Error: rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft
File:                     174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft (raw, json)
Hash identifier:          gbfcQpMXrhPxDaOjvrJJRwH8posTITK4TkN411gh0QU=
Subject key identifier:   A1:A1:0C:5D:84:88:E9:8D:7F:5C:A4:A8:A1:15:81:28:02:E4:97:FC
Authority key identifier: 17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F
Certificate issuer:       /CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
Certificate serial:       359A4A4708AEF64F46DA2D855D20D997D8D9E39D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft
Manifest number:          058A
Signing time:             Tue 03 Nov 2026 04:10:00 +0000
Manifest this update:     Tue 03 Nov 2026 04:05:00 +0000
Manifest next update:     Wed 04 Nov 2026 04:10:00 +0000
Files and hashes:         1: 323830343a3266303a3a2f33322d3438203d3e203533323336.roa (hash: iCIduF7QQxqfe9WWIhRxBn01qy2cguSACUQ3uZL6Mc8=)
                          2: 323830343a3266303a3a2f33362d3336203d3e203533323336.roa (hash: 3dqmsQ455F7+PLHfPLd4xMEWmmtAZVDOu1tTREdmocI=)
                          3: 3137302e3135302e3137382e302f32342d3234203d3e203533323336.roa (hash: 8QwnqTYTjUUgS1xL+woxvdVAENmonnunTBiufokGkJU=)
                          4: 3137372e31302e3132302e302f32342d3234203d3e203533323336.roa (hash: W7MyW5BNLKEnWFkA1hKjFcgyjbdZrNdWaU6UMrj1xv4=)
                          5: 323830343a3266303a3a2f33362d3430203d3e203533323336.roa (hash: qodRUUjyQ1+ZN0PIMUlPCk/YsUUEWk4hF5c8bWtD+wI=)
                          6: 3137302e3135302e3137372e302f32342d3234203d3e203533323336.roa (hash: czdeHRFj9PnL7M7qj/lZcM02APqAmhcftgFk8kE5N6k=)
                          7: 3137372e31302e3132322e302f32342d3234203d3e203533323336.roa (hash: bHYU/1PajYGiGdcu5dWklICaaI34xEmcjZzZA46Clts=)
                          8: 3137302e3135302e3137362e302f32322d3234203d3e203533323336.roa (hash: 6QmofSex9aoNls5mlIHexbHt288zIWjuxLSauzl6poQ=)
                          9: 3137302e38332e3230352e302f32342d3234203d3e203533323336.roa (hash: ee2WkWd1BrrceZO6ah3hXJx4UPI4wgPZEwJ67AtmYRc=)
                          10: 3137302e38332e3230342e302f32322d3234203d3e203533323336.roa (hash: TJ08uyZJ1GJOcamzsN53j3TnZ8PU/Pwvf3HfKQfVKWs=)
                          11: 323830343a3266303a3a2f33322d3332203d3e203533323336.roa (hash: WbTBKMVjWEpbtdR3lyQ0pqFtKYfBxq4W8pkK3f/7Hpo=)
                          12: 3137372e31302e3132332e302f32342d3234203d3e203533323336.roa (hash: jG4ghX4Wob+63mHmsuf6vFaIsEkhHavneIEx8UERwiA=)
                          13: 174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl (hash: KEU4QXh2+t54RSpef6dVSVdQ01Ma8UKUCzv/aMZ7kSI=)
                          14: 323830343a3266303a3a2f34302d3430203d3e203533323336.roa (hash: giyxt9aB2s+wNfulqN2/qJiaGo9qBVoy2eS8a1eNdGU=)
                          15: 3137302e38332e3230372e302f32342d3234203d3e203533323336.roa (hash: wjBmV7gf9CQ3fJ7sPDa1qUNImJ0f0gxnp5Qk8PlRLRQ=)
                          16: 3137372e31302e3132312e302f32342d3234203d3e203533323336.roa (hash: dBLhXH9IZ5/tc3dEU2ZVUL/E2zAiyBck/VQGwe4+ABQ=)
