Error: rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/42CB6339B5B163F6D6A5494AA81144D6D05048F9.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/42CB6339B5B163F6D6A5494AA81144D6D05048F9.mft
File:                     42CB6339B5B163F6D6A5494AA81144D6D05048F9.mft (raw, json)
Hash identifier:          ZMxLaFdaDvAQtRInqtq6HSlV+IrdO/oSDZHAH5NjW1c=
Subject key identifier:   F8:59:27:67:C4:DD:C8:A0:15:5D:2E:F4:2F:B8:3B:C4:13:D8:03:E9
Authority key identifier: 42:CB:63:39:B5:B1:63:F6:D6:A5:49:4A:A8:11:44:D6:D0:50:48:F9
Certificate issuer:       /CN=42CB6339B5B163F6D6A5494AA81144D6D05048F9
Certificate serial:       5E11E038DDAE687C5CB1E02DB384E61FBDF7B71C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CB6339B5B163F6D6A5494AA81144D6D05048F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/42CB6339B5B163F6D6A5494AA81144D6D05048F9.mft
Manifest number:          59
Signing time:             Wed 14 Oct 2026 18:16:58 +0000
Manifest this update:     Wed 14 Oct 2026 18:11:58 +0000
Manifest next update:     Thu 15 Oct 2026 19:41:58 +0000
Files and hashes:         1: 3137302e38322e34382e302f32322d3332203d3e20323636343338.roa (hash: qt8f+pcb1F31TG0ZkhKuxjLPIOjfhzeNYXgCXl86Ugc=)
                          2: 323830343a333764343a3a2f33322d3438203d3e20323636343338.roa (hash: TRSsrflb3DPtHM2LWcwO11g+mZjnEw/TB+FqKaNMZHc=)
                          3: 34352e3137332e33322e302f32322d3332203d3e20323636343338.roa (hash: CJjrgnCCmcFCHIYqXiWS0uEONKp/FXLPf6yVQju0DbM=)
                          4: 42CB6339B5B163F6D6A5494AA81144D6D05048F9.crl (hash: 6bYNrqqyiFtWTLprSYYNqBgrK3FSz3fWJYGBWaVI3S4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/42CB6339B5B163F6D6A5494AA81144D6D05048F9.crl
                          rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/42CB6339B5B163F6D6A5494AA81144D6D05048F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CB6339B5B163F6D6A5494AA81144D6D05048F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 19:41:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:11:e0:38:dd:ae:68:7c:5c:b1:e0:2d:b3:84:e6:1f:bd:f7:b7:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42CB6339B5B163F6D6A5494AA81144D6D05048F9
        Validity
            Not Before: Oct 14 18:11:58 2026 GMT
            Not After : Oct 15 19:41:58 2026 GMT
        Subject: CN=F8592767C4DDC8A0155D2EF42FB83BC413D803E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:15:c9:b7:63:7e:2c:96:8e:d8:73:ff:b8:16:
                    93:2b:f0:4a:9f:97:f0:d9:c5:a9:bd:5c:f7:e8:2c:
                    6e:2d:fb:2e:0c:4f:cc:cf:02:4c:30:cb:60:43:71:
                    ad:16:75:e2:df:62:b6:2d:36:f0:f7:4e:e4:11:8a:
                    84:ae:05:8d:d1:c5:89:f6:82:41:83:1d:7e:84:8a:
                    ee:93:4a:fb:ac:7d:78:94:6a:28:30:eb:1b:9d:45:
                    4b:fa:76:8d:ff:60:ce:84:6d:df:a1:e7:99:fd:9f:
                    99:3d:1f:73:25:90:45:3d:fb:ff:80:68:23:eb:f8:
                    7f:27:e9:d3:cf:0f:e6:2d:e3:91:72:07:9c:23:b8:
                    e6:f1:9c:a2:75:ea:41:8c:89:bb:7e:ee:d3:eb:b5:
                    b3:41:42:83:f5:ae:87:99:5d:08:b4:c4:84:34:a3:
                    cc:79:d8:ce:0f:3e:42:e4:65:2e:23:d2:02:3b:08:
                    28:b8:e1:ff:2d:1a:8f:8b:69:20:b6:19:f2:bc:dd:
                    d4:78:02:19:b6:3d:9d:2d:0c:66:53:33:8c:56:7b:
                    7f:11:b5:a0:a2:41:d4:99:1b:69:cb:ed:92:f8:c8:
