Error: rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft
File:                     D539CF929B6A6A2B9596B922F417FAD917799ED7.mft (raw, json)
Hash identifier:          6jMhyD6wX8kDyNXd3gvFYYkrsAzGwpadza76lCxyS80=
Subject key identifier:   B2:D0:38:66:5C:B8:FB:C4:B9:09:78:DA:51:36:D4:F4:E9:EE:82:C6
Authority key identifier: D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7
Certificate issuer:       /CN=D539CF929B6A6A2B9596B922F417FAD917799ED7
Certificate serial:       6044A2BB1AD77A48A91B8FE79BC8E43CAA13B28C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft
Manifest number:          04D7
Signing time:             Mon 19 Oct 2026 02:38:49 +0000
Manifest this update:     Mon 19 Oct 2026 02:33:49 +0000
Manifest next update:     Tue 20 Oct 2026 03:22:49 +0000
Files and hashes:         1: 34352e3232382e3134302e302f32322d3234203d3e20323637313032.roa (hash: eP0r+wZovEoOi3AFVmS1ks40+jUeBeX9l/i7mThdIlg=)
                          2: D539CF929B6A6A2B9596B922F417FAD917799ED7.crl (hash: 26MwB7Zz6XnTQ+OQFzeJ2WLpvY3bkB5v7w9Ymze6KDA=)
                          3: 323830343a343832633a3a2f33322d3438203d3e20323637313032.roa (hash: LEA9vDzQJLKKOYYh86Ctx9GDjZX9B441ozGpSCmd91s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl
                          rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 03:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:44:a2:bb:1a:d7:7a:48:a9:1b:8f:e7:9b:c8:e4:3c:aa:13:b2:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D539CF929B6A6A2B9596B922F417FAD917799ED7
        Validity
            Not Before: Oct 19 02:33:49 2026 GMT
            Not After : Oct 20 03:22:49 2026 GMT
        Subject: CN=B2D038665CB8FBC4B90978DA5136D4F4E9EE82C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:66:82:82:eb:a2:69:6d:75:2f:82:13:70:f1:
                    d5:35:ea:7c:0b:83:f9:56:68:7b:57:02:45:6c:51:
                    26:42:bf:11:d2:b2:9f:06:c7:ba:cd:fa:09:df:d8:
                    14:39:ae:f1:9d:98:99:13:d4:81:41:e3:8e:d4:2d:
                    b3:38:44:6a:cd:b6:01:eb:81:56:5b:55:19:1e:10:
                    71:6d:36:48:82:18:3d:1e:47:2b:0a:db:b3:50:f2:
                    09:1a:bc:bb:c1:d1:18:5b:88:54:29:ca:95:74:dd:
                    68:20:64:9d:61:b3:5d:85:c5:bd:91:03:c1:cd:8e:
                    3f:88:81:aa:a7:ca:ad:ec:8e:42:e9:00:f4:58:3f:
                    1a:5a:ec:5f:e7:ae:ef:9f:fa:bc:e3:5c:e7:c5:22:
                    6e:70:18:71:9e:a8:86:43:9b:2d:67:7c:53:c3:68:
                    f7:b1:db:50:f2:fe:1f:46:f6:7c:6c:d8:ce:26:19:
                    43:35:88:d1:8b:c7:2f:0f:85:cf:70:eb:a8:5a:0e:
                    b7:c1:a2:bf:f2:fe:e7:08:6e:d6:06:9c:a8:51:fb:
                    11:0a:41:00:72:71:68:43:a9:4b:a0:7e:c5:9a:5a:
                    86:9e:26:c2:2e:74:ff:bc:aa:d6:9f:31:b1:51:0e:
                    e9:2e:37:49:7d:00:7b:bd:7e:49:aa:c8:9a:a1:b8:
                    4a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D0:38:66:5C:B8:FB:C4:B9:09:78:DA:51:36:D4:F4:E9:EE:82:C6
            X509v3 Authority Key Identifier:
                keyid:D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:ca:76:ed:6d:37:ba:7e:e1:99:c3:0a:0f:09:dc:5f:91:6c:
         5f:f4:c8:34:e3:bc:da:09:33:4f:1d:25:f2:8b:9a:89:1f:7e:
         c2:c3:4d:e5:84:eb:e7:c5:4e:4a:2f:8f:2e:e4:4d:37:c0:51:
         58:c1:1b:8d:eb:de:e6:32:8a:b7:14:1c:91:01:94:91:a6:9a:
         ae:ec:4c:ef:37:f2:ef:30:95:d3:48:8c:20:ac:72:d4:ae:7e:
         96:b2:1e:fd:bc:27:e6:c1:c5:62:7b:7e:ed:ab:99:43:c6:99:
         3c:3d:70:82:02:c2:f1:a0:ff:06:8a:e9:40:95:74:b4:a9:73:
         59:19:9c:d3:be:85:cc:fd:ae:a9:e8:00:d0:4f:9f:1d:4e:b2:
         9c:74:d9:62:0b:2b:cd:6d:87:e7:5e:e2:db:ba:34:45:ab:c3:
         45:ce:9b:fc:23:2c:34:d1:6b:58:b7:7e:10:e2:f2:71:81:d4:
         88:c5:5c:b4:8a:a2:a6:be:29:9a:ca:fc:ff:2d:42:ff:d6:0b:
         02:b1:6e:1f:a3:60:bd:08:a0:36:48:b2:b6:0f:86:98:f0:a0:
         2d:22:d5:20:be:95:9f:21:00:1c:cd:e3:41:ff:48:68:44:a2:
         8d:24:f7:90:1d:e1:8f:d8:49:f4:44:b3:28:b4:c0:04:28:6e:
         b9:65:81:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:25:13 2026 by rpki-client