Error: rpki-repo.registro.br/repo/BMVwJ2HAQi8rzGiv1Vi9PmCAoFqiChpni6T2SzJrZ24G/0/58A28FA55A129B3ED7724531E87F15ECD22B918D.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/BMVwJ2HAQi8rzGiv1Vi9PmCAoFqiChpni6T2SzJrZ24G/0/58A28FA55A129B3ED7724531E87F15ECD22B918D.mft
File:                     58A28FA55A129B3ED7724531E87F15ECD22B918D.mft (raw, json)
Hash identifier:          VmFf8380gLZo06Hvv0Hm/M1pAO5REyjUPYXFVKmb0AA=
Subject key identifier:   54:66:3A:55:A8:F4:32:0C:89:27:A5:EE:E0:3C:DC:20:5B:77:1C:0C
Authority key identifier: 58:A2:8F:A5:5A:12:9B:3E:D7:72:45:31:E8:7F:15:EC:D2:2B:91:8D
Certificate issuer:       /CN=58A28FA55A129B3ED7724531E87F15ECD22B918D
Certificate serial:       094E60058861039D5EFA43BE45DF373F0E31381C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58A28FA55A129B3ED7724531E87F15ECD22B918D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMVwJ2HAQi8rzGiv1Vi9PmCAoFqiChpni6T2SzJrZ24G/0/58A28FA55A129B3ED7724531E87F15ECD22B918D.mft
Manifest number:          0281
Signing time:             Mon 24 Aug 2026 11:39:41 +0000
Manifest this update:     Mon 24 Aug 2026 11:34:41 +0000
Manifest next update:     Tue 25 Aug 2026 14:45:41 +0000
Files and hashes:         1: 323830343a393336343a3a2f33322d3332203d3e20323734373734.roa (hash: SdQepmuKqMXCH+Ln/pdMEMFCvjxnclTyIHAs8E8D3uE=)
                          2: 58A28FA55A129B3ED7724531E87F15ECD22B918D.crl (hash: OAFVqki3tRrXQ+nZp7UDlta+4o6h1cH6KfeqOSbpJ60=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BMVwJ2HAQi8rzGiv1Vi9PmCAoFqiChpni6T2SzJrZ24G/0/58A28FA55A129B3ED7724531E87F15ECD22B918D.crl
                          rsync://rpki-repo.registro.br/repo/BMVwJ2HAQi8rzGiv1Vi9PmCAoFqiChpni6T2SzJrZ24G/0/58A28FA55A129B3ED7724531E87F15ECD22B918D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58A28FA55A129B3ED7724531E87F15ECD22B918D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 14:45:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:4e:60:05:88:61:03:9d:5e:fa:43:be:45:df:37:3f:0e:31:38:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58A28FA55A129B3ED7724531E87F15ECD22B918D
        Validity
            Not Before: Aug 24 11:34:41 2026 GMT
            Not After : Aug 25 14:45:41 2026 GMT
        Subject: CN=54663A55A8F4320C8927A5EEE03CDC205B771C0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d0:37:3a:92:8b:d8:4b:ee:78:96:19:5f:08:
                    c4:55:99:79:9a:b5:20:b0:c7:86:df:61:19:b2:d3:
                    48:34:ff:b7:a4:d2:ca:fe:b8:de:ca:e7:75:5e:e6:
                    db:d8:2f:eb:7d:90:93:cd:52:50:ee:63:cb:ea:77:
                    e9:3a:e2:a1:ac:09:e7:66:c2:69:06:2f:c8:64:3b:
                    85:3b:15:27:c4:34:64:01:fc:e5:09:61:50:4e:5c:
                    5b:21:90:73:c9:24:a4:29:c5:79:1a:c6:70:50:e9:
                    87:1b:26:57:5f:b5:d8:94:8e:a5:da:d1:a7:be:b2:
                    b7:3b:a9:84:be:a8:ac:1e:b5:35:c7:1d:17:b8:a2:
                    39:28:ea:e7:99:d5:a9:19:67:d6:5b:92:6a:ea:5a:
                    d2:1e:9a:17:b3:aa:82:76:02:90:c7:2f:57:ff:a9:
                    94:b2:28:99:d2:46:5e:62:03:44:aa:6e:b2:97:53:
                    ed:56:a8:8a:51:a4:4c:a4:43:2d:85:26:72:c2:52:
                    b4:19:75:2f:39:cf:30:fd:be:98:05:78:14:80:32:
                    47:b6:c0:8b:11:39:88:4b:db:14:23:74:cd:4e:08:
                    76:4d:cd:4a:33:d1:3c:1b:0a:db:cb:09:dd:74:31:
                    75:be:d3:96:da:3f:38:c5:c2:8c:f8:4d:97:2a:a9:
                    27:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:66:3A:55:A8:F4:32:0C:89:27:A5:EE:E0:3C:DC:20:5B:77:1C:0C
            X509v3 Authority Key Identifier:
                keyid:58:A2:8F:A5:5A:12:9B:3E:D7:72:45:31:E8:7F:15:EC:D2:2B:91:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMVwJ2HAQi8rzGiv1Vi9PmCAoFqiChpni6T2SzJrZ24G/0/58A28FA55A129B3ED7724531E87F15ECD22B918D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58A28FA55A129B3ED7724531E87F15ECD22B918D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMVwJ2HAQi8rzGiv1Vi9PmCAoFqiChpni6T2SzJrZ24G/0/58A28FA55A129B3ED7724531E87F15ECD22B918D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:c3:c0:76:fe:00:aa:58:f7:33:3e:66:2a:f0:17:fe:0d:55:
         4b:b5:38:00:f4:45:67:da:c4:95:e7:33:22:38:8e:d8:7e:7b:
         b1:b6:ac:29:80:cc:55:f4:c4:6f:3b:d7:a1:d0:6f:28:2a:f4:
         7c:dd:3c:18:ec:a9:7f:df:c0:b5:8f:38:31:b3:e4:e6:cc:a2:
         7c:4f:75:f9:0f:e0:4c:de:aa:1f:37:b3:10:91:48:71:cc:2a:
         e4:01:9d:ad:b6:be:d2:b3:76:4e:1b:73:64:76:94:ab:44:ca:
         ba:ee:ab:e6:04:4c:2f:7a:48:06:e1:59:b9:be:e0:03:5e:87:
         6e:09:71:6e:c9:78:13:89:60:97:85:c7:24:ac:f6:c5:16:f6:
         1f:33:04:1e:4c:13:6a:17:bb:bf:67:65:a7:07:df:e2:5e:91:
         31:89:2c:ef:7a:1b:82:4c:3b:a5:cf:37:51:5b:53:f9:a1:d9:
         fc:1e:78:74:a2:b9:ed:22:a1:1f:c0:6f:fe:ab:f9:ac:14:af:
         f6:48:5a:79:cf:29:ea:59:13:af:8e:9d:e8:1f:30:95:93:9e:
         d7:4f:a3:d1:5a:b5:6b:b3:cf:2f:48:41:4c:9e:63:b3:8f:8f:
         9b:fb:65:5d:ab:9d:bc:3a:68:e0:30:60:7d:39:71:ff:cf:02:
         7c:a9:a5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 14:30:50 2026 by rpki-client