Error: rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.mft
File:                     A54DFBD8D106EBB2780BF8D0331AF120305AAB46.mft (raw, json)
Hash identifier:          A/kH06w/V7ZEDmWR91fNL4puBjvNEsTzYt3sOiDM3HE=
Subject key identifier:   81:BB:93:AB:B1:58:2D:A1:5D:D3:44:1E:C7:AC:81:22:16:65:DE:5A
Authority key identifier: A5:4D:FB:D8:D1:06:EB:B2:78:0B:F8:D0:33:1A:F1:20:30:5A:AB:46
Certificate issuer:       /CN=A54DFBD8D106EBB2780BF8D0331AF120305AAB46
Certificate serial:       4003887C0B1A7C03167F3EF8BEDF44E8C925A38C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.mft
Manifest number:          04EB
Signing time:             Tue 03 Nov 2026 01:36:51 +0000
Manifest this update:     Tue 03 Nov 2026 01:31:51 +0000
Manifest next update:     Wed 04 Nov 2026 05:32:51 +0000
Files and hashes:         1: 323830343a356139303a3a2f33322d3438203d3e20323638373831.roa (hash: D8vmArp8i6plN5iWQ4omWzWwcZJPEUBq6Pq8sK070lc=)
                          2: A54DFBD8D106EBB2780BF8D0331AF120305AAB46.crl (hash: Nrw1taZcmjSojblSMUC6nbOgAdvNSNyJT7wd2Fx/kKg=)
                          3: 34352e3137322e3233362e302f32322d3234203d3e20323638373831.roa (hash: dywGetQdE1WFQNAS2dULdvegjJOGbgfB+yYjWLIIwNw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.crl
                          rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 05:32:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:03:88:7c:0b:1a:7c:03:16:7f:3e:f8:be:df:44:e8:c9:25:a3:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A54DFBD8D106EBB2780BF8D0331AF120305AAB46
        Validity
            Not Before: Nov  3 01:31:51 2026 GMT
            Not After : Nov  4 05:32:51 2026 GMT
        Subject: CN=81BB93ABB1582DA15DD3441EC7AC81221665DE5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b3:53:66:37:92:6d:4b:fe:db:b7:91:0e:90:
                    5d:c3:c0:d2:33:6a:9f:95:c6:14:a7:3c:28:78:44:
                    ec:55:54:59:e3:b2:07:a9:d4:55:9c:23:f3:5d:1f:
                    99:bd:a3:6f:74:d9:d9:0f:46:9c:20:85:95:1d:de:
                    da:df:8f:58:ff:fe:c5:54:25:74:29:c2:62:e0:92:
                    8c:18:d4:16:e8:86:b9:a2:1e:cd:1c:a5:70:68:ed:
                    9d:14:e0:0e:aa:71:09:2b:78:65:71:25:4d:76:57:
                    55:7e:7c:09:c0:51:5e:f0:9e:4b:c9:de:e8:54:7c:
                    30:4e:32:3a:38:ff:e9:5b:20:26:d1:78:e2:1a:0f:
                    2b:f5:69:88:d6:3c:4e:45:8d:b8:79:4a:18:38:c9:
                    d9:1e:46:4e:42:49:c7:91:cd:f1:f6:8c:79:cc:a5:
                    8f:d6:b9:e9:81:c6:2c:09:bc:2c:a1:d2:02:7b:b8:
                    d7:1a:d0:1f:6d:f4:ef:c6:4c:3c:65:bc:8e:fb:c3:
                    a0:1d:59:ab:b6:8d:a2:46:27:35:60:90:8d:0d:d6:
                    88:c6:2c:c1:30:4f:bf:23:98:6c:bc:73:f9:e3:3f:
                    d7:0e:16:e3:6f:85:4f:5c:17:c7:cb:c1:88:52:7d:
                    a6:b6:6a:55:14:bf:4a:2a:95:c0:8b:be:f4:6f:b7:
