Error: rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft
File:                     50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft (raw, json)
Hash identifier:          m9pNQbr2NYrPqrNu1+TPR3oh7+lfsS4jcsOEjDPdewk=
Subject key identifier:   38:4A:8B:19:0E:3E:6B:24:5C:F6:54:19:1D:57:C2:15:E8:7A:59:75
Authority key identifier: 50:C3:3A:7F:B5:FF:DC:CE:C9:9E:EF:8A:69:CA:F9:1D:57:91:A9:A3
Certificate issuer:       /CN=50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3
Certificate serial:       5C428BEE03AF978FC81DAB6E318A6558B7688C34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft
Manifest number:          042F
Signing time:             Mon 12 Oct 2026 16:31:13 +0000
Manifest this update:     Mon 12 Oct 2026 16:26:13 +0000
Manifest next update:     Tue 13 Oct 2026 19:06:13 +0000
Files and hashes:         1: 50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.crl (hash: hxYiCUKscHy0tWKOXHfFZWMPpYAisdoi2NKaZVJVzgY=)
                          2: 3138312e3138392e34302e302f32322d3332203d3e20323731343136.roa (hash: z+YShh2i7AQbjwfbZCScAlLVJtG/p4Cg8MeyqUB1gOA=)
                          3: 323830343a376233303a3a2f33322d313238203d3e20323731343136.roa (hash: OQmF0Jk90VHvSqF5ofjjQsI1Xy469L2IQZ9fHgYE6JQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.crl
                          rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 19:06:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:42:8b:ee:03:af:97:8f:c8:1d:ab:6e:31:8a:65:58:b7:68:8c:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3
        Validity
            Not Before: Oct 12 16:26:13 2026 GMT
            Not After : Oct 13 19:06:13 2026 GMT
        Subject: CN=384A8B190E3E6B245CF654191D57C215E87A5975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4e:a5:3e:d5:fd:c3:3c:ee:25:ef:c0:af:fc:
                    98:57:5c:0e:74:cc:bf:e4:33:15:26:1b:9f:76:ca:
                    88:25:aa:ef:9b:d6:6b:5c:e1:f7:83:b7:cc:51:fe:
                    ca:3f:99:3f:7e:93:28:13:59:3f:f4:89:04:46:42:
                    de:61:1d:ef:e6:e1:a3:fe:31:b5:55:c3:8d:6a:85:
                    49:7d:fc:5b:10:f2:f0:4f:88:40:c1:fe:aa:7a:a2:
                    ab:98:dd:dd:86:c9:b0:12:fe:f0:e5:51:e7:f4:89:
                    5d:7c:ee:27:4b:b9:bd:ba:56:94:80:57:17:4f:bc:
                    08:70:2e:14:c6:1e:53:e4:70:fe:6d:87:be:0a:ed:
                    c4:4a:12:7f:3c:d4:f3:33:bf:8e:f3:cb:46:a7:68:
                    3f:ad:e3:c0:c4:44:ff:20:49:49:b3:f4:39:26:be:
                    8d:01:38:72:57:76:b2:f8:4f:8c:8d:ef:fc:cb:2c:
                    2d:ad:72:56:29:df:66:e3:56:0f:82:b0:c1:1a:38:
                    35:48:13:ee:1b:87:8e:46:3e:1b:8c:30:25:e6:fa:
                    5f:63:2a:e3:67:63:f1:6e:a3:2b:34:78:3a:8a:da:
                    9f:35:07:41:42:95:37:43:b3:00:31:c5:04:44:97:
                    2a:75:e4:10:2c:03:f0:8a:4a:ba:21:4f:7e:f1:49:
                    b6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:4A:8B:19:0E:3E:6B:24:5C:F6:54:19:1D:57:C2:15:E8:7A:59:75
            X509v3 Authority Key Identifier:
                keyid:50:C3:3A:7F:B5:FF:DC:CE:C9:9E:EF:8A:69:CA:F9:1D:57:91:A9:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:5b:43:b8:85:e5:15:80:a3:3a:f4:73:50:b8:48:87:49:75:
         18:ad:d3:ac:a0:d8:c7:be:4b:e7:a9:c7:21:b2:99:d7:0a:4b:
         bd:7c:fa:19:89:a7:e8:74:f7:22:d2:f7:af:6b:9d:7c:82:e0:
         74:9b:34:90:f1:ab:56:92:7d:e4:1a:e5:3d:84:f4:8d:26:eb:
         73:5a:fc:4c:a1:ba:89:64:f6:fd:bf:2f:1c:37:7d:87:58:32:
         84:64:b4:5f:15:76:8b:1d:ba:c6:f5:83:33:ae:6b:b4:c1:49:
         07:b3:1b:54:fe:4a:68:c7:da:51:3c:89:3f:80:4e:57:c4:d6:
         ce:21:18:0a:0e:58:a5:cb:3b:e8:ff:53:8b:6d:03:cf:a8:62:
         d2:38:fc:c6:2c:48:b8:9b:1a:28:9c:59:fe:83:7d:fe:33:93:
         c2:ff:cd:26:bc:2d:0f:1e:72:39:71:02:0e:2f:d7:a9:85:c9:
         70:00:2e:56:25:20:81:15:fa:7c:7f:3d:ac:8e:04:fe:21:8b:
         e5:ec:65:91:0c:79:1f:22:01:ec:ba:28:1b:5b:6e:95:98:87:
         1b:ac:75:02:b1:ec:9e:a6:39:82:32:8e:e3:50:6a:84:53:5b:
         9a:59:18:72:80:85:c8:0e:50:4f:18:6b:30:ff:44:14:31:26:
         2d:f3:1c:e2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXEKL7gOvl4/IHatuMYplWLdojDQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTBDMzNBN0ZCNUZGRENDRUM5OUVFRjhBNjlDQUY5MUQ1
NzkxQTlBMzAeFw0yNjEwMTIxNjI2MTNaFw0yNjEwMTMxOTA2MTNaMDMxMTAvBgNV
BAMTKDM4NEE4QjE5MEUzRTZCMjQ1Q0Y2NTQxOTFENTdDMjE1RTg3QTU5NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtTqU+1f3DPO4l78Cv/JhXXA50
zL/kMxUmG592yoglqu+b1mtc4feDt8xR/so/mT9+kygTWT/0iQRGQt5hHe/m4aP+
MbVVw41qhUl9/FsQ8vBPiEDB/qp6oquY3d2GybAS/vDlUef0iV187idLub26VpSA
VxdPvAhwLhTGHlPkcP5th74K7cRKEn881PMzv47zy0anaD+t48DERP8gSUmz9Dkm
vo0BOHJXdrL4T4yN7/zLLC2tclYp32bjVg+CsMEaODVIE+4bh45GPhuMMCXm+l9j
KuNnY/Fuoys0eDqK2p81B0FClTdDswAxxQRElyp15BAsA/CKSrohT37xSbazAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUOEqLGQ4+ayRc9lQZHVfCFeh6WXUwHwYDVR0j
BBgwFoAUUMM6f7X/3M7Jnu+Kacr5HVeRqaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3RybzR6MnBYbVl5Vkx3UFZQem9zd1NHdERidzJ4bTFla1BtaVpVTFJZ
S3EvMC81MEMzM0E3RkI1RkZEQ0NFQzk5RUVGOEE2OUNBRjkxRDU3OTFBOUEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUwQzMzQTdGQjVGRkRDQ0VD
OTlFRUY4QTY5Q0FGOTFENTc5MUE5QTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R3RybzR6MnBYbVl5Vkx3UFZQem9zd1NHdERidzJ4bTFla1BtaVpVTFJZS3EvMC81
MEMzM0E3RkI1RkZEQ0NFQzk5RUVGOEE2OUNBRjkxRDU3OTFBOUEzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvltDuIXlFYCjOvRzULhIh0l1GK3TrKDYx75L56nHIbKZ1wpLvXz6GYmn6HT3
ItL3r2udfILgdJs0kPGrVpJ95BrlPYT0jSbrc1r8TKG6iWT2/b8vHDd9h1gyhGS0
XxV2ix26xvWDM65rtMFJB7MbVP5KaMfaUTyJP4BOV8TWziEYCg5Ypcs76P9Ti20D
z6hi0jj8xixIuJsaKJxZ/oN9/jOTwv/NJrwtDx5yOXECDi/XqYXJcAAuViUggRX6
fH89rI4E/iGL5exlkQx5HyIB7LooG1tulZiHG6x1ArHsnqY5gjKO41BqhFNbmlkY
coCFyA5QTxhrMP9EFDEmLfMc4g==
-----END CERTIFICATE-----
Generated at Tue Oct 13 08:45:24 2026 by rpki-client