Error: rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
File:                     98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft (raw, json)
Hash identifier:          +NaD86cefc5KLyG8tve5b1am0lvhYtY+18VzQGZKeEA=
Subject key identifier:   51:27:50:F0:7B:A2:3F:C9:5C:0D:82:8B:FF:1E:B6:FF:4E:8E:A3:81
Authority key identifier: 98:D7:07:DA:0F:6D:72:1C:A9:05:6A:E0:B7:12:6E:DD:21:4A:D7:D5
Certificate issuer:       /CN=98D707DA0F6D721CA9056AE0B7126EDD214AD7D5
Certificate serial:       3BE3409A5D4A9FA1B3523A5F8F6F3C21F024A8D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
Manifest number:          04BB
Signing time:             Sun 11 Oct 2026 01:39:25 +0000
Manifest this update:     Sun 11 Oct 2026 01:34:25 +0000
Manifest next update:     Mon 12 Oct 2026 04:48:25 +0000
Files and hashes:         1: 34352e37302e34302e302f32322d3332203d3e20323637353436.roa (hash: aFrAdZ+heX1JwAjk9+yLnN++Dbt7GfogZYb5E5HDg3k=)
                          2: 3139312e3234312e38382e302f32312d3332203d3e20323637353436.roa (hash: MunMWcGE4HETc/fx/wWttkjb6NqvPHceVVID/y0HOao=)
                          3: 323830343a343331303a3a2f33322d313238203d3e20323637353436.roa (hash: dTA3boB0PEjWqE5HcDP10vdCzoKwoMf1WNjQhWymjFk=)
                          4: 98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl (hash: YmL+CB5TiUUegu8dGMGj/B9WS1cKVur4M1Vmpsv0aa8=)
                          5: 34352e3136362e3231322e302f32322d3332203d3e20323637353436.roa (hash: mbA18wNYwlSwgf+rnxvU0zp+nQhkLa27TRyV/C7qbao=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl
                          rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 04:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e3:40:9a:5d:4a:9f:a1:b3:52:3a:5f:8f:6f:3c:21:f0:24:a8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98D707DA0F6D721CA9056AE0B7126EDD214AD7D5
        Validity
            Not Before: Oct 11 01:34:25 2026 GMT
            Not After : Oct 12 04:48:25 2026 GMT
        Subject: CN=512750F07BA23FC95C0D828BFF1EB6FF4E8EA381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:56:14:89:d1:3a:d0:ef:93:d6:31:89:bf:35:
                    6d:02:93:7a:09:a8:7d:81:a5:36:9a:be:14:e0:99:
                    98:96:31:b7:b3:b4:5c:90:7e:63:a8:3d:69:4c:22:
                    5c:48:80:71:f9:cd:cc:1a:8d:43:4c:c6:7b:3e:a7:
                    94:09:54:c2:49:cd:97:e9:c7:11:71:13:a6:ec:9e:
                    37:f7:c9:42:04:97:df:17:70:8e:f4:07:e1:a3:b9:
                    58:ee:de:b4:45:c6:fd:04:df:3f:3e:cf:69:6d:ff:
                    85:f3:9c:cc:67:77:2f:72:54:33:bd:fa:4c:45:0c:
                    1b:08:0b:e7:e7:0d:b7:7d:68:ab:e6:85:7d:41:2c:
                    33:74:fe:9f:1e:5a:9d:32:cf:c5:a9:09:3f:7d:c5:
                    bb:c3:75:1d:61:f5:37:c7:de:55:d2:31:5f:97:74:
                    31:32:e4:1b:50:fc:25:a0:be:bb:94:a6:99:89:74:
                    0e:b4:ed:a7:c3:38:00:1a:7e:22:d1:13:42:26:b6:
                    2e:69:c3:c3:de:ae:b5:c7:68:20:50:6a:a8:a3:fd:
                    a2:e4:21:c0:c3:fd:dd:af:16:f6:9a:cb:a5:99:12:
                    1b:eb:5f:9e:e5:25:3d:6b:43:89:83:b0:a6:36:a6:
                    14:68:15:54:36:b7:bc:d6:cf:b2:37:57:1b:90:6e:
                    7f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:27:50:F0:7B:A2:3F:C9:5C:0D:82:8B:FF:1E:B6:FF:4E:8E:A3:81
            X509v3 Authority Key Identifier:
                keyid:98:D7:07:DA:0F:6D:72:1C:A9:05:6A:E0:B7:12:6E:DD:21:4A:D7:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:32:d5:67:8d:0c:2f:82:f3:a1:5c:a9:d3:58:14:e8:0a:56:
         49:0d:41:65:a3:f6:ab:72:5a:df:88:09:ec:3a:0d:34:04:2d:
         ea:1e:3b:36:59:be:90:f0:55:c2:52:e5:c4:c3:38:bd:e3:fe:
         a6:fd:68:95:27:7d:ea:69:99:70:df:21:83:bb:b0:bf:f8:52:
         d4:d0:06:8b:cb:60:01:44:1b:27:42:87:9f:71:e3:7b:30:a6:
         58:e1:aa:ee:67:83:3c:db:a6:57:4c:2b:ac:c3:83:8c:c6:5f:
         c0:7b:8f:f5:a7:8b:8a:ae:b7:ae:6a:b6:29:8e:98:1b:8f:05:
         b4:4c:28:93:04:f9:bf:1e:ee:ea:d4:44:b3:33:8c:fe:cf:61:
         e0:0f:58:16:b9:c5:4d:e7:53:30:ea:8a:38:fb:a0:8b:a7:98:
         cf:c5:87:ab:8e:b3:b5:ed:13:80:e2:b2:15:f4:39:52:3c:85:
         f5:60:88:d8:cb:a8:48:cf:99:aa:ca:28:59:48:ee:02:73:9c:
         83:f6:58:ad:22:74:a2:c9:32:59:91:c4:d7:d8:9a:23:42:61:
         ae:e2:e4:1f:c0:c5:43:d5:61:1a:7e:a1:d1:e3:87:61:5f:d7:
         8e:72:48:89:70:10:f8:95:00:a5:16:e2:18:86:17:ca:65:25:
         25:db:95:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:17:03 2026 by rpki-client