Error: rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/1/4474057A30776C0D117A5958EDE5DB8636FA5342.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/1/4474057A30776C0D117A5958EDE5DB8636FA5342.mft
File:                     4474057A30776C0D117A5958EDE5DB8636FA5342.mft (raw, json)
Hash identifier:          ZQummL/rZipKEPnHONhr346A7VtXeYW2kf0i7Lu4RG4=
Subject key identifier:   87:73:C3:19:29:BF:A1:47:A5:54:02:3C:A4:68:02:44:E3:29:E8:DA
Authority key identifier: 44:74:05:7A:30:77:6C:0D:11:7A:59:58:ED:E5:DB:86:36:FA:53:42
Certificate issuer:       /CN=4474057A30776C0D117A5958EDE5DB8636FA5342
Certificate serial:       02CF5FAAABC160A82164D8748AC57C873E83D668
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4474057A30776C0D117A5958EDE5DB8636FA5342.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/1/4474057A30776C0D117A5958EDE5DB8636FA5342.mft
Manifest number:          04D1
Signing time:             Wed 14 Oct 2026 23:02:14 +0000
Manifest this update:     Wed 14 Oct 2026 22:57:14 +0000
Manifest next update:     Fri 16 Oct 2026 01:45:14 +0000
Files and hashes:         1: 3137372e33392e3230382e302f32312d3234203d3e20323632343333.roa (hash: TlgVKtI4Em8CkGKODmP8qZy0HTU2b4hW3PEnICyZgtw=)
                          2: 4474057A30776C0D117A5958EDE5DB8636FA5342.crl (hash: +uj8WlWydBMMVBOk7uQVCKsq+ufBl49IA0wGibMrPcs=)
                          3: 323830343a323036343a3a2f33322d3438203d3e20323632343333.roa (hash: jUuxCui9gcivkV4zi+gAkJ2TIZj3lrFF+Wmv+A73RR8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/1/4474057A30776C0D117A5958EDE5DB8636FA5342.crl
                          rsync://rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/1/4474057A30776C0D117A5958EDE5DB8636FA5342.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4474057A30776C0D117A5958EDE5DB8636FA5342.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 01:45:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:cf:5f:aa:ab:c1:60:a8:21:64:d8:74:8a:c5:7c:87:3e:83:d6:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4474057A30776C0D117A5958EDE5DB8636FA5342
        Validity
            Not Before: Oct 14 22:57:14 2026 GMT
            Not After : Oct 16 01:45:14 2026 GMT
        Subject: CN=8773C31929BFA147A554023CA4680244E329E8DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:71:3b:1b:16:f4:91:ae:71:62:ba:15:a7:ff:
                    ed:7c:5c:5d:12:5a:95:4a:58:26:fc:ca:aa:1b:19:
                    eb:92:8c:70:fe:5e:fd:00:85:be:4e:7e:d7:f6:c6:
                    c3:78:5d:a9:8b:83:96:ac:c4:b4:d7:32:ef:22:84:
                    24:32:2a:b2:e9:df:f4:1e:e8:0a:cf:67:9a:83:24:
                    89:c0:e3:db:19:9b:45:fd:8a:8b:65:ee:aa:73:82:
                    7f:76:cd:cf:4c:89:31:31:86:25:0b:06:26:c0:ed:
                    54:b2:6f:82:43:66:2f:da:84:2c:8a:33:c2:b7:d1:
                    90:df:de:88:97:d6:ac:a1:7c:a5:a0:c6:e8:07:19:
                    6f:09:1e:32:32:69:b0:7a:93:46:2e:84:77:de:b2:
                    15:e1:a2:dd:54:96:8e:4d:e5:dc:e1:36:31:3c:88:
                    cd:91:cc:28:d5:59:5e:ec:d6:56:72:bb:83:d3:96:
                    1c:43:98:65:2e:87:8e:42:b9:ec:78:27:cc:09:93:
                    56:c8:70:50:2b:5f:7a:a1:bb:36:81:6d:2f:45:64:
                    12:d4:bd:de:30:4e:09:34:98:11:65:8d:82:0e:b5:
                    e4:1e:e8:0c:00:98:6c:98:cc:fb:a4:cc:eb:9b:5f:
                    cd:60:66:1f:f7:8f:5d:a5:f8:28:ff:ec:94:ed:e6:
                    d5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:73:C3:19:29:BF:A1:47:A5:54:02:3C:A4:68:02:44:E3:29:E8:DA
            X509v3 Authority Key Identifier:
                keyid:44:74:05:7A:30:77:6C:0D:11:7A:59:58:ED:E5:DB:86:36:FA:53:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/1/4474057A30776C0D117A5958EDE5DB8636FA5342.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4474057A30776C0D117A5958EDE5DB8636FA5342.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/1/4474057A30776C0D117A5958EDE5DB8636FA5342.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:0c:d8:69:60:2a:42:0a:00:08:7f:6f:da:53:c3:f5:17:25:
         de:69:cb:f8:48:e2:ea:40:fd:e2:b5:46:4f:33:6b:5c:b8:d0:
         8e:d2:3f:b7:16:bf:63:26:92:e2:d0:73:b5:91:a5:ef:af:be:
         06:5a:6c:34:f7:60:9f:5a:16:52:64:4f:79:a7:4a:6d:1a:66:
         dc:16:69:37:95:56:b3:80:83:29:79:2f:38:9e:bc:b3:fd:f2:
         c3:da:ce:72:ea:43:66:3f:bf:de:35:07:be:c4:4c:4a:14:2c:
         f9:91:87:46:6d:58:49:50:c5:48:fe:e9:b9:f7:14:6d:59:d2:
         91:28:95:3f:ff:40:04:87:fb:75:0c:66:7f:ae:0d:76:dc:dd:
         b7:e0:13:3b:2b:75:9e:51:34:15:92:b8:2f:08:26:24:f9:00:
         b2:27:71:d1:7e:bb:e1:fa:4a:96:fd:b6:dc:e9:07:f6:de:ce:
         23:d5:63:d1:f6:00:b8:55:26:b4:26:2b:6a:b3:02:d0:0d:07:
         cd:db:74:ea:d2:fe:63:22:2a:9f:3f:2d:18:eb:1d:08:a8:29:
         fb:42:66:3d:67:c4:84:5a:27:95:66:ff:76:f3:0d:85:f6:46:
         94:06:29:11:e5:4b:cb:90:11:0b:0b:45:2d:87:28:a0:7b:ac:
         e9:fb:a7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:09:08 2026 by rpki-client