Error: rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.mft
File:                     810076D4984418ED05F03F761B6CBE5D6F00DC86.mft (raw, json)
Hash identifier:          RrbKnAeni6Kh9bAPgfwfzZNQbjl3nAgC4GkY6EzuUT4=
Subject key identifier:   93:74:AD:6C:63:36:0D:0B:B5:86:45:01:BB:C7:6B:D0:B6:BB:6D:8B
Authority key identifier: 81:00:76:D4:98:44:18:ED:05:F0:3F:76:1B:6C:BE:5D:6F:00:DC:86
Certificate issuer:       /CN=810076D4984418ED05F03F761B6CBE5D6F00DC86
Certificate serial:       601F9E7A8424C8556E0CB81BA35DDBAB8C16B02C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.mft
Manifest number:          04CB
Signing time:             Wed 14 Oct 2026 01:20:37 +0000
Manifest this update:     Wed 14 Oct 2026 01:15:37 +0000
Manifest next update:     Thu 15 Oct 2026 04:38:37 +0000
Files and hashes:         1: 323830343a376662383a3a2f33322d3438203d3e20323731373035.roa (hash: VyymUYxLBuq4LNhc03tc5cATTlqQ2WLMAR2Y4LwkkmU=)
                          2: 810076D4984418ED05F03F761B6CBE5D6F00DC86.crl (hash: ZZzx0jvappRTLGddf9GHh5PQjDoYTk9u7vwdLDsAwv4=)
                          3: 3137372e32312e3135362e302f32322d3234203d3e20323731373035.roa (hash: rbZYOfJRddAk9LwnFp4nOdPQwEySvJEo6840fEgXSI8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.crl
                          rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 04:38:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:1f:9e:7a:84:24:c8:55:6e:0c:b8:1b:a3:5d:db:ab:8c:16:b0:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=810076D4984418ED05F03F761B6CBE5D6F00DC86
        Validity
            Not Before: Oct 14 01:15:37 2026 GMT
            Not After : Oct 15 04:38:37 2026 GMT
        Subject: CN=9374AD6C63360D0BB5864501BBC76BD0B6BB6D8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fe:a5:23:35:96:7f:6d:b5:90:f6:bc:1a:da:
                    1a:26:6c:26:6e:be:56:7a:ea:49:ab:59:02:15:d8:
                    ef:0d:c7:22:1d:ff:d9:7e:68:5c:db:18:55:ab:69:
                    df:15:83:79:c3:4c:bb:b1:32:a7:2d:a9:d4:52:09:
                    72:15:24:97:c2:ad:3d:22:5d:ee:09:79:02:52:d4:
                    8e:d2:c3:38:61:f5:c3:95:ba:32:2d:98:c6:05:b0:
                    c6:2f:ed:5b:c0:88:5a:f6:47:67:e0:3e:a9:27:bd:
                    42:5f:09:3a:61:e3:c8:eb:fe:95:54:5e:08:5f:9b:
                    9e:62:fd:90:96:94:01:3c:8d:4e:a6:fd:af:e4:c9:
                    c5:b3:c2:fd:d7:4d:05:c6:08:4a:22:f6:47:87:eb:
                    95:4d:22:2d:7e:f5:40:77:68:24:1f:29:f0:a0:ab:
                    48:12:92:b7:12:a1:23:d0:c5:45:8e:56:a5:b2:1c:
                    ad:ab:32:43:bf:73:4e:af:c3:ed:1e:ed:b8:c8:cc:
                    d4:d7:4e:67:b3:68:19:13:f4:a7:2c:bd:46:b2:f2:
                    50:55:c4:63:06:68:cc:54:f9:72:a9:4b:4c:f8:e3:
                    41:2f:08:f6:ad:11:1f:50:ad:0c:77:11:c3:74:ec:
                    6b:77:01:49:d4:10:62:82:eb:35:c3:94:96:07:9f:
                    a0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:74:AD:6C:63:36:0D:0B:B5:86:45:01:BB:C7:6B:D0:B6:BB:6D:8B
            X509v3 Authority Key Identifier:
                keyid:81:00:76:D4:98:44:18:ED:05:F0:3F:76:1B:6C:BE:5D:6F:00:DC:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:76:d0:31:46:4f:6b:ed:39:eb:22:1a:4d:5d:fb:6a:ec:00:
         a5:ea:fa:0b:26:78:7a:ac:8a:58:b4:8c:d3:18:10:e5:42:6c:
         d2:1a:82:5b:a3:bd:26:cb:c2:4b:ab:96:c3:03:83:58:ec:1a:
         1b:7c:e2:64:9b:24:f6:a2:33:d8:48:d9:14:06:b8:22:7e:d6:
         ee:c4:ff:3c:8d:14:94:45:2b:e5:0f:ea:52:a6:75:89:23:4b:
         ab:9b:64:94:ff:c5:20:5c:ea:f3:1f:9d:90:b1:cf:d4:87:03:
         26:ef:5a:2c:20:b7:31:fd:1f:6a:16:10:89:e9:e9:99:e3:cc:
         12:65:1c:bd:90:df:0e:0d:51:ea:e9:d3:a8:8f:ff:e1:11:6c:
         29:80:47:f2:a3:85:71:55:7c:7d:dc:95:45:c2:39:07:bc:8e:
         a2:06:ef:16:fc:d5:fb:50:36:f5:e7:3c:7b:f7:08:70:6b:3a:
         94:42:f3:ef:79:7b:e2:c6:a1:18:70:e4:9e:a2:3a:ec:f9:21:
         f5:2d:1e:3c:8a:ff:09:fd:dd:5e:f5:60:16:a7:98:bd:e6:c6:
         09:34:f1:78:08:5e:ff:12:e0:86:c6:85:c9:c6:05:c7:22:58:
         b1:5c:4d:ce:4e:79:7b:e1:7c:af:03:b9:f3:8b:22:72:5f:74:
         8c:50:80:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:30:58 2026 by rpki-client