Error: rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.mft
File:                     736CC7BD00E444B3C507A4A165D0774513CFB15B.mft (raw, json)
Hash identifier:          nOo01er0x0Ka5TU7JjOJJcPen+T/6jaaBF+Dv7Lzu6E=
Subject key identifier:   AD:DA:0E:2B:4C:4B:D0:BE:A3:20:68:51:48:8C:66:40:4C:A2:75:B5
Authority key identifier: 73:6C:C7:BD:00:E4:44:B3:C5:07:A4:A1:65:D0:77:45:13:CF:B1:5B
Certificate issuer:       /CN=736CC7BD00E444B3C507A4A165D0774513CFB15B
Certificate serial:       66276126FB8881AFEB438FC077C7D95D57277263
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.mft
Manifest number:          04CE
Signing time:             Tue 27 Oct 2026 15:23:29 +0000
Manifest this update:     Tue 27 Oct 2026 15:18:29 +0000
Manifest next update:     Wed 28 Oct 2026 18:25:29 +0000
Files and hashes:         1: 3139302e38332e35362e302f32322d3332203d3e20323730333534.roa (hash: EKcgXFnu+IbEZT8PLAUccUxYsxBrLHmqx4FyOw8vJJ0=)
                          2: 736CC7BD00E444B3C507A4A165D0774513CFB15B.crl (hash: X+RntLP7wpA0h4Et7ttai90XUg3UvQqNorJGTRietks=)
                          3: 323830343a366162343a3a2f33322d313238203d3e20323730333534.roa (hash: A+LodF7cStktK/ueF+NPXgQkkd337778Lh5spytQ/6c=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.crl
                          rsync://rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 18:25:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:27:61:26:fb:88:81:af:eb:43:8f:c0:77:c7:d9:5d:57:27:72:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=736CC7BD00E444B3C507A4A165D0774513CFB15B
        Validity
            Not Before: Oct 27 15:18:29 2026 GMT
            Not After : Oct 28 18:25:29 2026 GMT
        Subject: CN=ADDA0E2B4C4BD0BEA3206851488C66404CA275B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a4:d9:f3:a5:03:12:65:c7:7a:c1:6c:69:7f:
                    b7:8c:45:a6:ae:53:f4:27:54:c6:4f:54:7e:ca:ba:
                    b6:5f:46:1f:d8:9e:ce:b0:54:59:86:0a:07:ff:12:
                    a1:10:cd:f1:f8:d6:16:a7:23:44:ec:04:6f:20:02:
                    be:79:24:53:03:eb:f1:cd:f4:92:78:c5:74:9f:c2:
                    af:4d:f6:52:20:48:7c:9a:97:23:b4:b8:00:4c:3c:
                    8b:25:fb:45:33:ba:ba:f3:88:da:2d:63:28:35:8b:
                    57:4b:b3:11:e3:91:31:df:b1:99:75:3a:35:a6:01:
                    be:f0:ff:ff:23:3f:6b:ad:93:12:cf:15:7c:86:91:
                    80:fb:e9:6f:5b:27:27:af:90:dd:cc:c4:0e:29:4b:
                    cf:03:00:d2:8f:b8:25:ba:3f:d4:2e:5e:c4:3b:7f:
                    8d:c4:a3:32:90:f8:ba:c3:46:c0:e0:c4:63:2a:76:
                    8a:40:b1:17:ff:a2:14:da:8b:ee:33:0d:34:f8:98:
                    87:4d:9a:cb:5b:8a:43:34:5f:63:30:3f:34:e0:47:
                    b4:28:3d:01:3e:7d:9a:08:6e:80:ca:46:01:8f:9f:
                    8f:09:50:f6:8c:c5:b7:80:b2:e0:b7:78:24:85:fb:
                    7b:db:6f:01:1a:af:6c:d8:e1:d7:ed:9d:a3:4c:aa:
