Error: rpki-repo.registro.br/repo/6cLarKxNwfvpJfU1uEsYuFBuumgoQQe81LJVW31xKea8/1/4A9215DFEF422A2FEED1CF8C370B2A5835ACCCA8.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/6cLarKxNwfvpJfU1uEsYuFBuumgoQQe81LJVW31xKea8/1/4A9215DFEF422A2FEED1CF8C370B2A5835ACCCA8.mft
File:                     4A9215DFEF422A2FEED1CF8C370B2A5835ACCCA8.mft (raw, json)
Hash identifier:          FenVTXRLMGJS5O3R7YZOpUG2K6PQXa1+ehjtVr3vMTg=
Subject key identifier:   98:F4:2F:4F:16:09:5B:A4:07:1C:8F:5D:72:1B:0A:BC:1A:2D:47:8B
Authority key identifier: 4A:92:15:DF:EF:42:2A:2F:EE:D1:CF:8C:37:0B:2A:58:35:AC:CC:A8
Certificate issuer:       /CN=4A9215DFEF422A2FEED1CF8C370B2A5835ACCCA8
Certificate serial:       77930F848A07F9BF8976F6D77738279983F7922D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A9215DFEF422A2FEED1CF8C370B2A5835ACCCA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6cLarKxNwfvpJfU1uEsYuFBuumgoQQe81LJVW31xKea8/1/4A9215DFEF422A2FEED1CF8C370B2A5835ACCCA8.mft
Manifest number:          04
Signing time:             Wed 26 Aug 2026 07:39:43 +0000
Manifest this update:     Wed 26 Aug 2026 07:34:43 +0000
Manifest next update:     Thu 27 Aug 2026 09:19:43 +0000
Files and hashes:         1: 323830343a366638303a3a2f33322d313238203d3e20323730363634.roa (hash: /wh+CtM5Fi6Bhv5h+jX5df/FOQeW/lVJRcPn2pa48mc=)
                          2: 3138362e36352e39322e302f32322d3332203d3e20323730363634.roa (hash: SUoWsia6MtuChWscKKZwQLnhry1ugZQv3qxurLA1qkw=)
                          3: 4A9215DFEF422A2FEED1CF8C370B2A5835ACCCA8.crl (hash: oQwtUFw7XF0W/71Cu4s/MIbFSRe2THXvzvD6KKHnF4U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6cLarKxNwfvpJfU1uEsYuFBuumgoQQe81LJVW31xKea8/1/4A9215DFEF422A2FEED1CF8C370B2A5835ACCCA8.crl
                          rsync://rpki-repo.registro.br/repo/6cLarKxNwfvpJfU1uEsYuFBuumgoQQe81LJVW31xKea8/1/4A9215DFEF422A2FEED1CF8C370B2A5835ACCCA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A9215DFEF422A2FEED1CF8C370B2A5835ACCCA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 09:19:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:93:0f:84:8a:07:f9:bf:89:76:f6:d7:77:38:27:99:83:f7:92:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A9215DFEF422A2FEED1CF8C370B2A5835ACCCA8
        Validity
            Not Before: Aug 26 07:34:43 2026 GMT
            Not After : Aug 27 09:19:43 2026 GMT
        Subject: CN=98F42F4F16095BA4071C8F5D721B0ABC1A2D478B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:52:3c:cb:38:a8:bf:2f:06:48:9d:8f:cc:b4:
                    ab:ca:17:3e:73:f0:4d:5d:a6:8d:94:04:c0:39:99:
                    3b:ea:54:a0:08:1a:58:61:e1:eb:6f:4b:98:f1:1f:
                    91:ed:c2:21:49:38:b1:bb:43:b8:86:49:a6:a1:36:
                    b3:fe:11:9f:11:b3:51:ae:26:a7:30:6f:74:6e:69:
                    f7:2f:41:69:27:bb:6b:03:3f:b3:5c:db:da:d5:49:
                    37:8f:5c:93:0c:66:cc:1c:35:a8:84:b5:09:cb:42:
                    3e:fe:7f:df:d9:96:ac:e2:c2:64:69:21:35:54:8d:
                    fb:91:86:24:14:04:ba:2f:2d:d5:20:10:e1:e7:ca:
                    cb:31:44:69:da:62:93:f3:d0:f4:82:94:d0:db:44:
                    a9:7e:8c:00:6c:b5:91:d1:78:35:0e:1e:04:bd:1f:
                    b4:50:78:7c:5f:cc:31:6c:2d:05:10:ae:c5:4f:b4:
                    ed:b2:a9:96:30:36:01:55:3e:dc:c5:bd:c9:ca:bd:
                    c9:25:76:d6:10:84:f5:c6:ce:58:ab:3d:ad:93:57:
                    8d:17:4e:8c:09:94:c6:04:4a:e4:81:c8:4d:a9:2e:
                    3d:f5:51:38:9a:7d:37:6d:16:6f:a0:6d:0d:01:f3:
                    6f:da:00:28:37:ac:97:3f:2d:74:5b:c3:75:b5:79:
                    df:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F4:2F:4F:16:09:5B:A4:07:1C:8F:5D:72:1B:0A:BC:1A:2D:47:8B
            X509v3 Authority Key Identifier:
                keyid:4A:92:15:DF:EF:42:2A:2F:EE:D1:CF:8C:37:0B:2A:58:35:AC:CC:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6cLarKxNwfvpJfU1uEsYuFBuumgoQQe81LJVW31xKea8/1/4A9215DFEF422A2FEED1CF8C370B2A5835ACCCA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A9215DFEF422A2FEED1CF8C370B2A5835ACCCA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cLarKxNwfvpJfU1uEsYuFBuumgoQQe81LJVW31xKea8/1/4A9215DFEF422A2FEED1CF8C370B2A5835ACCCA8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:3e:f8:04:7d:ff:f2:39:2d:0c:f1:1e:47:19:ae:30:6d:4f:
         59:43:38:36:ef:91:4d:dd:5b:77:29:26:27:0a:1e:45:e2:d1:
         e7:60:a4:84:32:ee:60:de:bb:0c:69:d3:e9:85:a4:38:0a:6e:
         0f:62:67:e1:9e:e4:ef:1b:cd:0a:65:c5:c6:e5:1c:0c:b1:4f:
         1a:42:04:19:d7:ba:71:17:13:3b:b1:a0:07:0d:62:30:fb:39:
         8b:84:01:f0:4b:29:47:17:c6:65:31:71:b4:4e:d6:e0:42:e7:
         88:6c:a2:3f:48:1b:34:02:6c:bf:60:ad:63:48:d6:25:dd:8a:
         45:f6:ca:0a:8e:fb:4a:fb:92:cc:f0:a5:fe:32:ae:fe:8b:fe:
         7e:6a:27:cd:85:f5:7b:28:83:14:c5:eb:36:22:ee:c2:4b:9f:
         4f:cc:35:1e:49:d2:08:09:94:b0:49:73:3c:7e:ac:9b:c0:5d:
         0f:0c:70:fe:8d:3b:33:ab:40:15:ab:9d:ac:59:41:2c:71:79:
         91:e7:a8:d8:e3:26:87:4c:53:b5:5c:6d:92:0c:fd:59:81:5d:
         68:9f:c5:f6:d4:ad:6b:96:ec:b6:3c:ed:18:bd:ef:7c:24:f0:
         1c:24:41:62:37:0f:29:c9:57:f3:60:81:91:20:39:e9:7b:95:
         b2:68:09:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:55:40 2026 by rpki-client