Error: rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.mft
File:                     BA066049D6F61C15788B2FC5F30C89377048CC1E.mft (raw, json)
Hash identifier:          UfrXDrE7XPZI7NCeHgLLhpgD8DUf+Qu4el3MCLC8yYg=
Subject key identifier:   21:AF:96:A7:23:3D:C8:4D:F5:11:60:F2:71:75:15:FB:A4:48:12:6D
Authority key identifier: BA:06:60:49:D6:F6:1C:15:78:8B:2F:C5:F3:0C:89:37:70:48:CC:1E
Certificate issuer:       /CN=BA066049D6F61C15788B2FC5F30C89377048CC1E
Certificate serial:       722465067D5C3DE609B3649D5E008194167E97F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.mft
Manifest number:          056D
Signing time:             Wed 14 Oct 2026 15:10:00 +0000
Manifest this update:     Wed 14 Oct 2026 15:05:00 +0000
Manifest next update:     Thu 15 Oct 2026 15:10:00 +0000
Files and hashes:         1: 323830343a353465303a386230313a3a2f34382d3438203d3e20323638363735.roa (hash: arQ1SAmeTrwVXTw4vqHIwIwg88iP4k4qAw+0Pcz3YzY=)
                          2: 323830343a353465303a386130313a3a2f34382d3438203d3e20323638363735.roa (hash: JPkCk6648v0xhbSbtBIPbfa7Qyk12+QqcxIKcUjR6IU=)
                          3: BA066049D6F61C15788B2FC5F30C89377048CC1E.crl (hash: 6gkuq4+r6AE0hVvsCJ9Mhignm+rW7occCc4dNiTaLwM=)
                          4: 323830343a353465303a3a2f33322d3336203d3e20323638363735.roa (hash: 0JxL9/zEdcf7OUet1WrDOcI5v0ZM284F9ayvZ1DE/IQ=)
                          5: 34352e3136352e3130302e302f32322d3234203d3e20323638363735.roa (hash: wGeL97DxQsA7RFe8ZQBanF81wONvkFT7SJ1KdKZlIuU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.crl
                          rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 15:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:24:65:06:7d:5c:3d:e6:09:b3:64:9d:5e:00:81:94:16:7e:97:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA066049D6F61C15788B2FC5F30C89377048CC1E
        Validity
            Not Before: Oct 14 15:05:00 2026 GMT
            Not After : Oct 21 15:10:00 2026 GMT
        Subject: CN=3082010A0282010100DBA44641146C388AB3B90888F9757B1D47B4C4661D193C1DCAFEDFF40B8DF8243681D59A3AD47055E8E5ED7EC9E1B06375D3A1E03E8525D6B3C631461F2913569D0E748A671EB8AEA7B5A9A106E9CE21FF6F77C3F1D4E04DEB9ED63F5CB554657324F1FEBFC2E87F2F41D87A71AD3EB12A21140A74307EBB46905925B6C4767CFDDA3EA06C009E51A3E9E0659C6B75CF481D3B2E26072C197779091907E984808B5E9ADE398E556D82FB4AFA6A2038066263599FC3545F5444A99C8251B7A1C9C40C78A4D8F1ECF3950B53E8F9C7FAC2390E8171DB7DA14E7B7841606C47DD33C37189774E034F262B0012ECB574DD06F7EC63BBA8DCBF1B2C4F8F8F0BF51EFF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a4:46:41:14:6c:38:8a:b3:b9:08:88:f9:75:
                    7b:1d:47:b4:c4:66:1d:19:3c:1d:ca:fe:df:f4:0b:
                    8d:f8:24:36:81:d5:9a:3a:d4:70:55:e8:e5:ed:7e:
                    c9:e1:b0:63:75:d3:a1:e0:3e:85:25:d6:b3:c6:31:
                    46:1f:29:13:56:9d:0e:74:8a:67:1e:b8:ae:a7:b5:
                    a9:a1:06:e9:ce:21:ff:6f:77:c3:f1:d4:e0:4d:eb:
                    9e:d6:3f:5c:b5:54:65:73:24:f1:fe:bf:c2:e8:7f:
                    2f:41:d8:7a:71:ad:3e:b1:2a:21:14:0a:74:30:7e:
                    bb:46:90:59:25:b6:c4:76:7c:fd:da:3e:a0:6c:00:
                    9e:51:a3:e9:e0:65:9c:6b:75:cf:48:1d:3b:2e:26:
                    07:2c:19:77:79:09:19:07:e9:84:80:8b:5e:9a:de:
                    39:8e:55:6d:82:fb:4a:fa:6a:20:38:06:62:63:59:
                    9f:c3:54:5f:54:44:a9:9c:82:51:b7:a1:c9:c4:0c:
                    78:a4:d8:f1:ec:f3:95:0b:53:e8:f9:c7:fa:c2:39:
                    0e:81:71:db:7d:a1:4e:7b:78:41:60:6c:47:dd:33:
                    c3:71:89:77:4e:03:4f:26:2b:00:12:ec:b5:74:dd:
                    06:f7:ec:63:bb:a8:dc:bf:1b:2c:4f:8f:8f:0b:f5:
                    1e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:AF:96:A7:23:3D:C8:4D:F5:11:60:F2:71:75:15:FB:A4:48:12:6D
            X509v3 Authority Key Identifier:
                keyid:BA:06:60:49:D6:F6:1C:15:78:8B:2F:C5:F3:0C:89:37:70:48:CC:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:f6:8f:59:3e:0a:e3:56:87:2c:7a:14:0c:50:bb:d1:bd:9c:
         5a:86:c5:8b:9f:fc:13:aa:d9:50:2b:98:c3:ff:9b:2b:76:1a:
         93:ab:eb:4b:ab:82:df:df:37:65:ba:5c:b2:da:0d:36:39:9f:
         8f:83:9c:95:34:07:93:0e:ad:86:fd:5a:ff:e4:57:7a:a6:6d:
         86:7a:05:bd:9e:f4:c7:cc:ea:e6:fc:bf:34:bd:9d:4f:e4:df:
         2b:52:a4:15:b0:a9:65:76:42:63:87:bd:bc:6a:73:6a:81:71:
         b5:a6:03:dd:3b:dd:cd:91:06:e6:f0:60:fa:63:90:83:31:7a:
         ae:18:dc:85:90:99:ff:21:a7:36:8a:70:ce:66:40:db:34:46:
         e3:5b:de:e9:d1:47:ce:8e:4e:ad:9e:0f:a9:64:f2:36:03:da:
         d3:a6:41:c0:a3:b2:7c:4c:75:f0:eb:dc:ab:87:fb:11:23:d0:
         fe:70:97:18:2f:18:73:8b:39:96:9a:b3:32:75:14:eb:7d:4d:
         ac:5a:58:58:e1:6b:2e:34:00:82:cd:82:6c:49:7a:d6:9c:d8:
         a6:bb:05:85:75:f7:9a:2c:f3:c8:46:59:74:42:7d:0d:da:ad:
         5b:d8:b9:71:d3:33:66:d7:f6:21:a7:5e:72:50:33:ca:04:b8:
         0a:40:10:09
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Oct 15 04:08:10 2026 by rpki-client