                    9d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:DA:0E:2B:4C:4B:D0:BE:A3:20:68:51:48:8C:66:40:4C:A2:75:B5
            X509v3 Authority Key Identifier:
                keyid:73:6C:C7:BD:00:E4:44:B3:C5:07:A4:A1:65:D0:77:45:13:CF:B1:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:69:c3:ab:f4:7a:88:36:64:e4:b2:ad:08:c2:08:44:64:d4:
         9a:95:c3:66:92:68:1f:5b:02:50:81:a9:bf:00:b4:55:dc:f4:
         7e:7e:b8:6a:1f:e9:47:dc:d9:67:cd:6d:c3:11:82:00:4c:36:
         72:af:0a:d2:b3:9d:35:84:be:81:f8:5b:41:92:ff:f6:0c:1e:
         83:f6:66:a3:25:22:61:3f:d4:e9:1d:ed:97:89:9e:ae:4c:e8:
         22:8c:d4:a6:4c:97:6a:6c:8a:9b:eb:d0:64:fa:f6:a6:42:fd:
         3d:7b:94:30:57:90:aa:36:4d:74:4d:41:63:7b:9e:b4:05:8e:
         e5:3e:85:fe:d3:e6:37:79:03:fe:4e:64:fe:97:07:59:28:74:
         28:f8:5b:d0:42:55:6d:bd:7c:42:7c:e6:f5:a8:8f:39:1f:dd:
         14:2e:2b:0d:fb:a4:1b:75:bc:cd:ba:08:f4:06:60:cb:b3:12:
         33:22:6b:21:24:82:e7:e9:f0:39:ef:47:1a:3a:2c:dc:07:1f:
         ce:04:f5:11:95:52:96:c5:7f:11:53:8d:e1:82:e6:60:b1:40:
         d8:60:1e:1c:3b:3e:f0:f5:90:45:30:06:2e:e4:29:ee:92:41:
         5e:23:01:a2:59:cf:60:ed:14:8c:90:da:8e:0e:13:20:80:e5:
         1b:82:56:7b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZidhJvuIga/rQ4/Ad8fZXVcncmMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM2Q0M3QkQwMEU0NDRCM0M1MDdBNEExNjVEMDc3NDUx
M0NGQjE1QjAeFw0yNjEwMjcxNTE4MjlaFw0yNjEwMjgxODI1MjlaMDMxMTAvBgNV
BAMTKEFEREEwRTJCNEM0QkQwQkVBMzIwNjg1MTQ4OEM2NjQwNENBMjc1QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCpNnzpQMSZcd6wWxpf7eMRaau
U/QnVMZPVH7KurZfRh/Yns6wVFmGCgf/EqEQzfH41hanI0TsBG8gAr55JFMD6/HN
9JJ4xXSfwq9N9lIgSHyalyO0uABMPIsl+0UzurrziNotYyg1i1dLsxHjkTHfsZl1
OjWmAb7w//8jP2utkxLPFXyGkYD76W9bJyevkN3MxA4pS88DANKPuCW6P9QuXsQ7
f43EozKQ+LrDRsDgxGMqdopAsRf/ohTai+4zDTT4mIdNmstbikM0X2MwPzTgR7Qo
PQE+fZoIboDKRgGPn48JUPaMxbeAsuC3eCSF+3vbbwEar2zY4dftnaNMqp25AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUrdoOK0xL0L6jIGhRSIxmQEyidbUwHwYDVR0j
BBgwFoAUc2zHvQDkRLPFB6ShZdB3RRPPsVswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR25TeDlzaUYxWDRSenRDWTFINVlqR0hDWUVtOEF0aVhNNTZ1OGl0YmFi
OEovMS83MzZDQzdCRDAwRTQ0NEIzQzUwN0E0QTE2NUQwNzc0NTEzQ0ZCMTVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczNkNDN0JEMDBFNDQ0QjND
NTA3QTRBMTY1RDA3NzQ1MTNDRkIxNUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R25TeDlzaUYxWDRSenRDWTFINVlqR0hDWUVtOEF0aVhNNTZ1OGl0YmFiOEovMS83
MzZDQzdCRDAwRTQ0NEIzQzUwN0E0QTE2NUQwNzc0NTEzQ0ZCMTVCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABWnDq/R6iDZk5LKtCMIIRGTUmpXDZpJoH1sCUIGpvwC0Vdz0fn64ah/pR9zZ
Z81twxGCAEw2cq8K0rOdNYS+gfhbQZL/9gweg/ZmoyUiYT/U6R3tl4merkzoIozU
pkyXamyKm+vQZPr2pkL9PXuUMFeQqjZNdE1BY3uetAWO5T6F/tPmN3kD/k5k/pcH
WSh0KPhb0EJVbb18Qnzm9aiPOR/dFC4rDfukG3W8zboI9AZgy7MSMyJrISSC5+nw
Oe9HGjos3AcfzgT1EZVSlsV/EVON4YLmYLFA2GAeHDs+8PWQRTAGLuQp7pJBXiMB
olnPYO0UjJDajg4TIIDlG4JWew==
-----END CERTIFICATE-----
Generated at Wed Oct 28 08:25:46 2026 by rpki-client