Error: rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.mft
File:                     E4A60880B8D4EC0024322D87A27CBCBDC2192A65.mft (raw, json)
Hash identifier:          o5/bGg4Kx2lmxBkQqYo/A2CE5GNG8z2s4LZzrcnuMd8=
Subject key identifier:   FF:FC:9B:69:83:D4:CC:8F:CB:B2:48:D4:00:7F:E5:5D:03:7F:00:07
Authority key identifier: E4:A6:08:80:B8:D4:EC:00:24:32:2D:87:A2:7C:BC:BD:C2:19:2A:65
Certificate issuer:       /CN=E4A60880B8D4EC0024322D87A27CBCBDC2192A65
Certificate serial:       36D2882AE46F36559D5EB028A81B2F503F0A4581
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.mft
Manifest number:          0443
Signing time:             Thu 15 Oct 2026 12:20:00 +0000
Manifest this update:     Thu 15 Oct 2026 12:15:00 +0000
Manifest next update:     Fri 16 Oct 2026 12:55:00 +0000
Files and hashes:         1: 3230312e3231362e38382e302f32342d3234203d3e20323731373236.roa (hash: ddj46mnb7eTvDVjCdxVf0wbUhaaTDWoBzMZ6G4gSbaQ=)
                          2: 3230312e3231362e39312e302f32342d3234203d3e20323731373236.roa (hash: 9zoLuThzGMPsq5VcJwQwBjKJuhRbFtXF0KE0Yy6PkUA=)
                          3: 3230312e3231362e38382e302f32332d3233203d3e20323731373236.roa (hash: Rk0C3nrmxHub3fKIhGoMRif6ygZyYYqNphwWED1cq7Q=)
                          4: 3230312e3231362e39302e302f32342d3234203d3e20323731373236.roa (hash: USkyhYcAFzXRIeH+GkfnM8GAlmwYqFmyCW/4EmF9OGc=)
                          5: 3230312e3231362e39302e302f32332d3233203d3e20323731373236.roa (hash: nSun74JaUBzLI1foR5bTCIbvQTtwU77A41JjDbGbo8c=)
                          6: 323830343a383030633a3a2f33322d3332203d3e20323731373236.roa (hash: v5huIVzwJf1JBa5qkFeOcVf0xlyfj6P01I9mFi9DYGI=)
                          7: 3230312e3231362e38392e302f32342d3234203d3e20323731373236.roa (hash: H/7NNhy0uxDVNKm8KPxpg4IMAoW5kOKLJKzK89jJsiA=)
                          8: 323830343a383030633a383030303a3a2f33332d3333203d3e20323731373236.roa (hash: T+AcJrtRg1VWVZKmk4rV5DX81Mx0tzdGomlRhkCNIK4=)
                          9: 323830343a383030633a3a2f33332d3333203d3e20323731373236.roa (hash: 3GQOOR6NlnNQZIuTpw1+gkfOHYB76NTSRM51LUcXPxk=)
                          10: E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl (hash: WtHqXtN8XLXU0bD4bCBcIHMubzcr/ZL+o/eA0Us7R1g=)
                          11: 3230312e3231362e38382e302f32322d3232203d3e20323731373236.roa (hash: jGjxaUj+S3if2/88ZdKhONgpTTEvXHT55cgOsns96IM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl
                          rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 12:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:d2:88:2a:e4:6f:36:55:9d:5e:b0:28:a8:1b:2f:50:3f:0a:45:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4A60880B8D4EC0024322D87A27CBCBDC2192A65
        Validity
            Not Before: Oct 15 12:15:00 2026 GMT
            Not After : Oct 16 12:55:00 2026 GMT
        Subject: CN=FFFC9B6983D4CC8FCBB248D4007FE55D037F0007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:12:49:0b:9f:9c:49:eb:df:61:12:e7:27:56:
                    64:2f:12:58:d1:a7:df:1a:c8:3c:67:2c:bd:2d:67:
                    bf:75:e7:b6:6d:12:f4:c0:31:60:e6:e3:cc:d3:ba:
                    c9:6f:45:ca:11:b5:82:df:88:e0:1c:3f:b1:ac:a3:
                    c6:ef:f3:c5:3b:1f:10:dd:a6:b0:9c:f7:6c:b5:7a:
                    90:ac:fd:72:2b:f7:46:43:de:b7:ac:96:60:e2:1a:
                    db:99:5f:db:d4:09:6d:27:f0:c4:8e:77:2c:e3:f9:
                    0d:b9:c5:d5:03:5d:0f:2b:1e:48:cc:5d:fa:ea:3a:
                    ed:66:a3:19:1d:c3:6a:41:dc:0a:c1:0a:59:c5:dc:
                    5c:51:ab:50:92:13:01:d4:bd:6e:90:17:12:7d:c7:
                    43:0f:33:71:b6:96:30:95:76:1a:7f:62:91:d5:f2:
                    85:c0:8d:78:83:92:c9:26:a3:63:e4:ed:40:d0:9d:
                    cb:97:da:4b:d9:b3:2b:0e:4e:60:0e:33:99:29:1d:
                    af:7a:48:4d:34:df:dd:d1:94:d7:07:e3:1c:cc:d8:
                    62:d3:75:b5:6d:55:d0:e0:ae:c2:1f:57:6b:9b:64:
                    7e:ea:b1:9d:ec:8e:bd:82:1c:cc:b1:99:a0:25:77:
                    b6:51:b5:fb:64:14:a4:be:f5:6b:57:a3:27:e3:09:
                    15:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FC:9B:69:83:D4:CC:8F:CB:B2:48:D4:00:7F:E5:5D:03:7F:00:07
            X509v3 Authority Key Identifier:
                keyid:E4:A6:08:80:B8:D4:EC:00:24:32:2D:87:A2:7C:BC:BD:C2:19:2A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:03:c3:fc:31:4c:49:fa:b2:53:b8:03:ea:d5:50:a7:19:09:
         23:d8:43:85:bd:eb:1d:1c:76:42:03:90:82:74:3c:bd:c3:0b:
         f2:66:b7:1a:85:ba:ac:09:b1:16:3e:4d:1e:72:a1:3b:7e:e9:
         70:d1:87:c1:19:31:ee:c2:68:94:a7:41:cc:6d:b1:a2:5d:8e:
         df:7d:a7:25:a3:a4:e4:8d:0c:72:73:ea:34:bc:c0:0a:2d:66:
         e8:20:7d:7b:69:cf:38:1f:6e:cc:e4:86:d1:40:e7:47:35:2a:
         ac:b7:9b:c2:94:18:53:20:38:7c:21:55:60:bd:95:af:f3:6c:
         dc:50:0f:7e:99:09:ab:c5:2c:88:32:18:46:f1:31:34:92:d1:
         c1:d0:95:11:f4:57:29:81:07:4f:2b:54:3c:ba:dc:51:7a:2a:
         6c:59:8e:43:7a:92:ac:d3:a8:7f:1e:f7:78:1f:a4:a8:34:c1:
         d6:4c:6b:36:fe:66:f3:74:7e:a1:f4:d9:a1:fe:0d:44:ca:e2:
         7e:56:78:1d:57:3c:74:4d:14:f0:32:d5:f4:79:dc:7d:51:18:
         eb:d0:5a:80:4a:2a:8b:36:8a:f5:25:97:42:a6:9f:23:9b:4b:
         0b:4f:bc:e3:23:40:dd:dc:22:a0:af:12:ed:8d:d5:78:cf:f1:
         21:74:b0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 05:18:11 2026 by rpki-client