Error: rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
File:                     4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft (raw, json)
Hash identifier:          94lDM/chPhH1KxIQAzo83467HpLBRh9uNkZQEj3EJPY=
Subject key identifier:   3E:AD:9A:E9:4F:63:9C:AD:40:D6:07:51:89:A0:D6:86:5E:9F:87:07
Authority key identifier: 43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63
Certificate issuer:       /CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
Certificate serial:       2CC1CF7E9D7DE0E372B31C66BBA39418AB1432A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
Manifest number:          04DC
Signing time:             Sun 25 Oct 2026 20:40:00 +0000
Manifest this update:     Sun 25 Oct 2026 20:35:00 +0000
Manifest next update:     Mon 26 Oct 2026 21:46:00 +0000
Files and hashes:         1: 34352e3136322e3138382e302f32322d3234203d3e20323632353935.roa (hash: W6lb5B+mO6JbiZRX0GW1Uhy+hiuO1g15/lQmnXPUJi8=)
                          2: 323830343a3639303a3a2f33322d3430203d3e20323632353935.roa (hash: XNmpKrhIioidYT0WbDSH+38y4AsFqdpVex8l5oWEx4s=)
                          3: 3137302e38332e34342e302f32322d3234203d3e20323632353935.roa (hash: ltlNjmBjNxv/9QTc+0CyILmDJKXwwjOJPrGqWq5UD6s=)
                          4: 3139312e372e382e302f32312d3234203d3e20323632353935.roa (hash: anK27G2c7vjgfJ1phEjaSMtYINLX8h12I1B+Gxsdj6Y=)
                          5: 3137302e37392e3232342e302f32322d3234203d3e20323632353935.roa (hash: qEL+yyrqlhbf2JPDTvvK2N9DKcJFgre2Wy5/bl9UF6I=)
                          6: 3136372e3235302e32302e302f32322d3234203d3e20323632353935.roa (hash: eXgqeb2eJqJb6EmYLX0kled+InXYsUY9wftj5OfeO1k=)
                          7: 4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl (hash: +HLnj85CxDIhmYzbnyZ2BwimqjqnS02RmyZ2Qm6uurQ=)
                          8: 3137372e38352e302e302f32312d3234203d3e20323632353935.roa (hash: 1FDPtnL/oiYQzGlPc4ijuZvBayQlDfq3fYmNZ7nmZrg=)
                          9: 34352e3137392e3138302e302f32322d3234203d3e20323632353935.roa (hash: DSIAOHHDtH4HWsBWPwzaFHzBlDruo55nJLmhdype5tA=)
                          10: 3133382e302e36342e302f32322d3234203d3e20323632353935.roa (hash: OPoXHe00vBjl8830SVaAnqbieI93+ItDdZaljPUnuH0=)
                          11: 3133382e3132312e31362e302f32322d3234203d3e20323632353935.roa (hash: i6QY2N/xunlhLUolwp4NC0xURT380/7IasvrTmTUHKc=)
                          12: 3137392e3130362e31362e302f32302d3234203d3e20323632353935.roa (hash: JhFgZ9iQt2Ligrxes5osFMqnyFJ6oIUaepakI85FJhs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl
                          rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Oct 2026 21:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c1:cf:7e:9d:7d:e0:e3:72:b3:1c:66:bb:a3:94:18:ab:14:32:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
        Validity
            Not Before: Oct 25 20:35:00 2026 GMT
            Not After : Oct 26 21:46:00 2026 GMT
        Subject: CN=3EAD9AE94F639CAD40D6075189A0D6865E9F8707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a8:39:87:e2:b6:4f:8b:bb:14:bd:3a:43:b8:
                    fa:f1:7f:fa:d5:c6:6e:6a:06:1c:6c:96:6b:17:32:
                    3c:e7:0f:ee:c3:be:b8:26:e6:b6:05:da:c3:92:6f:
                    64:70:c5:2d:df:b6:0f:6d:99:c4:81:be:a5:53:03:
                    89:cd:6e:52:d5:77:42:52:34:a9:1e:d7:1b:e6:ed:
                    d4:28:97:bd:21:d0:eb:8e:3e:d2:64:b9:04:55:1d:
                    6c:a6:80:9e:79:17:25:77:86:11:5c:0a:21:3d:33:
                    49:da:59:fc:1c:10:ca:47:bd:f6:bb:0d:20:92:b2:
                    08:df:52:fb:1a:aa:a1:d0:4e:9e:29:21:39:6b:40:
                    0a:68:34:c5:57:18:f4:b3:e6:80:c1:c7:e2:06:ee:
                    ec:95:39:a2:cd:bb:12:73:9b:ad:5d:5e:1a:ea:f9:
                    3f:cf:ab:ca:ce:2a:9a:73:77:8b:39:42:9f:54:6d:
                    bd:03:4c:2b:6e:a9:fc:fc:f6:03:34:ff:0b:b3:b6:
                    6d:22:a8:fb:b1:66:e6:79:43:56:2b:de:d0:ad:6e:
                    be:65:7c:c5:52:7b:9a:ee:28:d6:bc:45:6b:65:e9:
                    97:aa:e7:e1:f6:04:5f:eb:27:fa:b7:6c:96:75:11:
                    7f:02:b2:48:a9:80:25:b0:78:c2:8d:e4:31:7c:c4:
                    a6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:AD:9A:E9:4F:63:9C:AD:40:D6:07:51:89:A0:D6:86:5E:9F:87:07
            X509v3 Authority Key Identifier:
                keyid:43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:32:97:be:01:cc:c8:66:c8:d3:2f:e2:78:f8:07:33:bc:ae:
         ba:7b:a7:e0:20:a7:ba:5e:b1:f8:85:91:aa:af:15:ee:47:f2:
         d7:f5:40:a0:94:02:74:3b:b2:21:ce:51:24:f3:98:1a:f5:bc:
         eb:9a:b5:29:08:e9:44:49:20:76:e9:07:11:6d:96:e0:33:40:
         a3:51:e5:70:a2:2c:fe:1d:19:ee:f0:04:39:7d:87:d4:c9:cf:
         d2:a9:02:c1:8b:f0:ac:63:2f:46:d8:8b:e4:37:66:7a:51:bd:
         b4:54:f5:40:72:e5:71:1e:aa:28:29:12:73:58:4e:cc:71:41:
         29:0f:b4:aa:7a:f6:18:27:37:08:2a:a1:71:2b:f9:33:88:60:
         a9:ba:58:e1:6a:8c:7e:c1:9f:32:92:5a:77:1b:0f:1a:f9:3b:
         11:27:34:b7:ea:34:ec:ef:4f:3a:52:3a:0e:e7:b0:2d:9f:7d:
         b8:d8:1f:1c:3b:a5:e7:06:22:d4:e2:40:57:1c:2f:1b:14:f3:
         ca:e2:45:53:44:86:db:37:19:89:a1:6e:8f:3c:c8:d6:f9:b8:
         f9:94:0e:dd:7e:84:c7:12:82:3e:51:68:e0:28:8b:e1:e0:0b:
         9f:02:14:15:6e:fc:50:17:c1:44:51:cf:64:61:38:af:22:31:
         07:5b:e0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:02:08 2026 by rpki-client