Error: rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.mft
File:                     3E268A146165B7580B59E044B59D275B5F824225.mft (raw, json)
Hash identifier:          xhgfc0TeQU1TWC7DipNEedbEXFDgo7QdrEr5dNCP1ik=
Subject key identifier:   97:3E:A4:DB:6D:BD:51:99:9B:F5:87:13:2B:4F:95:5C:58:AE:A8:A6
Authority key identifier: 3E:26:8A:14:61:65:B7:58:0B:59:E0:44:B5:9D:27:5B:5F:82:42:25
Certificate issuer:       /CN=3E268A146165B7580B59E044B59D275B5F824225
Certificate serial:       01E0C19D1FAC7128F5BEA42A4C8204955814FA37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E268A146165B7580B59E044B59D275B5F824225.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.mft
Manifest number:          04D5
Signing time:             Wed 14 Oct 2026 12:13:39 +0000
Manifest this update:     Wed 14 Oct 2026 12:08:39 +0000
Manifest next update:     Thu 15 Oct 2026 12:55:39 +0000
Files and hashes:         1: 323830343a373264303a3a2f33322d313238203d3e20323730383737.roa (hash: Gks6Be/g4HR3+hGte3HA0NnYRPlD1k4mNFs48T4zq7E=)
                          2: 3E268A146165B7580B59E044B59D275B5F824225.crl (hash: jWlTCfZrinM0nawD0OuxtAb7j/QJG0RwPsXGxWbFg/Q=)
                          3: 3133382e3138352e38382e302f32322d3332203d3e20323730383737.roa (hash: +Lmk9SgP9NXhg/YH8kDvfKbHSY8jyv+GUB8LRlqXEsc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.crl
                          rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E268A146165B7580B59E044B59D275B5F824225.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 12:55:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e0:c1:9d:1f:ac:71:28:f5:be:a4:2a:4c:82:04:95:58:14:fa:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E268A146165B7580B59E044B59D275B5F824225
        Validity
            Not Before: Oct 14 12:08:39 2026 GMT
            Not After : Oct 15 12:55:39 2026 GMT
        Subject: CN=973EA4DB6DBD51999BF587132B4F955C58AEA8A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0f:8b:25:b4:e2:14:fb:4d:5c:fb:c2:26:df:
                    21:c4:1f:1a:b2:e0:d2:a3:f6:c4:3f:70:ae:8a:4b:
                    8c:c3:a6:68:3d:1e:f3:98:08:ff:63:3a:d2:a6:c8:
                    de:1e:ac:a6:ac:56:28:a3:b3:f9:6c:ae:0d:58:7d:
                    43:93:cd:ce:c6:06:cc:ad:a6:ba:9d:26:fc:a0:fe:
                    dc:b7:ae:4e:d8:21:71:d6:88:40:1c:31:b4:be:48:
                    07:29:96:1e:02:1d:ff:82:3b:e0:34:09:93:b3:5c:
                    64:6e:7c:99:64:63:69:80:f0:f6:9b:1c:3b:cd:be:
                    c8:be:cc:62:56:7f:db:07:e1:53:f1:8d:a4:ed:72:
                    2a:34:eb:c8:9a:6c:13:51:b7:65:49:9b:18:38:b3:
                    86:68:b4:9a:19:0f:26:5d:b7:f6:de:03:aa:04:6f:
                    df:e1:f9:2f:8a:be:ea:47:7a:f7:b0:e9:66:3f:9a:
                    b8:83:8c:e5:db:ef:a8:1c:15:d7:a5:70:10:dd:0e:
                    b8:93:65:5f:a2:33:f7:89:12:90:46:1c:ec:9b:8d:
                    8b:76:34:ec:5a:77:81:02:cb:fe:ac:bc:a4:d5:25:
                    7c:5a:2e:ef:69:b4:1a:5f:82:77:01:61:93:88:53:
                    a1:c9:39:31:e8:76:c0:3b:e3:6e:34:88:5a:30:e5:
                    ad:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:3E:A4:DB:6D:BD:51:99:9B:F5:87:13:2B:4F:95:5C:58:AE:A8:A6
            X509v3 Authority Key Identifier:
                keyid:3E:26:8A:14:61:65:B7:58:0B:59:E0:44:B5:9D:27:5B:5F:82:42:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E268A146165B7580B59E044B59D275B5F824225.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:29:56:53:3d:14:13:bb:48:d7:90:45:08:47:bf:01:b8:8d:
         1d:bf:f5:15:53:8e:5d:74:ad:07:f5:b4:15:e2:b6:ff:73:c7:
         b7:f3:4d:31:c5:cc:d1:e3:55:44:fa:24:af:95:ff:0c:9c:c7:
         9b:90:1b:cc:f4:da:c0:51:ec:d7:e7:49:b5:e4:42:9f:32:ba:
         9f:3c:41:5c:c6:27:16:4e:f8:b0:39:03:2b:7f:81:da:b3:be:
         6a:4b:2b:98:15:8a:d3:5a:10:da:b9:77:8e:fc:bd:48:97:fc:
         82:22:84:f2:1d:e7:fb:70:b8:64:c1:6b:3d:7a:03:ef:97:93:
         95:84:3e:87:3c:89:50:f8:59:8f:bf:fa:f1:b5:af:c9:39:7e:
         1f:85:ee:46:4a:4f:87:54:11:f0:a1:c7:a4:67:b6:43:e2:c5:
         12:67:fd:6d:0d:7e:53:9c:1a:e6:0d:f2:22:7d:d5:23:dd:28:
         ef:b3:3d:12:c3:7e:21:10:f1:59:57:7c:b8:e1:e1:4a:d7:3d:
         3b:1c:b0:5d:30:66:dd:20:45:0d:72:d4:67:63:ab:f3:82:d2:
         6f:73:a8:91:8d:84:b8:4c:29:a6:95:9e:40:7f:4d:9f:e9:85:
         ef:4f:18:c8:d5:84:5b:6e:98:e1:b4:03:a4:98:c7:ff:8b:01:
         ff:10:3d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:24:07 2026 by rpki-client