Error: rpki-repo.registro.br/repo/EYDn7i8ocbgF4HRNnrsYeeB8H9gEfoaYYwWfQMbtJSSy/0/5FBCB1EF158A0F369859F4CE22712203039C8002.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/EYDn7i8ocbgF4HRNnrsYeeB8H9gEfoaYYwWfQMbtJSSy/0/5FBCB1EF158A0F369859F4CE22712203039C8002.mft
File:                     5FBCB1EF158A0F369859F4CE22712203039C8002.mft (raw, json)
Hash identifier:          aBdpg7roiPZkNiEwQbuQW+YUTxyxng/z5RjCa4ugDgk=
Subject key identifier:   F6:9E:0F:D7:9E:94:31:14:C5:2A:50:77:06:A7:1E:65:DD:56:58:E3
Authority key identifier: 5F:BC:B1:EF:15:8A:0F:36:98:59:F4:CE:22:71:22:03:03:9C:80:02
Certificate issuer:       /CN=5FBCB1EF158A0F369859F4CE22712203039C8002
Certificate serial:       727DB80A1DC5BC33C266B437C71C15539A564F72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FBCB1EF158A0F369859F4CE22712203039C8002.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYDn7i8ocbgF4HRNnrsYeeB8H9gEfoaYYwWfQMbtJSSy/0/5FBCB1EF158A0F369859F4CE22712203039C8002.mft
Manifest number:          0463
Signing time:             Thu 15 Oct 2026 10:00:35 +0000
Manifest this update:     Thu 15 Oct 2026 09:55:35 +0000
Manifest next update:     Fri 16 Oct 2026 12:39:35 +0000
Files and hashes:         1: 323830343a326163303a3a2f33322d3438203d3e20323634303932.roa (hash: RTPnXJRbX0AW/MfP8doTT1aeb7JijKfyGvTv3hfTkX8=)
                          2: 3134332e3230382e3134382e302f32322d3234203d3e20323634303932.roa (hash: kSX6YU7UnrMUBUbZWVy3eS+LdLrfz4nY3Gxdb9aCXlQ=)
                          3: 5FBCB1EF158A0F369859F4CE22712203039C8002.crl (hash: Dh/w7x6+n2yNnUq6iNZGXJ87y1QPyzuZ8Av4BLzX2M4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYDn7i8ocbgF4HRNnrsYeeB8H9gEfoaYYwWfQMbtJSSy/0/5FBCB1EF158A0F369859F4CE22712203039C8002.crl
                          rsync://rpki-repo.registro.br/repo/EYDn7i8ocbgF4HRNnrsYeeB8H9gEfoaYYwWfQMbtJSSy/0/5FBCB1EF158A0F369859F4CE22712203039C8002.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FBCB1EF158A0F369859F4CE22712203039C8002.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 12:39:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:7d:b8:0a:1d:c5:bc:33:c2:66:b4:37:c7:1c:15:53:9a:56:4f:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FBCB1EF158A0F369859F4CE22712203039C8002
        Validity
            Not Before: Oct 15 09:55:35 2026 GMT
            Not After : Oct 16 12:39:35 2026 GMT
        Subject: CN=F69E0FD79E943114C52A507706A71E65DD5658E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:80:e2:25:e4:30:1c:9d:7f:88:2d:df:51:e7:
                    35:fb:ee:07:ce:ed:9e:de:d7:d7:32:a1:84:c6:45:
                    0d:83:cc:ac:1c:0a:a3:d9:f2:b8:04:1b:68:41:5c:
                    a9:b6:dc:62:8a:75:bf:f6:42:0b:16:59:1a:ad:23:
                    4c:f3:86:2b:84:6e:6c:7f:16:d5:a7:ea:8d:68:21:
                    f3:42:5e:26:57:82:21:99:9c:fd:61:90:87:5a:8d:
                    c1:77:0a:91:42:57:fa:f0:0c:7f:6b:87:49:71:cf:
                    d3:3b:41:ed:e1:5c:7c:57:62:6f:f0:4a:3c:e7:f6:
                    5a:a3:c2:50:8f:a9:e1:aa:57:3f:78:89:8e:21:86:
                    4b:73:35:a5:87:b0:4a:d3:dd:a4:77:b7:cf:27:75:
                    72:ca:b3:d7:2f:6c:5a:e7:7b:4d:41:1c:31:ad:8d:
                    a1:09:a9:71:52:f9:9c:9d:b2:21:a6:05:17:e2:aa:
                    1a:53:de:a7:c1:56:33:79:f9:59:8b:81:2b:22:ea:
                    ca:a8:74:15:c4:81:18:b6:29:ef:ad:95:6c:da:a2:
                    cc:df:43:15:6c:4b:54:8e:5e:ff:f2:d7:38:60:45:
