Error: rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.mft
File:                     40636332B02FA344DE75686E874C7425B2C58624.mft (raw, json)
Hash identifier:          JMAYHtd5Khl4IWwCj2fNNDHkUu6Oc9suhGWZjZXMDd0=
Subject key identifier:   58:8F:7D:B9:E8:D5:E7:C8:2A:CE:35:31:C7:E7:00:4E:A2:6D:DC:20
Authority key identifier: 40:63:63:32:B0:2F:A3:44:DE:75:68:6E:87:4C:74:25:B2:C5:86:24
Certificate issuer:       /CN=40636332B02FA344DE75686E874C7425B2C58624
Certificate serial:       653E50ACAB4E931EC613E45DF085C185EA8BBAA4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40636332B02FA344DE75686E874C7425B2C58624.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.mft
Manifest number:          04E7
Signing time:             Tue 03 Nov 2026 04:33:26 +0000
Manifest this update:     Tue 03 Nov 2026 04:28:26 +0000
Manifest next update:     Wed 04 Nov 2026 06:37:26 +0000
Files and hashes:         1: 3137372e3132352e3235322e302f32332d3233203d3e20323633333936.roa (hash: TsrN8pTw6ZoFMtakcgirSnXXXiQlJtEA8lLaO/9aSf8=)
                          2: 323830343a313539343a3a2f33322d3332203d3e20323633333936.roa (hash: 10EDhCZ/lsgtyh2/uvnbJQXhbfL58osWesEEi3zL6B0=)
                          3: 323830343a313539343a3a2f33332d3333203d3e20323633333936.roa (hash: 6jOZ/akJsCcydY98wvMjgXw/yMnB/On87tVhv/IQqHo=)
                          4: 3137372e3132352e3235342e302f32342d3234203d3e20323633333936.roa (hash: 14gDW6bEJ9nJvPx8geN4NCkeLK5VnotpToXU6B74rok=)
                          5: 40636332B02FA344DE75686E874C7425B2C58624.crl (hash: 8M7NZhgXd647DMc4ckpqrpleSGJTssOUAgjCx2bG+DA=)
                          6: 3137372e3132352e3235322e302f32322d3232203d3e20323633333936.roa (hash: ZutIjgA9rply9urf4o/OjFFNcP6znXGqJErFQUef1dc=)
                          7: 3137372e3132352e3235342e302f32332d3233203d3e20323633333936.roa (hash: pFcTTFEs7PFgDKngTK+jG96Za1sfiHeBOPiCfu6eDWE=)
                          8: 3137372e3132352e3235322e302f32342d3234203d3e20323633333936.roa (hash: 1zlZh1RIyKIORzy/QdPKcAzVf4S4RmInWHqoPdIt8qs=)
                          9: 323830343a313539343a383030303a3a2f33332d3333203d3e20323633333936.roa (hash: hLzqmsCKgsDSOYYsfd9uplhuDbU2l7wN+x1Gqbuga7Y=)
                          10: 3137372e3132352e3235352e302f32342d3234203d3e20323633333936.roa (hash: /f1V0+9KbBzDlBJGGbpsQIfjbnVsZ4ioE+6Q7Tknrh4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.crl
                          rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40636332B02FA344DE75686E874C7425B2C58624.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 06:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:3e:50:ac:ab:4e:93:1e:c6:13:e4:5d:f0:85:c1:85:ea:8b:ba:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40636332B02FA344DE75686E874C7425B2C58624
        Validity
            Not Before: Nov  3 04:28:26 2026 GMT
            Not After : Nov  4 06:37:26 2026 GMT
        Subject: CN=588F7DB9E8D5E7C82ACE3531C7E7004EA26DDC20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:58:f1:f8:9b:9e:6b:f2:8f:99:fd:61:12:ee:
                    56:f9:37:b7:ff:cb:33:0b:64:f5:cc:dd:91:76:ae:
                    8e:0b:b1:85:b1:26:e1:0e:71:61:fb:64:88:0c:18:
                    0b:f8:ba:bd:57:33:ef:84:cf:59:57:b4:01:56:39:
                    ab:e0:49:9f:d7:9a:00:f8:b1:72:f7:06:ec:82:ff:
                    4f:f6:a4:0e:e9:02:a9:a2:da:f6:d3:37:54:61:bc:
                    2a:26:f7:2d:c9:75:5a:9a:4e:1c:cc:24:7b:00:be:
                    e3:32:8a:d8:36:be:79:e7:d5:51:20:8d:63:31:43:
                    5e:37:f7:6b:1d:de:36:2e:8a:86:7a:1f:14:7f:01:
