Error: rpki-repo.registro.br/repo/5SAkHxAhQGmQmaW4jG2YmUxqRHaXvdbMB2gGPZjvKZes/1/921D37150119BEF5ED666BC87D8A3F87C69F1193.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5SAkHxAhQGmQmaW4jG2YmUxqRHaXvdbMB2gGPZjvKZes/1/921D37150119BEF5ED666BC87D8A3F87C69F1193.mft
File:                     921D37150119BEF5ED666BC87D8A3F87C69F1193.mft (raw, json)
Hash identifier:          MXzI5eeA+gSX4iW+0nTlzxKEZo8gcTc/mRNgKItekyQ=
Subject key identifier:   AA:72:56:3B:7A:4C:E9:BE:D3:7C:E1:4C:08:6F:56:2D:76:40:4A:E8
Authority key identifier: 92:1D:37:15:01:19:BE:F5:ED:66:6B:C8:7D:8A:3F:87:C6:9F:11:93
Certificate issuer:       /CN=921D37150119BEF5ED666BC87D8A3F87C69F1193
Certificate serial:       26A5335927FEAE0B37CBB8367E3FF0215D79513D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/921D37150119BEF5ED666BC87D8A3F87C69F1193.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5SAkHxAhQGmQmaW4jG2YmUxqRHaXvdbMB2gGPZjvKZes/1/921D37150119BEF5ED666BC87D8A3F87C69F1193.mft
Manifest number:          056A
Signing time:             Thu 15 Oct 2026 01:10:00 +0000
Manifest this update:     Thu 15 Oct 2026 01:05:00 +0000
Manifest next update:     Fri 16 Oct 2026 01:10:00 +0000
Files and hashes:         1: 921D37150119BEF5ED666BC87D8A3F87C69F1193.crl (hash: B9joxLY5aJ1Vz1jnIVNhK2EJuNInYjVNo32WFPgxGgs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5SAkHxAhQGmQmaW4jG2YmUxqRHaXvdbMB2gGPZjvKZes/1/921D37150119BEF5ED666BC87D8A3F87C69F1193.crl
                          rsync://rpki-repo.registro.br/repo/5SAkHxAhQGmQmaW4jG2YmUxqRHaXvdbMB2gGPZjvKZes/1/921D37150119BEF5ED666BC87D8A3F87C69F1193.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/921D37150119BEF5ED666BC87D8A3F87C69F1193.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 01:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a5:33:59:27:fe:ae:0b:37:cb:b8:36:7e:3f:f0:21:5d:79:51:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=921D37150119BEF5ED666BC87D8A3F87C69F1193
        Validity
            Not Before: Oct 15 01:05:00 2026 GMT
            Not After : Oct 22 01:10:00 2026 GMT
        Subject: CN=3082010A0282010100F9BD3D64534CFDDEED53B9D2B6207E366BD1028D62EBC05A40305715E6F385DF9881619CB7D764CB13A0F10C038C99C39F1BBDEF985AC87C958694C638A36580125ABE366A7EB8EC486DA35A6DD38DE61CA72E91791ADB02FA99A55835E5486E8FF676CB52AE5A89FFE5FFF530C3DD582B490F2280710FCD4A957263113106DF158B85A1FE4438919B414B0CB04E1D08C852D9C12E27D282625673D4E1888474E264F60654FF01494EE5D726945FCABAAD4DB05B128112D35B27D1126B49F9F4F9613AE79A4EF4E56899B6882998D351FAC2F73B109E3403CD7E0B58A31C29DB14B3243F4FECF1221861339E27C25CF6CA1F58D678D5A6B6C0052BE0D7277FC50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:bd:3d:64:53:4c:fd:de:ed:53:b9:d2:b6:20:
