Error: rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.mft
File:                     C70EC4383B792424E71BC6853AD1C792781070B3.mft (raw, json)
Hash identifier:          fcef1QPkC9reWw+1XY7YE2xq7bgoGKehdT7+Bzg4dkI=
Subject key identifier:   F1:95:C1:73:11:93:7A:41:F8:8E:17:96:0F:9D:5D:E1:CA:26:ED:88
Authority key identifier: C7:0E:C4:38:3B:79:24:24:E7:1B:C6:85:3A:D1:C7:92:78:10:70:B3
Certificate issuer:       /CN=C70EC4383B792424E71BC6853AD1C792781070B3
Certificate serial:       61D8C478079AD6E48A57E949BE23E54F35A2EE4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.mft
Manifest number:          04CE
Signing time:             Sat 17 Oct 2026 11:51:33 +0000
Manifest this update:     Sat 17 Oct 2026 11:46:33 +0000
Manifest next update:     Sun 18 Oct 2026 13:06:33 +0000
Files and hashes:         1: 323830343a336561343a633030303a3a2f33342d3334203d3e20323636363131.roa (hash: OFTkWVRFeqT2VRH0vRziYxaVHs7HhUH48SxSEnd8Ck4=)
                          2: 323830343a336561343a383030303a3a2f33342d3334203d3e20323636363131.roa (hash: z2j9QAYEjfeUbWxxDkZAU/0VwYUh8k8abyl/G2g9UWo=)
                          3: 323830343a336561343a3a2f33322d3332203d3e20323636363131.roa (hash: Pfi9EZ2FpTVV3XGfgK+WESCPSuS/MgJ6SIGRLXgRaW4=)
                          4: 3132382e3230312e32382e302f32322d3232203d3e20323636363131.roa (hash: 91XrLEbGAhmX9qmdm4rnlRyZB2Pvx7to/mxn6O92WaQ=)
                          5: 3132382e3230312e33302e302f32332d3233203d3e20323636363131.roa (hash: RsHERpqTFKOl/Lto+bEOuiL9YIo/GF5iS4QkYD9glfA=)
                          6: 323830343a336561343a3a2f33332d3333203d3e20323636363131.roa (hash: h/XHV1BXoQHKZwDNIS4eD9cXZU+Y66z9tPmlfa7JaPA=)
                          7: 323830343a336561343a663430303a3a2f34322d3432203d3e20323636363131.roa (hash: b7vJSB62UVprijzpvGjXQYyvzoFOFwI/syYKThLvZOw=)
                          8: 323830343a336561343a343030303a3a2f33342d3334203d3e20323636363131.roa (hash: l10Zl8k9Hyq+z7omktzu5jlfX4+8KhwrbLidEt0TbOc=)
                          9: 3132382e3230312e32392e302f32342d3234203d3e20323636363131.roa (hash: uC47ptownDpAbMBhy25FKAqLxLXpdcveIJQta5Etc8s=)
                          10: 323830343a336561343a3a2f33342d3334203d3e20323636363131.roa (hash: 9YN/XX1yMYKmJxe2585WXc0M7LgF0T2EROFMS2lwaVI=)
                          11: 3132382e3230312e33312e302f32342d3234203d3e20323636363131.roa (hash: qkNedzRh4SGev11shMSqweqT06iJNY8gyuMJxZg1caA=)
                          12: C70EC4383B792424E71BC6853AD1C792781070B3.crl (hash: sbd4nK6BXk1WdcoS3On0nluu7a2uHGE6u3R5HUn9O28=)