                    2c:e8:40:be:57:eb:ba:ae:6d:dc:0b:a1:59:a8:c7:
                    f5:23:ce:e6:01:43:7e:ad:65:e4:84:24:ec:56:95:
                    4d:30:5f:08:8b:c3:70:3c:47:b5:4a:9d:e4:61:03:
                    bc:18:01:fb:1f:e4:df:45:8a:b6:db:87:09:dc:f1:
                    6b:84:97:81:b8:f3:4a:1e:1d:78:52:39:aa:6d:f9:
                    8b:4e:0b:e1:db:c5:c5:49:72:cb:3c:f1:7a:46:c0:
                    81:ff:91:f7:2d:74:64:e0:8d:0e:54:06:aa:9e:87:
                    49:3b:ff:cc:8f:ac:eb:27:f6:cb:7e:05:59:29:4d:
                    6a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:8F:7D:B9:E8:D5:E7:C8:2A:CE:35:31:C7:E7:00:4E:A2:6D:DC:20
            X509v3 Authority Key Identifier:
                keyid:40:63:63:32:B0:2F:A3:44:DE:75:68:6E:87:4C:74:25:B2:C5:86:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40636332B02FA344DE75686E874C7425B2C58624.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:7f:5c:55:dd:16:16:f9:00:10:4d:d4:5d:06:ab:94:1f:8b:
         23:4a:4a:d7:90:21:cf:a4:e2:d9:6f:80:7d:e5:bf:d7:3a:c3:
         eb:9f:19:31:5d:0e:e6:62:04:f7:fc:a7:04:04:75:d2:bc:32:
         0a:80:32:ae:24:ea:6d:e0:54:05:f8:f7:10:46:1c:24:b0:9a:
         4f:3b:bc:09:a1:21:83:33:45:18:93:a8:9d:54:7f:6a:3b:38:
         74:9c:41:23:3e:e3:2f:82:17:92:af:b5:b5:14:c9:b7:43:1d:
         4e:54:9f:09:3a:4c:b3:53:fc:e5:44:fc:f4:a9:da:f3:c4:d8:
         1b:03:60:05:32:95:cd:a3:09:3d:77:81:2e:1f:87:ed:c3:69:
         c1:23:7f:1a:90:07:2e:d2:a1:12:38:1a:07:bf:78:0f:60:1f:
         5f:c0:ac:fd:e0:4b:a8:8b:f2:21:c1:7b:77:be:cc:59:f2:f5:
         0d:72:67:24:e4:74:39:67:56:51:8a:fc:cb:59:9b:4c:0a:49:
         f5:fc:32:8a:c7:76:0c:97:14:52:64:02:9c:6f:26:32:4a:2e:
         45:f6:7f:3e:55:b0:73:22:54:25:85:da:28:84:3e:a0:32:e3:
         d4:8f:b5:61:81:e1:9a:18:84:b0:7a:12:3b:e4:d6:ac:e8:9d:
         72:9a:42:69
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZT5QrKtOkx7GE+Rd8IXBheqLuqQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDA2MzYzMzJCMDJGQTM0NERFNzU2ODZFODc0Qzc0MjVC
MkM1ODYyNDAeFw0yNjExMDMwNDI4MjZaFw0yNjExMDQwNjM3MjZaMDMxMTAvBgNV
BAMTKDU4OEY3REI5RThENUU3QzgyQUNFMzUzMUM3RTcwMDRFQTI2RERDMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4WPH4m55r8o+Z/WES7lb5N7f/
yzMLZPXM3ZF2ro4LsYWxJuEOcWH7ZIgMGAv4ur1XM++Ez1lXtAFWOavgSZ/XmgD4
sXL3BuyC/0/2pA7pAqmi2vbTN1RhvCom9y3JdVqaThzMJHsAvuMyitg2vnnn1VEg
jWMxQ14392sd3jYuioZ6HxR/ASzoQL5X67qubdwLoVmox/UjzuYBQ36tZeSEJOxW
lU0wXwiLw3A8R7VKneRhA7wYAfsf5N9Firbbhwnc8WuEl4G480oeHXhSOapt+YtO
C+HbxcVJcss88XpGwIH/kfctdGTgjQ5UBqqeh0k7/8yPrOsn9st+BVkpTWrBAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUWI99uejV58gqzjUxx+cATqJt3CAwHwYDVR0j
BBgwFoAUQGNjMrAvo0TedWhuh0x0JbLFhiQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN01KeThqVkVqVTZjYzJTUUVmcFh4enRWSlJqaGtvVjlEczY0TXFtZTJT
RVIvMS80MDYzNjMzMkIwMkZBMzQ0REU3NTY4NkU4NzRDNzQyNUIyQzU4NjI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwNjM2MzMyQjAyRkEzNDRE
RTc1Njg2RTg3NEM3NDI1QjJDNTg2MjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N01KeThqVkVqVTZjYzJTUUVmcFh4enRWSlJqaGtvVjlEczY0TXFtZTJTRVIvMS80
MDYzNjMzMkIwMkZBMzQ0REU3NTY4NkU4NzRDNzQyNUIyQzU4NjI0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQ39cVd0WFvkAEE3UXQarlB+LI0pK15Ahz6Ti2W+AfeW/1zrD658ZMV0O5mIE
9/ynBAR10rwyCoAyriTqbeBUBfj3EEYcJLCaTzu8CaEhgzNFGJOonVR/ajs4dJxB
Iz7jL4IXkq+1tRTJt0MdTlSfCTpMs1P85UT89Kna88TYGwNgBTKVzaMJPXeBLh+H
7cNpwSN/GpAHLtKhEjgaB794D2AfX8Cs/eBLqIvyIcF7d77MWfL1DXJnJOR0OWdW
UYr8y1mbTApJ9fwyisd2DJcUUmQCnG8mMkouRfZ/PlWwcyJUJYXaKIQ+oDLj1I+1
YYHhmhiEsHoSO+TWrOidcppCaQ==
-----END CERTIFICATE-----
Generated at Tue Nov 3 22:52:51 2026 by rpki-client