Error: rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft
File:                     99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft (raw, json)
Hash identifier:          FQLi9UMYmGqJ2L9niwDCnn/o1MafOQyDM5Jk9O4K6cQ=
Subject key identifier:   B5:9E:7A:07:09:40:FD:B2:E4:9B:CB:EA:67:43:84:1F:0D:AC:4A:58
Authority key identifier: 99:A8:F5:3F:34:26:C9:83:CA:87:D5:D7:AC:F6:AB:5E:14:37:15:54
Certificate issuer:       /CN=99A8F53F3426C983CA87D5D7ACF6AB5E14371554
Certificate serial:       57403CB2507EA04F007365998A79FD0EA70F9CA6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft
Manifest number:          04CA
Signing time:             Wed 14 Oct 2026 12:51:03 +0000
Manifest this update:     Wed 14 Oct 2026 12:46:03 +0000
Manifest next update:     Thu 15 Oct 2026 14:53:03 +0000
Files and hashes:         1: 99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl (hash: rNX9uRgjgMa24Z7lcsLSl2Jea+6kq0fBKNPQ0evT0qo=)
                          2: 3137392e3130372e34382e302f32322d3234203d3e20323633323834.roa (hash: ckNtBsziZrfWgsauDA2pPoxwGYk+p7ctsc9M35CAGkA=)
                          3: 323830343a313635633a3a2f33322d3438203d3e20323633323834.roa (hash: bfT9d9vwD4SbS7VeTXTmr8mjxGnSXYYn2MAyZKiwdm0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl
                          rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 14:53:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:40:3c:b2:50:7e:a0:4f:00:73:65:99:8a:79:fd:0e:a7:0f:9c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99A8F53F3426C983CA87D5D7ACF6AB5E14371554
        Validity
            Not Before: Oct 14 12:46:03 2026 GMT
            Not After : Oct 15 14:53:03 2026 GMT
        Subject: CN=B59E7A070940FDB2E49BCBEA6743841F0DAC4A58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a9:16:a7:1d:a9:5b:08:39:ff:f2:ee:89:6f:
                    72:43:4b:98:39:e1:58:00:f5:6f:2c:98:ce:56:6e:
                    1d:18:c3:af:d3:c6:ec:dd:63:4c:24:93:06:37:e0:
                    56:81:2c:bc:03:48:f9:de:a9:60:49:2c:6e:9f:0c:
                    51:4d:84:80:bf:4b:26:ab:61:0a:69:cc:75:de:12:
                    8e:5e:79:4c:17:f6:47:b4:44:fa:86:eb:81:cd:aa:
                    b7:11:f5:e4:f3:60:b4:79:9e:95:75:bb:94:6d:7a:
                    81:cd:35:ac:18:ad:fe:d4:6a:4a:29:54:08:3e:e9:
                    d2:a0:eb:65:65:2a:c5:d9:b9:38:24:1b:43:10:5c:
                    7b:9f:41:d5:24:17:06:e5:74:f2:1b:49:b3:f1:e7:
                    a8:12:53:34:4c:36:94:a7:b0:3d:98:26:76:b7:56:
                    30:73:b9:66:d5:f3:1a:cd:15:bc:75:80:91:12:33:
                    d7:54:b4:24:99:04:a1:0d:af:fa:c0:f6:03:a7:9c:
                    09:ab:2f:b5:52:d2:19:23:ff:d7:c7:8b:ea:c0:8d:
                    a6:58:ab:f1:ee:55:ec:1d:9e:62:85:60:33:39:63:
                    47:93:60:45:1b:8a:c0:98:b2:f0:55:cd:90:bf:53:
                    13:3c:86:2b:e2:01:23:3a:bc:52:3b:49:f1:c5:dc:
                    9b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:9E:7A:07:09:40:FD:B2:E4:9B:CB:EA:67:43:84:1F:0D:AC:4A:58
            X509v3 Authority Key Identifier:
                keyid:99:A8:F5:3F:34:26:C9:83:CA:87:D5:D7:AC:F6:AB:5E:14:37:15:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:45:b6:e1:4d:53:a3:a2:e0:2f:7f:e8:8a:8a:14:79:98:bb:
         f0:b5:ba:b9:43:ee:92:a1:c8:8d:c8:8b:06:cb:38:c0:fa:83:
         f2:3a:a3:81:10:32:68:0f:67:b7:dc:61:8e:6f:ba:88:32:75:
         e1:64:37:4f:49:a1:b2:69:1d:a6:39:54:3c:48:7f:ef:3c:03:
         bd:93:01:e0:17:0c:26:98:97:c0:64:e2:b8:64:a2:2c:b8:d1:
         5f:41:2e:e8:30:90:45:a3:b1:fc:2e:b6:c6:bc:56:59:9c:e0:
         53:45:d3:1f:3f:20:9a:6e:16:12:75:e4:6a:86:69:da:b7:b2:
         49:b6:c2:63:0f:45:0b:ce:01:36:42:15:69:ed:51:7d:73:60:
         64:43:c6:cd:76:58:0e:1d:62:c0:02:29:9b:5d:40:63:32:15:
         56:76:ab:96:e1:a4:b1:5e:d5:64:3f:6e:3d:a0:33:35:2f:34:
         b5:96:ea:84:d9:d9:cf:4b:13:8a:8d:07:a8:64:0d:de:6a:f2:
         92:21:a5:93:d8:04:9d:12:a3:c9:7d:c1:95:04:cf:89:fe:85:
         47:b9:52:00:28:d4:4c:7f:2a:d8:e0:41:c6:7d:45:c9:38:2d:
         a3:59:69:34:76:69:59:85:2c:62:1b:94:20:3d:db:2d:d9:45:
         f8:b8:1a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 01:42:12 2026 by rpki-client