Error: rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.mft
File:                     ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.mft (raw, json)
Hash identifier:          qvjOWzhIU8iuYEpikNW1allRAF2tqViyJ6DX6DbhwME=
Subject key identifier:   78:A3:DA:A7:76:7C:65:89:0D:3A:01:DB:81:6B:5F:8F:23:46:31:29
Authority key identifier: AD:D1:8D:4B:9D:4E:B5:B8:E5:52:0C:0E:00:32:C2:2E:DB:05:F4:11
Certificate issuer:       /CN=ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411
Certificate serial:       4E90887EB14EEC1D658EA9E67C4731BFCB8225F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.mft
Manifest number:          04D2
Signing time:             Sat 17 Oct 2026 05:23:04 +0000
Manifest this update:     Sat 17 Oct 2026 05:18:04 +0000
Manifest next update:     Sun 18 Oct 2026 06:41:04 +0000
Files and hashes:         1: 323830343a343936633a3a2f33322d3438203d3e20323637313833.roa (hash: kevyB7jY+PN1TCkpj0asr6YBwDrRTPOwCbgfcYWuOEY=)
                          2: ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.crl (hash: eeZfIhsX+fwEAVPwCUIW5pt1pOYH5SiujrQyKg7MIGM=)
                          3: 34352e3233312e32302e302f32322d3234203d3e20323637313833.roa (hash: GLexGPRhkdBlNHjUGZYzbUF/kmashIXlWNVS+yboaa8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.crl
                          rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 06:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:90:88:7e:b1:4e:ec:1d:65:8e:a9:e6:7c:47:31:bf:cb:82:25:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411
        Validity
            Not Before: Oct 17 05:18:04 2026 GMT
            Not After : Oct 18 06:41:04 2026 GMT
        Subject: CN=78A3DAA7767C65890D3A01DB816B5F8F23463129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:08:06:32:c1:9a:44:e7:fa:0a:85:7a:04:78:
                    28:29:72:66:d7:6b:d0:ad:55:d0:e5:95:da:4b:b3:
                    a9:73:d0:92:f2:dd:53:6a:9b:f8:6a:2a:04:25:fa:
                    44:be:16:3b:6a:ac:2e:a0:a5:3f:1e:c6:4b:e4:ea:
                    2d:6e:eb:9e:1f:77:d4:99:94:24:25:12:00:a9:76:
                    61:13:01:09:66:23:c7:5b:af:d3:ab:b2:c6:37:e6:
                    57:33:15:10:b7:90:6c:3c:1b:5a:ef:b2:67:d8:37:
                    6b:71:c2:15:33:89:17:43:de:b3:47:ba:3c:1d:cc:
                    36:6f:eb:ae:8d:9f:01:b7:39:a8:5a:b0:01:e7:e2:
                    94:9a:8b:36:ac:e6:24:37:74:28:02:2a:03:17:65:
                    67:7a:13:5b:b9:31:33:22:94:6e:2c:ea:91:a4:84:
                    2f:a1:53:9f:97:02:33:eb:ea:4b:3f:f9:37:75:cf:
                    0b:1e:6f:b7:42:bd:13:f7:b0:ca:ae:57:d5:f5:62:
                    8d:6c:0c:ff:43:6e:0e:24:07:da:97:82:82:9b:f3:
                    cc:81:b1:a0:23:af:fd:b6:7b:fd:86:64:ff:55:25:
                    47:2d:84:65:55:0b:4e:c9:bc:25:f6:39:81:fe:95:
                    63:a8:76:0d:68:4e:87:3d:88:71:a2:50:8e:b4:af:
                    e5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A3:DA:A7:76:7C:65:89:0D:3A:01:DB:81:6B:5F:8F:23:46:31:29
            X509v3 Authority Key Identifier:
                keyid:AD:D1:8D:4B:9D:4E:B5:B8:E5:52:0C:0E:00:32:C2:2E:DB:05:F4:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:33:ac:a1:46:2d:d8:22:d1:a7:ca:65:94:68:d5:e1:67:ce:
         f6:e8:93:31:1d:ee:62:95:14:e6:61:31:4c:15:f2:75:fa:2a:
         95:42:6c:f8:9b:b7:0b:2b:e6:26:72:d6:3c:8c:bb:a3:7c:3c:
         2c:a6:c2:a8:7f:ea:17:99:79:da:3e:dc:36:5a:b5:10:d9:f3:
         75:ef:ea:05:08:69:1a:68:77:83:dc:34:10:85:07:15:70:3d:
         7f:5c:ea:16:d4:4c:dc:5c:b4:c8:b2:9d:5e:08:22:50:b2:e3:
         83:15:3e:9c:b4:5c:37:5c:32:cb:c9:da:65:68:bd:e6:09:be:
         d1:f1:64:8b:5c:e3:f6:76:ee:9b:d7:94:fb:fa:72:38:85:26:
         e2:3b:5f:02:e4:bb:75:b1:9b:98:e2:61:90:22:69:62:11:ea:
         61:14:97:fd:a9:4c:60:fe:c5:4c:0c:6c:9b:3e:ae:a6:3c:35:
         6b:db:ec:84:a1:88:bf:86:0f:d2:ab:f6:68:b1:f9:02:77:72:
         1a:f4:c7:51:c8:4d:68:bc:0a:78:25:34:f6:fa:4c:e1:1e:da:
         71:07:91:03:79:ad:9c:ca:ab:30:52:72:98:f0:dd:71:35:d1:
         bd:6f:34:9a:5d:e5:c0:3e:66:dc:96:06:99:c7:ad:a8:2b:40:
         d7:dd:81:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 02:42:00 2026 by rpki-client