Error: rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft
File:                     174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft (raw, json)
Hash identifier:          tQTk+gK18P1nFC9iuNyLFxJFrGpag2YYElNWStSZcS4=
Subject key identifier:   9A:18:3B:92:05:52:DB:0F:90:8E:25:72:73:63:89:00:CF:79:F3:C8
Authority key identifier: 17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F
Certificate issuer:       /CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
Certificate serial:       14802872240E1B7EE660477725A60485FA49E828
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft
Manifest number:          0588
Signing time:             Sun 01 Nov 2026 20:10:00 +0000
Manifest this update:     Sun 01 Nov 2026 20:05:00 +0000
Manifest next update:     Mon 02 Nov 2026 20:10:00 +0000
Files and hashes:         1: 323830343a3266303a3a2f33322d3438203d3e203533323336.roa (hash: iCIduF7QQxqfe9WWIhRxBn01qy2cguSACUQ3uZL6Mc8=)
                          2: 174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl (hash: dt/ep+KeunomyAEF/zpjHtQg65mZjVgeeVkhVYTBl18=)
                          3: 3137302e38332e3230342e302f32322d3234203d3e203533323336.roa (hash: TJ08uyZJ1GJOcamzsN53j3TnZ8PU/Pwvf3HfKQfVKWs=)
                          4: 3137302e3135302e3137372e302f32342d3234203d3e203533323336.roa (hash: czdeHRFj9PnL7M7qj/lZcM02APqAmhcftgFk8kE5N6k=)
                          5: 3137302e3135302e3137382e302f32342d3234203d3e203533323336.roa (hash: 8QwnqTYTjUUgS1xL+woxvdVAENmonnunTBiufokGkJU=)
                          6: 323830343a3266303a3a2f33362d3336203d3e203533323336.roa (hash: 3dqmsQ455F7+PLHfPLd4xMEWmmtAZVDOu1tTREdmocI=)
                          7: 323830343a3266303a3a2f34302d3430203d3e203533323336.roa (hash: giyxt9aB2s+wNfulqN2/qJiaGo9qBVoy2eS8a1eNdGU=)
                          8: 3137372e31302e3132322e302f32342d3234203d3e203533323336.roa (hash: bHYU/1PajYGiGdcu5dWklICaaI34xEmcjZzZA46Clts=)
                          9: 323830343a3266303a3a2f33362d3430203d3e203533323336.roa (hash: qodRUUjyQ1+ZN0PIMUlPCk/YsUUEWk4hF5c8bWtD+wI=)
                          10: 3137372e31302e3132302e302f32322d3234203d3e203533323336.roa (hash: QfGZPys6gzQD0vqjumVY2poUp7smmBGChRcJ4Cv1/Fs=)
                          11: 323830343a3266303a3a2f33322d3332203d3e203533323336.roa (hash: WbTBKMVjWEpbtdR3lyQ0pqFtKYfBxq4W8pkK3f/7Hpo=)
                          12: 3137372e31302e3132302e302f32342d3234203d3e203533323336.roa (hash: W7MyW5BNLKEnWFkA1hKjFcgyjbdZrNdWaU6UMrj1xv4=)
                          13: 3137302e38332e3230352e302f32342d3234203d3e203533323336.roa (hash: ee2WkWd1BrrceZO6ah3hXJx4UPI4wgPZEwJ67AtmYRc=)
                          14: 3137302e3135302e3137362e302f32322d3234203d3e203533323336.roa (hash: 6QmofSex9aoNls5mlIHexbHt288zIWjuxLSauzl6poQ=)
                          15: 3137302e3135302e3137392e302f32342d3234203d3e203533323336.roa (hash: dwOB4Q4rIK8d2TC1QMDSBZOvBUGhPHW2QH3dOvgw5xw=)
                          16: 3137302e38332e3230372e302f32342d3234203d3e203533323336.roa (hash: wjBmV7gf9CQ3fJ7sPDa1qUNImJ0f0gxnp5Qk8PlRLRQ=)
                          17: 3137372e31302e3132332e302f32342d3234203d3e203533323336.roa (hash: jG4ghX4Wob+63mHmsuf6vFaIsEkhHavneIEx8UERwiA=)
                          18: 3137372e31302e3132312e302f32342d3234203d3e203533323336.roa (hash: dBLhXH9IZ5/tc3dEU2ZVUL/E2zAiyBck/VQGwe4+ABQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl
                          rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 20:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:80:28:72:24:0e:1b:7e:e6:60:47:77:25:a6:04:85:fa:49:e8:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
        Validity
            Not Before: Nov  1 20:05:00 2026 GMT
            Not After : Nov  2 20:10:00 2026 GMT
        Subject: CN=3082010A0282010100E97E86AAEE3A16E8916C094B2068DD82D192A66DB05F9AF50A6718A01C08AADCE1DB2742649206D97DADDE8D293166B386FC10A9769DCA08AA72B11350A9AE0060597A01DCDA84133DFBC2EB8BB089261E95A03EEF9A8F7E5888BFA10CF3D232071C048129FF58E1918786327C930D716A0D3A804CAF2370EAD304EDCA85D1D92145CEA6E310F107B9A1332CC23320F9B460B1ED64298928FCDF58178370F0CC2B43F1E7503D1C7619805C4BC8175A3F7205C102495BF327A2065B7551D2411A8AC218FB89753716CD43E86CE913D1FF4DF3B69D448CBA7D6F47110EB5E55B330A9A1A6EA3EE7C6DF0247CF58736986FBBBCA3F05D84E929C2C48E6D8D0B5CA50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:7e:86:aa:ee:3a:16:e8:91:6c:09:4b:20:68:
                    dd:82:d1:92:a6:6d:b0:5f:9a:f5:0a:67:18:a0:1c:
                    08:aa:dc:e1:db:27:42:64:92:06:d9:7d:ad:de:8d:
                    29:31:66:b3:86:fc:10:a9:76:9d:ca:08:aa:72:b1:
                    13:50:a9:ae:00:60:59:7a:01:dc:da:84:13:3d:fb:
                    c2:eb:8b:b0:89:26:1e:95:a0:3e:ef:9a:8f:7e:58:
                    88:bf:a1:0c:f3:d2:32:07:1c:04:81:29:ff:58:e1:
                    91:87:86:32:7c:93:0d:71:6a:0d:3a:80:4c:af:23:
                    70:ea:d3:04:ed:ca:85:d1:d9:21:45:ce:a6:e3:10:
                    f1:07:b9:a1:33:2c:c2:33:20:f9:b4:60:b1:ed:64:
                    29:89:28:fc:df:58:17:83:70:f0:cc:2b:43:f1:e7:
                    50:3d:1c:76:19:80:5c:4b:c8:17:5a:3f:72:05:c1:
                    02:49:5b:f3:27:a2:06:5b:75:51:d2:41:1a:8a:c2:
                    18:fb:89:75:37:16:cd:43:e8:6c:e9:13:d1:ff:4d:
                    f3:b6:9d:44:8c:ba:7d:6f:47:11:0e:b5:e5:5b:33:
                    0a:9a:1a:6e:a3:ee:7c:6d:f0:24:7c:f5:87:36:98:
                    6f:bb:bc:a3:f0:5d:84:e9:29:c2:c4:8e:6d:8d:0b:
                    5c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:18:3B:92:05:52:DB:0F:90:8E:25:72:73:63:89:00:CF:79:F3:C8
            X509v3 Authority Key Identifier:
                keyid:17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:12:ed:3a:a2:d9:1e:16:e9:82:6c:29:77:ef:4e:8e:b6:72:
         69:1d:aa:af:12:46:4b:a5:2e:07:10:47:7e:88:d0:dd:51:09:
         2e:38:d4:b9:0b:7a:a4:92:d3:7d:d9:f8:83:bc:9d:8c:d7:c9:
         85:e2:b5:34:dd:7b:57:1b:0b:35:80:f4:b8:5e:95:a5:7a:b3:
         85:9c:d9:0b:75:c8:4d:06:22:22:5a:39:f2:ca:e1:f7:fa:98:
         0a:48:c5:4e:c2:82:63:eb:8f:14:08:89:f5:83:78:a5:be:d9:
         65:59:21:fd:5c:4a:b4:80:7f:47:60:01:ba:a9:ef:4c:37:d2:
         a0:56:27:c4:95:82:88:cd:5c:10:29:ed:34:52:52:b4:47:b8:
         17:84:1d:c0:21:79:75:d2:17:47:00:60:16:98:90:36:78:77:
         25:35:26:d8:0e:7e:03:70:e7:97:78:61:da:97:88:60:9a:ed:
         d3:f2:b9:42:a5:d7:e7:95:33:8f:4a:a4:0a:f1:02:dd:8e:e7:
         ed:03:28:27:32:22:d0:41:32:3a:e9:27:a3:c1:dc:77:97:92:
         47:67:29:3d:46:51:c4:92:77:cc:f4:4b:bf:9c:b4:d8:69:70:
         1a:98:f5:7e:1b:36:0f:41:64:90:f8:dd:df:06:71:48:92:39:
         33:0d:3b:dd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 2 00:47:47 2026 by rpki-client