Error: rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.mft
File:                     F8A6A07CCBE742530F38EEDD455AC59480FDA110.mft (raw, json)
Hash identifier:          TufFp7wO9omMxtVv2dgGbcNBLITjzzIH5tw9ngv/5Vg=
Subject key identifier:   F3:D8:75:26:26:16:99:86:BC:26:90:75:EC:8B:B6:B3:DC:06:72:52
Authority key identifier: F8:A6:A0:7C:CB:E7:42:53:0F:38:EE:DD:45:5A:C5:94:80:FD:A1:10
Certificate issuer:       /CN=F8A6A07CCBE742530F38EEDD455AC59480FDA110
Certificate serial:       0AAD16ADE391CAB9124DF628EB1206736674F8F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.mft
Manifest number:          058B
Signing time:             Wed 04 Nov 2026 17:10:00 +0000
Manifest this update:     Wed 04 Nov 2026 17:05:00 +0000
Manifest next update:     Thu 05 Nov 2026 17:10:00 +0000
Files and hashes:         1: 3133382e39342e38382e302f32322d3234203d3e20323634313532.roa (hash: HPKHR02vVozS2Jj/a1F+5CNmjtaRdWW4U0uSZClGICw=)
                          2: F8A6A07CCBE742530F38EEDD455AC59480FDA110.crl (hash: fSJDvGqbmc6x7C3Ez8xA6r8RkVDYqDDeFGd6JxKhIz0=)
                          3: 323830343a323334343a3a2f33322d3334203d3e20323634313532.roa (hash: 4UuPMAAMMUOZnzy36P/hvaL9415EQk6nYlZHMIQ3vUM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.crl
                          rsync://rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 17:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ad:16:ad:e3:91:ca:b9:12:4d:f6:28:eb:12:06:73:66:74:f8:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8A6A07CCBE742530F38EEDD455AC59480FDA110
        Validity
            Not Before: Nov  4 17:05:00 2026 GMT
            Not After : Nov  5 17:10:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:35:97:1e:27:86:52:78:25:00:b1:02:70:85:
                    39:26:1d:f9:d5:37:a5:bd:a9:57:74:d6:06:00:22:
                    e0:96:16:a2:b8:b4:08:fc:d7:ea:2d:c5:a0:e7:0f:
                    63:ed:a8:bf:4d:dd:d6:0c:b9:b6:be:0c:08:9f:35:
                    d6:54:1d:10:49:ad:92:e9:fe:03:4c:e8:8f:e8:c7:
                    0d:d0:bf:92:03:21:70:98:98:52:1b:fa:27:f3:4b:
                    8b:69:cc:8f:2e:00:c5:c7:e9:ec:5c:6c:7e:d9:5a:
                    74:48:7b:8d:7f:6e:1a:28:90:ae:fc:3d:08:ba:10:
                    4a:78:cb:d5:8b:cd:1f:27:aa:45:48:68:f1:ed:45:
                    9c:3d:ac:59:12:e2:58:91:db:9b:c7:6b:07:bd:ca:
                    bd:e4:3d:2a:82:31:53:41:a3:f8:42:e8:2d:9a:48:
                    52:3f:07:22:ee:65:b3:17:15:2a:99:1a:b1:bf:c5:
                    2b:19:83:9d:ce:aa:a4:58:6a:79:1c:2d:89:49:a2:
                    f5:01:e2:ee:44:00:63:8f:6f:fc:7c:5b:8a:92:a1:
                    f1:27:38:53:23:24:8c:b0:54:44:de:b6:9d:b7:60:
                    38:8a:b4:13:c7:34:d7:15:9f:1c:da:ec:cd:aa:39:
                    c2:22:c8:1b:1f:e0:70:10:13:3b:09:09:e5:f5:2d:
                    28:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D8:75:26:26:16:99:86:BC:26:90:75:EC:8B:B6:B3:DC:06:72:52
            X509v3 Authority Key Identifier:
                keyid:F8:A6:A0:7C:CB:E7:42:53:0F:38:EE:DD:45:5A:C5:94:80:FD:A1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:2b:13:fa:f5:f7:30:64:47:1d:60:29:fd:90:f4:a0:86:7e:
         d4:78:df:32:3c:31:fc:d8:7a:08:50:25:ea:0e:98:03:44:87:
         f2:54:8e:05:21:0f:eb:79:d0:12:f1:a3:5c:6c:7c:17:7d:1a:
         bf:28:f9:85:95:1a:40:b4:d2:45:59:e3:b3:fa:59:da:99:81:
         7f:06:94:a4:e5:dd:5d:56:20:68:5f:d1:06:05:6e:a1:c3:d5:
         d7:6d:fe:4a:fe:5d:04:af:79:31:f1:e7:46:10:28:c1:20:fd:
         54:0b:8a:a5:08:86:01:1e:ba:68:38:ec:59:76:18:66:99:d8:
         2c:cc:cf:a5:66:ec:14:ce:99:f6:c1:f0:aa:1a:29:79:27:7a:
         a7:2a:e2:eb:ff:64:93:14:47:4e:93:d4:3e:70:95:e8:27:ad:
         70:b4:08:ac:58:06:f2:e3:25:3e:db:5c:cd:44:db:d9:82:10:
         6d:04:c3:bf:2a:9c:8f:8b:d1:9c:46:cc:08:af:91:59:af:94:
         92:10:f1:f5:d7:a8:a8:61:26:86:b3:b8:4c:40:3f:87:41:6a:
         31:fd:e5:a5:11:0a:16:56:ea:16:a4:b9:ce:a4:e1:a0:5a:2f:
         26:78:b8:1c:e4:cd:0c:3f:20:39:c1:55:e5:0a:d3:f8:50:d6:
         52:88:e6:c1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 5 07:29:39 2026 by rpki-client