Error: rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft
File:                     294426E31AEAEBF273647549DD459DE98A112431.mft (raw, json)
Hash identifier:          k1AdbETM7DnbQRs3j/5PAHbnk7WJkN0QfFQHFR3n2Is=
Subject key identifier:   BE:1F:02:3C:BC:A4:00:E9:C4:33:2F:7D:14:74:E9:7C:48:3A:19:3B
Authority key identifier: 29:44:26:E3:1A:EA:EB:F2:73:64:75:49:DD:45:9D:E9:8A:11:24:31
Certificate issuer:       /CN=294426E31AEAEBF273647549DD459DE98A112431
Certificate serial:       44A7D5DE71FC86A2D4F2D46D526303EAAE0287EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft
Manifest number:          04D3
Signing time:             Tue 13 Oct 2026 00:22:37 +0000
Manifest this update:     Tue 13 Oct 2026 00:17:37 +0000
Manifest next update:     Wed 14 Oct 2026 03:17:37 +0000
Files and hashes:         1: 3137372e3132352e3132342e302f32322d3234203d3e20323633333935.roa (hash: zEuZSqn5bZ8xb1825r2MOOLgbSmhE1/+gK04rIH8GSc=)
                          2: 294426E31AEAEBF273647549DD459DE98A112431.crl (hash: CTxKvE3yrECoDym+BB9B17d83I7oxuNNK1Nc5xcrwH8=)
                          3: 323830343a313539303a3a2f33322d313238203d3e20323633333935.roa (hash: L9B5MGzXntZcLyq4LuTm3Q9UeS6i4pvrYrQJyD6CNVE=)
                          4: 3136382e3139342e3133362e302f32322d3332203d3e20323633333935.roa (hash: 6J/Woy2uRK1B2dNQ2tt84/6O9ugNLPe6HwJN4LKAnpQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl
                          rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 03:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:a7:d5:de:71:fc:86:a2:d4:f2:d4:6d:52:63:03:ea:ae:02:87:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=294426E31AEAEBF273647549DD459DE98A112431
        Validity
            Not Before: Oct 13 00:17:37 2026 GMT
            Not After : Oct 14 03:17:37 2026 GMT
        Subject: CN=BE1F023CBCA400E9C4332F7D1474E97C483A193B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c7:b5:77:79:54:34:4e:f8:83:fd:d0:73:0f:
                    41:ae:af:90:0a:3f:89:c3:45:fb:e2:91:aa:82:0d:
                    2b:a5:59:16:0c:b2:c8:f5:33:89:fd:2c:2d:2f:9f:
                    e9:7e:d0:3c:bf:f4:4c:f4:a3:c4:d8:d0:93:6c:36:
                    29:c9:9e:56:7a:27:6c:22:c2:27:bf:5f:48:6b:49:
                    e3:00:e0:ac:8a:b3:4b:75:d2:60:2f:f3:d0:3f:0c:
                    d8:cb:d9:1b:dd:e5:6b:6c:29:61:4b:2e:99:5e:ea:
                    65:7b:22:63:18:bf:fc:00:35:37:8d:56:1a:d4:ee:
                    87:a8:3d:ce:5c:5f:5e:54:20:31:4c:2d:cd:78:97:
                    79:4d:a0:4c:0d:ff:93:dc:92:db:d6:b8:74:e9:bc:
                    6e:6b:bd:d3:69:10:e8:b8:1e:c0:c2:98:e9:f2:cf:
                    f3:34:47:dc:ef:39:e2:f0:ec:19:2c:77:fb:49:3e:
                    db:06:d5:8a:1e:06:9e:65:98:80:11:6a:5c:bb:ab:
                    a9:95:3d:4e:f0:db:d9:d9:3e:e5:60:e3:24:90:5d:
                    a8:4f:da:78:fa:ba:bf:dc:e5:aa:f4:32:fa:98:c1:
                    10:f1:a7:db:f7:2e:65:66:c6:c6:dd:0e:61:bd:f5:
                    f6:57:9e:55:79:a4:fc:1a:05:97:04:bc:49:c8:c9:
                    87:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1F:02:3C:BC:A4:00:E9:C4:33:2F:7D:14:74:E9:7C:48:3A:19:3B
            X509v3 Authority Key Identifier:
                keyid:29:44:26:E3:1A:EA:EB:F2:73:64:75:49:DD:45:9D:E9:8A:11:24:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:be:f8:71:c8:5b:f7:77:29:a8:fe:8f:ae:f6:c9:01:82:46:
         8f:2d:6c:49:8c:4b:4c:ff:1d:86:22:b6:3e:5a:e1:9e:a5:0e:
         a9:a2:a8:c1:b0:22:70:1c:aa:16:a7:c1:cf:92:89:f8:ae:77:
         18:85:b3:fd:94:b4:75:30:7e:00:b6:d8:c8:2a:87:29:44:fa:
         fc:21:e1:18:f9:43:81:f5:fd:6e:33:97:eb:15:bb:7e:89:67:
         3d:99:82:9d:46:3e:b2:c7:00:08:bc:36:d3:3c:92:b6:5a:8a:
         59:0f:36:85:6c:08:47:48:a0:c7:af:ab:84:01:e3:3b:04:f9:
         cb:c8:5a:23:ee:45:82:b3:0b:4c:f5:a2:f9:28:c8:0f:c1:7a:
         48:90:ab:9b:ee:f6:7e:88:e6:f6:aa:99:d0:a4:a3:57:16:78:
         74:55:03:e3:03:18:5d:91:d6:01:70:5b:90:30:4f:4a:b3:f2:
         ca:df:ef:5b:4a:65:ea:02:5d:24:50:da:c4:22:77:cd:fc:fd:
         a3:79:37:34:cc:2c:3d:81:00:63:fb:56:28:87:eb:a8:f0:e5:
         d1:a3:84:10:e7:8d:47:7c:97:e4:52:15:4b:52:77:08:3a:43:
         30:42:b1:3a:c4:ec:14:bc:45:81:f3:69:ba:e2:27:cf:61:34:
         4a:a4:58:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:27:26 2026 by rpki-client