                          13: 323830343a336561343a383030303a3a2f33332d3333203d3e20323636363131.roa (hash: qNWVhV6jsfXZ3t3fHwZ3u3WP2ushE50iSVI1mw8jG+I=)
                          14: 3132382e3230312e32382e302f32332d3233203d3e20323636363131.roa (hash: WPOPNIWq7LGr+nxAjnXMgjLrMlVsTQM9ZCUnaYyMpJc=)
                          15: 3132382e3230312e32382e302f32342d3234203d3e20323636363131.roa (hash: b0FZsOV4vpVRPOdEl1N2ExcCcc+kvi1mxHfspcITi38=)
                          16: 3132382e3230312e33302e302f32342d3234203d3e20323636363131.roa (hash: QQpuTYK7XwJ23diiddR8Pvq/ua/DgC5caKAyN1etAp4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.crl
                          rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 13:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:d8:c4:78:07:9a:d6:e4:8a:57:e9:49:be:23:e5:4f:35:a2:ee:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C70EC4383B792424E71BC6853AD1C792781070B3
        Validity
            Not Before: Oct 17 11:46:33 2026 GMT
            Not After : Oct 18 13:06:33 2026 GMT
        Subject: CN=F195C17311937A41F88E17960F9D5DE1CA26ED88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:27:e8:60:1d:26:58:67:3f:9a:7e:36:e9:ab:
                    28:9b:a1:9c:8d:ce:f7:ec:ec:ee:cf:39:8b:07:dd:
                    15:82:bc:40:55:07:43:2c:01:dc:bf:81:e5:a2:b1:
                    a3:8f:a5:75:83:0d:73:8d:0d:98:27:0b:ec:56:11:
                    b8:cb:cf:75:a4:3e:32:8c:93:0c:41:ec:97:1f:1f:
                    0b:23:61:7d:43:6d:c1:2f:ac:1f:68:a1:ce:d5:db:
                    0f:c4:5a:a1:78:e9:fa:8a:f8:bb:92:90:a0:29:57:
                    25:ac:ff:86:1b:90:5b:a1:f1:7a:bd:d9:ed:22:f5:
                    6f:6e:c1:38:e5:07:6d:37:9a:3b:4b:a5:43:bd:cc:
                    12:3a:44:37:fc:ec:8f:af:af:a1:e4:84:1f:9b:7c:
                    ef:9a:9f:55:f5:57:5e:41:46:69:40:97:ff:66:fb:
                    8a:b0:52:85:4a:ca:e6:21:1a:df:21:97:d3:1f:09:
                    f2:b7:6e:ed:42:d1:c1:b3:9e:a7:48:3e:56:c8:7f:
                    b3:37:54:9a:7f:d7:64:ec:eb:d0:09:c0:5c:76:57:
                    04:d7:63:77:52:1a:35:b8:d5:e7:a8:81:a8:62:bf:
                    50:a8:57:8b:c2:ae:54:ad:9a:39:7e:2f:91:74:b7:
                    a5:c9:1e:36:91:43:1d:3a:16:11:c4:b9:b0:49:d6:
                    f8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:95:C1:73:11:93:7A:41:F8:8E:17:96:0F:9D:5D:E1:CA:26:ED:88
            X509v3 Authority Key Identifier:
                keyid:C7:0E:C4:38:3B:79:24:24:E7:1B:C6:85:3A:D1:C7:92:78:10:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:f5:87:0b:fc:40:f2:19:d6:7b:ef:8b:6d:5a:28:fd:09:25:
         c9:62:14:29:10:69:7a:5a:fc:9d:77:c6:e4:82:79:99:f3:b6:
         46:c3:f7:40:bb:37:7e:bc:55:76:d9:b2:8b:87:ef:55:28:f5:
         02:ba:7e:25:14:7f:5a:18:ca:01:6b:4f:5d:2e:cd:bc:8f:21:
         2e:24:b6:50:07:13:f7:35:2f:ec:94:9f:22:8c:37:3b:0d:cd:
         2d:20:8b:e3:c3:4f:a7:e2:1a:9c:e1:49:1a:65:34:c8:8b:c2:
         eb:6b:f9:20:7d:fc:e0:f8:a7:42:1d:6e:1a:66:0e:b5:21:39:
         56:4e:74:53:50:2b:15:1b:b1:e5:d7:b3:0c:56:7a:5e:08:21:
         64:a5:ef:26:5d:a4:a3:a4:46:94:21:7d:4a:13:08:95:9f:91:
         5c:08:8a:35:19:12:16:68:33:df:e0:03:9b:cf:62:b3:1d:e8:
         07:e0:6e:81:f1:44:40:a1:b3:90:e1:9e:2c:45:fe:68:99:b0:
         fb:d6:a9:b4:f8:69:05:82:6b:0c:50:a9:55:b4:7a:f2:07:db:
         cb:6d:0e:db:41:7c:26:b8:f7:75:d8:4c:c6:75:24:c1:db:dc:
         2b:db:a4:33:3a:f7:d4:c9:08:6d:7b:e8:8b:b2:6c:ac:f5:bb:
         1c:0b:d3:be
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYdjEeAea1uSKV+lJviPlTzWi7kwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzcwRUM0MzgzQjc5MjQyNEU3MUJDNjg1M0FEMUM3OTI3
ODEwNzBCMzAeFw0yNjEwMTcxMTQ2MzNaFw0yNjEwMTgxMzA2MzNaMDMxMTAvBgNV
BAMTKEYxOTVDMTczMTE5MzdBNDFGODhFMTc5NjBGOUQ1REUxQ0EyNkVEODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7J+hgHSZYZz+afjbpqyiboZyN
zvfs7O7POYsH3RWCvEBVB0MsAdy/geWisaOPpXWDDXONDZgnC+xWEbjLz3WkPjKM
kwxB7JcfHwsjYX1DbcEvrB9ooc7V2w/EWqF46fqK+LuSkKApVyWs/4YbkFuh8Xq9
2e0i9W9uwTjlB203mjtLpUO9zBI6RDf87I+vr6HkhB+bfO+an1X1V15BRmlAl/9m
+4qwUoVKyuYhGt8hl9MfCfK3bu1C0cGznqdIPlbIf7M3VJp/12Ts69AJwFx2VwTX
Y3dSGjW41eeogahiv1CoV4vCrlStmjl+L5F0t6XJHjaRQx06FhHEubBJ1vgxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU8ZXBcxGTekH4jheWD51d4com7YgwHwYDVR0j
BBgwFoAUxw7EODt5JCTnG8aFOtHHkngQcLMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3NKZWJjQm5LVlY3TEpXckVYZ015ZDU0NEp2b2ZKcEVxUDQ1OEZvU1dZ
SmUvMS9DNzBFQzQzODNCNzkyNDI0RTcxQkM2ODUzQUQxQzc5Mjc4MTA3MEIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M3MEVDNDM4M0I3OTI0MjRF
NzFCQzY4NTNBRDFDNzkyNzgxMDcwQjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R3NKZWJjQm5LVlY3TEpXckVYZ015ZDU0NEp2b2ZKcEVxUDQ1OEZvU1dZSmUvMS9D
NzBFQzQzODNCNzkyNDI0RTcxQkM2ODUzQUQxQzc5Mjc4MTA3MEIzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOvWHC/xA8hnWe++LbVoo/QklyWIUKRBpelr8nXfG5IJ5mfO2RsP3QLs3frxV
dtmyi4fvVSj1Arp+JRR/WhjKAWtPXS7NvI8hLiS2UAcT9zUv7JSfIow3Ow3NLSCL
48NPp+IanOFJGmU0yIvC62v5IH384PinQh1uGmYOtSE5Vk50U1ArFRux5dezDFZ6
XgghZKXvJl2ko6RGlCF9ShMIlZ+RXAiKNRkSFmgz3+ADm89isx3oB+BugfFEQKGz
kOGeLEX+aJmw+9aptPhpBYJrDFCpVbR68gfby20O20F8Jrj3ddhMxnUkwdvcK9uk
Mzr31MkIbXvoi7JsrPW7HAvTvg==
-----END CERTIFICATE-----
Generated at Sun Oct 18 04:25:44 2026 by rpki-client