Error: rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/14E397E75E3B5F90A92612DBF4DF1D897C61772D.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/14E397E75E3B5F90A92612DBF4DF1D897C61772D.mft
File:                     14E397E75E3B5F90A92612DBF4DF1D897C61772D.mft (raw, json)
Hash identifier:          jiLYInQpDJ230mP/FhnnBONO0lEyyP0gvNEoFwV3azw=
Subject key identifier:   01:D9:B5:76:DB:1C:0C:88:42:6E:07:29:C3:7E:E6:1B:A9:7F:E1:CF
Authority key identifier: 14:E3:97:E7:5E:3B:5F:90:A9:26:12:DB:F4:DF:1D:89:7C:61:77:2D
Certificate issuer:       /CN=14E397E75E3B5F90A92612DBF4DF1D897C61772D
Certificate serial:       31FFD835766D6B26732F9D8C95DBB53D5263C6BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14E397E75E3B5F90A92612DBF4DF1D897C61772D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/14E397E75E3B5F90A92612DBF4DF1D897C61772D.mft
Manifest number:          0110
Signing time:             Thu 15 Oct 2026 06:07:32 +0000
Manifest this update:     Thu 15 Oct 2026 06:02:32 +0000
Manifest next update:     Fri 16 Oct 2026 09:36:32 +0000
Files and hashes:         1: 34352e3137302e3135322e302f32322d3234203d3e20323638313535.roa (hash: uG5zjZPAri/Oy9usSAyo4ZR1cw3N7AbcfG5Ap6OPhgQ=)
                          2: 323830343a353865303a3a2f33322d313238203d3e20323638313535.roa (hash: nayI7J1KRks0fHXTEl8pAt5h3J97gzKS2iQ10pibVoI=)
                          3: 14E397E75E3B5F90A92612DBF4DF1D897C61772D.crl (hash: 5Bxn+vK61RJiO+p9Vjl8Lj8N8ht83ZGAOWey8yMMSAg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/14E397E75E3B5F90A92612DBF4DF1D897C61772D.crl
                          rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/14E397E75E3B5F90A92612DBF4DF1D897C61772D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14E397E75E3B5F90A92612DBF4DF1D897C61772D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 09:21:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:ff:d8:35:76:6d:6b:26:73:2f:9d:8c:95:db:b5:3d:52:63:c6:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14E397E75E3B5F90A92612DBF4DF1D897C61772D
        Validity
            Not Before: Oct 15 06:02:32 2026 GMT
            Not After : Oct 16 09:36:32 2026 GMT
        Subject: CN=01D9B576DB1C0C88426E0729C37EE61BA97FE1CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e3:bb:ef:12:e2:53:9c:be:c7:15:4f:ad:d3:
                    45:a4:e1:5f:b8:b9:2d:8b:f9:48:4f:b5:e3:d1:5b:
                    21:83:0a:5c:d5:07:30:69:da:9c:5e:5a:f8:f8:64:
                    37:ec:87:83:31:3c:85:b3:f1:cd:71:7c:9d:88:42:
                    a8:fd:bb:09:d5:cd:0b:d0:4c:c6:c4:70:36:f0:02:
                    37:e8:08:3d:0e:66:7c:d7:8a:e7:8e:9d:9b:c4:01:
                    b3:bb:92:39:5c:23:3d:36:da:14:76:5b:48:6e:c4:
                    73:d9:cd:ca:5b:88:48:fe:14:b2:ae:37:78:5f:e9:
                    b7:7a:71:55:72:b7:1f:01:21:42:f3:31:11:37:0b:
                    13:6e:c8:4c:da:f3:b7:53:57:15:da:d3:41:5a:52:
                    00:c1:6f:28:97:3f:c5:75:a2:e9:40:59:fd:28:de:
                    77:94:83:cc:e9:c2:40:4c:52:45:e4:36:53:f4:f5:
                    e3:d8:d3:7e:88:85:eb:2e:54:93:ea:ec:18:ea:85:
                    33:d5:93:cc:ac:04:87:86:d3:3b:8e:48:b7:58:80:
                    16:c9:6b:04:3e:b6:51:b3:8b:98:38:f2:d5:ca:7e:
                    17:a2:07:79:d7:da:df:e1:6f:cc:4a:be:9c:46:84:
                    4a:81:47:0a:be:f9:d5:23:99:b0:a1:2d:b4:7e:5e:
                    b0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D9:B5:76:DB:1C:0C:88:42:6E:07:29:C3:7E:E6:1B:A9:7F:E1:CF
            X509v3 Authority Key Identifier:
                keyid:14:E3:97:E7:5E:3B:5F:90:A9:26:12:DB:F4:DF:1D:89:7C:61:77:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/14E397E75E3B5F90A92612DBF4DF1D897C61772D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14E397E75E3B5F90A92612DBF4DF1D897C61772D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/14E397E75E3B5F90A92612DBF4DF1D897C61772D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:83:44:6e:c9:75:01:65:b5:fd:c2:00:b1:bf:9c:6d:b7:62:
         bf:f2:e4:21:2f:5a:38:af:c2:d8:e6:d5:67:6f:93:81:38:61:
         c1:98:64:1b:76:92:f0:24:cf:b0:46:3c:17:28:e2:d1:56:09:
         81:e2:23:c0:5c:6d:49:d7:95:a0:a1:91:d7:cb:6e:6c:84:46:
         a9:66:a2:6a:58:74:ee:cd:85:08:10:7f:5b:b2:51:bf:07:9d:
         39:d3:6a:09:ca:17:7d:8a:c3:3f:ca:39:cf:4f:29:e4:9a:b3:
         28:43:48:af:21:b0:31:a3:14:2f:9d:9a:5e:4c:b5:b3:f4:fe:
         f5:da:66:37:df:39:5d:e0:f9:6c:f8:d8:c3:8d:ea:0d:8d:a5:
         5e:e2:75:b5:d8:fb:64:e4:c1:55:13:ec:8e:e4:97:29:34:f9:
         bf:aa:e8:59:39:c9:73:5f:56:02:77:15:c6:ce:1f:6f:a4:04:
         96:76:f8:f0:fc:c8:85:e7:73:44:9e:b5:c6:01:e6:88:da:59:
         76:65:3d:af:a0:ee:2d:b2:7e:a9:78:a0:a1:81:c6:fa:a3:1f:
         f5:ec:0c:b8:96:01:32:cc:77:f8:31:80:03:ac:f5:5f:e8:0c:
         80:ec:4b:f7:50:d5:2b:3d:1a:b7:4e:6a:c5:bd:50:21:47:cc:
         1b:b7:49:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:04:49 2026 by rpki-client