Error: rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/1/39E9C8F360117C7F207DEE7951C1AD935707A727.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/1/39E9C8F360117C7F207DEE7951C1AD935707A727.mft
File:                     39E9C8F360117C7F207DEE7951C1AD935707A727.mft (raw, json)
Hash identifier:          pgbi2ftJ84JexmZ6nJzCq7DTlnkuK1EokPffMSGcb8I=
Subject key identifier:   4E:AE:50:72:E5:3C:66:1F:37:42:1F:FF:97:72:4E:0A:67:F3:C3:3B
Authority key identifier: 39:E9:C8:F3:60:11:7C:7F:20:7D:EE:79:51:C1:AD:93:57:07:A7:27
Certificate issuer:       /CN=39E9C8F360117C7F207DEE7951C1AD935707A727
Certificate serial:       1576601B9A6ACF58667D96C908BD95C488E94589
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E9C8F360117C7F207DEE7951C1AD935707A727.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/1/39E9C8F360117C7F207DEE7951C1AD935707A727.mft
Manifest number:          0588
Signing time:             Sun 01 Nov 2026 04:10:00 +0000
Manifest this update:     Sun 01 Nov 2026 04:05:00 +0000
Manifest next update:     Mon 02 Nov 2026 04:10:00 +0000
Files and hashes:         1: 3133312e3130302e3139322e302f32322d3234203d3e20323632363330.roa (hash: PI++vmQS7p1miOoGJAg7YPaGgKyS/QAmIFAV0GvxdIc=)
                          2: 3137372e38362e3132382e302f32322d3234203d3e20323632363330.roa (hash: tX6hzm8Y8+025gxrx5F/gMNIdSivmBvQ9DvXNi4RsS8=)
                          3: 39E9C8F360117C7F207DEE7951C1AD935707A727.crl (hash: Df9PlwbD1rX/VvociClLiPTIc6m+SVodMUQmJIYp6TI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/1/39E9C8F360117C7F207DEE7951C1AD935707A727.crl
                          rsync://rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/1/39E9C8F360117C7F207DEE7951C1AD935707A727.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E9C8F360117C7F207DEE7951C1AD935707A727.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 04:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:76:60:1b:9a:6a:cf:58:66:7d:96:c9:08:bd:95:c4:88:e9:45:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39E9C8F360117C7F207DEE7951C1AD935707A727
        Validity
            Not Before: Nov  1 04:05:00 2026 GMT
            Not After : Nov  2 04:10:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:80:5b:5b:b5:c7:49:03:07:29:6c:d3:a5:78:
                    47:97:7b:89:15:b0:79:4d:b4:56:02:ce:5c:08:70:
                    6d:14:43:d1:91:8b:1a:67:b8:64:67:0e:22:a4:a5:
                    61:33:43:00:34:a8:5d:33:3f:32:36:07:ef:38:13:
                    35:dc:83:af:7c:bd:64:f7:2b:4d:cf:fe:7a:32:9e:
                    1a:44:84:60:46:80:b8:7c:92:59:54:82:29:c4:02:
                    e0:98:13:9b:b1:8a:f6:25:89:3d:07:03:4a:12:63:
                    a8:28:17:79:6c:98:a1:ea:42:12:bc:2d:33:37:f3:
                    5a:29:1c:5e:9e:81:ac:00:8b:94:5d:2e:a3:d9:02:
                    69:63:f0:bd:a6:df:25:93:12:dc:dd:ca:b8:f9:74:
                    29:4c:5b:d1:07:93:14:12:cf:2a:e3:26:b8:4c:1b:
                    94:2a:8d:39:f8:51:b6:8e:d8:04:aa:a0:ff:a3:55:
                    83:34:51:6f:34:f3:e9:16:d6:03:aa:2e:c5:4b:b5:
                    50:3f:52:83:55:e9:e8:9e:ba:ba:20:eb:ac:d2:3a:
                    be:b1:ff:50:dd:64:34:50:54:2e:eb:24:4b:bb:cf:
                    9e:66:70:b4:15:ed:e0:14:85:11:ac:c8:f1:75:4e:
                    c9:2f:c2:37:11:5e:05:e4:ac:12:c2:85:e4:ef:a3:
                    8f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:AE:50:72:E5:3C:66:1F:37:42:1F:FF:97:72:4E:0A:67:F3:C3:3B
            X509v3 Authority Key Identifier:
                keyid:39:E9:C8:F3:60:11:7C:7F:20:7D:EE:79:51:C1:AD:93:57:07:A7:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/1/39E9C8F360117C7F207DEE7951C1AD935707A727.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E9C8F360117C7F207DEE7951C1AD935707A727.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/1/39E9C8F360117C7F207DEE7951C1AD935707A727.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:f9:b8:d3:f5:0c:55:12:2a:8e:1b:94:90:ad:ee:81:a6:e8:
         75:45:51:bd:0c:ec:7a:a8:7b:10:09:e4:c6:f7:84:32:4c:cf:
         3f:88:76:e2:9f:2c:77:96:4c:4a:ba:4a:06:10:8d:f0:24:f1:
         16:ed:8e:71:37:b7:09:cc:b9:bb:66:67:c8:bc:62:39:86:3d:
         52:17:a4:32:78:51:62:08:ce:7c:f4:75:14:e3:a0:d4:f4:a0:
         f6:98:82:c5:a1:82:b3:7d:bb:af:81:7b:3f:9a:2c:77:24:d4:
         19:ff:4f:24:34:bd:8d:8e:e1:0f:5d:d0:5c:7a:4a:cd:98:81:
         31:a1:02:71:a0:2b:93:ec:a4:36:bc:7b:64:a3:73:dd:6d:75:
         01:ac:19:51:4e:6f:72:00:ee:bc:17:d2:e9:f7:e3:2d:42:50:
         69:86:92:78:05:49:22:16:0f:fc:3a:9f:85:ea:ef:01:c8:ed:
         0d:75:25:01:ab:e4:57:a5:b1:4e:a8:ac:2a:47:74:1b:a9:8c:
         96:d1:d3:23:f1:9a:11:94:fa:00:16:8c:98:5a:2a:bb:15:cc:
         c7:85:d8:31:8b:16:48:5b:fb:43:43:63:10:39:46:79:98:28:
         65:e1:4f:a5:b5:44:5a:8b:3f:7b:16:9d:15:60:9a:06:41:9d:
         da:a1:f7:44
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 1 08:22:27 2026 by rpki-client