Error: rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.mft
File:                     1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.mft (raw, json)
Hash identifier:          t5wOLw5fbvK5ss202uHsui62cD0AKJEqrdLtOXvtX+0=
Subject key identifier:   7C:F5:7E:F0:90:A5:9A:6A:94:85:CD:A9:FC:B5:D9:00:61:1F:8C:D9
Authority key identifier: 1B:8D:A4:5C:39:C0:DF:6F:B7:4B:06:F0:F8:09:8A:C6:91:68:64:DB
Certificate issuer:       /CN=1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB
Certificate serial:       52BC1A931FE198CEFC8252484BE7073F49154BE2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.mft
Manifest number:          04D0
Signing time:             Sun 11 Oct 2026 08:07:31 +0000
Manifest this update:     Sun 11 Oct 2026 08:02:31 +0000
Manifest next update:     Mon 12 Oct 2026 11:57:31 +0000
Files and hashes:         1: 3137372e3232332e3132382e302f32322d3234203d3e20323731303030.roa (hash: 8OS7uuXS1Ib6w7NymYc+smoWk9lCVl91GePs/EyW/6c=)
                          2: 323830343a373462633a3a2f33322d3332203d3e20323731303030.roa (hash: JPj5bp3GSQ1Pdx4dEb6Z9JcF5JJVL7Z/lAfwZTtp78Q=)
                          3: 323830343a373462633a3a2f33332d3333203d3e20323731303030.roa (hash: q0wR+Q2fRmj5Ry2tUqDaoeAUS0DsDC6Hanqo2HvQLOQ=)
                          4: 323830343a373462633a383030303a3a2f33332d3333203d3e20323731303030.roa (hash: KPh1DWjvfTKxyjDd66vw83fekeEGbI16UMHM6YxwImk=)
                          5: 1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.crl (hash: TPE4dW0di1YPd0EnEjucVYa+wz2nlSZIRWUO0b7SK8M=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.crl
                          rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 09:47:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:bc:1a:93:1f:e1:98:ce:fc:82:52:48:4b:e7:07:3f:49:15:4b:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB
        Validity
            Not Before: Oct 11 08:02:31 2026 GMT
            Not After : Oct 12 11:57:31 2026 GMT
        Subject: CN=7CF57EF090A59A6A9485CDA9FCB5D900611F8CD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:31:38:d7:02:0c:d6:d7:40:81:08:ad:39:93:
                    b4:82:50:ac:14:22:23:cd:3f:1c:e1:fe:b7:f4:0c:
                    81:41:6b:f2:8e:ef:40:26:6d:72:6f:1c:34:40:ac:
                    de:2e:5d:56:c4:cd:c6:18:0d:d3:ee:84:ae:3a:80:
                    82:2d:88:f6:02:5d:3f:3c:2a:45:1b:51:f7:c6:ae:
                    6a:e5:b4:e1:00:28:c9:e1:45:ed:46:5f:38:c1:ed:
                    22:0a:2b:8e:bb:0f:d1:ec:9a:d6:c5:88:dc:6d:69:
                    4e:81:81:c9:b0:1b:89:cf:ff:4e:61:03:9e:f8:23:
                    5d:91:bb:20:42:c9:17:3a:aa:6b:57:aa:a8:91:7b:
                    06:14:9d:7a:13:8b:f5:0c:30:f8:a7:c6:96:e6:73:
                    29:4e:9e:1b:e5:84:f7:6f:a5:46:17:1a:d1:1a:ae:
                    9d:78:4b:3a:eb:16:93:3e:08:7a:e6:89:9b:fe:d9:
                    ce:a0:b2:86:bb:a0:26:84:49:38:bf:c3:54:f2:25:
                    c5:a8:23:7b:99:8e:6c:99:e3:c3:27:de:1d:3d:5d:
                    5a:cb:b3:c8:23:25:01:29:c0:ef:d9:ec:35:a4:d1:
                    81:af:cf:88:3a:77:cc:8a:a8:c3:0f:d9:3f:34:7b:
                    70:aa:88:9d:1b:76:6e:60:04:61:5f:9b:ef:27:32:
                    a2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F5:7E:F0:90:A5:9A:6A:94:85:CD:A9:FC:B5:D9:00:61:1F:8C:D9
            X509v3 Authority Key Identifier:
                keyid:1B:8D:A4:5C:39:C0:DF:6F:B7:4B:06:F0:F8:09:8A:C6:91:68:64:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:d2:11:eb:70:cc:4c:5d:c7:b1:39:48:d4:b8:4d:f1:cc:39:
         a2:a3:00:14:c9:ac:19:3c:01:ad:18:3a:8f:e6:26:f1:b8:0e:
         66:ef:55:0e:7a:96:10:2a:3b:78:b2:9e:5d:eb:e4:ec:29:5b:
         81:75:01:ec:0f:ec:3b:a3:17:e6:b4:f7:7b:c9:4a:49:69:15:
         2c:94:1a:39:e1:b6:8d:5f:01:02:97:c4:64:cb:1d:e6:4e:7c:
         a0:52:f9:16:f1:8e:9b:b4:12:20:e3:9f:85:d0:db:4f:0a:41:
         b4:e6:22:09:d7:46:4b:1b:5c:56:cf:58:4d:69:aa:3f:be:15:
         6b:dd:89:09:06:a5:21:f4:6f:66:11:2c:b6:59:e6:20:c2:cf:
         44:2b:8c:b9:c1:ca:c0:69:58:dc:b0:3c:7e:11:32:0c:fd:92:
         ce:c5:88:6c:0d:b1:99:59:a8:af:fb:20:00:99:f1:ed:7f:7e:
         d8:d0:81:3e:16:e7:a4:ef:18:9d:03:04:56:4c:1a:da:a3:81:
         c1:54:a9:f4:06:14:5c:10:74:95:41:66:fd:bc:64:77:88:11:
         d9:53:7f:a9:05:1c:c1:2a:38:07:3b:82:75:05:eb:da:8a:a6:
         0e:6f:26:d9:52:1d:7b:4d:f6:58:67:29:d6:f0:4c:75:61:d5:
         4d:12:1b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:07:36 2026 by rpki-client