Error: rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.mft
File:                     37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.mft (raw, json)
Hash identifier:          1o4QwMnMY+SeQAYNbjjmkk0jUu+bTL0aCNOlPt9N0KY=
Subject key identifier:   EC:AC:A7:D3:D0:0D:D1:C7:09:99:18:E4:92:F4:B3:5B:39:09:FE:07
Authority key identifier: 37:F5:5E:91:32:B6:5D:F9:3A:C7:E8:F5:42:B2:A3:11:5C:FE:1A:79
Certificate issuer:       /CN=37F55E9132B65DF93AC7E8F542B2A3115CFE1A79
Certificate serial:       79B750B7D9BBC90366EC9EB71E6481FAFF70B195
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.mft
Manifest number:          048F
Signing time:             Sat 22 Aug 2026 22:13:15 +0000
Manifest this update:     Sat 22 Aug 2026 22:08:15 +0000
Manifest next update:     Sun 23 Aug 2026 23:44:15 +0000
Files and hashes:         1: 323830343a326330383a3a2f3332203d3e20323635313839.roa (hash: 14DVZX6+lrWsUnFwcaIY2YQwsSYL4SGq5WA45/ugDFg=)
                          2: 3137302e3234342e3130302e302f32322d3234203d3e20323635313839.roa (hash: WEANhVMN0FEEGQBH8SIdobfXyU0uk68mBo1xV757N2k=)
                          3: 37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.crl (hash: b+1Dae+wqfCta9z+Cl2RljPtR2hrUyxhR2Sm4pazuo4=)
                          4: 3136372e3235302e34342e302f32322d3234203d3e20323635313839.roa (hash: an5Qs1cRubZBVqVzqQB2Xa+oY52qYd0b7fndSzp2AhQ=)
                          5: 323830343a326330383a3a2f33322d3438203d3e20323635313839.roa (hash: Iegqjvpt7xD+5+IM0EUE5suoELW/Irgw5yY5ioACdFA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.crl
                          rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 23:44:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:b7:50:b7:d9:bb:c9:03:66:ec:9e:b7:1e:64:81:fa:ff:70:b1:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37F55E9132B65DF93AC7E8F542B2A3115CFE1A79
        Validity
            Not Before: Aug 22 22:08:15 2026 GMT
            Not After : Aug 23 23:44:15 2026 GMT
        Subject: CN=ECACA7D3D00DD1C7099918E492F4B35B3909FE07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bf:27:76:a1:73:24:f2:49:50:c2:90:60:eb:
                    12:ec:9a:8f:5d:cd:85:eb:75:af:ba:5f:08:b6:e7:
                    53:22:cc:bd:6c:cc:fc:07:e1:ae:f9:b2:9f:1c:17:
                    dc:0f:5b:f1:c5:91:58:0b:1d:d4:0a:2d:01:21:8f:
                    2a:2a:ed:0e:50:71:a2:24:ad:8d:fc:c9:7a:55:b4:
                    4d:61:e3:eb:45:a0:4a:fd:f1:6a:d7:09:7d:de:35:
                    14:f3:5a:28:8f:96:1e:a6:f6:d0:db:14:bc:bb:86:
                    62:bb:c2:03:64:56:1c:6f:80:94:a1:cc:8b:44:85:
                    f6:f1:e1:02:d4:4d:10:6d:9f:31:0d:31:0b:ba:a4:
                    0e:64:3c:5f:e0:0c:83:d1:1c:bd:6c:a7:4f:cd:9b:
                    4e:fe:25:a4:16:80:ee:d3:95:4a:a8:11:91:ad:8b:
                    f7:ca:6c:e3:16:fb:05:35:5b:2b:ae:db:6b:3a:ef:
                    bb:c9:58:31:b8:0a:04:bf:4f:04:50:6e:9b:23:36:
                    4f:04:53:ae:53:18:53:9a:f1:d7:3e:cc:5d:cf:5a:
                    26:8f:46:fd:1a:27:eb:e7:39:2b:14:a5:fc:45:24:
                    d6:5c:fd:1a:a2:06:fb:af:4d:62:83:bb:1c:17:0c:
                    ec:a3:52:e8:22:4b:c1:97:29:8c:75:02:e4:f6:ba:
                    ad:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AC:A7:D3:D0:0D:D1:C7:09:99:18:E4:92:F4:B3:5B:39:09:FE:07
            X509v3 Authority Key Identifier:
                keyid:37:F5:5E:91:32:B6:5D:F9:3A:C7:E8:F5:42:B2:A3:11:5C:FE:1A:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:b3:31:fb:f3:f6:0e:6e:dc:45:7e:e0:3b:9f:ed:d3:18:1b:
         91:dc:dd:1d:01:68:57:25:c1:53:ec:92:91:dc:6f:f3:84:1a:
         61:01:bc:03:5d:66:23:bb:1c:96:07:71:f5:7e:96:9f:94:6e:
         5a:af:6c:4d:8b:2c:60:dd:e7:33:55:22:5c:da:71:c2:ed:85:
         99:cf:1c:26:f2:cd:d1:68:83:f4:e8:83:10:4f:0a:fe:53:22:
         dc:63:ab:50:18:38:d1:d6:22:8e:63:64:3e:cc:df:fc:bb:c9:
         db:20:51:81:fd:66:cd:6d:c5:f0:5c:e7:0b:50:73:d0:c4:7e:
         02:02:a0:13:47:b8:d3:ab:6e:1b:34:f5:ee:16:d4:d5:f4:ba:
         1b:59:e1:8a:86:e0:bb:a5:4d:8e:6e:71:a4:0b:7c:25:a0:da:
         b3:fa:b8:4a:7d:a8:12:9c:be:62:6c:a8:9b:7c:4e:69:98:c2:
         02:cb:ea:aa:ee:f2:25:31:36:5e:76:39:86:21:e6:6d:c0:8d:
         45:30:c6:d3:72:69:f8:e2:1a:a4:f6:dd:9a:f0:42:4b:6b:32:
         31:66:4d:1c:5e:51:6c:8c:ac:e0:59:c9:38:50:d9:b8:2a:ec:
         05:9d:fe:55:af:22:98:09:f6:f1:d3:72:f9:18:4c:36:10:70:
         e6:4d:c9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:06:47 2026 by rpki-client