Error: rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/1/98300A2AA67A942B94CBC198EA8F7537002C0480.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/1/98300A2AA67A942B94CBC198EA8F7537002C0480.mft
File:                     98300A2AA67A942B94CBC198EA8F7537002C0480.mft (raw, json)
Hash identifier:          IEDV4/09Y+r6ZyUvp3q6bMwPQz2RebwiV2sYwgKyfEc=
Subject key identifier:   4A:F5:56:16:F8:22:20:19:1B:66:0C:A7:69:66:75:DA:05:AC:CD:66
Authority key identifier: 98:30:0A:2A:A6:7A:94:2B:94:CB:C1:98:EA:8F:75:37:00:2C:04:80
Certificate issuer:       /CN=98300A2AA67A942B94CBC198EA8F7537002C0480
Certificate serial:       2A102FDA00F978634A8A569305F4A895AAADE5E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98300A2AA67A942B94CBC198EA8F7537002C0480.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/1/98300A2AA67A942B94CBC198EA8F7537002C0480.mft
Manifest number:          058B
Signing time:             Tue 03 Nov 2026 07:10:00 +0000
Manifest this update:     Tue 03 Nov 2026 07:05:00 +0000
Manifest next update:     Wed 04 Nov 2026 07:10:00 +0000
Files and hashes:         1: 3138362e3233322e3234372e302f32342d3234203d3e203532393936.roa (hash: gPyQxNe60K71pLRkN2JCeKm25Hp2r6rAr5l/KoqLVjY=)
                          2: 98300A2AA67A942B94CBC198EA8F7537002C0480.crl (hash: nQJAB5YBzynywx/uyPuIKahYAXWTIk/rnmdyn3GL9Io=)
                          3: 323830313a38303a3166303a3a2f34382d3438203d3e203532393936.roa (hash: 3jeMOKPgccMEZox5UDj69ik1sZ9aPQlucmkfr2QeCIs=)
                          4: 3133382e3131372e3130342e302f32322d3232203d3e203532393936.roa (hash: 6JJkT6SVKoXgjhH9737U7TnHtdpi4nKUXRG2luNlgY8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/1/98300A2AA67A942B94CBC198EA8F7537002C0480.crl
                          rsync://rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/1/98300A2AA67A942B94CBC198EA8F7537002C0480.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98300A2AA67A942B94CBC198EA8F7537002C0480.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 07:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:10:2f:da:00:f9:78:63:4a:8a:56:93:05:f4:a8:95:aa:ad:e5:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98300A2AA67A942B94CBC198EA8F7537002C0480
        Validity
            Not Before: Nov  3 07:05:00 2026 GMT
            Not After : Nov 10 07:10:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bf:04:29:d1:c8:36:01:a8:61:11:00:55:b9:
                    c2:68:be:63:4b:85:f3:21:a7:bd:9c:ab:e7:12:72:
                    db:7d:9d:d2:b7:b0:97:47:27:43:1e:38:35:5d:af:
                    89:86:99:ea:9f:ea:98:1f:6f:ab:42:5d:ec:1b:6b:
                    9b:1d:83:36:27:42:ba:5f:2e:53:b3:15:65:54:19:
                    85:7f:e4:bd:28:30:91:e3:2d:6d:ac:cd:38:2e:c6:
                    6b:40:1d:bf:1c:13:87:80:0e:e0:60:78:ca:52:38:
                    f6:82:ff:77:fa:14:93:08:de:9f:94:9a:92:09:d8:
                    6f:e8:08:00:31:c3:21:1d:24:24:b7:6c:ea:3f:d4:
                    7c:7f:31:af:53:58:49:2e:4e:2c:8d:ab:b7:f3:ac:
                    06:46:b2:02:1a:a3:f5:a4:d1:c7:ae:d6:36:a6:bf:
                    5d:81:b8:ce:53:fe:fe:c4:fc:45:16:67:f8:23:de:
                    f3:ad:17:df:47:d0:a9:29:41:7f:9e:4a:cd:77:ec:
                    f6:e3:27:91:38:e4:44:34:47:36:44:13:13:21:06:
                    0f:5c:a7:dc:49:2f:8a:a2:bc:45:ff:e7:87:42:03:
                    2c:d2:7b:96:5b:4e:0d:a5:bb:be:ad:18:5b:73:22:
                    c6:0c:2e:2b:eb:9d:0d:cc:34:54:f7:e5:a7:05:22:
                    f2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F5:56:16:F8:22:20:19:1B:66:0C:A7:69:66:75:DA:05:AC:CD:66
            X509v3 Authority Key Identifier:
                keyid:98:30:0A:2A:A6:7A:94:2B:94:CB:C1:98:EA:8F:75:37:00:2C:04:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/1/98300A2AA67A942B94CBC198EA8F7537002C0480.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98300A2AA67A942B94CBC198EA8F7537002C0480.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/1/98300A2AA67A942B94CBC198EA8F7537002C0480.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:e8:e8:dd:9f:e7:63:bd:d6:2d:3e:20:39:b5:fb:f4:7e:f8:
         72:0d:ff:a0:3d:ca:23:c4:58:ff:0f:d6:38:93:0b:fa:70:69:
         ec:d8:31:85:66:dc:79:66:83:9e:c2:3b:bc:f4:36:24:cd:f4:
         75:eb:33:aa:96:7e:92:b4:b1:c8:66:b5:c7:1a:ff:8e:31:8c:
         55:fb:44:f2:16:27:61:78:db:ca:76:1f:b2:aa:34:16:cb:06:
         7e:a4:27:50:8c:91:bd:a4:b2:90:fa:f0:1c:a4:d3:d8:3f:62:
         eb:02:9e:c9:6d:1f:c3:94:b7:96:7f:6c:2e:8a:40:74:21:60:
         de:e8:93:8d:55:1a:fa:58:4e:00:1d:c1:07:3e:8e:e5:53:5e:
         4a:1f:f8:eb:21:d8:b1:d6:ff:01:a4:a3:64:5f:a7:2e:b3:f5:
         a6:0f:f9:c4:0e:16:f4:b3:53:3d:6b:4c:eb:09:4d:1b:11:82:
         a6:82:7d:b3:48:00:0d:a8:83:a9:31:b9:b8:42:e5:b4:67:8f:
         09:53:b5:09:76:c7:cd:0e:bd:e2:f4:43:5c:9c:fc:b6:b8:a3:
         b3:fe:0a:16:28:76:6f:b2:bd:15:98:29:a6:9e:b3:14:41:8b:
         8f:c3:a9:08:56:2a:ee:19:a9:a5:b9:3f:54:30:45:db:ca:18:
         f4:a5:b6:dc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 3 22:29:51 2026 by rpki-client