Error: rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.mft
File:                     B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.mft (raw, json)
Hash identifier:          bFFqmwvpCWM9w4baWiUehel790DTzhZ+YHMkaSjrWE4=
Subject key identifier:   72:CF:56:3A:75:CA:73:C9:16:A2:D7:23:E9:A9:6E:5F:72:6A:E1:38
Authority key identifier: B8:16:A6:DE:EE:87:A9:7A:EC:5A:D5:8B:35:70:BA:BA:44:CF:DA:AD
Certificate issuer:       /CN=B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD
Certificate serial:       32C45F8B4A60B79ADFBA6BD15B17F466F4256888
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.mft
Manifest number:          04C5
Signing time:             Fri 09 Oct 2026 04:34:17 +0000
Manifest this update:     Fri 09 Oct 2026 04:29:17 +0000
Manifest next update:     Sat 10 Oct 2026 07:40:17 +0000
Files and hashes:         1: B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.crl (hash: NPlLt/CVdaTq479QTRE4wThAHX7oLFAkLjkR5cgsn+w=)
                          2: 34352e3233382e39322e302f32322d3234203d3e20323638333230.roa (hash: uCwF4/WvjXX3xmQMQUDVk8JwCwZYzgnwnaH8XR363i0=)
                          3: 323830343a346635343a3a2f33322d3438203d3e20323638333230.roa (hash: x7AZdLuBLjpf4wqSsK/DHHz1xo1yqFjFZ3fdvrS5ulk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.crl
                          rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 Oct 2026 07:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:c4:5f:8b:4a:60:b7:9a:df:ba:6b:d1:5b:17:f4:66:f4:25:68:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD
        Validity
            Not Before: Oct  9 04:29:17 2026 GMT
            Not After : Oct 10 07:40:17 2026 GMT
        Subject: CN=72CF563A75CA73C916A2D723E9A96E5F726AE138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c6:bd:07:08:97:61:03:f6:f1:28:ed:2d:16:
                    12:e1:9e:93:0d:df:18:8c:c9:f9:1d:3c:c8:b8:80:
                    16:7d:e5:78:a7:89:97:90:db:8c:bf:4a:48:8b:10:
                    3d:02:9b:6c:37:35:c3:93:c7:0e:05:89:1c:ec:60:
                    cb:05:a2:26:18:3a:e6:e5:11:f1:10:81:95:55:0e:
                    6e:13:87:ee:26:9f:5e:25:78:41:97:d3:d5:f1:75:
                    6a:cf:4e:ab:53:89:9d:18:3b:59:f4:b2:b5:6a:2e:
                    ed:4b:1f:87:b5:79:76:ec:80:a1:c8:cf:e9:96:52:
                    bf:bd:5b:18:1c:54:6e:6b:1c:b6:54:0e:30:d8:f4:
                    ab:e2:57:ff:fd:d0:83:c7:0a:dd:4c:69:20:d6:fe:
                    88:76:b8:ce:d7:43:6a:0f:00:8b:ac:17:58:44:f9:
                    de:ca:c4:57:b8:42:50:c2:4b:f6:7f:c1:c5:ad:e4:
                    c8:8c:72:32:4b:7c:b4:68:03:77:fc:ac:4b:4b:bf:
                    91:73:ec:0f:c3:1c:3a:d5:a3:58:6f:56:4a:a0:bc:
                    69:98:db:2c:5e:1b:b6:30:c6:4a:a4:21:33:b5:0b:
                    04:15:1f:6e:94:6d:38:f8:08:31:d9:4f:a0:86:a3:
                    5c:90:75:11:04:d8:b5:42:40:2a:fe:68:80:08:d5:
                    65:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:CF:56:3A:75:CA:73:C9:16:A2:D7:23:E9:A9:6E:5F:72:6A:E1:38
            X509v3 Authority Key Identifier:
                keyid:B8:16:A6:DE:EE:87:A9:7A:EC:5A:D5:8B:35:70:BA:BA:44:CF:DA:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:8f:7e:a4:a0:a7:a6:1e:e6:a5:70:22:51:65:03:c9:5d:5d:
         b4:d4:52:0f:d7:be:ab:bb:41:30:86:42:f2:4d:62:b4:2a:b1:
         2a:ae:e8:c2:4b:ac:db:84:3f:25:86:08:29:33:37:52:c7:ae:
         b0:83:06:3a:67:7f:20:34:c0:f8:a1:40:f7:e5:d3:17:31:c4:
         99:56:94:ae:ed:9d:6f:8b:04:19:85:ce:db:7f:f5:8f:da:5b:
         5a:3f:57:6d:d5:18:1b:ae:83:f7:f3:fc:2a:c6:8b:a9:c5:6c:
         a1:3a:52:1e:84:38:d0:e6:f5:be:5a:b7:86:3f:37:e7:1f:22:
         c2:30:62:ac:18:37:11:22:22:cc:0c:7b:55:69:cc:be:0c:bb:
         a5:c4:be:cc:cd:e9:7d:1a:65:1f:0b:53:8e:42:24:cf:a2:bb:
         ac:2b:57:de:fe:6b:27:86:da:77:58:e5:91:07:09:25:90:54:
         33:5b:ec:c9:da:bf:8f:08:48:a5:1a:b6:fa:52:c9:37:81:37:
         00:be:ef:57:a3:72:20:7c:69:cb:26:c9:de:eb:1f:95:cc:64:
         44:f3:5c:34:1f:a2:b7:ca:ba:9d:eb:fd:bd:f8:9d:a3:f4:eb:
         82:0c:db:7f:f7:46:ce:09:24:d3:a1:8c:be:62:d8:ea:b6:fd:
         93:5a:ac:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 13:28:03 2026 by rpki-client