                    88:9d:d1:77:18:19:18:ec:7f:c9:56:4b:cb:22:6d:
                    15:8e:a2:9a:42:f3:a7:cf:6e:44:8b:9f:3a:e7:e6:
                    8a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:59:27:67:C4:DD:C8:A0:15:5D:2E:F4:2F:B8:3B:C4:13:D8:03:E9
            X509v3 Authority Key Identifier:
                keyid:42:CB:63:39:B5:B1:63:F6:D6:A5:49:4A:A8:11:44:D6:D0:50:48:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/42CB6339B5B163F6D6A5494AA81144D6D05048F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CB6339B5B163F6D6A5494AA81144D6D05048F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/42CB6339B5B163F6D6A5494AA81144D6D05048F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:7d:5f:b9:7b:b9:0e:25:cc:c4:5c:3e:dc:94:e6:a0:37:1d:
         14:f6:20:78:a7:17:a6:f6:fd:f7:23:6b:1b:6a:e6:e7:94:37:
         cf:21:e3:29:16:1b:24:5f:fc:04:6f:1c:0d:3f:c3:a1:76:66:
         53:36:ed:a7:1c:82:72:90:25:c8:fd:fc:79:4e:3c:4b:7b:e8:
         16:10:4f:24:f7:c0:a4:4d:e8:9e:d6:4d:25:f1:92:ed:04:67:
         5b:ac:70:72:76:0d:ad:bc:05:ee:d1:2b:59:4b:be:49:9c:ad:
         ee:0a:29:7e:c6:b0:d2:9c:96:a9:83:75:de:69:bd:30:56:cc:
         04:50:4a:c9:1a:90:fc:88:95:46:b8:f9:26:34:29:f0:ac:49:
         db:0e:3e:71:f5:9e:32:ba:d3:d2:ea:e9:aa:f6:df:ae:6a:82:
         22:1d:f6:4a:0c:58:6e:c4:76:02:f4:c5:14:61:61:33:81:e3:
         7a:53:f8:5a:e2:93:cd:ae:43:28:54:57:4c:8a:9e:35:f8:ac:
         37:91:f7:67:04:13:c9:fc:49:cd:32:f8:f5:28:5a:3a:c6:bc:
         d4:21:14:50:06:4b:b6:c4:14:02:30:5e:4a:08:1a:4b:23:8f:
         b1:c5:da:c7:ff:b5:cc:90:ea:07:e3:ae:6f:c6:59:f9:c3:73:
         6d:11:51:67
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXhHgON2uaHxcseAts4TmH733txwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDJDQjYzMzlCNUIxNjNGNkQ2QTU0OTRBQTgxMTQ0RDZE
MDUwNDhGOTAeFw0yNjEwMTQxODExNThaFw0yNjEwMTUxOTQxNThaMDMxMTAvBgNV
BAMTKEY4NTkyNzY3QzREREM4QTAxNTVEMkVGNDJGQjgzQkM0MTNEODAzRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsFcm3Y34slo7Yc/+4FpMr8Eqf
l/DZxam9XPfoLG4t+y4MT8zPAkwwy2BDca0WdeLfYrYtNvD3TuQRioSuBY3RxYn2
gkGDHX6Eiu6TSvusfXiUaigw6xudRUv6do3/YM6Ebd+h55n9n5k9H3MlkEU9+/+A
aCPr+H8n6dPPD+Yt45FyB5wjuObxnKJ16kGMibt+7tPrtbNBQoP1roeZXQi0xIQ0
o8x52M4PPkLkZS4j0gI7CCi44f8tGo+LaSC2GfK83dR4Ahm2PZ0tDGZTM4xWe38R
taCiQdSZG2nL7ZL4yIid0XcYGRjsf8lWS8sibRWOoppC86fPbkSLnzrn5oqvAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU+FknZ8TdyKAVXS70L7g7xBPYA+kwHwYDVR0j
BBgwFoAUQstjObWxY/bWpUlKqBFE1tBQSPkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmlFcDdONkphRmRkZEM1UGNaNktCOWtMVU05UHRaMVZEUjViZlRhWlF5
THYvMC80MkNCNjMzOUI1QjE2M0Y2RDZBNTQ5NEFBODExNDRENkQwNTA0OEY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyQ0I2MzM5QjVCMTYzRjZE
NkE1NDk0QUE4MTE0NEQ2RDA1MDQ4RjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RmlFcDdONkphRmRkZEM1UGNaNktCOWtMVU05UHRaMVZEUjViZlRhWlF5THYvMC80
MkNCNjMzOUI1QjE2M0Y2RDZBNTQ5NEFBODExNDRENkQwNTA0OEY5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQn1fuXu5DiXMxFw+3JTmoDcdFPYgeKcXpvb99yNrG2rm55Q3zyHjKRYbJF/8
BG8cDT/DoXZmUzbtpxyCcpAlyP38eU48S3voFhBPJPfApE3ontZNJfGS7QRnW6xw
cnYNrbwF7tErWUu+SZyt7gopfsaw0pyWqYN13mm9MFbMBFBKyRqQ/IiVRrj5JjQp
8KxJ2w4+cfWeMrrT0urpqvbfrmqCIh32SgxYbsR2AvTFFGFhM4HjelP4WuKTza5D
KFRXTIqeNfisN5H3ZwQTyfxJzTL49ShaOsa81CEUUAZLtsQUAjBeSggaSyOPscXa
x/+1zJDqB+Oub8ZZ+cNzbRFRZw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:44:05 2026 by rpki-client