Error: rpki-repo.registro.br/repo/7e54hBv8Jx9XqQwUxbsMDsfFC1md1WGXWcBcS8MQjTz9/1/8CF184085C59663815BE0942AC2DFBBCDC0A86AE.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/7e54hBv8Jx9XqQwUxbsMDsfFC1md1WGXWcBcS8MQjTz9/1/8CF184085C59663815BE0942AC2DFBBCDC0A86AE.mft
File:                     8CF184085C59663815BE0942AC2DFBBCDC0A86AE.mft (raw, json)
Hash identifier:          lAUtolqE5joFAc3NQz9r85CaGY2XMLdmtbI2xBcW318=
Subject key identifier:   13:03:D0:C5:00:E3:AE:2B:D6:68:D3:FB:8E:04:73:D1:A7:41:51:3A
Authority key identifier: 8C:F1:84:08:5C:59:66:38:15:BE:09:42:AC:2D:FB:BC:DC:0A:86:AE
Certificate issuer:       /CN=8CF184085C59663815BE0942AC2DFBBCDC0A86AE
Certificate serial:       6082C63353FE261210779CD4365E0DD2A4BBDCD4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CF184085C59663815BE0942AC2DFBBCDC0A86AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e54hBv8Jx9XqQwUxbsMDsfFC1md1WGXWcBcS8MQjTz9/1/8CF184085C59663815BE0942AC2DFBBCDC0A86AE.mft
Manifest number:          0570
Signing time:             Fri 16 Oct 2026 13:00:00 +0000
Manifest this update:     Fri 16 Oct 2026 12:55:00 +0000
Manifest next update:     Sat 17 Oct 2026 13:00:00 +0000
Files and hashes:         1: 323830343a383564343a3a2f33322d3334203d3e20323732363033.roa (hash: MBDCt87err5A/n7TZ65Mk3UzinozG2L7HaxD50CotnQ=)
                          2: 8CF184085C59663815BE0942AC2DFBBCDC0A86AE.crl (hash: vAXXE5rJdLw7g7ZUBCuDhhVtdqwC3vlcTNFF2Z1t8V4=)
                          3: 3139322e3134312e3136322e302f32342d3234203d3e20323732363033.roa (hash: GXR39noGw+vaEtNAzRKg+MEZYUSbTwO0V4M+VIC0wxg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7e54hBv8Jx9XqQwUxbsMDsfFC1md1WGXWcBcS8MQjTz9/1/8CF184085C59663815BE0942AC2DFBBCDC0A86AE.crl
                          rsync://rpki-repo.registro.br/repo/7e54hBv8Jx9XqQwUxbsMDsfFC1md1WGXWcBcS8MQjTz9/1/8CF184085C59663815BE0942AC2DFBBCDC0A86AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CF184085C59663815BE0942AC2DFBBCDC0A86AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:82:c6:33:53:fe:26:12:10:77:9c:d4:36:5e:0d:d2:a4:bb:dc:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CF184085C59663815BE0942AC2DFBBCDC0A86AE
        Validity
            Not Before: Oct 16 12:55:00 2026 GMT
            Not After : Oct 17 13:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:42:3c:dd:80:ce:ea:37:25:6e:44:32:26:70:
                    77:28:2b:ec:f6:84:59:fc:b3:be:c6:3d:fa:f5:3a:
                    3d:1b:8a:1f:02:55:88:da:f6:67:13:70:47:bb:5e:
                    48:83:b6:47:c9:56:df:fb:8f:1b:08:f3:68:03:5c:
                    80:ed:58:6b:a2:01:dc:f5:17:42:36:95:bc:25:44:
                    33:6f:b3:c3:85:95:79:c4:4e:f9:91:30:2c:4e:8b:
                    c7:5c:2e:7f:5e:c1:38:a3:53:cf:9e:08:e0:76:e2:
                    f7:15:f2:13:ed:07:54:9b:7f:d8:66:7d:1d:07:ed:
                    7d:a3:fb:07:d1:4f:cf:e2:4f:4c:b8:ca:a3:f4:d4:
                    ed:40:f5:42:9b:e9:20:ae:c7:d3:cd:bc:45:1a:69:
                    bd:40:66:80:fe:4c:5d:c8:e2:64:79:0a:c1:15:b3:
                    43:eb:5c:fb:09:cb:97:dd:49:1c:35:37:4d:f3:b2:
                    46:b6:2b:9c:96:1c:d3:f5:b0:05:85:4d:88:53:02:
                    23:01:f2:53:7d:a9:60:a8:36:37:47:e2:7b:fb:05:
                    ba:11:26:35:d7:69:0a:26:b2:5d:a8:99:95:d6:07:
                    4a:1f:48:1a:3a:14:04:29:74:5f:af:b5:b4:1a:db:
                    85:0b:6f:41:79:e5:1b:14:94:f8:f6:33:54:17:4c:
                    fc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:03:D0:C5:00:E3:AE:2B:D6:68:D3:FB:8E:04:73:D1:A7:41:51:3A
            X509v3 Authority Key Identifier:
                keyid:8C:F1:84:08:5C:59:66:38:15:BE:09:42:AC:2D:FB:BC:DC:0A:86:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e54hBv8Jx9XqQwUxbsMDsfFC1md1WGXWcBcS8MQjTz9/1/8CF184085C59663815BE0942AC2DFBBCDC0A86AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CF184085C59663815BE0942AC2DFBBCDC0A86AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e54hBv8Jx9XqQwUxbsMDsfFC1md1WGXWcBcS8MQjTz9/1/8CF184085C59663815BE0942AC2DFBBCDC0A86AE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e5:d4:43:48:29:82:25:0f:19:62:44:16:7a:ae:c7:1f:f1:a4:
         15:24:05:b3:b5:30:3c:fd:ea:5a:0f:8f:48:4e:4a:4d:7c:ea:
         6f:cc:0d:13:cd:dc:50:d9:f6:ea:c1:02:52:00:bf:ec:d2:9e:
         cc:df:0c:46:69:ec:c3:3c:0b:93:79:84:01:d0:85:59:88:5e:
         68:c5:83:a2:c6:0d:78:82:2e:93:9b:fb:3b:77:b2:34:dc:03:
         62:bb:18:f8:91:75:dd:ad:0c:12:88:47:48:f4:d5:57:2c:c2:
         ff:8e:a4:01:a3:72:96:bb:61:38:ed:9a:d4:ef:d8:4e:b4:94:
         be:4e:e7:a8:21:61:bf:73:90:91:a9:1e:09:37:37:8b:43:9c:
         74:00:0d:4a:43:db:22:2f:65:6f:64:3e:eb:de:00:ca:69:0d:
         ef:6d:b6:bb:58:66:ab:fe:8e:aa:95:ef:99:71:ac:48:ff:af:
         56:e7:ba:07:b9:4d:c5:d1:d4:9d:bd:64:13:da:7b:96:c8:a9:
         e0:63:b1:10:8e:d1:41:66:f5:d5:39:41:47:8c:5d:ec:49:69:
         32:00:9a:7a:69:80:46:63:17:05:e6:fa:50:bd:e9:19:3b:0d:
         33:44:80:22:1d:c5:9e:ef:d6:0c:02:d3:5c:11:ad:65:81:ca:
         02:aa:56:80
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Oct 16 18:34:19 2026 by rpki-client