Error: rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.mft
File:                     DDA4FC5B8E458E28765A866099AD929BAF665339.mft (raw, json)
Hash identifier:          ZSedgaNrmVGj7hi1HAy4lL4ZKIv3/k/Owp0EzwPV5/g=
Subject key identifier:   7F:BE:13:11:05:4B:FA:05:B4:71:65:26:4D:BA:49:77:60:85:34:0A
Authority key identifier: DD:A4:FC:5B:8E:45:8E:28:76:5A:86:60:99:AD:92:9B:AF:66:53:39
Certificate issuer:       /CN=DDA4FC5B8E458E28765A866099AD929BAF665339
Certificate serial:       537279C404BC973FE274AC295F08A94BCA12B50D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA4FC5B8E458E28765A866099AD929BAF665339.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.mft
Manifest number:          0401
Signing time:             Wed 14 Oct 2026 12:43:45 +0000
Manifest this update:     Wed 14 Oct 2026 12:38:45 +0000
Manifest next update:     Thu 15 Oct 2026 13:13:45 +0000
Files and hashes:         1: DDA4FC5B8E458E28765A866099AD929BAF665339.crl (hash: VsPJbpgMWb1Kd7oYRq5emDuXHO2+Nty+yineydrcz4k=)
                          2: 323830343a366432633a3a2f33322d313238203d3e20323730353137.roa (hash: 1+SfIeK6z1UFWI7iF5eYgBasI0bGmiQnX9IW1LloDvo=)
                          3: 3138372e37332e3138342e302f32322d3234203d3e20323730353137.roa (hash: sGZZk+KCK6cosQKGNEMk4lbq2oa7M6A1kHFj0mUIepI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.crl
                          rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA4FC5B8E458E28765A866099AD929BAF665339.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 13:13:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:72:79:c4:04:bc:97:3f:e2:74:ac:29:5f:08:a9:4b:ca:12:b5:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDA4FC5B8E458E28765A866099AD929BAF665339
        Validity
            Not Before: Oct 14 12:38:45 2026 GMT
            Not After : Oct 15 13:13:45 2026 GMT
        Subject: CN=7FBE1311054BFA05B47165264DBA49776085340A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f2:2e:7f:be:09:04:88:22:88:4b:c3:f2:6e:
                    67:8c:66:7b:1d:c4:77:ef:49:77:d4:24:fd:01:43:
                    fd:21:c6:f9:9f:8c:a6:35:2e:75:0b:15:8d:02:b1:
                    d2:cd:02:eb:b0:52:14:21:50:a7:37:0e:1c:6b:8b:
                    2c:29:b5:c5:09:c2:e3:14:b7:9f:fd:27:c4:61:dc:
                    eb:11:fc:90:26:0f:f0:9c:70:ca:e9:97:3a:1b:37:
                    2a:e4:e7:a7:d4:2b:ad:d3:74:ab:a8:ca:ad:8b:ca:
                    aa:0f:2f:7a:7e:20:81:4e:98:f1:e5:59:a8:12:c6:
                    13:12:77:03:2d:3b:30:d9:19:96:22:b0:3c:b9:75:
                    be:a1:9c:08:02:27:72:04:b1:42:1c:ff:ce:73:dc:
                    a6:7c:98:fd:2c:6a:ec:b4:77:cf:bb:42:e5:41:b5:
                    e2:2f:f8:bf:0c:24:71:d2:3e:36:33:50:68:7e:11:
                    48:8a:13:e2:22:3b:88:38:f5:d0:49:8d:10:e0:bf:
                    47:0d:2b:94:a8:67:ec:4e:cc:5c:05:52:15:06:3b:
                    e0:47:60:ce:5d:3e:c1:9f:81:cc:f6:c5:f1:27:4e:
                    af:0f:93:1f:58:21:84:11:36:a6:10:43:8f:75:51:
                    2a:46:eb:7e:d1:fe:71:1d:65:86:cc:b6:fa:73:6f:
                    62:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BE:13:11:05:4B:FA:05:B4:71:65:26:4D:BA:49:77:60:85:34:0A
            X509v3 Authority Key Identifier:
                keyid:DD:A4:FC:5B:8E:45:8E:28:76:5A:86:60:99:AD:92:9B:AF:66:53:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA4FC5B8E458E28765A866099AD929BAF665339.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:fb:9f:2b:d0:be:26:6a:58:84:31:90:31:78:7a:41:05:c3:
         a7:91:14:68:0b:6e:c4:47:71:ee:56:c4:71:60:87:2d:81:81:
         ff:68:62:6f:b1:b1:38:58:67:c3:0c:59:b5:5d:3a:34:3b:09:
         03:eb:86:96:33:eb:1b:ab:05:3a:68:90:21:55:7e:d9:d1:f6:
         9b:e2:a6:54:c2:a8:03:da:5e:82:d8:e0:8d:67:44:09:c9:c1:
         34:b9:ce:a2:b2:52:5d:a5:f5:60:55:45:97:b3:73:2d:21:4e:
         c4:b1:ff:13:3a:02:d4:7b:81:5f:e6:18:9a:75:14:58:a9:1b:
         62:60:ef:19:da:d8:78:49:66:c9:c8:a2:fa:4b:1d:f8:c4:4c:
         75:59:40:57:bd:f1:cc:a6:56:35:54:f6:3c:f1:04:db:01:3d:
         22:45:65:c6:32:0a:da:31:80:08:93:f1:55:5d:cd:dc:a5:58:
         e8:55:48:fa:6b:16:c9:7c:94:17:2f:a9:84:55:ea:d2:7c:7e:
         7a:21:51:db:4e:41:2d:7e:3e:38:be:52:5e:21:26:55:ea:bd:
         aa:f3:6c:8d:25:2e:67:73:0f:63:a7:ad:a4:ff:db:11:81:40:
         3d:02:f0:fc:f4:d3:85:d4:5a:71:40:a4:24:61:b2:24:f2:69:
         64:c6:30:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:18:16 2026 by rpki-client