Error: rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.mft
File:                     0B31CCC1E89F4389597737BE4B57373331925A2F.mft (raw, json)
Hash identifier:          40Sbs0pf17IxEYnJKlTcnYXrc3cLCWENqeSib5Vv38s=
Subject key identifier:   FC:5E:8A:4A:1A:C8:DC:7C:CC:52:D0:6E:0F:23:23:44:77:48:CD:3D
Authority key identifier: 0B:31:CC:C1:E8:9F:43:89:59:77:37:BE:4B:57:37:33:31:92:5A:2F
Certificate issuer:       /CN=0B31CCC1E89F4389597737BE4B57373331925A2F
Certificate serial:       3B9B580B3F768939A19F5581766BE521EAF0C9E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B31CCC1E89F4389597737BE4B57373331925A2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.mft
Manifest number:          04CD
Signing time:             Wed 14 Oct 2026 05:58:50 +0000
Manifest this update:     Wed 14 Oct 2026 05:53:50 +0000
Manifest next update:     Thu 15 Oct 2026 06:42:50 +0000
Files and hashes:         1: 323830343a323262383a3a2f3332203d3e20323634313138.roa (hash: K1hHSS7LnwmmFe8eu9aGkC+sbIx+To//Z9JsfByIiNc=)
                          2: 0B31CCC1E89F4389597737BE4B57373331925A2F.crl (hash: s+Z3a3vdCUZxDGzQiBwh7Y9/VDZXUDukrj+f9+2VCxU=)
                          3: 3133382e39372e32342e302f32322d3234203d3e20323634313138.roa (hash: BbKjWSX1BNqL53gf1loDf0fDUnT62Bw4A5d2ZQuI+3I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.crl
                          rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B31CCC1E89F4389597737BE4B57373331925A2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 06:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:9b:58:0b:3f:76:89:39:a1:9f:55:81:76:6b:e5:21:ea:f0:c9:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B31CCC1E89F4389597737BE4B57373331925A2F
        Validity
            Not Before: Oct 14 05:53:50 2026 GMT
            Not After : Oct 15 06:42:50 2026 GMT
        Subject: CN=FC5E8A4A1AC8DC7CCC52D06E0F2323447748CD3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:38:f9:cc:a0:16:d3:70:26:1a:32:2a:4d:6c:
                    c0:71:b4:48:09:d9:fc:58:07:94:61:30:39:b4:03:
                    ef:d5:8e:76:a7:9a:22:88:86:91:91:9d:ea:59:fa:
                    4f:84:27:51:8e:c7:6a:4a:98:96:57:50:94:39:4b:
                    cc:6c:16:17:b5:fe:de:88:66:8d:a5:04:cb:c5:33:
                    ff:35:31:6f:0e:60:b7:b7:eb:9f:e1:99:1b:cf:3a:
                    d7:93:26:cf:4d:ab:8a:54:b3:98:5a:29:53:df:33:
                    7c:7f:5f:20:2a:34:87:8d:70:05:0f:f0:c1:3c:b5:
                    84:83:f4:9c:d1:5a:a1:6d:af:19:49:63:34:c5:67:
                    53:46:92:a6:3f:16:58:f4:0f:9d:18:55:1b:c5:4e:
                    04:b0:e5:c8:1e:45:94:26:0d:24:1e:fe:7d:06:33:
                    f3:5d:eb:57:40:ef:a7:55:4b:06:0e:68:34:5a:47:
                    c6:26:93:4b:ca:e5:11:d9:85:4a:a1:4a:f4:0c:ca:
                    e7:86:b0:35:be:9d:dc:a0:38:80:0b:95:42:c3:66:
                    94:fb:91:f8:3f:27:72:68:b1:c1:a4:33:d2:97:25:
                    3d:a4:bb:a9:86:12:a2:f2:c6:0e:b6:de:22:6b:5e:
                    a7:77:1c:33:76:35:7a:cc:fd:9d:1e:dd:d4:ce:bb:
                    d5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5E:8A:4A:1A:C8:DC:7C:CC:52:D0:6E:0F:23:23:44:77:48:CD:3D
            X509v3 Authority Key Identifier:
                keyid:0B:31:CC:C1:E8:9F:43:89:59:77:37:BE:4B:57:37:33:31:92:5A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B31CCC1E89F4389597737BE4B57373331925A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:95:0b:af:2e:7e:0e:0a:dc:b6:23:8d:51:33:44:ab:f9:14:
         ec:60:22:b3:51:d6:e6:5b:60:7a:82:29:1c:83:1b:fa:51:c8:
         62:0a:27:1a:9c:7b:cb:55:bb:4b:d3:63:c2:95:3b:d4:a9:31:
         25:2c:60:80:c1:94:fa:e3:ea:d5:ee:c3:2f:74:62:cf:ac:01:
         85:6a:67:96:56:6e:3f:c5:ea:f0:87:9d:92:fb:29:fc:7f:39:
         a1:ae:d1:eb:6c:4b:a2:2d:40:f1:b4:ca:f9:0d:55:62:a7:7c:
         5d:bf:82:8a:f2:07:bc:22:4f:6e:f8:1a:ed:df:79:2f:13:18:
         e1:b2:23:07:26:fd:f6:28:22:0c:a0:ec:db:91:96:c0:13:b7:
         08:6d:07:9d:3a:ff:41:00:d0:22:c7:a0:ed:70:c3:6a:6b:1c:
         74:c7:2b:e3:d9:c7:45:62:a2:15:45:85:34:c3:6d:ad:57:80:
         64:d7:dc:a0:c7:98:4e:75:92:21:2a:c2:15:f5:29:0d:65:e4:
         fa:b3:ef:2f:c0:a3:fa:28:af:02:35:21:4c:9d:de:ba:27:53:
         96:71:bb:ff:2b:08:ef:66:bc:d9:c1:c7:06:48:3c:45:72:35:
         96:d5:87:80:76:71:64:77:cb:7b:35:a1:95:c8:ca:36:f1:e8:
         da:c6:9f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:02:55 2026 by rpki-client