Error: rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.mft
File:                     F8A6A07CCBE742530F38EEDD455AC59480FDA110.mft (raw, json)
Hash identifier:          Xc3+an1IiyhRhYYZxG0EuBTFbMpRDocYNsXvVuY+j48=
Subject key identifier:   BE:A3:76:F7:BA:4F:EB:95:13:B1:6A:AF:D3:01:DF:79:FC:52:F6:DE
Authority key identifier: F8:A6:A0:7C:CB:E7:42:53:0F:38:EE:DD:45:5A:C5:94:80:FD:A1:10
Certificate issuer:       /CN=F8A6A07CCBE742530F38EEDD455AC59480FDA110
Certificate serial:       26C7E61E30B3BDE5AD9168A10469D6B532495D50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.mft
Manifest number:          0565
Signing time:             Sat 10 Oct 2026 08:50:00 +0000
Manifest this update:     Sat 10 Oct 2026 08:45:00 +0000
Manifest next update:     Sun 11 Oct 2026 08:50:00 +0000
Files and hashes:         1: 323830343a323334343a3a2f33322d3334203d3e20323634313532.roa (hash: 4UuPMAAMMUOZnzy36P/hvaL9415EQk6nYlZHMIQ3vUM=)
                          2: F8A6A07CCBE742530F38EEDD455AC59480FDA110.crl (hash: /2KVLrcTg1vn0RafoERzwDckIv+udDwvUg5+Fqxo3Xc=)
                          3: 3133382e39342e38382e302f32322d3234203d3e20323634313532.roa (hash: HPKHR02vVozS2Jj/a1F+5CNmjtaRdWW4U0uSZClGICw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.crl
                          rsync://rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 08:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c7:e6:1e:30:b3:bd:e5:ad:91:68:a1:04:69:d6:b5:32:49:5d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8A6A07CCBE742530F38EEDD455AC59480FDA110
        Validity
            Not Before: Oct 10 08:45:00 2026 GMT
            Not After : Oct 11 08:50:00 2026 GMT
        Subject: CN=3082010A0282010100AFD287601621B64C66CE6A2369218304647E75DD3CD80C7D0C74AC80E191D39278C638D1A8C92E925491DC7112A39A65BD553E31B8AE7AA19ABCBEF25A27A9DE059778EC176BFF585FA8528855594FDB61049960A28AE9B2356833673828FC30929F6B619768D6C6BFB0925DE1B912AA57344128BA10EED439B95620B6508F8814B9994DD73AB4F399D3D9BAE3971819E46A0764EDCEE5F32F1C6E06A9F314CD7B4C9777E70A30C5CB3E98B22D11465F6761190FE0D256A5402CA14FCB79D7AB4C9AE1914D7B685EAC085DFB358A6DCEB3EA5AB0BD0D55D1BD495B331616906EB822D023C64877CF9F0B4962544C4F7E035DD6D7A838DB0AF802C8C93F2209E30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d2:87:60:16:21:b6:4c:66:ce:6a:23:69:21:
                    83:04:64:7e:75:dd:3c:d8:0c:7d:0c:74:ac:80:e1:
                    91:d3:92:78:c6:38:d1:a8:c9:2e:92:54:91:dc:71:
                    12:a3:9a:65:bd:55:3e:31:b8:ae:7a:a1:9a:bc:be:
                    f2:5a:27:a9:de:05:97:78:ec:17:6b:ff:58:5f:a8:
                    52:88:55:59:4f:db:61:04:99:60:a2:8a:e9:b2:35:
                    68:33:67:38:28:fc:30:92:9f:6b:61:97:68:d6:c6:
                    bf:b0:92:5d:e1:b9:12:aa:57:34:41:28:ba:10:ee:
                    d4:39:b9:56:20:b6:50:8f:88:14:b9:99:4d:d7:3a:
                    b4:f3:99:d3:d9:ba:e3:97:18:19:e4:6a:07:64:ed:
                    ce:e5:f3:2f:1c:6e:06:a9:f3:14:cd:7b:4c:97:77:
                    e7:0a:30:c5:cb:3e:98:b2:2d:11:46:5f:67:61:19:
                    0f:e0:d2:56:a5:40:2c:a1:4f:cb:79:d7:ab:4c:9a:
                    e1:91:4d:7b:68:5e:ac:08:5d:fb:35:8a:6d:ce:b3:
                    ea:5a:b0:bd:0d:55:d1:bd:49:5b:33:16:16:90:6e:
                    b8:22:d0:23:c6:48:77:cf:9f:0b:49:62:54:4c:4f:
                    7e:03:5d:d6:d7:a8:38:db:0a:f8:02:c8:c9:3f:22:
                    09:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A3:76:F7:BA:4F:EB:95:13:B1:6A:AF:D3:01:DF:79:FC:52:F6:DE
            X509v3 Authority Key Identifier:
                keyid:F8:A6:A0:7C:CB:E7:42:53:0F:38:EE:DD:45:5A:C5:94:80:FD:A1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:f0:7d:6c:80:ae:ca:09:6f:29:b8:27:c6:eb:ac:77:40:ee:
         31:7a:67:bd:1b:6f:01:f7:18:39:ac:51:f2:9f:9c:df:8c:c3:
         4f:c0:4a:e4:bc:75:3b:73:6e:52:49:0c:ce:fd:1a:c1:42:93:
         44:cd:80:ff:fc:b3:3f:d0:5b:84:b7:73:f0:af:41:01:70:81:
         e1:be:5a:f1:a7:75:38:d3:8a:15:cd:f3:7e:db:cf:30:cf:52:
         61:d5:14:51:b1:27:e4:87:dc:34:9a:be:bf:59:43:03:aa:e9:
         50:69:f0:28:55:04:18:ef:b7:49:4a:c2:a7:6a:44:6b:0e:db:
         80:17:22:98:00:b5:82:eb:09:57:ec:b2:a6:49:98:3e:61:76:
         2d:59:9b:30:04:5d:65:54:8a:7b:8f:1d:93:89:1e:33:55:38:
         a3:71:cf:38:9d:0a:a1:38:90:c7:37:a0:43:0f:21:cb:d2:ff:
         2a:38:0f:ac:a8:b9:84:03:58:60:fc:08:6f:76:ae:f9:4c:b6:
         5e:5c:25:76:e5:c2:ad:68:cc:4c:92:fb:40:50:be:96:dc:7b:
         64:85:4e:93:83:a3:6b:6a:70:0c:69:2d:21:39:06:6a:d9:37:
         6f:d9:60:d5:d6:36:51:3b:af:e6:b6:35:f0:31:fb:9b:f7:31:
         43:79:7f:70
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 10 19:59:29 2026 by rpki-client