Error: rpki-repo.registro.br/repo/EYDn7i8ocbgF4HRNnrsYeeB8H9gEfoaYYwWfQMbtJSSy/0/5FBCB1EF158A0F369859F4CE22712203039C8002.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/EYDn7i8ocbgF4HRNnrsYeeB8H9gEfoaYYwWfQMbtJSSy/0/5FBCB1EF158A0F369859F4CE22712203039C8002.mft
File:                     5FBCB1EF158A0F369859F4CE22712203039C8002.mft (raw, json)
Hash identifier:          3FpBYyWQfWKlUXtvF5ihN7/zfPR1+SgXEjZbCSdrjok=
Subject key identifier:   F7:41:C7:C3:1D:B6:A1:16:B6:03:54:F3:31:8D:21:A9:BF:BA:97:1B
Authority key identifier: 5F:BC:B1:EF:15:8A:0F:36:98:59:F4:CE:22:71:22:03:03:9C:80:02
Certificate issuer:       /CN=5FBCB1EF158A0F369859F4CE22712203039C8002
Certificate serial:       4AF379E194B39A60285B11DDAE3452CF546F2C60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FBCB1EF158A0F369859F4CE22712203039C8002.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYDn7i8ocbgF4HRNnrsYeeB8H9gEfoaYYwWfQMbtJSSy/0/5FBCB1EF158A0F369859F4CE22712203039C8002.mft
Manifest number:          0462
Signing time:             Wed 14 Oct 2026 16:00:33 +0000
Manifest this update:     Wed 14 Oct 2026 15:55:33 +0000
Manifest next update:     Thu 15 Oct 2026 17:58:33 +0000
Files and hashes:         1: 323830343a326163303a3a2f33322d3438203d3e20323634303932.roa (hash: RTPnXJRbX0AW/MfP8doTT1aeb7JijKfyGvTv3hfTkX8=)
                          2: 5FBCB1EF158A0F369859F4CE22712203039C8002.crl (hash: cTDxRDN6oYt0npYhfiVyjzW5LC/7iloOIx6vyBJIlkE=)
                          3: 3134332e3230382e3134382e302f32322d3234203d3e20323634303932.roa (hash: kSX6YU7UnrMUBUbZWVy3eS+LdLrfz4nY3Gxdb9aCXlQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYDn7i8ocbgF4HRNnrsYeeB8H9gEfoaYYwWfQMbtJSSy/0/5FBCB1EF158A0F369859F4CE22712203039C8002.crl
                          rsync://rpki-repo.registro.br/repo/EYDn7i8ocbgF4HRNnrsYeeB8H9gEfoaYYwWfQMbtJSSy/0/5FBCB1EF158A0F369859F4CE22712203039C8002.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FBCB1EF158A0F369859F4CE22712203039C8002.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 17:58:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:f3:79:e1:94:b3:9a:60:28:5b:11:dd:ae:34:52:cf:54:6f:2c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FBCB1EF158A0F369859F4CE22712203039C8002
        Validity
            Not Before: Oct 14 15:55:33 2026 GMT
            Not After : Oct 15 17:58:33 2026 GMT
        Subject: CN=F741C7C31DB6A116B60354F3318D21A9BFBA971B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5e:d3:4c:94:cb:60:76:46:dc:e5:e0:ac:8c:
                    32:7c:f1:19:c9:e2:67:b1:bc:7f:bc:4c:d9:58:c4:
                    28:12:db:75:b1:fc:19:04:35:bf:5e:9b:59:c9:36:
                    df:62:0c:b2:8f:01:d4:23:67:9b:7b:b6:97:b9:ff:
                    ff:ab:f7:97:0f:08:34:ec:5a:d4:41:02:1e:e4:fb:
                    9b:f3:ea:b8:7c:cd:d3:92:58:17:58:71:c9:14:96:
                    54:4b:3e:70:15:48:b9:ce:92:b0:a0:10:e4:9b:e0:
                    33:bc:0a:5b:a2:01:e8:81:4d:e1:87:f4:e6:7e:15:
                    bb:c7:f8:33:a9:d6:4f:b3:e9:39:d6:3c:79:96:19:
                    61:bd:cb:b1:48:47:97:59:3d:db:b8:13:e1:51:25:
                    95:9a:5c:8d:48:76:a2:40:69:f6:0e:30:54:6b:12:
                    f5:ad:59:75:b0:d5:d3:4a:30:e2:58:f5:51:9d:11:
                    0c:6b:d3:1d:f6:2b:be:b1:54:c7:70:84:d6:cb:3f:
                    80:4c:63:61:d8:3a:5f:1d:e2:df:07:b1:6d:cd:b7:
                    c8:3a:a8:da:6d:f3:96:f2:50:69:27:b8:03:30:80:
                    14:f8:b2:f3:f4:f5:1c:a7:9c:c3:8a:d6:57:2a:f9:
                    e1:75:98:33:27:30:9f:fc:9b:1e:a8:e3:77:8f:ff:
                    a0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:41:C7:C3:1D:B6:A1:16:B6:03:54:F3:31:8D:21:A9:BF:BA:97:1B
            X509v3 Authority Key Identifier:
                keyid:5F:BC:B1:EF:15:8A:0F:36:98:59:F4:CE:22:71:22:03:03:9C:80:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYDn7i8ocbgF4HRNnrsYeeB8H9gEfoaYYwWfQMbtJSSy/0/5FBCB1EF158A0F369859F4CE22712203039C8002.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FBCB1EF158A0F369859F4CE22712203039C8002.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYDn7i8ocbgF4HRNnrsYeeB8H9gEfoaYYwWfQMbtJSSy/0/5FBCB1EF158A0F369859F4CE22712203039C8002.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:77:11:45:80:7c:3c:87:f6:2c:61:60:96:0d:a1:dd:df:c7:
         89:84:93:f6:77:2a:b5:54:f5:eb:dd:06:3f:28:70:cd:81:3b:
         fc:7d:b5:3a:58:c9:06:e4:d2:8f:e2:a1:d6:05:7a:67:ad:c6:
         cc:8d:c9:73:c3:41:e9:90:66:88:08:e9:3d:ae:7c:fe:d0:3e:
         89:53:da:de:0c:c0:d7:1e:60:f7:2e:49:d6:9c:48:87:67:a3:
         9d:b1:c1:ab:83:e4:57:df:25:a2:6f:df:d0:5c:14:dc:22:9e:
         d6:81:2a:70:23:b0:db:16:1b:47:e1:ef:87:ab:d0:71:f7:3d:
         89:f0:d2:e8:39:5c:02:8f:a5:ab:db:ef:6c:8d:39:d0:81:36:
         ec:d6:9c:d6:98:1b:b1:c9:cf:8c:fc:70:f1:16:47:a9:3e:a7:
         5a:08:be:e8:d8:ae:07:4e:c7:cb:38:76:20:2d:2d:08:a4:fd:
         d8:55:51:6f:89:63:4b:dc:5a:6e:86:ac:7c:35:0b:f4:f6:31:
         3d:ed:63:76:05:17:5a:2b:c5:80:61:8d:61:90:79:1f:30:d0:
         40:83:b5:47:7b:81:1d:f7:26:d6:45:d5:d9:79:49:b8:e8:53:
         d8:f6:52:b6:fd:9f:bb:ff:cf:86:29:4c:fe:04:c8:86:9c:e5:
         ed:39:52:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:36:04 2026 by rpki-client