Error: rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.mft
File:                     8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.mft (raw, json)
Hash identifier:          wmlC8X8ZPWvt9zk+vEixgZYD9HexC1KC+U559n9dEi4=
Subject key identifier:   9C:D3:6A:33:9F:C3:BF:18:98:F5:92:76:5B:DD:5B:0A:62:61:0F:6A
Authority key identifier: 8B:8B:4E:1F:32:9B:88:F7:0D:E3:5D:A3:30:FC:1F:9C:A2:B9:20:84
Certificate issuer:       /CN=8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084
Certificate serial:       0704557DD84115A7FC937CD8D866D59D2000373E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.mft
Manifest number:          04E2
Signing time:             Wed 28 Oct 2026 09:46:55 +0000
Manifest this update:     Wed 28 Oct 2026 09:41:55 +0000
Manifest next update:     Thu 29 Oct 2026 10:00:55 +0000
Files and hashes:         1: 323830343a376536633a3a2f33322d313238203d3e20323731363233.roa (hash: NRvkX7IEEwE6eVFepi0Bg0vTFbpt/3Mqhz4YmkSq8+w=)
                          2: 8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.crl (hash: j5bCKyKKbkif1t0T6eXlgqnXhNSNcv4h4fDlkzhUl0I=)
                          3: 3133382e3132312e33362e302f32322d3332203d3e20323731363233.roa (hash: taUthDkXb559JFkuYYUIjfPQojbwy6bDjriNa6ge/y8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.crl
                          rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 10:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:04:55:7d:d8:41:15:a7:fc:93:7c:d8:d8:66:d5:9d:20:00:37:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084
        Validity
            Not Before: Oct 28 09:41:55 2026 GMT
            Not After : Oct 29 10:00:55 2026 GMT
        Subject: CN=9CD36A339FC3BF1898F592765BDD5B0A62610F6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9c:84:c0:5a:02:05:91:49:5c:90:d3:8d:73:
                    37:62:9c:7f:52:a7:c0:7e:da:c8:f4:22:cc:74:ac:
                    b4:de:93:67:d2:12:f6:a0:e7:aa:73:df:b5:c6:2f:
                    82:33:21:4a:5b:27:e2:22:ac:84:c1:57:cd:1c:e9:
                    83:a0:24:96:7a:0e:8e:01:e9:da:63:5e:9c:87:64:
                    73:2d:a0:b5:0a:cc:1d:a8:d4:ad:dc:90:e9:2e:db:
                    b1:5b:13:71:27:ac:0f:ed:29:b8:dc:40:44:74:f6:
                    16:95:bf:e8:83:83:18:a0:f8:21:35:73:37:7e:65:
                    a8:5d:a0:bf:e1:ac:48:d6:cb:19:07:07:0f:d0:3c:
                    8d:a6:c6:f1:63:98:0c:96:8b:b6:d2:0f:2a:f1:1c:
                    46:32:69:1f:19:96:bf:dd:0c:1c:fe:71:1a:36:d5:
                    41:32:a6:9e:b9:54:37:e0:32:72:da:f8:e6:95:50:
                    f8:51:56:52:8d:b4:46:af:11:5d:ae:97:49:43:68:
                    33:2e:e3:4d:c7:e9:d6:e9:d1:19:4b:fb:29:fd:c3:
                    5b:66:8f:db:09:2b:ef:65:2a:fa:05:68:8f:75:5a:
                    5d:aa:7b:a5:21:94:58:32:95:a4:39:bd:8c:d0:e1:
                    00:db:cb:17:70:01:60:32:48:80:9c:cd:51:5b:86:
                    1e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D3:6A:33:9F:C3:BF:18:98:F5:92:76:5B:DD:5B:0A:62:61:0F:6A
            X509v3 Authority Key Identifier:
                keyid:8B:8B:4E:1F:32:9B:88:F7:0D:E3:5D:A3:30:FC:1F:9C:A2:B9:20:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:8f:94:3e:c5:9a:95:70:b3:69:23:e2:63:f2:bd:7b:be:d9:
         3e:d3:15:4b:0d:8e:c4:b7:2f:0d:dc:5b:e0:75:86:f9:b4:b8:
         73:4f:0e:b6:bb:f0:65:d2:7e:28:8e:a4:9f:9c:17:f9:0d:43:
         12:bb:b6:9a:92:73:a2:4c:03:8b:eb:e6:07:22:9f:1b:48:a6:
         a5:e4:6f:5d:69:bf:6e:59:e0:94:b8:b4:dc:49:98:4d:24:25:
         89:d9:75:28:f1:ef:9f:2a:7d:dd:2a:1b:c2:03:d2:1f:dd:cd:
         37:75:53:a7:a2:84:25:06:50:a2:f1:ab:32:17:d9:09:93:13:
         2b:76:25:ca:06:60:d1:f8:fc:c0:60:e2:1e:fa:86:1c:b2:f7:
         8a:93:c8:7a:96:9c:cc:58:a5:3e:bd:bc:73:29:8a:08:13:69:
         a3:3a:b5:b7:b8:43:fd:50:c9:30:84:b5:63:13:77:99:fe:47:
         9a:aa:fc:b8:d0:71:90:8c:79:0f:86:95:60:ef:98:22:10:6c:
         bf:f0:45:e2:03:cc:81:97:1c:38:85:c3:a8:7a:23:da:6a:c5:
         b6:07:f8:dd:f3:00:56:84:64:a8:e9:67:47:e5:1c:4b:f5:9f:
         6d:31:2a:8c:85:e6:db:c2:1b:81:1b:c7:77:0c:59:ad:bd:f2:
         1d:6e:ea:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 02:11:03 2026 by rpki-client