzfYFHSGlTZRNQuNbM1hg5gEuQvQGK
CGkKdnKgzCgteTiXWTVy/CZXSaNurqgERGbByPc5in9YfX7HwOS8UyuJgxnnTqdz
lfzpi/YJvp41d4hcI9ydILoa9Q==
-----END CERTIFICATE-----
Generated at Thu Oct 15 05:50:58 2026 by rpki-client