Error: rpki-repo.registro.br/repo/33wsswsjEF1KVEGfEEMQuXEHHvMvmCgXd2XAmm9QYVzW/0/F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/33wsswsjEF1KVEGfEEMQuXEHHvMvmCgXd2XAmm9QYVzW/0/F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.mft
File:                     F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.mft (raw, json)
Hash identifier:          V9h7nIW8sJ01wtAZpWENL6rd1w4ks1UiM2xEt8F6km8=
Subject key identifier:   66:59:F2:AF:62:B0:7D:B0:AB:C7:D8:17:BF:31:5B:71:F9:3D:AD:A2
Authority key identifier: F0:EF:5A:E4:94:31:89:7F:FD:D3:75:9A:B5:AC:D5:D5:F9:D5:CB:3E
Certificate issuer:       /CN=F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E
Certificate serial:       31A894081ADE545ACA406E98D5D798FFFEFDE9DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/33wsswsjEF1KVEGfEEMQuXEHHvMvmCgXd2XAmm9QYVzW/0/F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.mft
Manifest number:          02C1
Signing time:             Wed 14 Oct 2026 14:29:15 +0000
Manifest this update:     Wed 14 Oct 2026 14:24:15 +0000
Manifest next update:     Thu 15 Oct 2026 15:41:15 +0000
Files and hashes:         1: F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.crl (hash: 0flTGJHnoiX6y0SZ1e56wMrsuWwxJIBvfnFqzbTh5W0=)
                          2: 323830343a363062343a3a2f33322d3335203d3e20323639313835.roa (hash: rF3Vrl+EVzFJNDq4xP1eJ4xT3n9T2WH2xuL2DRSrX4c=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/33wsswsjEF1KVEGfEEMQuXEHHvMvmCgXd2XAmm9QYVzW/0/F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.crl
                          rsync://rpki-repo.registro.br/repo/33wsswsjEF1KVEGfEEMQuXEHHvMvmCgXd2XAmm9QYVzW/0/F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 15:41:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:a8:94:08:1a:de:54:5a:ca:40:6e:98:d5:d7:98:ff:fe:fd:e9:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E
        Validity
            Not Before: Oct 14 14:24:15 2026 GMT
            Not After : Oct 15 15:41:15 2026 GMT
        Subject: CN=6659F2AF62B07DB0ABC7D817BF315B71F93DADA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6d:5f:b0:87:33:32:98:f0:25:f8:31:ab:88:
                    6e:94:8c:e9:bb:2f:3e:ae:10:67:ea:9c:a5:71:4f:
                    1e:94:11:51:8f:0b:47:6f:43:0a:bb:4b:1d:59:82:
                    c5:95:79:4d:52:66:78:61:0e:dc:28:d0:3a:55:db:
                    16:e6:01:a8:34:c4:ed:50:19:96:7b:01:02:68:54:
                    17:89:97:bf:71:55:1d:94:d8:17:c5:1f:8a:d4:fd:
                    0d:3f:d8:36:dd:87:97:80:4a:bc:e4:53:a8:9a:37:
                    47:22:72:f2:1f:9f:2e:a1:2d:25:3b:c7:b5:4f:49:
                    aa:a2:b1:fb:96:9a:79:a2:aa:aa:1f:73:94:ab:d1:
                    de:27:8b:05:5b:f9:90:80:4f:51:84:06:21:43:76:
                    42:f2:39:ea:88:40:71:95:31:8d:39:62:89:d6:3e:
                    18:06:1c:4d:e3:f7:03:e5:95:25:3e:a3:38:19:d1:
                    c6:d4:0c:94:64:47:9f:83:aa:c5:2d:96:ed:a7:75:
                    4a:e4:63:a4:f0:1c:39:9f:30:2a:2e:2e:ee:40:ba:
                    e4:7d:64:24:6e:a6:cf:7c:2d:92:b2:4d:48:3c:a4:
                    56:20:55:7c:f7:59:a0:2c:9d:ae:83:cf:b4:89:4f:
                    a1:42:35:2a:5e:56:1f:c0:94:03:58:e9:ba:64:25:
                    f9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:59:F2:AF:62:B0:7D:B0:AB:C7:D8:17:BF:31:5B:71:F9:3D:AD:A2
            X509v3 Authority Key Identifier:
                keyid:F0:EF:5A:E4:94:31:89:7F:FD:D3:75:9A:B5:AC:D5:D5:F9:D5:CB:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/33wsswsjEF1KVEGfEEMQuXEHHvMvmCgXd2XAmm9QYVzW/0/F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/33wsswsjEF1KVEGfEEMQuXEHHvMvmCgXd2XAmm9QYVzW/0/F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:39:ec:d7:64:69:47:38:cf:0c:f4:c2:e3:58:1e:df:9c:ce:
         f9:9f:42:bd:f9:22:6c:86:a7:e8:d6:2c:68:d1:ce:06:1c:b6:
         ed:fb:81:be:42:0d:10:11:13:82:ee:91:2c:bd:12:e0:69:20:
         62:27:d8:1d:95:79:de:a6:0f:23:ed:7e:09:59:f5:e9:81:e4:
         c7:07:64:81:6c:e6:02:88:7a:1f:7f:28:77:8b:9b:8b:ad:6d:
         cf:56:f2:0a:14:3d:fc:a4:06:b7:67:99:e5:ef:46:30:6d:d1:
         e1:81:d9:d5:48:ee:b2:25:bf:02:96:bb:bf:31:09:4c:8d:04:
         5b:07:15:07:8c:c1:e6:31:9b:0e:d3:e4:75:ff:af:c7:72:eb:
         db:52:e2:72:df:28:c3:cb:07:27:0b:a6:ee:8a:89:ee:05:34:
         3c:45:f3:2d:4e:af:a5:08:45:8b:6e:25:72:a0:ac:2c:fa:f4:
         44:fe:21:1f:c7:c9:c4:65:48:ca:76:0e:7d:5d:c4:c6:01:06:
         c3:ba:35:f8:0f:b3:3f:f9:48:61:89:38:d6:8c:37:77:2d:4c:
         f7:d8:f0:ab:8d:e8:d6:12:00:f2:60:72:4f:9e:58:b9:5a:3e:
         c5:e1:bb:42:52:1e:f6:56:e8:00:5a:06:b8:35:b5:69:eb:31:
         3a:66:73:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 23:13:38 2026 by rpki-client