Error: rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.mft
File:                     FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.mft (raw, json)
Hash identifier:          Wx7QhFw/lB7TZCBAHbpegJcjujxaqHqvvKq0DDRJC48=
Subject key identifier:   7E:78:BA:74:C5:E6:A8:35:89:AA:C9:19:11:88:10:86:43:34:32:C0
Authority key identifier: FA:15:85:E4:2E:73:8E:E5:96:DB:2F:2B:97:0C:C3:CB:74:3B:D8:FC
Certificate issuer:       /CN=FA1585E42E738EE596DB2F2B970CC3CB743BD8FC
Certificate serial:       2A4C0F58D939F204E9612A7ED05E3F0207E3CE62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.mft
Manifest number:          04E1
Signing time:             Wed 28 Oct 2026 04:20:00 +0000
Manifest this update:     Wed 28 Oct 2026 04:15:00 +0000
Manifest next update:     Thu 29 Oct 2026 08:01:00 +0000
Files and hashes:         1: 3139312e3235332e37322e302f32312d3231203d3e20323632383931.roa (hash: 32MUjmMlipIQ5w66Tg0yyXCGK7iNkWxFA5S1Vz0pfXE=)
                          2: 3137372e32332e36342e302f32312d3231203d3e20323632383931.roa (hash: 1O+C4gKehoZbB1bzgM9P5Hl3u1YA7QbbPbBfTZuNlJA=)
                          3: 3137372e32302e3138342e302f32312d3231203d3e20323632383931.roa (hash: m+nssQYHrnXOq/hb0eyIYVP0zd1CutzVa1h16yS87XE=)
                          4: FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.crl (hash: WXyB6Z7q3q5UqhBsc5bNTwqws7dnaHFQL7rNCuxWZBo=)
                          5: 323830343a6335303a3a2f33322d3332203d3e20323632383931.roa (hash: rY/AbGdTlh2PZKTUHZ0W9omjzqensEoBLVsBXZuCsrQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.crl
                          rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 08:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:4c:0f:58:d9:39:f2:04:e9:61:2a:7e:d0:5e:3f:02:07:e3:ce:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA1585E42E738EE596DB2F2B970CC3CB743BD8FC
        Validity
            Not Before: Oct 28 04:15:00 2026 GMT
            Not After : Oct 29 08:01:00 2026 GMT
        Subject: CN=7E78BA74C5E6A83589AAC91911881086433432C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ac:18:28:41:d7:02:19:9b:34:0b:0c:a0:5c:
                    d0:22:6a:9e:45:1c:0e:27:a0:bc:a1:bc:e1:5e:72:
                    a5:ca:24:3a:e6:60:3d:a0:0a:9e:a6:7f:7c:2a:a9:
                    2d:0b:82:a6:6c:28:21:60:87:8e:f9:eb:64:b7:4e:
                    b2:ea:25:33:e1:48:2e:b8:49:6c:cd:8d:fe:90:fd:
                    6c:38:a2:28:6b:97:7a:ff:6e:f4:89:1a:e0:88:06:
                    ac:cd:c9:2c:e3:9b:99:28:69:02:59:a2:9c:fa:b8:
                    03:42:82:a6:0d:db:59:b9:25:06:98:36:2e:20:6d:
                    11:3f:94:79:fd:b9:f2:98:0c:1e:98:75:7b:44:f1:
                    35:54:16:9c:32:29:df:d5:bc:47:07:80:0e:7e:f5:
                    e9:cd:04:c8:d9:11:4b:9d:af:c6:44:f2:a8:6c:e6:
                    90:88:21:2e:ee:d7:b3:74:cf:7f:4b:42:58:45:c6:
                    20:9b:9e:4c:2a:a6:54:33:12:7c:5c:a0:27:b3:49:
                    fa:bd:de:c0:52:b1:14:11:cb:6d:d8:74:a2:dd:b0:
                    70:cc:a7:0c:27:ff:df:6d:3a:a7:b8:27:98:aa:fc:
                    de:63:2c:b0:b4:37:e9:94:9e:f9:16:d4:4a:7c:14:
                    f6:40:4a:9e:d1:29:3d:62:06:11:d7:fe:59:f6:3c:
                    98:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:78:BA:74:C5:E6:A8:35:89:AA:C9:19:11:88:10:86:43:34:32:C0
            X509v3 Authority Key Identifier:
                keyid:FA:15:85:E4:2E:73:8E:E5:96:DB:2F:2B:97:0C:C3:CB:74:3B:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:81:78:1c:d5:80:6a:81:f1:20:54:c3:40:8e:99:23:a5:b8:
         a2:47:9d:fa:f6:94:98:aa:6e:dd:7e:82:48:cb:02:42:31:0b:
         5c:96:a6:62:3d:a0:9b:38:51:df:a8:55:77:da:2a:65:75:48:
         fe:61:7b:49:38:5a:f4:51:46:6e:32:f2:01:47:77:cd:3a:25:
         b0:6f:08:6a:e3:25:3f:93:95:19:42:ca:f3:e1:55:e7:21:16:
         9b:05:9c:97:ae:b1:47:52:1f:55:8c:e8:bf:a8:c9:3f:ec:3d:
         48:ff:25:cd:ef:e2:a2:fe:d6:19:6a:1e:07:53:bf:8d:9c:88:
         77:7e:00:04:06:91:f1:07:ce:1e:59:7d:8f:91:0b:0b:fe:7e:
         d3:69:ac:23:da:cf:50:4d:6f:46:9f:b7:7f:85:04:8a:0f:ed:
         05:51:9b:4b:55:29:60:2c:5b:3b:ca:2b:3e:d6:55:e3:81:14:
         02:38:37:f3:1b:e1:bd:ef:c0:ca:69:01:c6:72:e7:0f:fd:b8:
         ac:41:73:86:c4:15:84:cc:09:8f:33:fb:e4:72:5e:52:4e:ee:
         44:4c:4e:9a:7c:29:9f:cd:7b:1d:86:90:ad:54:cb:10:88:bf:
         4f:80:97:49:19:43:40:c7:f2:0f:01:76:10:1d:f2:ee:13:e9:
         4c:55:af:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 12:54:01 2026 by rpki-client