Error: rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.mft
File:                     4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.mft (raw, json)
Hash identifier:          CZbh9b29kPjaJl2i1Ms/dYcftrl7FfqvkRMrhYTZAc4=
Subject key identifier:   F6:25:5C:34:50:FE:7E:01:C5:BB:08:E0:CA:6A:6B:96:4E:8D:46:06
Authority key identifier: 4B:3F:BC:1F:37:21:B6:D1:1E:11:B1:D8:79:FC:6A:C8:99:4D:7D:DD
Certificate issuer:       /CN=4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD
Certificate serial:       5F186D05B757D0F61F62CFCDF2DF7BB0FB2D2B2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.mft
Manifest number:          0280
Signing time:             Wed 14 Oct 2026 05:23:21 +0000
Manifest this update:     Wed 14 Oct 2026 05:18:21 +0000
Manifest next update:     Thu 15 Oct 2026 09:18:21 +0000
Files and hashes:         1: 3138372e38372e32382e302f32322d3234203d3e203631363130.roa (hash: ZK94GCJeDueUtLX2HGlkBARJezl5um7V/VRRTMCjtxs=)
                          2: 3230302e3232352e34382e302f32312d3231203d3e203631363130.roa (hash: BDByrLzTnWdKH66ft4GYs1p0O6zDU2ZSnyP1zi+H6o0=)
                          3: 3230302e3232352e34382e302f32312d3234203d3e203631363130.roa (hash: 49HXvbcey1ft5bTAbb2mm1Ivl/ApvZVY5rl5p+M4brE=)
                          4: 4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.crl (hash: LS+mvOU7Nw2zmsnCOxmvXjzb9gZ5LuL8IcIzDqNkPXw=)
                          5: 323830343a386165303a3a2f33322d3335203d3e203631363130.roa (hash: Lq/M7HyDrQmzxkTrgCJloswHG80yJe4W8wxfKyuxsX0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.crl
                          rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 09:18:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:18:6d:05:b7:57:d0:f6:1f:62:cf:cd:f2:df:7b:b0:fb:2d:2b:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD
        Validity
            Not Before: Oct 14 05:18:21 2026 GMT
            Not After : Oct 15 09:18:21 2026 GMT
        Subject: CN=F6255C3450FE7E01C5BB08E0CA6A6B964E8D4606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fb:00:45:72:0b:0b:ac:1e:c9:f2:45:c5:6d:
                    ec:88:5e:ae:f5:9c:55:fa:e1:d1:2e:11:f6:94:b3:
                    d2:0e:91:57:4f:81:48:cd:de:c4:2c:de:55:b5:ba:
                    fb:3a:02:be:38:46:6b:9b:82:a6:83:fc:27:43:83:
                    45:6b:1a:46:f9:2d:8d:b7:31:58:f2:28:91:30:d7:
                    0a:d3:18:b1:d9:45:ec:e6:2b:88:96:e7:56:fa:79:
                    68:f8:b7:52:af:00:d1:da:ff:26:74:8c:d8:6f:5c:
                    0c:be:ba:e3:73:33:2a:87:13:cc:7d:4b:60:1f:0c:
                    11:d7:1c:32:b8:1d:61:34:1f:69:ea:e1:bd:b0:aa:
                    77:39:44:da:f4:f9:68:09:c5:27:31:c3:6a:13:da:
                    ea:4f:cd:b2:8e:a0:f2:61:60:37:98:b6:ca:60:d7:
                    c9:08:76:a0:dc:2e:e2:e5:9b:a4:25:65:2a:b3:c1:
                    2e:39:d0:5f:cc:5e:a2:78:c6:61:f9:10:5e:8d:ab:
                    44:d0:93:11:90:4d:6b:34:94:4a:5d:0b:ba:a1:26:
                    b8:72:e3:67:d9:64:24:55:89:d5:ae:25:a4:d9:82:
                    dc:f9:31:14:47:a0:93:a9:f1:00:0a:da:3c:1f:14:
                    80:75:80:73:73:7e:ad:5b:60:f5:ce:de:d2:bc:59:
                    95:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:25:5C:34:50:FE:7E:01:C5:BB:08:E0:CA:6A:6B:96:4E:8D:46:06
            X509v3 Authority Key Identifier:
                keyid:4B:3F:BC:1F:37:21:B6:D1:1E:11:B1:D8:79:FC:6A:C8:99:4D:7D:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:37:5a:4f:96:d7:7f:76:56:21:8b:38:5d:68:c3:6e:10:74:
         21:2b:44:2d:62:93:42:da:76:b2:7d:65:f4:27:67:97:1f:ba:
         1b:61:a8:b9:a5:d9:e6:49:4d:2c:ca:83:f6:3a:e2:30:36:ed:
         9d:1c:4d:a0:78:a2:66:bd:a0:65:99:95:5a:3b:5a:75:21:69:
         13:53:0a:8f:b5:c9:a9:b3:d9:61:29:4c:44:00:2d:93:8d:6e:
         35:12:c7:19:cd:1e:dd:fd:91:5b:2d:17:d4:36:6b:de:74:28:
         59:a5:d6:b6:83:51:5d:ef:df:1a:c9:b3:b6:1a:5d:fe:07:86:
         9d:10:fe:0b:99:2e:10:a2:ed:31:01:71:c3:3c:6d:6d:b4:9a:
         00:61:31:89:ce:17:b3:7f:1a:8e:d2:36:72:16:e4:5b:1d:34:
         c4:51:64:b3:20:e4:d8:42:a5:c8:5e:e9:7d:07:e7:db:94:05:
         50:18:37:8f:0d:70:58:d0:aa:c2:fb:d0:32:a5:9e:39:50:55:
         39:20:87:2f:b4:fb:aa:69:59:77:77:7f:64:ad:01:5a:51:22:
         a6:6d:71:35:21:b9:c9:ed:a4:7b:c0:0e:ee:49:53:4c:ee:bb:
         34:02:5d:eb:51:ee:d2:82:46:17:f2:08:7b:d2:39:46:88:4e:
         03:d2:07:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:27:16 2026 by rpki-client