Error: rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/A2E41ECCF5A88FBD57A4935F3CBA5452B4207935.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/A2E41ECCF5A88FBD57A4935F3CBA5452B4207935.mft
File:                     A2E41ECCF5A88FBD57A4935F3CBA5452B4207935.mft (raw, json)
Hash identifier:          O9RwChFA7XZfIB9qVBTw+zjLFc8Vh+0XpX8e1mMo9zg=
Subject key identifier:   BC:58:FE:4F:DB:33:4A:D2:39:2D:23:22:45:E8:A1:F3:26:DC:81:83
Authority key identifier: A2:E4:1E:CC:F5:A8:8F:BD:57:A4:93:5F:3C:BA:54:52:B4:20:79:35
Certificate issuer:       /CN=A2E41ECCF5A88FBD57A4935F3CBA5452B4207935
Certificate serial:       5C9F21F256C200D2A9BFC3A7D6896FD41EAAC8B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E41ECCF5A88FBD57A4935F3CBA5452B4207935.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/A2E41ECCF5A88FBD57A4935F3CBA5452B4207935.mft
Manifest number:          42
Signing time:             Mon 12 Oct 2026 21:44:42 +0000
Manifest this update:     Mon 12 Oct 2026 21:39:42 +0000
Manifest next update:     Tue 13 Oct 2026 23:27:42 +0000
Files and hashes:         1: 3137302e37392e3136382e302f32322d3332203d3e20323636333032.roa (hash: G80FV6fMKC3CFonGTVd+9d2TDSNppIj7wlDDlGEAAQs=)
                          2: 323830343a333562383a3a2f33322d313238203d3e20323636333032.roa (hash: ub8rJXAX2rzEebypAzoHza3Kw7/kdpczEf/YEo+2GVg=)
                          3: A2E41ECCF5A88FBD57A4935F3CBA5452B4207935.crl (hash: 4IfUE11qQoEa7Z/lTfM+vFYEMPT98hIJUCPXjZ3W7HI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/A2E41ECCF5A88FBD57A4935F3CBA5452B4207935.crl
                          rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/A2E41ECCF5A88FBD57A4935F3CBA5452B4207935.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E41ECCF5A88FBD57A4935F3CBA5452B4207935.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 22:59:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:9f:21:f2:56:c2:00:d2:a9:bf:c3:a7:d6:89:6f:d4:1e:aa:c8:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2E41ECCF5A88FBD57A4935F3CBA5452B4207935
        Validity
            Not Before: Oct 12 21:39:42 2026 GMT
            Not After : Oct 13 23:27:42 2026 GMT
        Subject: CN=BC58FE4FDB334AD2392D232245E8A1F326DC8183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0f:cd:6a:1e:b6:7c:07:2f:25:1d:26:e1:bd:
                    07:f3:6f:25:62:26:2a:b4:ea:db:39:ce:0b:58:61:
                    7f:b2:af:fc:38:77:e4:e4:9e:30:85:9a:d8:da:4a:
                    ba:0d:7d:8e:91:a0:d7:98:ca:1c:d9:94:55:37:d7:
                    2b:82:0c:84:f1:11:99:86:62:51:71:d2:fb:29:18:
                    4b:d4:53:06:04:1d:d0:4f:95:4d:3d:71:51:25:ca:
                    f5:4c:8d:fe:cb:97:59:dc:07:69:10:bd:0d:38:10:
                    6f:23:56:a2:35:42:d9:4f:ff:a7:c8:b8:60:85:bb:
                    90:ac:5c:3b:9f:14:98:bb:38:4b:c7:94:2b:a2:54:
                    18:ab:9e:a1:82:f6:54:17:fd:2d:1a:c9:bf:4b:58:
                    03:59:24:d0:64:44:97:48:d6:56:b6:a3:82:1c:d1:
                    35:d6:fc:7e:61:9b:e6:1d:d6:66:eb:e1:a4:0d:5c:
                    ac:4e:1d:47:35:0a:71:36:af:6c:c5:1a:63:59:db:
                    a3:98:92:92:15:94:0c:ab:96:e0:d5:27:6a:74:e1:
                    92:34:72:82:bd:9d:91:4a:cf:90:bb:71:90:c6:95:
                    f0:cc:1a:91:fe:79:e1:a7:dd:e3:26:d3:9c:2a:76:
                    5c:32:62:d1:51:06:f2:02:39:bd:3d:ac:9a:13:f4:
                    3f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:58:FE:4F:DB:33:4A:D2:39:2D:23:22:45:E8:A1:F3:26:DC:81:83
            X509v3 Authority Key Identifier:
                keyid:A2:E4:1E:CC:F5:A8:8F:BD:57:A4:93:5F:3C:BA:54:52:B4:20:79:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/A2E41ECCF5A88FBD57A4935F3CBA5452B4207935.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E41ECCF5A88FBD57A4935F3CBA5452B4207935.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/A2E41ECCF5A88FBD57A4935F3CBA5452B4207935.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:83:c6:4e:e7:4d:8d:4e:f4:fb:9a:61:89:a7:7c:60:5c:9c:
         bc:60:b5:fa:ae:a9:a2:e9:94:a3:7b:d4:a0:91:aa:32:81:36:
         4d:05:e0:bc:1d:04:9d:dc:94:8a:d8:27:23:93:92:20:32:89:
         9d:ed:a9:c6:f2:df:40:78:bd:34:ca:21:51:5d:2f:9f:15:e8:
         cd:cb:50:0f:47:fc:f5:59:c4:1c:ec:bd:6a:98:07:4b:e0:e6:
         c3:74:68:b0:aa:67:61:1d:2f:9f:b3:6b:63:6d:e5:39:45:11:
         82:2f:b1:ac:54:b5:c6:50:5b:6d:04:ba:70:e9:63:52:38:c0:
         72:86:30:b6:63:29:b2:fa:fa:d2:6a:13:38:1b:51:06:7e:ac:
         97:f3:05:41:b5:91:2c:82:d3:bc:d1:13:ea:09:14:19:64:94:
         bd:52:a4:99:0e:da:06:fe:73:87:9e:2f:53:8a:8a:14:e5:b9:
         95:fe:ea:14:cf:99:48:4d:cb:d7:bb:67:59:e4:5b:08:84:d3:
         52:47:f5:d1:9b:5e:96:52:13:1e:1f:55:3b:ea:9b:96:f2:4f:
         17:b5:1a:13:62:6f:f7:16:47:f8:22:3e:05:75:80:dd:58:c4:
         bd:1f:b7:42:c4:8b:55:3c:50:eb:f8:6e:43:0a:de:6a:5c:48:
         8a:49:28:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 00:42:10 2026 by rpki-client