Error: rpki-repo.registro.br/repo/5mwMVsggEToFshs5oYyMtuyL8bFnJMqDoUCRahijwgiJ/0/5C332697D03711E9A5CBFE9E45C48A029F3A7B5F.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5mwMVsggEToFshs5oYyMtuyL8bFnJMqDoUCRahijwgiJ/0/5C332697D03711E9A5CBFE9E45C48A029F3A7B5F.mft
File:                     5C332697D03711E9A5CBFE9E45C48A029F3A7B5F.mft (raw, json)
Hash identifier:          7vAc1BGk2fwL1hoBBrWuIjx0w1NF2Xoj+AVLxULEKaI=
Subject key identifier:   4D:C4:CB:37:CE:A1:3C:3F:67:A4:8F:8A:7A:6D:01:2E:41:63:97:9B
Authority key identifier: 5C:33:26:97:D0:37:11:E9:A5:CB:FE:9E:45:C4:8A:02:9F:3A:7B:5F
Certificate issuer:       /CN=5C332697D03711E9A5CBFE9E45C48A029F3A7B5F
Certificate serial:       1B508D86F509D5D38D6F33641840585542ACCE6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C332697D03711E9A5CBFE9E45C48A029F3A7B5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5mwMVsggEToFshs5oYyMtuyL8bFnJMqDoUCRahijwgiJ/0/5C332697D03711E9A5CBFE9E45C48A029F3A7B5F.mft
Manifest number:          32
Signing time:             Thu 15 Oct 2026 08:42:53 +0000
Manifest this update:     Thu 15 Oct 2026 08:37:53 +0000
Manifest next update:     Fri 16 Oct 2026 09:10:53 +0000
Files and hashes:         1: 5C332697D03711E9A5CBFE9E45C48A029F3A7B5F.crl (hash: ePQIznOfHsJSVnWhMCjU9irY+fzXYkRImtWxv+83Uts=)
                          2: 323830343a386537343a343030303a3a2f34342d3434203d3e20323733343236.roa (hash: 1VDPE5LC8d/vE9gFnPDSCwbYjZQlU63lleppedFR/wA=)
                          3: 323830343a386537343a3a2f33322d3332203d3e20323733343236.roa (hash: F2YeJJuXvKOeLhuTYdY8880PogQ1ADAUg0Lx0W25dvY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5mwMVsggEToFshs5oYyMtuyL8bFnJMqDoUCRahijwgiJ/0/5C332697D03711E9A5CBFE9E45C48A029F3A7B5F.crl
                          rsync://rpki-repo.registro.br/repo/5mwMVsggEToFshs5oYyMtuyL8bFnJMqDoUCRahijwgiJ/0/5C332697D03711E9A5CBFE9E45C48A029F3A7B5F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C332697D03711E9A5CBFE9E45C48A029F3A7B5F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 09:10:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:50:8d:86:f5:09:d5:d3:8d:6f:33:64:18:40:58:55:42:ac:ce:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C332697D03711E9A5CBFE9E45C48A029F3A7B5F
        Validity
            Not Before: Oct 15 08:37:53 2026 GMT
            Not After : Oct 16 09:10:53 2026 GMT
        Subject: CN=4DC4CB37CEA13C3F67A48F8A7A6D012E4163979B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c8:2a:9d:85:58:a3:6d:e6:8d:3b:40:07:60:
                    3e:22:1c:84:a5:80:7c:db:af:2c:c0:db:e2:73:ec:
                    ac:78:ca:a0:94:1f:41:44:e9:1b:14:52:ef:0a:b8:
                    50:18:50:db:50:27:1b:44:4e:90:62:d3:eb:a4:03:
                    2b:a1:d8:df:0f:c4:eb:2a:ba:5a:59:8c:62:a6:f4:
                    ac:28:ab:55:d2:0f:ba:b0:be:5e:51:c6:7f:ca:86:
                    9a:39:e0:ad:dd:e2:24:e4:71:6c:5a:cc:8e:53:84:
                    fb:33:79:85:f0:d7:ef:22:e0:b9:2e:59:f9:aa:3f:
                    e9:f8:50:56:71:1a:8d:70:4e:6c:5a:e1:d4:e5:98:
                    8f:25:0d:83:49:14:ae:b6:4a:82:b1:7a:8b:22:11:
                    8d:3c:53:32:30:9c:d0:e1:e7:5a:34:03:84:2a:5a:
                    f9:a2:c2:bc:4b:b8:df:18:c0:cd:32:71:29:68:af:
                    34:14:03:49:b2:3a:d0:4c:2b:62:24:b1:96:e5:fa:
                    50:29:b8:7b:b8:5a:c9:19:1d:2d:22:39:14:22:19:
                    3c:d8:5e:4c:94:95:95:41:af:4a:be:68:f7:c2:f2:
                    46:81:f0:91:98:a3:10:e7:6a:c3:2a:64:e8:90:ce:
                    d6:bb:ca:bc:53:08:d3:af:81:bf:25:6f:88:d6:50:
                    54:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C4:CB:37:CE:A1:3C:3F:67:A4:8F:8A:7A:6D:01:2E:41:63:97:9B
            X509v3 Authority Key Identifier:
                keyid:5C:33:26:97:D0:37:11:E9:A5:CB:FE:9E:45:C4:8A:02:9F:3A:7B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5mwMVsggEToFshs5oYyMtuyL8bFnJMqDoUCRahijwgiJ/0/5C332697D03711E9A5CBFE9E45C48A029F3A7B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C332697D03711E9A5CBFE9E45C48A029F3A7B5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5mwMVsggEToFshs5oYyMtuyL8bFnJMqDoUCRahijwgiJ/0/5C332697D03711E9A5CBFE9E45C48A029F3A7B5F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:ca:a9:e2:be:21:3a:c7:5f:1e:4e:45:07:86:74:d0:54:64:
         86:0a:79:f5:e4:f2:09:63:21:53:f4:e1:09:ab:b6:91:71:0d:
         2c:95:b0:c1:24:83:17:d8:95:bc:4e:d5:fb:86:87:93:19:ee:
         da:3e:b2:e2:66:97:ae:40:ae:9b:c6:ac:35:bd:9e:6a:e4:1a:
         1c:7f:fa:1f:09:1b:82:b6:89:75:f3:24:f7:c7:c9:f3:dc:5e:
         a0:33:7d:ab:ac:57:5d:f3:60:93:b1:88:4b:f8:93:ce:43:bc:
         5f:e1:c7:76:b6:09:31:9e:66:fd:d8:25:76:84:92:ad:66:9f:
         41:2c:82:f0:26:6a:71:aa:37:84:ee:aa:67:bd:2b:74:48:ce:
         33:4c:1a:8e:d7:29:c2:17:37:fe:28:4f:2a:72:45:ee:9b:ba:
         da:ef:5f:22:9c:a0:fe:93:b2:a0:9c:b4:bb:61:6d:83:dc:aa:
         a5:4d:ae:62:29:71:aa:9a:c9:4a:12:54:9c:d3:66:9a:26:11:
         42:cd:db:c0:b8:32:99:87:5a:4e:ee:f1:68:50:bd:d4:cb:b8:
         95:df:80:36:74:22:18:da:e7:94:71:80:5e:1c:da:52:7e:26:
         a1:3d:87:d7:e5:06:19:cb:14:08:59:cd:14:be:8b:1c:2c:cc:
         a3:fd:b4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:43:10 2026 by rpki-client