Error: rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.mft
File:                     A0DAE8CDD320603218B6BE37D484CD0B492A9E94.mft (raw, json)
Hash identifier:          SEj/th2bSKzDiKU1HRWxn9mcZZOtH0j8sX05BXoS30Y=
Subject key identifier:   F3:98:1D:F5:65:0F:44:38:AD:D4:0A:2A:22:EC:E3:ED:BF:32:01:1D
Authority key identifier: A0:DA:E8:CD:D3:20:60:32:18:B6:BE:37:D4:84:CD:0B:49:2A:9E:94
Certificate issuer:       /CN=A0DAE8CDD320603218B6BE37D484CD0B492A9E94
Certificate serial:       29711036852026F988CA6B17D95357524205714E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.mft
Manifest number:          0381
Signing time:             Sat 10 Oct 2026 18:13:08 +0000
Manifest this update:     Sat 10 Oct 2026 18:08:08 +0000
Manifest next update:     Sun 11 Oct 2026 18:25:08 +0000
Files and hashes:         1: 323830343a333862383a3a2f33322d3430203d3e20323636343937.roa (hash: 31O3r7DcVa0Q1lErPl/vBL/XoYC0Jc+m/ZmKMWgbihs=)
                          2: 3137302e3234342e33322e302f32322d3234203d3e20323636343937.roa (hash: zachzDNLg23T4uxxRdHkIPQrDehQ8gDQMBMXOxXGZ5I=)
                          3: A0DAE8CDD320603218B6BE37D484CD0B492A9E94.crl (hash: D67zSk+5F1HYiiHaWQnWRFZ8K2Dgy+AEcE5D67pQ5Fo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.crl
                          rsync://rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 18:25:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:71:10:36:85:20:26:f9:88:ca:6b:17:d9:53:57:52:42:05:71:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0DAE8CDD320603218B6BE37D484CD0B492A9E94
        Validity
            Not Before: Oct 10 18:08:08 2026 GMT
            Not After : Oct 11 18:25:08 2026 GMT
        Subject: CN=F3981DF5650F4438ADD40A2A22ECE3EDBF32011D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5a:83:4e:13:91:46:3d:30:17:0a:df:ca:4d:
                    b0:08:42:34:ba:b0:59:29:b1:9f:fd:02:7e:b8:a4:
                    14:74:9d:c8:29:e8:34:b9:d8:19:28:10:d0:da:89:
                    d5:c4:9b:6a:da:b9:a5:92:8a:4e:98:15:3a:35:e2:
                    4b:ef:d5:0c:bc:32:72:5d:dc:a8:24:16:6d:0c:6b:
                    f9:02:a5:fa:02:eb:21:e1:61:42:41:45:73:2f:b0:
                    d3:27:2c:27:cb:20:7f:6a:04:35:38:58:1a:50:13:
                    fc:94:1d:fb:0f:a7:7d:17:07:b1:bc:74:b6:1e:0f:
                    a4:5f:a5:55:f3:b2:cf:08:bb:78:73:d5:7d:65:94:
                    04:55:0f:1b:47:26:a3:63:b4:4d:3d:ef:f7:29:ff:
                    b7:df:10:a9:67:ca:98:a8:d7:a2:26:94:cc:f5:b9:
                    be:d7:24:e0:44:3e:f7:9b:ed:78:c5:bd:2c:2f:6b:
                    ea:38:0a:ae:1a:24:97:ee:82:41:73:8b:d0:b3:31:
                    c4:f1:ae:7a:dc:96:cf:95:a2:ef:be:1f:e1:95:c4:
                    5a:e5:66:df:0a:1a:ee:1c:67:58:5e:06:da:49:ef:
                    d5:7c:2d:ef:8e:7c:86:58:cf:ff:5b:5f:75:6f:81:
                    73:9a:67:0e:2e:01:34:5d:6b:46:11:93:80:de:f7:
                    a2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:98:1D:F5:65:0F:44:38:AD:D4:0A:2A:22:EC:E3:ED:BF:32:01:1D
            X509v3 Authority Key Identifier:
                keyid:A0:DA:E8:CD:D3:20:60:32:18:B6:BE:37:D4:84:CD:0B:49:2A:9E:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:e2:7b:1f:7d:73:1b:c0:66:fe:c9:36:07:7e:67:a1:db:fd:
         3f:81:e8:c0:19:51:92:70:d6:08:d6:8f:90:9b:b9:18:a7:6f:
         b0:e3:e9:42:1b:96:a6:68:f7:3e:e7:ff:50:dc:f6:2a:5e:4a:
         0e:93:be:b6:e2:d8:6b:2f:22:ff:e9:ea:a3:31:1a:5f:b4:0a:
         7b:25:98:c0:60:08:1f:b0:27:17:bd:76:0b:dc:2a:bc:b6:10:
         31:3b:ed:50:8b:bc:bf:66:7b:29:8c:66:63:51:79:b8:93:16:
         c6:9b:95:2f:ee:56:ef:fb:1e:60:81:30:e3:69:9a:5b:92:b2:
         78:9f:f8:79:e4:f7:79:b2:d7:2a:15:5e:5d:a3:37:97:87:c5:
         8f:c7:0a:b4:15:d2:f6:78:dd:6e:8a:2c:59:23:0b:1e:13:e5:
         f2:15:c6:c1:82:5d:98:84:1e:ae:9d:b3:6a:42:42:ba:76:f5:
         3d:79:f9:40:d5:43:f0:04:12:02:0c:bb:64:45:49:f0:9d:68:
         02:5d:c8:50:1c:29:4c:e2:9b:4e:3a:2b:a5:4a:c3:06:45:e3:
         3d:0d:c8:86:77:0a:f7:0b:b7:0d:98:8a:43:4e:62:09:71:b2:
         a3:99:72:13:d9:a5:93:dc:c7:3a:25:09:b0:f4:b4:56:a3:fa:
         3d:fc:75:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:14:45 2026 by rpki-client