Error: rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft
File:                     99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft (raw, json)
Hash identifier:          NYaFuwpP15rZTgKxQgT/+EsSDkJV0wbhJ0KsDu45aWg=
Subject key identifier:   86:7D:D4:59:4C:E0:3C:B8:EC:E0:52:AA:33:97:D8:F7:46:7A:46:6B
Authority key identifier: 99:A8:F5:3F:34:26:C9:83:CA:87:D5:D7:AC:F6:AB:5E:14:37:15:54
Certificate issuer:       /CN=99A8F53F3426C983CA87D5D7ACF6AB5E14371554
Certificate serial:       169A7FA09B4DC4EF1D49EAF27CE87EC081C5E9EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft
Manifest number:          0487
Signing time:             Mon 24 Aug 2026 07:37:24 +0000
Manifest this update:     Mon 24 Aug 2026 07:32:24 +0000
Manifest next update:     Tue 25 Aug 2026 08:12:24 +0000
Files and hashes:         1: 323830343a313635633a3a2f33322d3438203d3e20323633323834.roa (hash: bfT9d9vwD4SbS7VeTXTmr8mjxGnSXYYn2MAyZKiwdm0=)
                          2: 3137392e3130372e34382e302f32322d3234203d3e20323633323834.roa (hash: ckNtBsziZrfWgsauDA2pPoxwGYk+p7ctsc9M35CAGkA=)
                          3: 99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl (hash: BEmSHutE45tl9LsnRNjWDggBJLW6FDQ1YLEEoO4blGs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl
                          rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 08:12:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:9a:7f:a0:9b:4d:c4:ef:1d:49:ea:f2:7c:e8:7e:c0:81:c5:e9:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99A8F53F3426C983CA87D5D7ACF6AB5E14371554
        Validity
            Not Before: Aug 24 07:32:24 2026 GMT
            Not After : Aug 25 08:12:24 2026 GMT
        Subject: CN=867DD4594CE03CB8ECE052AA3397D8F7467A466B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ee:a8:47:60:6f:07:10:02:ac:00:d3:60:66:
                    9a:ec:47:35:b5:aa:de:76:1c:48:fc:52:88:78:c6:
                    32:77:95:79:7b:48:90:76:3e:72:73:b2:55:5d:8e:
                    a8:de:cc:6d:26:c7:a2:01:83:8c:9d:ed:06:80:33:
                    e1:5c:dc:45:23:9f:b9:f7:bf:4f:13:d6:8c:01:d8:
                    27:3c:67:c8:ed:29:df:39:df:a4:3e:a7:e3:3c:3e:
                    7d:a4:d5:9e:5d:3d:0b:cc:12:b0:df:41:3a:7e:c4:
                    09:c1:41:7e:bb:e2:6a:e3:5d:5b:91:7d:9c:78:58:
                    20:03:16:a3:28:a2:8c:5d:85:5c:95:b6:87:24:60:
                    81:d4:dd:4d:64:f4:0e:0d:c1:a0:81:87:71:5b:9a:
                    d3:82:48:a3:63:1c:b8:03:ce:4f:d9:a9:4e:9f:8d:
                    22:2d:87:25:34:43:a2:86:c4:49:3b:7a:52:9c:ce:
                    1c:fa:cc:60:4d:f7:f5:2b:17:bd:a4:57:02:eb:2a:
                    9c:c8:64:90:b5:e5:9b:25:54:0e:41:67:b3:3d:df:
                    4a:9d:ca:3f:cf:92:35:19:b2:3f:b9:43:c6:e5:17:
                    51:96:1e:15:d8:a3:aa:4f:91:dd:dd:98:e3:81:ce:
                    a9:79:8e:60:b9:ae:87:17:fe:36:c9:0f:92:f7:77:
                    55:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:7D:D4:59:4C:E0:3C:B8:EC:E0:52:AA:33:97:D8:F7:46:7A:46:6B
            X509v3 Authority Key Identifier:
                keyid:99:A8:F5:3F:34:26:C9:83:CA:87:D5:D7:AC:F6:AB:5E:14:37:15:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:fe:1d:d3:20:e7:86:91:21:1a:c7:06:83:64:b7:94:0b:23:
         83:cb:22:8f:93:30:22:7e:1f:70:f5:4a:1e:07:d5:c0:c6:56:
         c0:ff:8d:81:81:c2:5e:36:a0:e6:30:dc:aa:bf:4b:6b:0c:77:
         18:60:fb:ab:29:ef:d7:98:d8:91:ec:43:2d:30:99:e3:60:81:
         02:12:5a:94:f2:32:c6:c7:86:de:c2:69:45:14:2d:e6:f8:8c:
         91:c9:ed:16:10:3c:83:54:c1:0a:73:4d:d4:33:64:fe:da:36:
         42:1f:b4:36:51:08:a6:7e:9c:2a:44:bd:14:be:d0:2e:e1:c5:
         b5:78:a1:fa:e3:ff:38:9f:df:da:83:95:02:fa:1b:d9:9b:42:
         da:de:8f:cc:d4:47:66:ff:8a:ac:eb:f6:c6:59:8e:93:29:da:
         e6:93:c4:7a:2e:51:34:79:19:8e:b4:c0:11:3d:b2:73:15:2f:
         43:0b:7f:58:b6:28:05:60:3b:c5:68:9b:39:ed:fa:58:2f:56:
         1a:89:36:f2:2b:d6:4e:3d:a6:fd:0c:bc:a1:3a:53:7f:70:18:
         e4:ff:54:ef:61:47:cb:28:e6:2d:db:c3:d6:a1:23:9d:96:01:
         c7:d1:f3:8d:48:39:97:02:96:fb:91:40:ca:ec:3d:27:01:5c:
         f3:51:57:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 20:28:16 2026 by rpki-client