                    7e:36:6b:d1:02:8d:62:eb:c0:5a:40:30:57:15:e6:
                    f3:85:df:98:81:61:9c:b7:d7:64:cb:13:a0:f1:0c:
                    03:8c:99:c3:9f:1b:bd:ef:98:5a:c8:7c:95:86:94:
                    c6:38:a3:65:80:12:5a:be:36:6a:7e:b8:ec:48:6d:
                    a3:5a:6d:d3:8d:e6:1c:a7:2e:91:79:1a:db:02:fa:
                    99:a5:58:35:e5:48:6e:8f:f6:76:cb:52:ae:5a:89:
                    ff:e5:ff:f5:30:c3:dd:58:2b:49:0f:22:80:71:0f:
                    cd:4a:95:72:63:11:31:06:df:15:8b:85:a1:fe:44:
                    38:91:9b:41:4b:0c:b0:4e:1d:08:c8:52:d9:c1:2e:
                    27:d2:82:62:56:73:d4:e1:88:84:74:e2:64:f6:06:
                    54:ff:01:49:4e:e5:d7:26:94:5f:ca:ba:ad:4d:b0:
                    5b:12:81:12:d3:5b:27:d1:12:6b:49:f9:f4:f9:61:
                    3a:e7:9a:4e:f4:e5:68:99:b6:88:29:98:d3:51:fa:
                    c2:f7:3b:10:9e:34:03:cd:7e:0b:58:a3:1c:29:db:
                    14:b3:24:3f:4f:ec:f1:22:18:61:33:9e:27:c2:5c:
                    f6:ca:1f:58:d6:78:d5:a6:b6:c0:05:2b:e0:d7:27:
                    7f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:72:56:3B:7A:4C:E9:BE:D3:7C:E1:4C:08:6F:56:2D:76:40:4A:E8
            X509v3 Authority Key Identifier:
                keyid:92:1D:37:15:01:19:BE:F5:ED:66:6B:C8:7D:8A:3F:87:C6:9F:11:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5SAkHxAhQGmQmaW4jG2YmUxqRHaXvdbMB2gGPZjvKZes/1/921D37150119BEF5ED666BC87D8A3F87C69F1193.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/921D37150119BEF5ED666BC87D8A3F87C69F1193.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5SAkHxAhQGmQmaW4jG2YmUxqRHaXvdbMB2gGPZjvKZes/1/921D37150119BEF5ED666BC87D8A3F87C69F1193.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:15:d2:5e:62:aa:21:27:50:7c:12:db:d8:45:bc:33:8c:99:
         7b:e8:31:f3:9b:c6:15:6e:86:8a:4e:0d:d2:b5:97:1b:8b:cd:
         ff:15:12:84:62:6b:9a:37:32:70:a5:b1:08:26:f0:70:13:88:
         09:0a:60:16:20:ca:ad:1a:db:c6:3d:98:2b:6e:fd:cc:cf:a4:
         50:ee:59:f7:73:3e:b4:ae:14:a3:17:e3:c5:45:bb:44:10:50:
         9f:cf:08:3a:fb:0a:13:ce:b3:b8:ad:72:ac:0b:f1:ac:6f:5b:
         00:c4:68:07:5b:ab:aa:ab:b2:f2:81:69:66:3f:d2:c1:27:04:
         2c:bb:b9:65:ff:cd:fd:e7:af:af:03:14:1e:ba:5b:cb:8e:5a:
         d2:91:90:f3:9d:d3:3d:e7:ec:1c:6e:c0:ad:26:b1:21:46:de:
         0b:da:e6:22:fb:2a:eb:5e:60:dc:d5:a5:c9:5e:b5:a1:61:9f:
         5f:5c:dc:dd:10:5f:22:fa:ce:44:18:11:c6:69:e2:0b:70:4a:
         9b:f0:17:31:3c:c9:3b:a7:2c:5a:e8:45:86:28:fe:6b:3c:88:
         18:02:3d:52:f5:a9:2f:aa:30:39:04:25:09:50:96:02:b7:fc:
         89:e0:ac:c8:10:f0:9c:71:ea:74:7f:dd:04:ad:f0:55:c5:7b:
         5f:4b:26:47
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Oct 15 06:40:40 2026 by rpki-client