Error: rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft
File:                     67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft (raw, json)
Hash identifier:          IiaPF4W2h0XuqOVAeRcaol6hMet8s+Jw+y3MN7kT5sY=
Subject key identifier:   DD:EA:32:60:E1:6F:6A:A0:5E:53:81:44:09:29:6D:5D:97:50:07:E8
Authority key identifier: 67:21:0E:55:22:F5:15:3F:DA:7A:73:E4:EE:2B:30:0B:C0:CC:9A:0B
Certificate issuer:       /CN=67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B
Certificate serial:       6F34AAED4012A67F6125E24F7ADC76A90E5195AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft
Manifest number:          0566
Signing time:             Sun 11 Oct 2026 01:00:00 +0000
Manifest this update:     Sun 11 Oct 2026 00:55:00 +0000
Manifest next update:     Mon 12 Oct 2026 01:00:00 +0000
Files and hashes:         1: 34352e3136322e33362e302f32322d3234203d3e20323638343934.roa (hash: Lo8PbrecpCoK0GBUm97e5EPmV/3YQQ/fzWOGICbdPxM=)
                          2: 323830343a353231383a3a2f33322d3335203d3e20323638343934.roa (hash: R9L/kMmN7S/9lZVlWx9nyQOiSYfk/inspmGIL6RrUsQ=)
                          3: 67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.crl (hash: oXImqFM1YmQ4+SVCOSPIg7UK/SRrA0MAPE6GrVjOnDY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.crl
                          rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:34:aa:ed:40:12:a6:7f:61:25:e2:4f:7a:dc:76:a9:0e:51:95:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B
        Validity
            Not Before: Oct 11 00:55:00 2026 GMT
            Not After : Oct 12 01:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7c:fb:08:de:9b:88:4b:bd:6b:1b:c7:2f:aa:
                    52:ad:c6:44:d2:ad:de:14:de:5b:10:be:ae:81:ee:
                    98:fb:81:34:ec:9e:ff:37:99:58:56:e1:90:6c:d5:
                    d2:c4:2a:a8:0f:97:1f:db:c7:76:cc:ef:86:d2:a8:
                    be:db:db:e8:ed:8e:50:4b:bc:62:5d:7c:b3:f7:21:
                    17:0c:15:d1:24:fd:e6:46:40:6b:08:23:29:83:ca:
                    5d:91:56:de:ff:41:ab:c8:e8:2f:05:55:3f:bd:da:
                    23:7f:e0:38:06:b9:b1:66:42:69:93:9e:25:e8:99:
                    cb:12:ee:6d:f8:5b:cb:5e:e4:87:db:5e:c4:4d:a1:
                    c3:61:f9:c8:48:6d:e7:77:bc:f4:30:f7:9d:8f:a5:
                    ec:0b:6b:a4:02:9d:9b:1d:4a:40:2f:f3:a3:38:85:
                    ea:45:1f:05:0f:8b:fa:33:77:f2:41:3c:ee:18:12:
                    fc:4d:7d:2b:52:3a:de:04:92:d8:a8:e7:71:e5:18:
                    be:e4:1c:34:9a:e2:83:4e:40:e5:f9:b0:3e:4f:92:
                    f9:97:a0:65:41:59:32:24:34:1c:13:85:12:b2:4b:
                    ac:5d:79:50:fd:39:b1:29:ea:af:7d:55:e6:98:34:
                    cc:5c:92:27:da:c0:d6:00:df:cc:99:20:aa:cc:25:
                    db:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:EA:32:60:E1:6F:6A:A0:5E:53:81:44:09:29:6D:5D:97:50:07:E8
            X509v3 Authority Key Identifier:
                keyid:67:21:0E:55:22:F5:15:3F:DA:7A:73:E4:EE:2B:30:0B:C0:CC:9A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:b1:3b:99:fb:64:b5:a5:54:f7:54:be:35:e9:e1:f4:06:86:
         2a:fc:f9:02:1c:82:fa:b9:da:c4:19:13:9a:7c:ad:7e:e5:d2:
         94:75:cc:0f:00:1c:4f:11:f6:1f:b4:b7:99:e1:e5:2e:49:1e:
         1c:47:b6:9c:19:aa:fb:6f:c8:f6:bb:49:3f:8d:24:7f:d1:19:
         f6:63:0d:92:a6:01:d2:c6:01:32:56:0e:6c:f6:9e:2e:95:db:
         47:72:aa:c6:7f:12:88:f7:bc:5a:d5:f5:08:51:5f:01:ff:23:
         8a:41:e5:b0:07:25:eb:ae:8e:17:96:6e:da:6a:a3:86:a5:87:
         f4:d6:9e:92:9a:19:d8:47:d6:8e:00:20:0a:7d:51:c2:6b:85:
         56:fc:63:8b:15:86:08:0f:fb:86:60:2f:34:4b:4a:1f:8c:0b:
         d8:c0:db:ac:89:fc:67:e9:c5:93:36:9d:81:39:9d:34:6e:56:
         aa:b2:9d:cf:29:d0:b1:3a:07:b5:b3:15:c7:34:db:36:9a:a5:
         8d:a1:39:a1:ec:9e:a7:8d:91:23:5d:1f:84:2b:08:be:cb:06:
         64:2e:2c:bf:bd:f1:e3:d0:80:42:3d:b3:78:aa:31:5f:99:03:
         55:7f:c4:0b:1a:6a:b4:48:42:0d:a9:80:8b:d5:a6:e3:e9:a7:
         3f:a5:a4:26
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 11 18:26:22 2026 by rpki-client