Error: rpki-repo.registro.br/repo/7jkfUhbhdxHvKqKhW2wND8HmY4sJQz7u27BEYy8EQwL5/1/71E169D36940CB71A5ADBB76D2764F1539336D84.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/7jkfUhbhdxHvKqKhW2wND8HmY4sJQz7u27BEYy8EQwL5/1/71E169D36940CB71A5ADBB76D2764F1539336D84.mft
File:                     71E169D36940CB71A5ADBB76D2764F1539336D84.mft (raw, json)
Hash identifier:          VozTh0KEEumydOrL/9Q0V6N5B5mq18doKMOv6+mQ3CE=
Subject key identifier:   8B:C7:5B:2E:9F:02:2C:29:B2:00:BA:F7:42:02:8E:76:8F:89:F1:8D
Authority key identifier: 71:E1:69:D3:69:40:CB:71:A5:AD:BB:76:D2:76:4F:15:39:33:6D:84
Certificate issuer:       /CN=71E169D36940CB71A5ADBB76D2764F1539336D84
Certificate serial:       7161A5AD2159BC6338D04E30D8B6FCC336AE5E3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E169D36940CB71A5ADBB76D2764F1539336D84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7jkfUhbhdxHvKqKhW2wND8HmY4sJQz7u27BEYy8EQwL5/1/71E169D36940CB71A5ADBB76D2764F1539336D84.mft
Manifest number:          0537
Signing time:             Thu 15 Oct 2026 03:56:59 +0000
Manifest this update:     Thu 15 Oct 2026 03:51:59 +0000
Manifest next update:     Fri 16 Oct 2026 07:08:59 +0000
Files and hashes:         1: 71E169D36940CB71A5ADBB76D2764F1539336D84.crl (hash: frMg6Id5LaVk0dZSGtzVj5WbOq7zw8M+JA59LJcT5jc=)
                          2: 323830343a326536383a3a2f33322d3438203d3e20323635333434.roa (hash: 4heuf23fMCdaEkHgHDcV25MEuf168m8/7oHiyQYw/Dg=)
                          3: 3136382e3138312e3230302e302f32322d3234203d3e20323635333434.roa (hash: xVfrPbM64bitVZuwvvaPoEy2a3X3Wsuu0gYtbbJN3j4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7jkfUhbhdxHvKqKhW2wND8HmY4sJQz7u27BEYy8EQwL5/1/71E169D36940CB71A5ADBB76D2764F1539336D84.crl
                          rsync://rpki-repo.registro.br/repo/7jkfUhbhdxHvKqKhW2wND8HmY4sJQz7u27BEYy8EQwL5/1/71E169D36940CB71A5ADBB76D2764F1539336D84.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E169D36940CB71A5ADBB76D2764F1539336D84.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 07:08:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:61:a5:ad:21:59:bc:63:38:d0:4e:30:d8:b6:fc:c3:36:ae:5e:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71E169D36940CB71A5ADBB76D2764F1539336D84
        Validity
            Not Before: Oct 15 03:51:59 2026 GMT
            Not After : Oct 16 07:08:59 2026 GMT
        Subject: CN=8BC75B2E9F022C29B200BAF742028E768F89F18D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f0:b3:f0:0b:14:ff:1a:c3:ea:bf:22:f5:34:
                    31:71:c8:a7:0d:91:85:e7:19:5b:24:60:d9:33:79:
                    cf:4c:b8:71:73:69:f7:f0:09:2d:46:04:58:3e:29:
                    9a:7f:50:a0:0b:88:73:5a:85:88:b8:7e:ff:87:0e:
                    c1:61:d0:ff:58:c1:f7:bb:9d:f4:f2:af:03:ac:ab:
                    09:1f:95:e1:48:02:65:2b:e6:d4:14:65:6e:59:45:
                    28:bb:5d:06:d3:10:f4:09:d6:6c:ef:78:7b:de:c2:
                    96:3a:5d:a4:6e:97:3b:60:58:de:33:2a:43:69:db:
                    70:8c:39:e7:26:61:03:33:c8:19:3d:5e:7c:fe:b1:
                    56:db:d6:8a:ce:97:12:a7:cb:07:ac:36:a4:e8:a9:
                    92:bc:c2:61:5f:4f:d9:12:b8:18:6d:ef:f0:6d:95:
                    67:e1:50:ce:7e:21:db:24:be:c5:cb:72:c4:bd:42:
                    95:35:34:ce:93:24:f5:1b:77:0f:89:b6:c6:1b:1c:
                    d5:e8:d2:f7:bb:1f:59:07:f4:33:3c:fd:3a:58:12:
                    f1:da:88:79:c9:ef:c2:1e:cd:f0:2d:10:17:d5:2b:
