Error: rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/8F43BF9E79677F282BF953C8E1F71757E25A9063.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/8F43BF9E79677F282BF953C8E1F71757E25A9063.mft
File:                     8F43BF9E79677F282BF953C8E1F71757E25A9063.mft (raw, json)
Hash identifier:          cLyBUHfk0j/w30pWDHyqrb1zfMgGfzk4D8EaZbEjU8I=
Subject key identifier:   5F:79:14:73:CA:BB:65:6E:EE:B2:82:25:D4:F4:04:83:B4:9D:E9:A9
Authority key identifier: 8F:43:BF:9E:79:67:7F:28:2B:F9:53:C8:E1:F7:17:57:E2:5A:90:63
Certificate issuer:       /CN=8F43BF9E79677F282BF953C8E1F71757E25A9063
Certificate serial:       0921191CD2133D3D365AD0E90571D7723E40EFF5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F43BF9E79677F282BF953C8E1F71757E25A9063.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/8F43BF9E79677F282BF953C8E1F71757E25A9063.mft
Manifest number:          04C1
Signing time:             Sun 01 Nov 2026 01:33:27 +0000
Manifest this update:     Sun 01 Nov 2026 01:28:27 +0000
Manifest next update:     Mon 02 Nov 2026 04:48:27 +0000
Files and hashes:         1: 8F43BF9E79677F282BF953C8E1F71757E25A9063.crl (hash: 2pRzQ8QNEWcZMAFwujKrzqBsfCY8YGPz+/izMUU0J34=)
                          2: 3137302e3135302e36382e302f32322d3234203d3e203238363336.roa (hash: Wjx5i+cZIylBJo6AdYJ21cMuzZIam3nXl9aWEHqeHeI=)
                          3: 323830343a6463383a3a2f33322d3438203d3e203238363336.roa (hash: 9v5wOZl0IzbYFvHPBiRxF5GdEJlzmPBW7m+WlQZMa7Q=)
                          4: 3137392e39372e3131322e302f32312d3234203d3e203238363336.roa (hash: bIY73R+OeJNIFgA3uG7K2iPUaYv8FpclnU1l2KIux94=)
                          5: 3137392e39372e3132302e302f32312d3234203d3e203238363336.roa (hash: pxw/l+03cqSVmE0xgHdMdOaLwYj9iHqxCffKn+8iEn8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/8F43BF9E79677F282BF953C8E1F71757E25A9063.crl
                          rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/8F43BF9E79677F282BF953C8E1F71757E25A9063.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F43BF9E79677F282BF953C8E1F71757E25A9063.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 04:48:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:21:19:1c:d2:13:3d:3d:36:5a:d0:e9:05:71:d7:72:3e:40:ef:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F43BF9E79677F282BF953C8E1F71757E25A9063
        Validity
            Not Before: Nov  1 01:28:27 2026 GMT
            Not After : Nov  2 04:48:27 2026 GMT
        Subject: CN=5F791473CABB656EEEB28225D4F40483B49DE9A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:31:23:fa:28:b5:e4:d0:2a:d9:63:00:46:62:
                    27:8b:aa:21:58:a5:42:19:53:08:77:a6:55:80:55:
                    c2:a1:79:e5:1b:c7:f4:80:dd:a1:de:bc:a7:09:28:
                    86:2a:5c:73:d0:89:40:48:40:4c:ca:4c:e0:57:8a:
                    db:c3:d6:d7:c0:a5:f3:cf:2d:f3:d6:46:fc:be:21:
                    34:e3:a3:c2:38:f4:1e:77:c2:a7:80:53:47:20:5f:
                    4f:49:9c:c8:31:01:f9:cc:99:08:48:41:50:0c:58:
                    c6:b6:2a:23:0b:f0:18:f2:5a:cd:25:30:43:cf:e2:
                    e0:b9:ed:64:e3:3e:87:a1:66:14:49:de:87:a5:60:
                    4c:a1:56:11:5b:5a:21:8d:b8:a4:b1:58:c2:3b:20:
                    ff:01:b1:db:7a:97:24:66:6c:e7:69:d5:7d:3a:d0:
                    22:80:dc:34:a5:ad:f7:7b:dc:ef:dd:53:38:e0:37:
                    6a:22:07:95:ae:6b:4e:64:bb:42:82:24:64:43:30:
                    af:bc:5a:89:2e:52:af:8a:b8:61:7f:12:1b:a9:83:
                    ce:5f:55:fc:0e:40:27:3f:7f:fd:da:f1:a5:14:4e:
                    74:5e:97:b4:8e:a9:60:9d:2a:a7:4a:42:44:9a:55:
                    4d:4e:55:c1:34:a7:65:7c:57:e0:d3:b3:29:bd:bb:
                    30:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:79:14:73:CA:BB:65:6E:EE:B2:82:25:D4:F4:04:83:B4:9D:E9:A9
            X509v3 Authority Key Identifier:
                keyid:8F:43:BF:9E:79:67:7F:28:2B:F9:53:C8:E1:F7:17:57:E2:5A:90:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/8F43BF9E79677F282BF953C8E1F71757E25A9063.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F43BF9E79677F282BF953C8E1F71757E25A9063.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/8F43BF9E79677F282BF953C8E1F71757E25A9063.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:a3:7f:08:b6:73:4c:37:c4:0d:12:b7:e7:fe:1f:de:7c:82:
         da:cc:1b:0a:5d:1e:d4:0e:b7:d3:d3:8c:3c:e2:77:87:d1:21:
         a1:61:ce:ed:c6:cb:e3:30:7b:30:c4:a9:df:0b:10:25:3d:4a:
         48:c0:e5:b0:07:ba:8e:6e:93:36:39:aa:2d:8e:a2:4d:66:d4:
         d8:34:84:5d:52:17:47:68:0a:40:d4:4c:2c:87:67:a4:c5:39:
         4b:66:d6:81:62:9c:cb:7b:aa:91:b0:9b:2a:a8:9a:b8:3b:8f:
         a9:8a:6c:ff:81:17:1f:27:dd:64:8c:7a:19:51:f2:de:a2:1b:
         65:47:53:b7:14:67:5f:27:4b:ae:93:3e:b1:9c:83:80:1a:de:
         8b:94:59:12:05:8c:e4:05:e2:10:31:13:ac:f1:7e:d4:a7:cf:
         b1:15:80:23:c6:d7:2c:be:a9:4d:23:29:57:88:74:8f:8a:fc:
         7e:fc:89:52:26:82:22:8c:46:e2:68:d4:18:18:17:15:1c:5b:
         65:b4:b9:bd:53:08:57:c7:73:34:e7:51:20:f5:33:fd:5e:ac:
         97:a4:87:2f:69:3e:31:c4:c9:1e:f9:b8:fe:71:37:80:71:55:
         15:29:86:41:ce:8d:8c:b9:5d:ba:c6:19:86:29:4f:53:cf:eb:
         18:b7:3d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 09:27:33 2026 by rpki-client