Error: rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1/E1470F370CA043FEC72078800782F80E03725DD0.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1/E1470F370CA043FEC72078800782F80E03725DD0.mft
File:                     E1470F370CA043FEC72078800782F80E03725DD0.mft (raw, json)
Hash identifier:          M/tjSkghYA9ZVVMwW+fum/r2KlKtw/Vhmj7QNefPOh8=
Subject key identifier:   E6:3A:37:13:5E:BF:41:1D:72:D9:01:2F:43:D3:D4:80:55:CA:6B:51
Authority key identifier: E1:47:0F:37:0C:A0:43:FE:C7:20:78:80:07:82:F8:0E:03:72:5D:D0
Certificate issuer:       /CN=E1470F370CA043FEC72078800782F80E03725DD0
Certificate serial:       26815BE75C018A4E0E9236AAA5C3687C176BE305
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1470F370CA043FEC72078800782F80E03725DD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1/E1470F370CA043FEC72078800782F80E03725DD0.mft
Manifest number:          04CB
Signing time:             Wed 14 Oct 2026 11:17:51 +0000
Manifest this update:     Wed 14 Oct 2026 11:12:51 +0000
Manifest next update:     Thu 15 Oct 2026 14:56:51 +0000
Files and hashes:         1: 323830343a336630303a3a2f33322d3438203d3e203532363433.roa (hash: B9VChABabdo/BLEcylidhs1gVrc5tku43bWg5SfsD7M=)
                          2: 3137372e3132382e37322e302f32312d3234203d3e203532363433.roa (hash: v90QYSlIRViRyhBe+zGAaBCDPdDLPp2Y3xwP8T8vlAQ=)
                          3: E1470F370CA043FEC72078800782F80E03725DD0.crl (hash: Pwvo89tPLi0fnUHcAmsdy7Tg9RylfUzuprPydu9syRM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1/E1470F370CA043FEC72078800782F80E03725DD0.crl
                          rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1/E1470F370CA043FEC72078800782F80E03725DD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1470F370CA043FEC72078800782F80E03725DD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 14:56:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:81:5b:e7:5c:01:8a:4e:0e:92:36:aa:a5:c3:68:7c:17:6b:e3:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1470F370CA043FEC72078800782F80E03725DD0
        Validity
            Not Before: Oct 14 11:12:51 2026 GMT
            Not After : Oct 15 14:56:51 2026 GMT
        Subject: CN=E63A37135EBF411D72D9012F43D3D48055CA6B51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:de:a1:47:4b:c9:42:eb:3e:07:3b:ca:d1:84:
                    af:15:9e:80:86:50:db:5a:0b:50:43:71:df:f0:f4:
                    71:00:c7:0e:13:c6:08:c2:70:ad:ca:1e:40:7e:5a:
                    e2:73:75:9e:74:a1:69:e0:2b:97:45:71:a1:20:1d:
                    ea:ad:24:6e:77:5b:b4:d5:3c:62:89:a7:b3:61:0e:
                    15:4c:a6:20:cd:f6:15:b8:97:56:64:4e:14:cb:db:
                    16:fa:a9:12:21:9a:fb:13:30:73:3c:ea:e5:37:37:
                    cf:f9:8d:ca:bf:92:88:6f:c4:05:2c:62:b3:cd:7c:
                    2b:ee:39:e9:4d:28:76:96:22:8f:f1:36:9a:7e:b2:
                    5b:e0:41:ad:a6:4a:35:22:f3:c5:67:94:2d:f6:84:
                    67:3e:37:15:72:8c:f3:da:51:ce:89:f8:eb:c5:1f:
                    07:0e:ee:db:7e:a8:93:80:6d:2f:b7:5d:1e:58:ea:
                    ec:eb:29:07:ad:22:a6:1c:8c:3f:68:60:2a:fb:45:
                    e3:9d:00:c3:08:d7:9d:4b:33:60:e8:ac:fd:85:91:
                    bb:7a:74:f2:50:51:d7:a0:58:f5:ad:0f:c8:9c:28:
                    7f:82:3d:4a:6c:f9:46:23:52:9d:de:7c:42:ca:14:
                    a7:2e:7d:bf:51:51:51:ac:73:79:c9:b8:43:fd:e9:
                    5b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:3A:37:13:5E:BF:41:1D:72:D9:01:2F:43:D3:D4:80:55:CA:6B:51
            X509v3 Authority Key Identifier:
                keyid:E1:47:0F:37:0C:A0:43:FE:C7:20:78:80:07:82:F8:0E:03:72:5D:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1/E1470F370CA043FEC72078800782F80E03725DD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1470F370CA043FEC72078800782F80E03725DD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1/E1470F370CA043FEC72078800782F80E03725DD0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:28:7a:c4:11:cc:39:ee:cc:59:e8:6a:f9:59:94:a1:19:10:
         55:cb:0d:10:a8:08:08:e7:fa:e9:79:69:3f:e4:5b:ba:21:0f:
         07:3b:db:ab:2c:53:8a:3b:ce:8d:0b:d1:13:d7:e8:71:9c:f8:
         49:86:b2:ed:61:88:26:13:95:bd:c8:c9:2d:a9:0a:6b:24:d0:
         ea:c4:4c:9b:12:3f:0a:4f:64:6a:38:97:59:88:71:da:1c:bb:
         0d:54:cb:22:91:64:c9:65:b3:f9:b9:f7:4f:fe:10:fc:e8:50:
         dc:5e:ad:a7:1e:9b:37:eb:e6:bb:aa:da:cf:64:d4:16:7d:dc:
         35:77:d1:ea:e4:5a:21:75:29:cb:96:5a:6c:51:62:6d:09:2c:
         15:84:5d:54:e8:2f:dd:c8:34:f3:5e:69:44:f9:43:65:b7:16:
         0a:df:bf:98:7d:6c:8a:b9:1d:52:7f:79:fc:aa:06:e0:1f:4b:
         ba:20:f5:15:c1:df:4f:54:42:49:7c:ac:79:08:8d:4d:e2:81:
         ed:a2:46:96:83:b5:ed:62:71:d1:97:d3:18:8f:27:d6:a6:5f:
         8b:88:64:ed:79:f5:ff:66:d6:f0:3b:74:3c:a8:7c:e0:1d:92:
         9f:16:83:c0:a4:e9:78:3b:0a:f4:76:2d:fd:66:0e:6f:08:31:
         47:42:cf:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:20:06 2026 by rpki-client