Error: rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft
File:                     99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft (raw, json)
Hash identifier:          cC0e8wlyfKfWurQSvWEk+XI2MFyyHL6rFrEarmDnX0E=
Subject key identifier:   F6:FA:A5:84:3A:81:47:9E:DA:35:5F:71:E8:1E:11:73:41:10:EB:1C
Authority key identifier: 99:A8:F5:3F:34:26:C9:83:CA:87:D5:D7:AC:F6:AB:5E:14:37:15:54
Certificate issuer:       /CN=99A8F53F3426C983CA87D5D7ACF6AB5E14371554
Certificate serial:       4CD9936C0C00CCC6191BE71809ACA0E379144BF7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft
Manifest number:          04E6
Signing time:             Wed 04 Nov 2026 08:30:17 +0000
Manifest this update:     Wed 04 Nov 2026 08:25:17 +0000
Manifest next update:     Thu 05 Nov 2026 11:47:17 +0000
Files and hashes:         1: 323830343a313635633a3a2f33322d3438203d3e20323633323834.roa (hash: bfT9d9vwD4SbS7VeTXTmr8mjxGnSXYYn2MAyZKiwdm0=)
                          2: 3137392e3130372e34382e302f32322d3234203d3e20323633323834.roa (hash: ckNtBsziZrfWgsauDA2pPoxwGYk+p7ctsc9M35CAGkA=)
                          3: 99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl (hash: PDPUqmhxJCLRig4T4aqxmVqMCg5H5cX14HZC5lC6lrU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl
                          rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 11:47:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d9:93:6c:0c:00:cc:c6:19:1b:e7:18:09:ac:a0:e3:79:14:4b:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99A8F53F3426C983CA87D5D7ACF6AB5E14371554
        Validity
            Not Before: Nov  4 08:25:17 2026 GMT
            Not After : Nov  5 11:47:17 2026 GMT
        Subject: CN=F6FAA5843A81479EDA355F71E81E11734110EB1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a4:2b:bd:66:ac:47:32:de:2f:c2:ee:b4:4e:
                    9d:69:3a:06:08:b3:6c:17:54:a4:39:11:80:df:c8:
                    85:a4:9b:45:4b:44:1c:9a:10:1d:db:5b:92:49:2b:
                    4c:97:6e:8f:ad:c4:5c:b9:2c:2e:01:ae:bd:ca:f7:
                    b1:3f:47:65:c9:19:ff:bb:f5:80:d0:e0:26:fb:56:
                    83:5b:8a:70:08:98:cf:86:6a:84:3a:a9:e8:1a:fc:
                    ec:f4:fc:16:1b:a2:97:6f:0a:4c:1a:1b:79:9d:18:
                    fd:45:28:cc:af:f0:3a:98:13:11:84:f8:ed:54:13:
                    d8:f4:c8:4f:53:0c:26:b6:5c:98:b3:1d:de:ab:ae:
                    50:0f:36:18:35:29:63:a2:a9:7d:e4:68:b4:ef:df:
                    26:b7:42:ea:c1:91:da:69:9a:d4:65:5c:5f:c1:5a:
                    aa:97:77:72:2c:65:a1:61:51:01:24:08:6a:03:75:
                    43:ab:00:53:d2:47:66:05:ca:a9:f5:cb:af:cf:ca:
                    9d:8b:57:01:bd:f4:94:a1:76:31:e9:d2:c7:8f:8e:
                    af:99:1f:1d:84:cf:dd:aa:77:3d:7e:14:20:03:84:
                    ed:f5:59:25:7d:ca:26:29:93:88:58:7b:b9:1f:9a:
                    c1:f3:b0:f0:fa:00:7e:f2:64:31:19:1c:a2:3a:dd:
                    df:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:FA:A5:84:3A:81:47:9E:DA:35:5F:71:E8:1E:11:73:41:10:EB:1C
            X509v3 Authority Key Identifier:
                keyid:99:A8:F5:3F:34:26:C9:83:CA:87:D5:D7:AC:F6:AB:5E:14:37:15:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:f1:8a:ae:08:d0:5b:77:b7:15:85:e2:92:b0:59:ee:2a:7a:
         7a:40:66:a3:87:1e:84:00:0b:1a:24:93:31:ca:8e:48:9e:20:
         ca:a0:4a:cf:1a:00:e9:10:5f:57:18:92:86:79:c4:2b:14:9a:
         b0:cf:c7:b9:be:11:23:1e:2f:49:e2:da:da:e2:63:9e:f1:ab:
         be:a4:f9:56:d3:8c:be:73:bb:7b:6e:dc:15:89:56:bf:80:fb:
         60:7c:9f:0c:46:ea:73:22:d8:ec:96:eb:b9:c1:aa:4c:5c:e5:
         de:90:ec:5e:7c:c4:95:17:27:96:0e:35:a7:47:9a:54:de:53:
         07:b2:be:5e:8a:81:d0:3b:3d:58:65:25:31:b5:ad:08:11:20:
         39:a0:e0:71:d5:45:da:65:cb:03:8a:cf:13:67:c5:66:b5:4f:
         a5:10:93:69:ae:f5:f3:e1:6a:cf:bf:42:e3:4f:e5:a3:be:37:
         1c:8f:8c:b3:11:cc:8a:30:85:fe:b5:82:42:49:3f:ea:f6:a2:
         84:d5:9d:5d:78:7d:03:72:19:65:c6:26:ef:af:48:25:6c:b3:
         9a:bf:e0:07:77:78:06:b9:15:ef:22:36:8d:0f:c3:3c:e2:f8:
         3c:df:59:b5:86:b9:99:1f:e6:db:d0:fb:48:9c:d9:43:35:5e:
         7b:20:9a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:47:45 2026 by rpki-client