                          17: 3137302e3135302e3137392e302f32342d3234203d3e203533323336.roa (hash: dwOB4Q4rIK8d2TC1QMDSBZOvBUGhPHW2QH3dOvgw5xw=)
                          18: 3137372e31302e3132302e302f32322d3234203d3e203533323336.roa (hash: QfGZPys6gzQD0vqjumVY2poUp7smmBGChRcJ4Cv1/Fs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl
                          rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 04:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:9a:4a:47:08:ae:f6:4f:46:da:2d:85:5d:20:d9:97:d8:d9:e3:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
        Validity
            Not Before: Nov  3 04:05:00 2026 GMT
            Not After : Nov  4 04:10:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1e:a7:29:e2:35:ef:2e:75:85:0d:06:15:e8:
                    f6:d1:cb:59:6b:d2:eb:62:28:a9:1e:c2:b0:45:60:
                    f6:77:7e:e0:bf:66:02:30:ea:e9:37:af:f1:d7:3f:
                    73:6b:99:08:05:b0:09:d9:60:f5:8e:0e:85:d0:ad:
                    cf:74:de:c4:cc:2a:4a:d4:1b:e9:d2:15:29:1a:35:
                    45:af:19:97:ec:24:dd:9f:ff:4b:78:4d:72:71:f1:
                    bd:a2:dc:73:05:9b:59:1f:5a:43:08:f1:75:7b:15:
                    57:97:fd:11:4f:27:75:e5:f7:14:f0:4a:35:ee:e7:
                    53:3e:a6:b5:8f:bf:8a:51:86:9f:84:79:e8:eb:00:
                    b0:48:71:35:9f:d0:c1:02:8b:4c:9a:4e:b7:25:13:
                    44:9b:3f:e2:8f:3d:f7:a0:3b:10:c6:9e:c8:fd:a9:
                    e0:0f:10:03:80:da:cb:59:41:57:ff:89:3a:f1:1c:
                    58:b3:6d:45:74:74:11:64:07:56:2f:bf:9c:b1:7a:
                    98:f4:d7:2a:d8:e9:34:7a:15:a4:29:4c:42:f2:1a:
                    0b:59:8e:da:d6:90:e3:07:1a:82:a4:cc:63:79:75:
                    56:53:98:63:7f:c3:0c:ee:11:86:7e:2d:07:d1:ff:
                    38:19:eb:3d:dc:bb:91:6a:d5:ba:98:06:46:7b:db:
                    16:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A1:0C:5D:84:88:E9:8D:7F:5C:A4:A8:A1:15:81:28:02:E4:97:FC
            X509v3 Authority Key Identifier:
                keyid:17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:6d:35:89:53:db:c2:13:2d:94:2f:13:e1:88:20:6d:1e:67:
         f8:d0:ac:5d:60:22:4b:be:3a:ef:d0:52:9a:87:89:ba:00:ce:
         99:28:a2:f2:6c:4d:56:88:27:7e:d5:79:df:ac:f6:e7:3b:7a:
         ee:38:9c:eb:4f:94:1f:b4:b1:57:d9:5d:82:47:4a:96:58:ca:
         94:35:37:3b:61:18:12:37:39:de:7f:95:80:64:21:57:ae:3a:
         de:9d:55:ae:bb:c2:97:04:4f:58:a3:7b:2b:71:84:a2:94:3e:
         40:4a:d0:64:98:a6:7b:fc:3f:0c:1d:59:30:f9:08:a0:bb:0e:
         90:52:d9:31:a3:00:39:7e:e3:0d:47:38:8e:ed:45:34:d0:e8:
         e4:4d:6f:b3:b4:88:8d:b7:95:2e:27:36:a3:03:25:76:de:f9:
         a5:9d:43:b1:15:85:12:d6:53:c1:19:c1:da:df:22:6f:2f:7b:
         9e:bf:8f:03:a5:89:ac:08:86:1b:f8:ac:d2:44:ee:08:57:d6:
         a9:89:a2:92:52:ff:ac:da:01:f3:54:de:e1:2c:16:e5:af:f3:
         2f:8b:65:76:10:e6:91:83:37:2c:15:0f:02:86:db:a2:80:33:
         e2:7b:e9:52:68:74:96:3a:6a:d9:f5:77:9c:90:25:21:41:88:
         1c:a5:5b:ce
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 3 21:21:47 2026 by rpki-client