Error: rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/1/98300A2AA67A942B94CBC198EA8F7537002C0480.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/1/98300A2AA67A942B94CBC198EA8F7537002C0480.mft
File:                     98300A2AA67A942B94CBC198EA8F7537002C0480.mft (raw, json)
Hash identifier:          sr+mz6InYp+P4r2KoyNrtKTxiaKmrF5rf6OXY4um1Qk=
Subject key identifier:   03:2F:50:F8:1C:95:38:37:CA:8D:40:88:77:86:34:8D:10:E9:1C:F4
Authority key identifier: 98:30:0A:2A:A6:7A:94:2B:94:CB:C1:98:EA:8F:75:37:00:2C:04:80
Certificate issuer:       /CN=98300A2AA67A942B94CBC198EA8F7537002C0480
Certificate serial:       2211AA42E40AC49DB6B00AE153EC54BED9D0DC99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98300A2AA67A942B94CBC198EA8F7537002C0480.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/1/98300A2AA67A942B94CBC198EA8F7537002C0480.mft
Manifest number:          0581
Signing time:             Tue 27 Oct 2026 15:10:00 +0000
Manifest this update:     Tue 27 Oct 2026 15:05:00 +0000
Manifest next update:     Wed 28 Oct 2026 15:10:00 +0000
Files and hashes:         1: 3138362e3233322e3234372e302f32342d3234203d3e203532393936.roa (hash: gPyQxNe60K71pLRkN2JCeKm25Hp2r6rAr5l/KoqLVjY=)
                          2: 3133382e3131372e3130342e302f32322d3232203d3e203532393936.roa (hash: 6JJkT6SVKoXgjhH9737U7TnHtdpi4nKUXRG2luNlgY8=)
                          3: 98300A2AA67A942B94CBC198EA8F7537002C0480.crl (hash: k97RtQQ8yRQFOa29YCLqCvROxiVL294HPfus5qWwD4o=)
                          4: 323830313a38303a3166303a3a2f34382d3438203d3e203532393936.roa (hash: 3jeMOKPgccMEZox5UDj69ik1sZ9aPQlucmkfr2QeCIs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/1/98300A2AA67A942B94CBC198EA8F7537002C0480.crl
                          rsync://rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/1/98300A2AA67A942B94CBC198EA8F7537002C0480.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98300A2AA67A942B94CBC198EA8F7537002C0480.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 15:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:11:aa:42:e4:0a:c4:9d:b6:b0:0a:e1:53:ec:54:be:d9:d0:dc:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98300A2AA67A942B94CBC198EA8F7537002C0480
        Validity
            Not Before: Oct 27 15:05:00 2026 GMT
            Not After : Nov  3 15:10:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e4:57:d5:cb:a5:b8:15:46:53:7e:53:31:b3:
                    03:39:c2:b1:40:03:60:7c:22:fc:fd:1e:21:33:ce:
                    4b:4c:7f:d2:3e:07:e9:e9:c2:cd:18:25:47:c3:55:
                    84:ee:b9:e2:78:32:9b:37:75:fe:59:97:69:03:83:
                    3a:e6:88:40:42:b1:11:4d:77:03:39:52:42:4b:b0:
                    36:4a:a8:73:7b:8a:35:d7:ec:b8:bc:ca:01:65:33:
                    ed:3a:71:2b:6a:67:0a:85:f3:65:8e:4f:56:74:65:
                    6a:8c:f5:cb:eb:2f:38:58:82:9d:8e:68:79:7a:26:
                    8c:13:27:d5:ff:92:29:bb:3b:45:ab:ea:ba:9b:46:
                    44:de:9f:e7:22:dc:ed:91:41:b3:80:75:48:d9:81:
                    9d:26:7b:bc:af:2e:b7:ff:41:2e:a3:77:ca:da:a1:
                    85:07:c4:b9:4f:64:58:22:72:6b:3d:e9:18:2a:ae:
                    73:8d:f5:7b:59:b4:3d:cb:24:72:f8:60:9b:34:fa:
                    d5:c5:27:18:5e:24:e9:57:07:7a:d3:c4:e8:bf:36:
                    94:b2:b8:fa:f9:73:f5:5d:bf:b1:ca:41:73:cd:48:
                    19:c1:71:ff:cb:14:16:f4:4b:3e:6f:5b:8b:8d:0d:
                    c7:16:bd:35:12:bb:6b:39:fa:fd:25:32:42:f2:1e:
                    90:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:2F:50:F8:1C:95:38:37:CA:8D:40:88:77:86:34:8D:10:E9:1C:F4
            X509v3 Authority Key Identifier:
                keyid:98:30:0A:2A:A6:7A:94:2B:94:CB:C1:98:EA:8F:75:37:00:2C:04:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/1/98300A2AA67A942B94CBC198EA8F7537002C0480.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98300A2AA67A942B94CBC198EA8F7537002C0480.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/1/98300A2AA67A942B94CBC198EA8F7537002C0480.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:63:fd:5a:db:cd:6f:fc:07:45:71:6b:ee:88:e8:cb:a3:06:
         c9:d2:75:1c:cb:88:d1:1f:3d:68:6f:8e:78:6a:12:58:9d:a2:
         7f:ae:ca:93:2c:50:b2:4e:d3:ac:9e:91:56:79:e2:3e:e2:71:
         6a:91:eb:0d:ee:e5:41:14:44:b2:f0:da:f1:2e:49:5d:b7:b9:
         62:0c:b7:0c:6c:fe:bc:3a:95:58:cd:c9:01:d3:87:b3:b3:22:
         e9:25:dc:24:01:3e:98:09:ec:72:b0:98:91:7d:92:83:16:0e:
         cf:29:97:bf:3b:b2:ab:7d:4b:0c:f9:aa:58:9d:89:39:16:c9:
         52:c5:b0:53:00:2c:29:f9:7a:ef:9b:4f:9e:86:ca:35:e2:e2:
         d6:13:5d:4a:69:06:b9:20:8f:c9:58:52:93:e5:9d:4b:b9:52:
         d4:97:f2:9e:d4:f8:20:84:cc:88:be:ed:03:db:53:10:49:3c:
         38:ee:f3:58:01:12:f0:5c:d6:d3:95:ca:55:08:e2:ee:4a:68:
         c0:b5:77:65:22:a3:52:34:c0:0d:ef:67:f2:3d:25:ed:5d:77:
         ca:52:f7:50:15:a6:e0:42:43:bf:5f:d4:56:13:bc:c5:a0:9b:
         ab:26:65:92:df:f6:67:40:46:ff:ab:7f:71:e1:70:c4:39:77:
         22:ca:f8:d4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 28 08:28:57 2026 by rpki-client