Error: rpki-repo.registro.br/repo/BwU4DDHLNcqper4v9yxamLtnw2Tq9NXCaNitJXCA42Y9/1/FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/BwU4DDHLNcqper4v9yxamLtnw2Tq9NXCaNitJXCA42Y9/1/FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E.mft
File:                     FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E.mft (raw, json)
Hash identifier:          55DivudViPbXqIg/U9LpITmxTk7+h11ifd8KdRvht2U=
Subject key identifier:   4B:5E:8C:5B:D7:92:BA:9F:96:F7:87:59:A4:AD:67:04:D4:58:0B:28
Authority key identifier: FB:BE:40:BD:3F:7A:6B:58:9C:65:2E:CA:E9:F7:DC:C1:C0:64:E1:8E
Certificate issuer:       /CN=FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E
Certificate serial:       1BA75E8A1917597B4A09AF0CD4B70538039E9CD4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwU4DDHLNcqper4v9yxamLtnw2Tq9NXCaNitJXCA42Y9/1/FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E.mft
Manifest number:          04D3
Signing time:             Wed 14 Oct 2026 01:48:00 +0000
Manifest this update:     Wed 14 Oct 2026 01:43:00 +0000
Manifest next update:     Thu 15 Oct 2026 04:02:00 +0000
Files and hashes:         1: 323830313a38303a3535303a3a2f34382d3438203d3e203238323135.roa (hash: l+PCxeJsQclJEADthwcjqWcacLzeTEa6ED4C/MbqdfA=)
                          2: FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E.crl (hash: 2p0bSmW6Aiyjy1SR/mqG7Eqh3200o34kpbtogYqY8Cg=)
                          3: 3138392e3131332e3134342e302f32302d3234203d3e203238323135.roa (hash: nurs5DLuxK0Xh+Ap9+ohZHjwnfkeI+nYvp/oNBqMi3U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BwU4DDHLNcqper4v9yxamLtnw2Tq9NXCaNitJXCA42Y9/1/FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E.crl
                          rsync://rpki-repo.registro.br/repo/BwU4DDHLNcqper4v9yxamLtnw2Tq9NXCaNitJXCA42Y9/1/FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 04:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:a7:5e:8a:19:17:59:7b:4a:09:af:0c:d4:b7:05:38:03:9e:9c:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E
        Validity
            Not Before: Oct 14 01:43:00 2026 GMT
            Not After : Oct 15 04:02:00 2026 GMT
        Subject: CN=4B5E8C5BD792BA9F96F78759A4AD6704D4580B28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:54:6c:c6:79:e2:64:e0:09:0d:95:64:0c:98:
                    d3:d8:61:3f:70:90:3c:81:97:76:5d:2d:01:e2:a1:
                    cf:85:9b:57:64:2c:77:a5:d0:97:92:89:8c:51:46:
                    67:36:a7:dc:4c:fe:4d:17:68:7b:22:e3:8a:d3:a9:
                    a0:c0:04:ab:f4:0b:c9:79:be:6e:92:b0:46:ba:fc:
                    62:17:23:b3:28:88:2e:18:ee:cf:2b:84:16:fe:a4:
                    96:83:26:cb:e2:78:c7:20:b2:fb:cb:21:4d:4a:4e:
                    4b:0c:1b:16:cb:5e:d2:b8:70:a4:bf:5c:36:9e:8f:
                    e8:f6:9c:12:9e:18:72:fc:2f:c7:ad:29:65:99:df:
                    e4:98:24:52:e2:14:b5:ee:c6:98:2d:83:70:49:e6:
                    52:2b:c7:d6:0c:a5:e6:34:6b:3c:89:6c:83:04:de:
                    b3:16:29:32:6e:6d:d3:26:ea:79:af:0e:86:7b:54:
                    23:17:01:2c:26:66:36:0d:e2:80:4f:71:d9:e0:85:
                    fe:99:22:ff:92:f5:41:42:7e:55:b9:a0:fe:e9:be:
                    f0:13:5b:96:5c:ec:c1:7b:3b:35:3d:75:cb:ac:39:
                    d1:f0:0b:2e:56:21:73:c8:67:f6:64:06:fa:d2:cb:
                    50:f2:ab:5a:7f:83:b0:0e:04:7d:2c:51:56:e8:00:
                    af:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:5E:8C:5B:D7:92:BA:9F:96:F7:87:59:A4:AD:67:04:D4:58:0B:28
            X509v3 Authority Key Identifier:
                keyid:FB:BE:40:BD:3F:7A:6B:58:9C:65:2E:CA:E9:F7:DC:C1:C0:64:E1:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwU4DDHLNcqper4v9yxamLtnw2Tq9NXCaNitJXCA42Y9/1/FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwU4DDHLNcqper4v9yxamLtnw2Tq9NXCaNitJXCA42Y9/1/FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:e1:cc:7e:b2:c6:a4:00:0b:5a:f6:24:85:ba:13:fa:c5:c8:
         7d:46:9a:23:e2:11:ff:b9:45:04:db:c5:04:84:ec:9c:92:3a:
         ee:4b:9c:1c:9a:38:3f:7a:e6:65:bf:17:de:3c:ad:83:25:f7:
         cf:f8:80:1f:98:8f:62:bb:e2:17:76:7b:1a:ed:bc:3d:9e:cd:
         1d:9a:01:42:16:36:84:ce:59:2b:d7:6d:d9:cb:81:89:89:cf:
         17:c7:22:5d:87:e0:19:80:80:64:b9:a1:62:b9:53:e4:c1:d7:
         36:68:c8:cd:48:b3:00:e1:5c:34:8c:17:e8:7f:58:98:c2:a3:
         23:e6:4e:cc:84:35:7a:4e:e2:80:88:01:f8:a4:b2:fc:4d:c7:
         ab:22:50:68:da:d0:be:8d:bd:20:4e:30:bb:4b:9b:14:f4:1b:
         b9:e4:4b:70:f0:53:ab:06:41:9a:47:a6:c9:9b:30:b9:16:22:
         1b:a3:72:90:1c:ea:56:5e:a7:dc:0e:72:6f:8a:2d:c9:f0:c3:
         16:99:49:fd:ab:2e:46:25:d9:7f:32:03:97:58:57:7f:2f:3a:
         ef:8e:81:d4:db:d5:bf:10:b7:44:d1:6b:9b:80:d9:1a:00:7f:
         9d:67:67:17:bf:b5:40:c1:32:d3:43:55:4f:e1:e5:1a:10:26:
         10:7e:7f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:15:33 2026 by rpki-client