                    6b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:BB:93:AB:B1:58:2D:A1:5D:D3:44:1E:C7:AC:81:22:16:65:DE:5A
            X509v3 Authority Key Identifier:
                keyid:A5:4D:FB:D8:D1:06:EB:B2:78:0B:F8:D0:33:1A:F1:20:30:5A:AB:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:7e:bf:0f:c3:80:b1:f1:c0:00:f7:56:6f:7e:82:25:43:6f:
         43:7b:de:28:a4:61:69:2b:a0:a2:04:7c:e8:04:ab:b8:d6:d7:
         74:0e:7e:3b:93:cd:77:ae:25:e5:d8:ca:ca:dc:ab:7b:e6:cd:
         dd:46:8c:95:37:34:84:32:32:81:bd:5c:5d:7c:b5:4e:96:b3:
         f7:3b:d5:3c:46:32:f3:03:e4:8f:bb:5b:fc:ab:68:00:ef:da:
         ee:78:ea:c0:16:12:34:cc:8d:cc:c1:fd:58:89:8e:c3:61:ef:
         f4:ac:99:0c:d6:6d:75:53:80:bf:4b:15:be:3f:59:a3:81:27:
         94:b1:6d:be:ea:6c:26:46:e5:41:6d:8e:59:40:31:11:4d:9f:
         d7:5f:43:83:2e:0d:58:49:c5:41:b6:5a:56:47:6c:cf:73:2f:
         16:40:4e:ac:8d:d1:d1:ed:7d:b1:fc:c7:9a:ea:da:e7:48:e4:
         dd:4b:f3:7c:75:35:a5:6c:f4:e3:5a:5e:e3:d5:ca:8d:1f:7a:
         8d:e4:3a:12:72:00:66:80:a5:25:b3:b5:ac:56:eb:ec:13:b7:
         d1:7c:7a:cb:dc:94:97:a6:23:c4:07:83:8a:9e:e5:10:96:b4:
         98:f0:81:17:55:6a:a6:05:54:e5:5c:2c:fa:f2:84:99:3c:3a:
         fc:44:52:71
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUQAOIfAsafAMWfz74vt9E6Mklo4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU0REZCRDhEMTA2RUJCMjc4MEJGOEQwMzMxQUYxMjAz
MDVBQUI0NjAeFw0yNjExMDMwMTMxNTFaFw0yNjExMDQwNTMyNTFaMDMxMTAvBgNV
BAMTKDgxQkI5M0FCQjE1ODJEQTE1REQzNDQxRUM3QUM4MTIyMTY2NURFNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCis1NmN5JtS/7bt5EOkF3DwNIz
ap+VxhSnPCh4ROxVVFnjsgep1FWcI/NdH5m9o2902dkPRpwghZUd3trfj1j//sVU
JXQpwmLgkowY1BbohrmiHs0cpXBo7Z0U4A6qcQkreGVxJU12V1V+fAnAUV7wnkvJ
3uhUfDBOMjo4/+lbICbReOIaDyv1aYjWPE5Fjbh5Shg4ydkeRk5CSceRzfH2jHnM
pY/WuemBxiwJvCyh0gJ7uNca0B9t9O/GTDxlvI77w6AdWau2jaJGJzVgkI0N1ojG
LMEwT78jmGy8c/njP9cOFuNvhU9cF8fLwYhSfaa2alUUv0oqlcCLvvRvt2uvAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUgbuTq7FYLaFd00Qex6yBIhZl3lowHwYDVR0j
BBgwFoAUpU372NEG67J4C/jQMxrxIDBaq0YwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9XWWdTWnY4RFVNclpWUVhlN3dmOHoyMjNNZk41dEhqSHJnZWFSZTV6cDNy
LzEvQTU0REZCRDhEMTA2RUJCMjc4MEJGOEQwMzMxQUYxMjAzMDVBQUI0Ni5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9BNTRERkJEOEQxMDZFQkIyNzgw
QkY4RDAzMzFBRjEyMDMwNUFBQjQ2LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1dZ
Z1NadjhEVU1yWlZRWGU3d2Y4ejIyM01mTjV0SGpIcmdlYVJlNXpwM3IvMS9BNTRE
RkJEOEQxMDZFQkIyNzgwQkY4RDAzMzFBRjEyMDMwNUFBQjQ2Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
KX6/D8OAsfHAAPdWb36CJUNvQ3veKKRhaSugogR86ASruNbXdA5+O5PNd64l5djK
ytyre+bN3UaMlTc0hDIygb1cXXy1Tpaz9zvVPEYy8wPkj7tb/KtoAO/a7njqwBYS
NMyNzMH9WImOw2Hv9KyZDNZtdVOAv0sVvj9Zo4EnlLFtvupsJkblQW2OWUAxEU2f
119Dgy4NWEnFQbZaVkdsz3MvFkBOrI3R0e19sfzHmura50jk3UvzfHU1pWz041pe
49XKjR96jeQ6EnIAZoClJbO1rFbr7BO30Xx6y9yUl6YjxAeDip7lEJa0mPCBF1Vq
pgVU5Vws+vKEmTw6/ERScQ==
-----END CERTIFICATE-----
Generated at Tue Nov 3 20:36:11 2026 by rpki-client