Error: rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft
File:                     294426E31AEAEBF273647549DD459DE98A112431.mft (raw, json)
Hash identifier:          pag4Fni1UxC5VCia9EKx9+yYWULM9BmRnbPG6Z3TX9Y=
Subject key identifier:   E7:AD:E9:31:C4:A3:01:6D:81:1F:CB:34:2B:7E:53:FC:B3:68:45:70
Authority key identifier: 29:44:26:E3:1A:EA:EB:F2:73:64:75:49:DD:45:9D:E9:8A:11:24:31
Certificate issuer:       /CN=294426E31AEAEBF273647549DD459DE98A112431
Certificate serial:       0EFE91EF71152004D8161DA30C61298B656F25F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft
Manifest number:          04EA
Signing time:             Fri 30 Oct 2026 11:04:41 +0000
Manifest this update:     Fri 30 Oct 2026 10:59:41 +0000
Manifest next update:     Sat 31 Oct 2026 13:04:41 +0000
Files and hashes:         1: 294426E31AEAEBF273647549DD459DE98A112431.crl (hash: 0twooOl9T0AeCJD/1p+cTzTlZj3k3zKvJaH0Z1OyWw0=)
                          2: 323830343a313539303a3a2f33322d313238203d3e20323633333935.roa (hash: L9B5MGzXntZcLyq4LuTm3Q9UeS6i4pvrYrQJyD6CNVE=)
                          3: 3137372e3132352e3132342e302f32322d3234203d3e20323633333935.roa (hash: zEuZSqn5bZ8xb1825r2MOOLgbSmhE1/+gK04rIH8GSc=)
                          4: 3136382e3139342e3133362e302f32322d3332203d3e20323633333935.roa (hash: 6J/Woy2uRK1B2dNQ2tt84/6O9ugNLPe6HwJN4LKAnpQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl
                          rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 13:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:fe:91:ef:71:15:20:04:d8:16:1d:a3:0c:61:29:8b:65:6f:25:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=294426E31AEAEBF273647549DD459DE98A112431
        Validity
            Not Before: Oct 30 10:59:41 2026 GMT
            Not After : Oct 31 13:04:41 2026 GMT
        Subject: CN=E7ADE931C4A3016D811FCB342B7E53FCB3684570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9d:61:7a:8f:d9:9d:98:4d:35:b3:b7:98:82:
                    f1:af:b3:a6:66:90:c1:5c:25:ed:8a:c0:75:1e:75:
                    1c:50:34:2f:c8:0b:e7:ec:9e:89:67:ae:5c:ba:79:
                    79:48:cd:36:68:08:41:13:f1:3c:40:9b:ec:fd:14:
                    89:4f:27:1b:b6:f5:c8:f9:1e:3a:27:ab:52:3f:26:
                    01:4b:56:fd:16:19:39:a4:7a:c0:be:2e:95:c5:59:
                    0f:33:b3:d3:d2:50:a6:c3:fa:c2:21:c3:e2:50:be:
                    93:ff:6b:90:ba:6c:2d:94:4a:c1:6f:b0:f8:8e:5e:
                    9e:cb:5a:65:b5:77:40:27:3d:52:5b:2b:d4:ac:88:
                    1a:80:0b:94:00:b9:9e:14:ac:97:87:0e:e4:b2:8f:
                    f0:8c:73:af:ea:ef:aa:fe:07:a0:81:0d:d6:91:56:
                    ad:15:9b:2e:41:90:89:ee:ae:24:f4:98:70:dd:fa:
                    61:4a:89:40:dc:75:21:1c:f8:df:55:d3:49:20:e2:
                    c1:a3:b3:b7:e9:e3:81:8e:80:4f:eb:21:b5:46:18:
                    c1:54:34:b8:e7:68:2a:96:0d:75:2f:a5:1d:46:f2:
                    30:f6:c5:eb:8e:cb:47:46:22:84:1e:a8:f4:ba:c3:
                    69:99:c6:cf:20:a2:ef:0e:47:34:18:09:bf:56:e3:
                    3d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:AD:E9:31:C4:A3:01:6D:81:1F:CB:34:2B:7E:53:FC:B3:68:45:70
            X509v3 Authority Key Identifier:
                keyid:29:44:26:E3:1A:EA:EB:F2:73:64:75:49:DD:45:9D:E9:8A:11:24:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:72:7e:1c:aa:91:34:41:e5:b3:7c:97:9a:4e:13:54:5d:03:
         f5:d7:8c:00:65:20:b4:56:f1:ff:6f:8e:7f:fe:e3:68:3e:b5:
         b4:38:a7:9a:49:77:0c:c6:8f:90:31:ca:78:c4:7d:40:94:77:
         39:1f:6a:49:81:43:a0:7f:a2:55:f8:f0:a3:1a:17:bb:25:c7:
         f7:d8:95:cc:93:87:d0:e4:d0:40:ec:8a:8b:5c:e1:39:20:6b:
         6a:a5:82:23:26:6a:b3:da:b2:16:0b:ed:1f:2e:73:97:a2:b1:
         34:63:40:27:24:4b:97:a2:7e:61:ff:34:70:d6:89:97:2f:7b:
         ae:71:62:a8:a5:6f:7a:71:b4:30:f4:51:86:4a:fc:4d:58:e2:
         2d:45:97:75:35:88:39:e9:00:92:71:2b:97:a9:6b:19:a8:ad:
         4b:a8:e9:64:a2:c3:82:2f:17:88:22:d3:e1:ab:1b:a3:7c:ac:
         44:ef:83:0f:af:53:fb:42:ae:21:77:f9:da:eb:0d:0e:40:4b:
         01:59:d9:2c:46:74:c7:e7:6c:88:61:b6:a6:c0:1b:54:5d:56:
         b1:ef:cc:45:3a:49:b1:00:19:76:67:c4:0d:32:9e:24:b3:9c:
         0d:93:c7:a8:e1:5f:36:a4:19:87:9d:0c:89:58:f4:e3:30:20:
         cd:bf:30:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:37:11 2026 by rpki-client