Error: rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/F4315E00F295861C1ED30C06EA1C17530762630E.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/F4315E00F295861C1ED30C06EA1C17530762630E.mft
File:                     F4315E00F295861C1ED30C06EA1C17530762630E.mft (raw, json)
Hash identifier:          c1SECMDQOsPuB1hU58ZRFP1gyvZsphOW3C0KbQofSFs=
Subject key identifier:   A3:55:8F:9F:46:35:33:FE:FC:3D:85:11:D9:D6:9E:29:BE:D2:D5:CA
Authority key identifier: F4:31:5E:00:F2:95:86:1C:1E:D3:0C:06:EA:1C:17:53:07:62:63:0E
Certificate issuer:       /CN=F4315E00F295861C1ED30C06EA1C17530762630E
Certificate serial:       66317D0E8B3C783EE3DCE3C73EF27C58942B419C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4315E00F295861C1ED30C06EA1C17530762630E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/F4315E00F295861C1ED30C06EA1C17530762630E.mft
Manifest number:          23
Signing time:             Fri 09 Oct 2026 19:33:22 +0000
Manifest this update:     Fri 09 Oct 2026 19:28:22 +0000
Manifest next update:     Sat 10 Oct 2026 19:40:22 +0000
Files and hashes:         1: 3138372e36332e3132342e302f32342d3234203d3e20323730373738.roa (hash: L7lQ+3ONbJAF1KNhhAX3rk/4bKGWjwpTmfTEBUSH9nY=)
                          2: 3138372e36332e3132362e302f32342d3234203d3e20323730373738.roa (hash: tDINC5gC1hTRoMPFusWS8Fs+A25eEIg7/xyJWhvE8DY=)
                          3: F4315E00F295861C1ED30C06EA1C17530762630E.crl (hash: vcfLuP8hi03pz80c/z7H8L7vdshGTvW8wlpohuU/Vfs=)
                          4: 3138372e36332e3132372e302f32342d3234203d3e20323730373738.roa (hash: 28umUbJBtf1hGJgwdakjCrNDQ6ACgn+Cbl6cpWl5b0Q=)
                          5: 323830343a373134343a3a2f33322d3332203d3e20323730373738.roa (hash: N9lk7Vs3JD0VmRNAGvdkvIgnQkzfMTRPCvihowseArY=)
                          6: 3138372e36332e3132352e302f32342d3234203d3e20323730373738.roa (hash: b+xcv+QEo0iM/LVCifbfHnUMvrpjOrCrL46yj8B0/n8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/F4315E00F295861C1ED30C06EA1C17530762630E.crl
                          rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/F4315E00F295861C1ED30C06EA1C17530762630E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4315E00F295861C1ED30C06EA1C17530762630E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 Oct 2026 19:40:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:31:7d:0e:8b:3c:78:3e:e3:dc:e3:c7:3e:f2:7c:58:94:2b:41:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4315E00F295861C1ED30C06EA1C17530762630E
        Validity
            Not Before: Oct  9 19:28:22 2026 GMT
            Not After : Oct 10 19:40:22 2026 GMT
        Subject: CN=A3558F9F463533FEFC3D8511D9D69E29BED2D5CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:dc:3f:ca:08:f4:16:74:5e:da:88:16:ce:02:
                    2a:c4:a7:0e:2c:71:d3:e6:df:24:0d:77:c0:82:31:
                    ec:2a:c0:1f:b0:c5:80:e2:8c:09:9c:35:d5:df:92:
                    3f:9e:38:f0:59:c0:56:7f:d9:2f:ba:82:81:cc:05:
                    f5:20:3c:1e:a7:87:c4:ae:b8:0f:b8:72:27:6f:d4:
                    9f:77:a0:ee:1f:94:99:30:b6:5e:66:9d:91:96:6c:
                    98:cb:c9:2b:62:ab:fa:a3:a6:e1:e1:bd:03:0f:a7:
                    d8:88:0e:09:1f:47:02:48:a5:0e:c2:05:83:31:00:
                    05:d0:d7:c1:fd:13:34:d8:2d:52:97:4d:88:ca:ad:
                    b0:59:ee:ba:13:d0:42:a9:da:b7:b2:82:35:b3:32:
                    52:a0:db:7b:6e:e5:58:b8:22:49:3e:52:fd:ae:bd:
                    3a:c4:a6:3c:9a:5d:c5:ab:66:d9:d8:70:14:dd:19:
                    0f:25:f8:2c:0d:eb:00:c5:4c:95:e7:37:a8:66:eb:
                    d2:a0:1a:98:c3:9c:d7:83:15:ae:88:21:b9:fa:13:
                    dd:68:69:d3:c1:dd:b0:31:56:63:f8:75:fd:bb:67:
                    8d:5e:5c:6c:60:05:84:5a:a6:6f:a2:e3:ee:ee:f7:
                    d8:54:12:ee:96:9e:5a:c0:f9:4a:0b:97:54:a1:11:
                    c0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:55:8F:9F:46:35:33:FE:FC:3D:85:11:D9:D6:9E:29:BE:D2:D5:CA
            X509v3 Authority Key Identifier:
                keyid:F4:31:5E:00:F2:95:86:1C:1E:D3:0C:06:EA:1C:17:53:07:62:63:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/F4315E00F295861C1ED30C06EA1C17530762630E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4315E00F295861C1ED30C06EA1C17530762630E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/F4315E00F295861C1ED30C06EA1C17530762630E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:63:6e:fd:29:91:47:d8:15:3d:ec:36:cc:fc:a9:c6:63:1d:
         fb:c0:e3:73:da:fd:80:10:88:14:53:ce:91:be:b9:28:9e:52:
         72:d4:f5:ab:7b:44:14:3d:83:c0:0d:fc:7e:c8:90:1e:b6:e7:
         8f:f3:a4:2a:fc:e3:a8:3a:49:1c:6a:00:de:2a:13:b0:db:c9:
         75:87:a2:bf:24:8e:02:fe:76:22:cd:75:51:f9:c7:0f:69:06:
         4f:5f:bf:07:fe:04:85:a3:c2:a9:ac:d6:4e:ed:ad:f1:5e:5f:
         25:97:be:70:a1:ab:d2:25:84:3b:c9:13:3e:64:72:2b:1a:94:
         58:2d:c8:12:50:65:2e:79:1e:fd:53:0a:7e:0f:97:ba:0c:19:
         75:7e:bb:f4:99:5e:4c:3d:b3:be:93:fd:7f:6c:d0:d2:ec:9c:
         37:73:56:0c:17:7b:d4:b8:d4:ea:fc:00:6d:4d:ec:97:26:ce:
         46:f4:0a:e6:4d:93:b6:1e:5a:9d:bb:10:09:85:88:ce:ab:49:
         6c:3b:8c:2d:43:29:fa:48:4a:06:46:2a:3c:b6:18:0e:ff:87:
         d1:5e:e6:46:16:46:76:1a:bc:ef:f7:c7:61:ba:f8:8f:bb:06:
         ea:bd:84:cf:d7:6e:6f:64:23:74:5d:c4:62:14:ee:e0:6b:4e:
         fb:5e:80:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:59:59 2026 by rpki-client