Error: rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.mft
File:                     EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.mft (raw, json)
Hash identifier:          faHVmQalgCFKOGKHVTOlY6f7rbVJQUl9Vt7XYMvpHmc=
Subject key identifier:   57:9A:15:71:F8:E9:8A:CC:37:C1:18:15:23:71:6B:28:5E:10:97:7C
Authority key identifier: EA:35:0D:DF:6B:8B:36:1C:D6:83:E0:FE:B3:EB:B5:3F:41:71:A9:A6
Certificate issuer:       /CN=EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6
Certificate serial:       74E3B0005807110BCBDEF82BCBD1220B120856BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.mft
Manifest number:          0569
Signing time:             Tue 13 Oct 2026 01:10:00 +0000
Manifest this update:     Tue 13 Oct 2026 01:05:00 +0000
Manifest next update:     Wed 14 Oct 2026 01:10:00 +0000
Files and hashes:         1: 323830343a366534383a3a2f33322d3335203d3e20323730353836.roa (hash: nFPOmSAfLWs6YOnilTluglYMDMDhIuQzPgJg2Usfc4M=)
                          2: EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.crl (hash: HuKFmzRSDmVbD0My0okJfs11VsGpNF/oX0j0HjZrtWM=)
                          3: 3137372e3135322e3130302e302f32322d3234203d3e20323730353836.roa (hash: dqfh25QxS8RbRh9Z0pFvfixf33QBdpQUemQv4CBe7Kc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.crl
                          rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 01:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:e3:b0:00:58:07:11:0b:cb:de:f8:2b:cb:d1:22:0b:12:08:56:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6
        Validity
            Not Before: Oct 13 01:05:00 2026 GMT
            Not After : Oct 14 01:10:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:65:c5:ea:53:39:b4:e0:61:c4:12:f0:0a:b6:
                    b7:39:7e:05:32:1b:7c:dd:91:31:c9:7d:23:ff:44:
                    1e:cc:e0:ae:54:36:68:11:64:0b:fb:08:92:a9:69:
                    1b:7d:63:79:38:87:16:e2:9d:1a:63:a7:1c:7c:49:
                    65:28:2c:e4:94:45:0c:50:89:a4:06:89:4f:37:d3:
                    46:91:c5:cf:64:0b:41:48:82:9c:0a:8d:f0:66:9f:
                    63:cd:22:f3:e1:02:32:f0:d7:b7:39:8e:03:4c:01:
                    1b:ff:7f:c1:08:57:56:43:81:c0:6f:63:3e:16:06:
                    47:30:b5:b1:bb:60:de:0e:ab:98:21:d0:16:aa:ff:
                    94:f9:9e:5c:70:a2:64:b9:05:43:02:31:62:c6:67:
                    d3:9c:45:20:eb:c7:63:c6:13:da:f1:55:cb:c8:8c:
                    59:b0:f0:f1:b1:32:fc:c4:97:95:fe:fc:48:42:8e:
                    a4:44:07:33:f6:17:fd:f0:1e:2d:45:45:82:ea:3a:
                    4f:ed:b9:da:bd:bf:88:2f:de:77:04:34:7a:40:bc:
                    29:f1:7e:d1:d7:f6:8d:3e:fa:67:bc:87:7e:cd:f8:
                    4d:a7:78:d2:a7:8b:28:68:aa:f0:8c:44:10:14:3d:
                    2e:e5:f4:5c:7c:e0:25:71:ea:1a:6f:12:27:82:12:
                    7d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9A:15:71:F8:E9:8A:CC:37:C1:18:15:23:71:6B:28:5E:10:97:7C
            X509v3 Authority Key Identifier:
                keyid:EA:35:0D:DF:6B:8B:36:1C:D6:83:E0:FE:B3:EB:B5:3F:41:71:A9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:16:c7:44:dc:b9:4c:3e:d5:44:fc:23:bf:ee:cd:fd:c4:82:
         fa:aa:af:12:0c:15:bb:23:a0:3e:7a:96:5c:e6:5c:06:f2:ba:
         48:63:7e:76:3a:1f:ab:95:2b:02:eb:8a:91:45:10:ff:59:0d:
         f5:8e:fa:1d:ba:55:ff:44:dc:bc:2f:8c:cc:06:96:08:65:e6:
         d0:45:bf:59:0a:d4:80:f4:4b:ca:13:ed:15:d0:14:76:80:b1:
         09:08:f7:27:61:66:6b:f2:44:ec:e9:32:ba:e0:1e:dd:ed:2c:
         16:6a:f4:b1:df:b4:46:7d:b0:34:0f:f2:01:52:f1:56:92:69:
         26:80:dc:17:23:13:e4:46:d6:59:fe:96:cf:ec:23:ce:01:4f:
         1c:f1:d7:c8:41:ef:d0:cc:44:0d:e9:62:2a:2d:4d:66:84:94:
         55:5e:45:38:ee:44:06:6c:7a:75:02:d5:91:43:2d:19:72:cb:
         1a:3b:30:67:47:fc:a8:33:89:95:d5:03:ea:dc:05:de:bb:58:
         57:0b:16:e2:52:72:ed:6e:d2:05:9f:49:94:9d:d5:18:1c:a2:
         ad:b6:6d:94:66:52:dc:46:c2:bd:b8:a7:ed:61:ff:b0:ee:38:
         d0:0b:90:d0:3c:29:66:c1:c0:fb:77:ce:ac:88:80:61:f1:ca:
         9f:27:13:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 18:31:51 2026 by rpki-client