Error: rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.mft
File:                     1A10A2ED52FC4857ABCA56A1489602C109D46814.mft (raw, json)
Hash identifier:          Txbf04SqfE2i6JdFSaQ1S7toYmyVEQ4qo+bs4SzoZ7c=
Subject key identifier:   E2:E6:26:21:E9:66:6C:9D:02:D6:6F:4C:3B:C5:0E:6B:12:2B:9A:BD
Authority key identifier: 1A:10:A2:ED:52:FC:48:57:AB:CA:56:A1:48:96:02:C1:09:D4:68:14
Certificate issuer:       /CN=1A10A2ED52FC4857ABCA56A1489602C109D46814
Certificate serial:       6DFD1C99BE21CB3ECB0B5E9FCDA578D3506EA019
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.mft
Manifest number:          02F1
Signing time:             Sun 01 Nov 2026 03:21:20 +0000
Manifest this update:     Sun 01 Nov 2026 03:16:20 +0000
Manifest next update:     Mon 02 Nov 2026 19:02:20 +0000
Files and hashes:         1: 323830343a6538303a3a2f33322d3438203d3e20323632363736.roa (hash: 2SrzNDdOrFg85pKaMvtT/Um2o0fcj4P4LOCrJbNUwpY=)
                          2: 1A10A2ED52FC4857ABCA56A1489602C109D46814.crl (hash: U/U+ZzJZT+r1ctXN+8+vvrjGNJzhWTct3T9yhS/WZyg=)
                          3: 3138372e37332e3232342e302f32302d3234203d3e20323632363736.roa (hash: KujT5MR/jwAarmtDw/nh5icyUo3QMLB4DceDPQMNS2I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.crl
                          rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 15:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:fd:1c:99:be:21:cb:3e:cb:0b:5e:9f:cd:a5:78:d3:50:6e:a0:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A10A2ED52FC4857ABCA56A1489602C109D46814
        Validity
            Not Before: Nov  1 03:16:20 2026 GMT
            Not After : Nov  2 19:02:20 2026 GMT
        Subject: CN=E2E62621E9666C9D02D66F4C3BC50E6B122B9ABD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:21:e6:97:3a:f7:56:fc:da:43:77:e3:62:aa:
                    c5:65:87:42:89:a1:db:ab:1d:8a:ee:9d:eb:1a:82:
                    b3:20:18:87:4a:62:7f:10:fc:5b:7f:7b:2c:f2:9b:
                    5f:e9:2a:08:70:7b:e2:56:4c:d1:b1:e1:84:44:41:
                    03:d4:9a:67:7f:b5:2c:6a:61:06:20:96:27:ee:1d:
                    ef:4f:79:f2:ef:83:55:97:c1:9e:1e:fa:21:54:5a:
                    b5:5f:91:58:27:6b:cf:f1:f5:7f:90:d0:d7:30:fd:
                    61:a0:c5:95:79:99:5b:90:66:a8:45:9d:81:ff:8b:
                    49:57:1f:b8:c6:06:3c:ee:7f:e2:27:60:fe:fd:8a:
                    6f:5c:25:42:01:42:89:01:a4:56:14:2f:de:10:4b:
                    11:ae:f9:a6:d6:74:07:87:44:a1:e2:71:3f:8c:6c:
                    de:75:7d:19:48:c0:e9:29:35:78:ce:53:f6:9b:47:
                    53:1b:64:73:02:76:7c:35:cf:0f:c4:2b:db:68:53:
                    d9:a6:60:da:de:79:18:29:aa:40:91:ac:ea:3a:5c:
                    66:96:bc:a7:cd:5c:41:e6:51:06:2f:1f:bd:f5:f0:
                    24:e0:13:56:61:2b:30:b9:e6:a2:d3:4a:71:78:c7:
                    78:6a:3b:69:78:8a:36:c4:d5:ad:80:73:5d:36:84:
                    4f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E6:26:21:E9:66:6C:9D:02:D6:6F:4C:3B:C5:0E:6B:12:2B:9A:BD
            X509v3 Authority Key Identifier:
                keyid:1A:10:A2:ED:52:FC:48:57:AB:CA:56:A1:48:96:02:C1:09:D4:68:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:15:05:b8:f6:ba:1d:d2:d8:1e:1f:60:3d:46:ea:90:55:5c:
         bf:89:64:3a:54:e7:86:8d:d4:07:fb:6b:ba:2d:a4:04:7f:61:
         14:69:9c:3a:ca:48:60:dd:47:c6:b6:a4:93:e3:bf:59:9a:66:
         30:72:01:b6:4a:36:57:93:cd:08:d9:1d:50:fd:cf:9a:dd:53:
         bd:bd:b0:36:1e:cf:16:dd:94:e8:ed:b3:21:55:94:be:45:ad:
         42:72:a3:9e:db:22:27:01:6e:83:dd:b1:cf:a5:32:a1:cb:fa:
         90:64:99:63:89:44:6a:69:ef:8d:e1:21:f2:a6:6e:58:f3:a4:
         91:ff:12:b7:2d:09:c5:13:7b:92:cc:39:b2:04:29:56:cc:7e:
         a6:fd:74:8f:07:33:01:ed:ca:74:ab:6d:42:94:ac:31:5d:b1:
         e4:a2:db:44:46:71:87:0a:70:c6:e8:de:56:74:7f:9c:85:a9:
         97:4e:c4:5e:aa:6c:cf:bf:42:b1:4c:a7:84:58:a8:04:a6:46:
         41:34:f8:5b:02:3a:9c:03:fa:19:52:b6:f1:2e:32:7a:fa:61:
         c2:dc:cf:b3:b3:c9:c4:4f:f2:00:e9:dd:cd:57:23:e0:cc:57:
         04:06:f7:1c:07:c3:7f:af:f1:a4:59:0f:2e:d4:2b:38:58:44:
         ca:54:46:d9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUbf0cmb4hyz7LC16fzaV401BuoBkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUExMEEyRUQ1MkZDNDg1N0FCQ0E1NkExNDg5NjAyQzEw
OUQ0NjgxNDAeFw0yNjExMDEwMzE2MjBaFw0yNjExMDIxOTAyMjBaMDMxMTAvBgNV
BAMTKEUyRTYyNjIxRTk2NjZDOUQwMkQ2NkY0QzNCQzUwRTZCMTIyQjlBQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvIeaXOvdW/NpDd+NiqsVlh0KJ
odurHYrunesagrMgGIdKYn8Q/Ft/eyzym1/pKghwe+JWTNGx4YREQQPUmmd/tSxq
YQYglifuHe9PefLvg1WXwZ4e+iFUWrVfkVgna8/x9X+Q0Ncw/WGgxZV5mVuQZqhF
nYH/i0lXH7jGBjzuf+InYP79im9cJUIBQokBpFYUL94QSxGu+abWdAeHRKHicT+M
bN51fRlIwOkpNXjOU/abR1MbZHMCdnw1zw/EK9toU9mmYNreeRgpqkCRrOo6XGaW
vKfNXEHmUQYvH7318CTgE1ZhKzC55qLTSnF4x3hqO2l4ijbE1a2Ac102hE9hAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU4uYmIelmbJ0C1m9MO8UOaxIrmr0wHwYDVR0j
BBgwFoAUGhCi7VL8SFerylahSJYCwQnUaBQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGlpeERFckQ4d0FDb3RIRHZDU1hicmZWeTM1dXJrN2FGSE5XN3JSbWZQ
cm0vMS8xQTEwQTJFRDUyRkM0ODU3QUJDQTU2QTE0ODk2MDJDMTA5RDQ2ODE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBMTBBMkVENTJGQzQ4NTdB
QkNBNTZBMTQ4OTYwMkMxMDlENDY4MTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RGlpeERFckQ4d0FDb3RIRHZDU1hicmZWeTM1dXJrN2FGSE5XN3JSbWZQcm0vMS8x
QTEwQTJFRDUyRkM0ODU3QUJDQTU2QTE0ODk2MDJDMTA5RDQ2ODE0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYxUFuPa6HdLYHh9gPUbqkFVcv4lkOlTnho3UB/trui2kBH9hFGmcOspIYN1H
xrakk+O/WZpmMHIBtko2V5PNCNkdUP3Pmt1Tvb2wNh7PFt2U6O2zIVWUvkWtQnKj
ntsiJwFug92xz6Uyocv6kGSZY4lEamnvjeEh8qZuWPOkkf8Sty0JxRN7ksw5sgQp
Vsx+pv10jwczAe3KdKttQpSsMV2x5KLbREZxhwpwxujeVnR/nIWpl07EXqpsz79C
sUynhFioBKZGQTT4WwI6nAP6GVK28S4yevphwtzPs7PJxE/yAOndzVcj4MxXBAb3
HAfDf6/xpFkPLtQrOFhEylRG2Q==
-----END CERTIFICATE-----
Generated at Sun Nov 1 14:42:35 2026 by rpki-client