Error: rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/1/4273B563259728F1EFD6BB3011E0F26828FB113D.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/1/4273B563259728F1EFD6BB3011E0F26828FB113D.mft
File:                     4273B563259728F1EFD6BB3011E0F26828FB113D.mft (raw, json)
Hash identifier:          Z5wfyNhZmDz4IPc6PpaS61489McrT7k195Zt3bakm18=
Subject key identifier:   A8:4E:E7:86:BD:81:18:DF:7B:99:10:F4:D3:FF:35:38:BF:3C:AB:0F
Authority key identifier: 42:73:B5:63:25:97:28:F1:EF:D6:BB:30:11:E0:F2:68:28:FB:11:3D
Certificate issuer:       /CN=4273B563259728F1EFD6BB3011E0F26828FB113D
Certificate serial:       2AAF7FC0555939E90FDABD0694AECB50D0BF5FA2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4273B563259728F1EFD6BB3011E0F26828FB113D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/1/4273B563259728F1EFD6BB3011E0F26828FB113D.mft
Manifest number:          056B
Signing time:             Mon 12 Oct 2026 14:00:00 +0000
Manifest this update:     Mon 12 Oct 2026 13:55:00 +0000
Manifest next update:     Tue 13 Oct 2026 14:00:00 +0000
Files and hashes:         1: 323830343a343938633a3a2f33322d3335203d3e20323637313930.roa (hash: AgrA3Ni5baNVHFwTL1tXJ6G715CiJgHh3Tpnxrl2ACQ=)
                          2: 34352e3233312e39322e302f32322d3234203d3e20323637313930.roa (hash: v91tPCzoUsfGE/DGWzuL53FfSaVv01NfGQMNf6NsRMM=)
                          3: 4273B563259728F1EFD6BB3011E0F26828FB113D.crl (hash: XEJ+i7I/dm3y3eLYuncs7t/jt16jhT8hNA74sl8B56M=)
                          4: 34352e3233312e39322e302f32322d3234203d3e20313938393439.roa (hash: +T6qH57SM5Z/wq/3+vDDBD9BRyGBZ8ggxgNHgA9JaeE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/1/4273B563259728F1EFD6BB3011E0F26828FB113D.crl
                          rsync://rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/1/4273B563259728F1EFD6BB3011E0F26828FB113D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4273B563259728F1EFD6BB3011E0F26828FB113D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:af:7f:c0:55:59:39:e9:0f:da:bd:06:94:ae:cb:50:d0:bf:5f:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4273B563259728F1EFD6BB3011E0F26828FB113D
        Validity
            Not Before: Oct 12 13:55:00 2026 GMT
            Not After : Oct 13 14:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d7:11:88:b3:bd:6e:2f:d5:98:6c:02:c7:6f:
                    3d:62:57:be:c6:e1:b6:9f:6a:fa:d2:14:59:81:70:
                    6d:79:94:91:04:c8:15:b3:06:11:1d:99:6b:66:2d:
                    4d:12:cc:e4:fb:76:4d:00:f4:46:74:1a:37:00:b8:
                    03:fb:71:0b:1f:04:9e:35:04:b1:50:9c:3b:37:1c:
                    05:e3:0d:96:60:f3:ea:87:b4:77:59:90:95:40:3a:
                    17:16:5c:b8:89:6c:77:58:71:25:5a:df:e0:36:ff:
                    03:29:c6:1f:a8:d5:15:04:aa:c5:88:4c:69:e4:de:
                    4d:f7:dc:78:bf:82:a7:ba:b6:25:c5:d8:b1:e6:ab:
                    df:75:94:a6:be:57:ed:b7:6c:2c:81:78:2b:7e:f3:
                    f2:c5:a8:3c:5b:31:8b:89:c7:15:6b:a4:c5:ac:61:
                    fe:07:08:8e:82:89:1e:a0:df:35:67:3e:fa:73:88:
                    ab:86:f9:8c:ec:da:ee:ed:7d:f0:79:f2:a7:04:4d:
                    9c:07:98:21:97:84:f2:b3:75:42:b6:0c:86:ff:ab:
                    79:e2:58:a3:d2:15:38:94:46:97:3a:81:5d:db:ad:
                    a0:e0:4c:51:f5:f9:65:ba:3a:52:a6:fa:20:2e:5e:
                    2d:31:62:09:52:d2:cd:13:30:b0:c0:5b:34:66:8d:
                    0d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4E:E7:86:BD:81:18:DF:7B:99:10:F4:D3:FF:35:38:BF:3C:AB:0F
            X509v3 Authority Key Identifier:
                keyid:42:73:B5:63:25:97:28:F1:EF:D6:BB:30:11:E0:F2:68:28:FB:11:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/1/4273B563259728F1EFD6BB3011E0F26828FB113D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4273B563259728F1EFD6BB3011E0F26828FB113D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/1/4273B563259728F1EFD6BB3011E0F26828FB113D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:26:ea:1e:de:22:af:8b:80:a9:dc:ae:a7:e9:ec:dd:55:99:
         2a:8a:0e:a4:45:16:ed:3d:64:3b:46:27:ec:36:6d:13:41:2d:
         56:43:97:de:29:52:61:59:25:de:27:86:8f:b1:cd:9e:13:3d:
         01:bf:cb:c8:59:30:05:83:62:74:9f:52:e3:aa:2d:d6:84:39:
         7d:6b:1f:44:d6:1c:9d:ae:90:b8:a5:cc:7f:23:c0:eb:28:e5:
         4d:96:80:08:b8:7d:e0:f1:bc:0a:90:d5:cd:93:01:1c:4d:f3:
         7b:a2:6c:67:a0:ed:90:46:5d:96:54:fa:50:17:ed:87:d5:58:
         21:da:d3:5f:f0:cf:0c:c3:d1:ac:3a:2d:f5:7d:df:08:e7:da:
         37:d0:54:11:7a:fe:03:92:23:8a:73:e1:dd:8e:64:ab:af:ac:
         f5:26:1b:3c:2a:dc:fa:55:81:4f:79:d8:a2:06:66:a1:23:c3:
         52:e9:bb:da:48:8f:15:d9:e4:a1:c7:08:a1:ca:3d:79:5b:ef:
         83:05:ed:7c:96:e3:66:6c:16:cb:d6:cd:34:e2:92:34:e3:b4:
         c1:90:e4:39:9b:de:d9:ec:59:89:d7:38:52:5a:83:7c:15:7a:
         4f:50:4f:ed:55:67:c9:e8:e2:a5:c8:20:b5:a2:6d:9f:83:1e:
         be:0e:8d:51
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 13 07:32:24 2026 by rpki-client