                    f2:9e:79:6a:5b:fc:b3:6c:d2:7d:3d:38:e7:0f:0a:
                    f1:9b:aa:77:58:99:d8:79:cf:3f:fb:eb:bd:63:a5:
                    9a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C7:5B:2E:9F:02:2C:29:B2:00:BA:F7:42:02:8E:76:8F:89:F1:8D
            X509v3 Authority Key Identifier:
                keyid:71:E1:69:D3:69:40:CB:71:A5:AD:BB:76:D2:76:4F:15:39:33:6D:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7jkfUhbhdxHvKqKhW2wND8HmY4sJQz7u27BEYy8EQwL5/1/71E169D36940CB71A5ADBB76D2764F1539336D84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E169D36940CB71A5ADBB76D2764F1539336D84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7jkfUhbhdxHvKqKhW2wND8HmY4sJQz7u27BEYy8EQwL5/1/71E169D36940CB71A5ADBB76D2764F1539336D84.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:28:58:af:68:8b:01:87:d9:86:67:9a:15:75:74:e8:16:6f:
         e9:0e:b5:6a:b5:c5:f4:01:4f:04:ff:a6:e3:a5:54:e8:10:7e:
         2e:f5:fc:00:f2:2e:a1:e8:38:cc:e6:1c:7f:a8:0f:c8:08:22:
         ab:ba:a3:fa:8e:ea:6e:8b:21:5b:ee:11:23:33:1b:55:df:00:
         d5:62:2a:05:9c:30:90:1a:f9:58:30:5b:dc:fb:d5:9f:9d:b8:
         53:c9:92:cc:67:8d:ab:48:d3:5f:1a:68:a7:48:d8:ea:68:2e:
         57:24:72:94:a1:cb:80:4d:8f:7b:41:3f:2b:22:52:36:a7:cd:
         09:55:63:db:9a:d3:c8:9f:44:15:64:3f:b3:df:16:c2:3c:03:
         27:82:04:6e:e8:38:72:71:76:89:c2:12:81:3a:8e:c8:89:ca:
         ef:b6:0c:38:2e:e4:d4:9e:5f:a3:87:5c:fd:a9:bc:eb:a5:6d:
         07:d3:16:55:0c:28:0d:dc:36:e7:12:22:2b:65:6a:2b:a8:e5:
         92:fd:ea:1a:63:bb:de:ac:5d:a6:7f:6a:d6:65:35:bd:4e:b5:
         49:b2:54:0d:21:ae:34:84:1f:3f:bc:ee:bc:40:36:ba:4e:ca:
         c9:7c:62:3b:72:fd:fd:d7:9c:25:8d:6e:7c:e5:71:09:8a:aa:
         f8:9a:5f:15
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcWGlrSFZvGM40E4w2Lb8wzauXj4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFFMTY5RDM2OTQwQ0I3MUE1QURCQjc2RDI3NjRGMTUz
OTMzNkQ4NDAeFw0yNjEwMTUwMzUxNTlaFw0yNjEwMTYwNzA4NTlaMDMxMTAvBgNV
BAMTKDhCQzc1QjJFOUYwMjJDMjlCMjAwQkFGNzQyMDI4RTc2OEY4OUYxOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC08LPwCxT/GsPqvyL1NDFxyKcN
kYXnGVskYNkzec9MuHFzaffwCS1GBFg+KZp/UKALiHNahYi4fv+HDsFh0P9Ywfe7
nfTyrwOsqwkfleFIAmUr5tQUZW5ZRSi7XQbTEPQJ1mzveHvewpY6XaRulztgWN4z
KkNp23CMOecmYQMzyBk9Xnz+sVbb1orOlxKnywesNqToqZK8wmFfT9kSuBht7/Bt
lWfhUM5+IdskvsXLcsS9QpU1NM6TJPUbdw+JtsYbHNXo0ve7H1kH9DM8/TpYEvHa
iHnJ78IezfAtEBfVK/KeeWpb/LNs0n09OOcPCvGbqndYmdh5zz/7671jpZotAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUi8dbLp8CLCmyALr3QgKOdo+J8Y0wHwYDVR0j
BBgwFoAUceFp02lAy3Glrbt20nZPFTkzbYQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2prZlVoYmhkeEh2S3FLaFcyd05EOEhtWTRzSlF6N3UyN0JFWXk4RVF3
TDUvMS83MUUxNjlEMzY5NDBDQjcxQTVBREJCNzZEMjc2NEYxNTM5MzM2RDg0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxRTE2OUQzNjk0MENCNzFB
NUFEQkI3NkQyNzY0RjE1MzkzMzZEODQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N2prZlVoYmhkeEh2S3FLaFcyd05EOEhtWTRzSlF6N3UyN0JFWXk4RVF3TDUvMS83
MUUxNjlEMzY5NDBDQjcxQTVBREJCNzZEMjc2NEYxNTM5MzM2RDg0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJyhYr2iLAYfZhmeaFXV06BZv6Q61arXF9AFPBP+m46VU6BB+LvX8APIuoeg4
zOYcf6gPyAgiq7qj+o7qboshW+4RIzMbVd8A1WIqBZwwkBr5WDBb3PvVn524U8mS
zGeNq0jTXxpop0jY6mguVyRylKHLgE2Pe0E/KyJSNqfNCVVj25rTyJ9EFWQ/s98W
wjwDJ4IEbug4cnF2icISgTqOyInK77YMOC7k1J5fo4dc/am866VtB9MWVQwoDdw2
5xIiK2VqK6jlkv3qGmO73qxdpn9q1mU1vU61SbJUDSGuNIQfP7zuvEA2uk7KyXxi
O3L9/decJY1ufOVxCYqq+JpfFQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:23:29 2026 by rpki-client