Error: rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.mft
File:                     BABE217A352A9C190E5C0DA6541119FAA849CCE8.mft (raw, json)
Hash identifier:          Ovj2ZqKzW24FEKgeoXCYR3Gsr+p9eiSyPA26ZwWGat8=
Subject key identifier:   8C:35:7E:F2:8B:74:23:74:DF:78:AE:A8:C2:C8:FD:CB:C9:DA:76:80
Authority key identifier: BA:BE:21:7A:35:2A:9C:19:0E:5C:0D:A6:54:11:19:FA:A8:49:CC:E8
Certificate issuer:       /CN=BABE217A352A9C190E5C0DA6541119FAA849CCE8
Certificate serial:       1B3BD174BAE157B8414220A5DC88AA4316684A7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BABE217A352A9C190E5C0DA6541119FAA849CCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.mft
Manifest number:          0335
Signing time:             Tue 13 Oct 2026 19:56:51 +0000
Manifest this update:     Tue 13 Oct 2026 19:51:51 +0000
Manifest next update:     Wed 14 Oct 2026 23:53:51 +0000
Files and hashes:         1: 3136342e3136332e32372e302f32342d3234203d3e20323635393336.roa (hash: YfWFBEOeJXXOLIHO6WNr7Ij0EyHyX5Udg4NU7VZtAcM=)
                          2: 3136342e3136332e32362e302f32332d3233203d3e20323635393336.roa (hash: IMX9UdwBxXRPLc0X0/j7feimiNAg9z6Y0pLv402RuXs=)
                          3: 3136342e3136332e32342e302f32322d3232203d3e20323635393336.roa (hash: J40z/WNUzh6NLrmNccEuMKuiYMwNciNV1IPKU1BBa/I=)
                          4: 3136342e3136332e32342e302f32342d3234203d3e20323635393336.roa (hash: kdFvMOUtrBiMhEyS1uCvpaD3VXeg4oEwVlJ9EgSzc1g=)
                          5: 3136342e3136332e32352e302f32342d3234203d3e20323635393336.roa (hash: s6ol0rD2mKxuW23tNpj/XhXqtq0c7rUoyap48tJKL44=)
                          6: 323830343a343032303a3a2f33322d3332203d3e20323635393336.roa (hash: 2IZ3ydIv1kmjMrdfxVV1ooWjVHtwJteit1TfiLCQyBs=)
                          7: BABE217A352A9C190E5C0DA6541119FAA849CCE8.crl (hash: KcO4FovS5q4dTgvLHLPMTfAlrfvePo3FVGjaON1dE68=)
                          8: 3136342e3136332e32362e302f32342d3234203d3e20323635393336.roa (hash: PJrszwL06gJXoEEGKYzrBj1hJMnv8uVrLF+St6XmlpA=)
                          9: 3136342e3136332e32342e302f32332d3233203d3e20323635393336.roa (hash: +gsP+Lr3IaF1U743PXORMLvPmAAZY0iznBd+U3lyhIs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.crl
                          rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BABE217A352A9C190E5C0DA6541119FAA849CCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 23:53:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:3b:d1:74:ba:e1:57:b8:41:42:20:a5:dc:88:aa:43:16:68:4a:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BABE217A352A9C190E5C0DA6541119FAA849CCE8
        Validity
            Not Before: Oct 13 19:51:51 2026 GMT
            Not After : Oct 14 23:53:51 2026 GMT
        Subject: CN=8C357EF28B742374DF78AEA8C2C8FDCBC9DA7680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8b:b9:33:18:19:47:09:95:fd:99:9b:a0:ac:
                    d9:b6:18:6d:b0:2c:2c:a1:f9:a9:d3:78:df:b2:4b:
                    d6:c2:a8:23:3d:60:35:ae:08:79:33:9c:55:f1:f7:
                    66:11:3c:cb:24:be:db:87:ee:89:7b:90:e0:5e:bd:
                    35:7e:13:58:95:35:34:1f:7d:8e:8d:af:be:84:3a:
                    91:f5:f0:48:5b:a3:88:8c:09:d2:ba:64:f2:ec:a4:
                    20:7a:59:b6:02:3c:da:54:b2:9c:44:d1:4f:09:64:
                    7e:b3:5b:80:26:94:e4:75:71:56:5b:49:c2:7f:32:
                    1a:76:9e:2d:b8:75:1d:09:5a:6f:68:ce:50:76:5c:
                    98:2d:d9:dd:d3:bb:dc:d9:69:40:1a:a7:e9:ce:31:
                    48:3f:fe:bc:60:bd:fb:ec:9a:27:0c:70:42:dc:38:
                    fd:bf:0c:82:4b:f3:6a:c7:b3:44:a3:88:72:fb:60:
                    be:37:91:21:f7:1b:7c:5d:4e:6b:14:ac:4c:a4:ec:
                    99:44:31:d2:56:39:24:b4:5a:33:05:9c:66:ad:9c:
                    6c:ac:ee:21:60:8d:c5:b1:4f:f2:ed:50:f0:19:43:
                    5d:6c:3e:d5:34:c8:ac:8e:6c:d4:3d:95:83:be:7a:
                    44:7d:e9:8b:e8:07:48:ef:c8:6d:46:bb:fc:d5:04:
                    a6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:35:7E:F2:8B:74:23:74:DF:78:AE:A8:C2:C8:FD:CB:C9:DA:76:80
            X509v3 Authority Key Identifier:
                keyid:BA:BE:21:7A:35:2A:9C:19:0E:5C:0D:A6:54:11:19:FA:A8:49:CC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BABE217A352A9C190E5C0DA6541119FAA849CCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:ff:13:1a:7e:6b:6c:da:03:58:b6:4e:c1:71:00:2e:51:0a:
         78:b5:68:ed:e0:f1:1c:1d:3b:f4:c3:ec:22:b0:c7:1b:31:09:
         b1:61:06:af:2c:03:e0:62:35:b1:2c:b7:95:f5:e5:f9:8f:e1:
         d1:0c:40:d3:92:58:72:be:88:bd:75:78:35:ac:15:71:31:66:
         bd:d5:0c:94:bf:75:b3:8e:88:e9:72:e8:78:5d:76:91:f5:68:
         8d:e0:c2:33:55:77:68:f1:47:bc:59:54:26:18:df:3b:6a:80:
         0b:37:b7:30:4b:92:c1:61:63:38:54:44:2a:3b:2e:e0:48:1c:
         91:aa:a3:c5:f0:96:a6:66:ee:82:58:12:92:75:8c:e5:04:21:
         f5:8f:ff:75:64:15:48:5f:60:20:8b:a9:5d:27:8a:26:9f:1c:
         91:7f:29:33:bf:6b:fc:7d:e2:ec:33:f2:06:90:87:08:e2:81:
         ef:d8:b7:95:19:c1:9f:b3:05:50:d1:2a:74:05:4e:69:21:f8:
         30:5e:ef:26:1f:7f:3d:ac:30:e7:d5:af:06:f7:3e:7c:8d:82:
         d0:14:59:ed:88:48:ee:aa:4b:83:f3:cb:9f:ad:33:0a:2b:e5:
         12:0d:be:7a:47:d5:9d:57:e5:9b:29:11:24:74:9d:92:a1:be:
         4b:c6:49:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:03:31 2026 by rpki-client