                    a4:4e:c9:bc:44:62:44:33:c7:56:80:3e:c9:b0:00:
                    4e:55:3d:f6:1d:11:cd:f8:96:04:70:d3:86:48:56:
                    71:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:9E:0F:D7:9E:94:31:14:C5:2A:50:77:06:A7:1E:65:DD:56:58:E3
            X509v3 Authority Key Identifier:
                keyid:5F:BC:B1:EF:15:8A:0F:36:98:59:F4:CE:22:71:22:03:03:9C:80:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYDn7i8ocbgF4HRNnrsYeeB8H9gEfoaYYwWfQMbtJSSy/0/5FBCB1EF158A0F369859F4CE22712203039C8002.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FBCB1EF158A0F369859F4CE22712203039C8002.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYDn7i8ocbgF4HRNnrsYeeB8H9gEfoaYYwWfQMbtJSSy/0/5FBCB1EF158A0F369859F4CE22712203039C8002.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:0c:39:6c:5e:2b:b4:f1:70:de:6b:8a:45:f8:67:06:fc:3a:
         9d:46:21:95:2a:31:1f:f6:67:6a:28:a0:08:55:ca:dc:6b:98:
         36:f5:14:00:a4:2c:71:84:47:2e:ab:65:db:fb:6a:7c:cd:bf:
         c5:89:43:42:17:52:b6:94:bd:a7:66:58:39:05:de:45:1a:a3:
         f3:aa:ca:6e:7e:14:14:01:58:94:2d:b6:e2:78:56:b9:dd:93:
         f8:a7:c5:e5:c4:b9:0a:84:92:8b:99:f3:ad:be:c0:ea:ad:f6:
         76:75:22:78:32:0f:2e:48:64:59:52:cb:b7:04:29:c5:0a:ba:
         70:68:1f:3d:75:f3:95:19:50:a2:22:46:ba:98:6f:9d:ac:dd:
         5b:a6:ae:e2:6c:d2:d2:1c:8f:49:9e:89:8e:e5:8b:78:3b:ed:
         15:b7:38:1e:f7:5f:88:2c:e6:b6:34:85:b9:bd:d7:d6:6a:f0:
         33:e1:90:4e:1b:ba:57:39:a0:db:8e:e6:50:1e:6d:77:b2:16:
         78:29:99:be:c7:67:a3:c2:bd:cd:ae:2e:4f:f1:68:6e:1b:7f:
         4f:31:98:7d:0b:12:7a:14:e9:25:c4:b2:a3:47:a0:14:8b:6c:
         1b:e6:fc:a8:30:a1:d5:df:01:c9:de:b7:93:35:20:0b:79:c3:
         cc:e1:e2:82
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcn24Ch3FvDPCZrQ3xxwVU5pWT3IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZCQ0IxRUYxNThBMEYzNjk4NTlGNENFMjI3MTIyMDMw
MzlDODAwMjAeFw0yNjEwMTUwOTU1MzVaFw0yNjEwMTYxMjM5MzVaMDMxMTAvBgNV
BAMTKEY2OUUwRkQ3OUU5NDMxMTRDNTJBNTA3NzA2QTcxRTY1REQ1NjU4RTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGgOIl5DAcnX+ILd9R5zX77gfO
7Z7e19cyoYTGRQ2DzKwcCqPZ8rgEG2hBXKm23GKKdb/2QgsWWRqtI0zzhiuEbmx/
FtWn6o1oIfNCXiZXgiGZnP1hkIdajcF3CpFCV/rwDH9rh0lxz9M7Qe3hXHxXYm/w
Sjzn9lqjwlCPqeGqVz94iY4hhktzNaWHsErT3aR3t88ndXLKs9cvbFrne01BHDGt
jaEJqXFS+ZydsiGmBRfiqhpT3qfBVjN5+VmLgSsi6sqodBXEgRi2Ke+tlWzaoszf
QxVsS1SOXv/y1zhgRaROybxEYkQzx1aAPsmwAE5VPfYdEc34lgRw04ZIVnHnAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU9p4P156UMRTFKlB3BqceZd1WWOMwHwYDVR0j
BBgwFoAUX7yx7xWKDzaYWfTOInEiAwOcgAIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVlEbjdpOG9jYmdGNEhSTm5yc1llZUI4SDlnRWZvYVlZd1dmUU1idEpT
U3kvMC81RkJDQjFFRjE1OEEwRjM2OTg1OUY0Q0UyMjcxMjIwMzAzOUM4MDAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVGQkNCMUVGMTU4QTBGMzY5
ODU5RjRDRTIyNzEyMjAzMDM5QzgwMDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RVlEbjdpOG9jYmdGNEhSTm5yc1llZUI4SDlnRWZvYVlZd1dmUU1idEpTU3kvMC81
RkJDQjFFRjE1OEEwRjM2OTg1OUY0Q0UyMjcxMjIwMzAzOUM4MDAyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkQw5bF4rtPFw3muKRfhnBvw6nUYhlSoxH/ZnaiigCFXK3GuYNvUUAKQscYRH
Lqtl2/tqfM2/xYlDQhdStpS9p2ZYOQXeRRqj86rKbn4UFAFYlC224nhWud2T+KfF
5cS5CoSSi5nzrb7A6q32dnUieDIPLkhkWVLLtwQpxQq6cGgfPXXzlRlQoiJGuphv
nazdW6au4mzS0hyPSZ6JjuWLeDvtFbc4HvdfiCzmtjSFub3X1mrwM+GQThu6Vzmg
247mUB5td7IWeCmZvsdno8K9za4uT/Fobht/TzGYfQsSehTpJcSyo0egFItsG+b8
qDCh1d8Byd63kzUgC3nDzOHigg==
-----END CERTIFICATE-----
Generated at Fri Oct 16 00:13:35 2026 by rpki-client