Error: rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.mft
File:                     83CE6152C5DC2AF2E628D574237B19843CB8056C.mft (raw, json)
Hash identifier:          CA9iylgHuSB2I/7LKEL+fGSDqobEhuNGtrdcJp/INBs=
Subject key identifier:   63:E1:00:6B:B2:F0:B1:4C:7C:01:3F:C3:63:51:AB:CF:D1:89:1B:E0
Authority key identifier: 83:CE:61:52:C5:DC:2A:F2:E6:28:D5:74:23:7B:19:84:3C:B8:05:6C
Certificate issuer:       /CN=83CE6152C5DC2AF2E628D574237B19843CB8056C
Certificate serial:       507E8577CF4DB6A9012CF5EFFC6A5E6EAFE873C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.mft
Manifest number:          04C4
Signing time:             Sat 10 Oct 2026 10:58:16 +0000
Manifest this update:     Sat 10 Oct 2026 10:53:16 +0000
Manifest next update:     Sun 11 Oct 2026 14:06:16 +0000
Files and hashes:         1: 34352e3137382e3131362e302f32322d3332203d3e20323639303138.roa (hash: zXr0XmEoUdnPZQrCwmDVQ8gn2VoHln6IDUrhfq8HMSY=)
                          2: 83CE6152C5DC2AF2E628D574237B19843CB8056C.crl (hash: rphVj8uUzNZ5c+Exlqj0+CboqTlVxwTa9SL1RcLCf50=)
                          3: 323830343a356533343a3a2f33322d313238203d3e20323639303138.roa (hash: A2yDjfLJVeiIGV4tkqKVmdVhG6rSucBeGjzNJSUgRIc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.crl
                          rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 14:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:7e:85:77:cf:4d:b6:a9:01:2c:f5:ef:fc:6a:5e:6e:af:e8:73:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83CE6152C5DC2AF2E628D574237B19843CB8056C
        Validity
            Not Before: Oct 10 10:53:16 2026 GMT
            Not After : Oct 11 14:06:16 2026 GMT
        Subject: CN=63E1006BB2F0B14C7C013FC36351ABCFD1891BE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:74:7a:9c:17:59:a5:95:81:ea:1b:c9:72:23:
                    52:a8:e8:03:83:5a:d8:13:58:bf:6a:9e:41:ca:32:
                    cf:9c:f3:67:34:6b:14:be:f1:fc:ef:da:51:0b:63:
                    f2:a6:a5:94:df:f1:4c:df:fd:9c:39:95:6e:ce:1b:
                    f1:01:24:eb:c1:70:34:f0:21:30:45:cb:5c:71:96:
                    08:9e:92:26:29:c2:24:6b:bc:d3:24:05:d8:9c:f4:
                    14:04:d1:3f:e2:b2:22:0c:72:4a:f6:6f:e0:e6:fd:
                    05:2d:dd:36:bf:1a:9b:3c:58:7a:44:20:ff:c2:1d:
                    3a:2b:75:96:56:7a:8f:8a:66:8c:03:d0:68:b9:92:
                    36:a4:80:f4:6b:e1:89:a9:4c:24:6a:60:a5:5f:53:
                    11:48:9a:eb:17:88:9f:be:46:13:e6:49:27:6b:99:
                    48:75:36:c0:f5:01:2e:05:2c:5a:7c:21:2f:1c:b3:
                    af:66:98:d7:10:bd:cb:98:20:ed:79:4c:23:ab:c4:
                    dd:ea:ed:f8:15:58:ac:18:f4:28:d8:b2:65:4d:25:
                    c0:6b:e4:4f:58:cd:87:c0:52:f7:b4:aa:58:43:c9:
                    e8:54:30:16:b3:aa:1c:66:1b:27:4b:5f:73:54:42:
                    f4:09:56:72:91:43:0d:f1:8b:a1:2f:88:5e:82:85:
                    e7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E1:00:6B:B2:F0:B1:4C:7C:01:3F:C3:63:51:AB:CF:D1:89:1B:E0
            X509v3 Authority Key Identifier:
                keyid:83:CE:61:52:C5:DC:2A:F2:E6:28:D5:74:23:7B:19:84:3C:B8:05:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:b3:71:00:6a:c3:b6:03:d9:0b:c8:af:1e:37:3a:53:90:6e:
         50:13:3d:d5:a5:69:a0:2f:99:3c:80:a7:67:a5:f9:d9:81:f0:
         e9:d6:48:bc:a6:ba:34:95:9a:62:95:90:8f:63:99:ac:2d:8e:
         c2:03:d1:39:ac:71:07:d8:5b:f0:53:23:51:a7:65:f3:4b:27:
         6e:b4:1f:be:53:68:89:e9:b3:70:03:63:02:78:ee:cb:a6:c5:
         92:a5:3d:7c:4d:16:fe:95:18:70:6e:0c:b5:13:a7:66:21:79:
         7a:ad:f7:f5:98:48:59:a3:c3:25:cb:42:46:eb:8c:20:e3:84:
         eb:60:62:d3:3d:c5:c5:fa:cf:c8:f1:b4:bb:e0:06:a1:98:aa:
         a2:10:63:6b:37:bc:29:7c:ae:fa:c1:84:8f:1e:47:e4:de:34:
         12:c2:a6:bf:22:fa:46:fa:92:28:fd:0f:d3:23:77:f2:ba:96:
         ac:71:87:96:2d:a1:4b:23:e7:39:8b:fe:d7:a5:20:11:84:43:
         21:fa:88:77:29:8a:32:93:0e:f8:dc:11:89:80:7d:5a:74:1d:
         83:78:a7:87:48:2b:03:75:24:0f:76:25:96:29:c1:49:5a:ca:
         1c:4c:fa:c6:bd:ee:fb:f6:64:fe:c4:a4:ce:bd:57:22:24:3b:
         8e:1f:24:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:18:41 2026 by rpki-client