Error: rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.mft
File:                     BB0A1EEFD67F36B7D7F60A6431C72C8138020661.mft (raw, json)
Hash identifier:          MS7uxh6rq8xPWhbvbmddHW84eeEmEB5L/v0nI0t5AMU=
Subject key identifier:   B5:FF:01:26:B8:E1:FA:E3:81:DB:8B:98:CB:FA:80:A4:20:4C:11:E8
Authority key identifier: BB:0A:1E:EF:D6:7F:36:B7:D7:F6:0A:64:31:C7:2C:81:38:02:06:61
Certificate issuer:       /CN=BB0A1EEFD67F36B7D7F60A6431C72C8138020661
Certificate serial:       23D64A972A1DB6937E05BE28DAF0B6BA50747C5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.mft
Manifest number:          0586
Signing time:             Sat 31 Oct 2026 11:00:00 +0000
Manifest this update:     Sat 31 Oct 2026 10:55:00 +0000
Manifest next update:     Sun 01 Nov 2026 11:00:00 +0000
Files and hashes:         1: 323830343a373964343a3a2f33322d3336203d3e20323731333330.roa (hash: 0MMOAs1MWxCvekbrZ3YR/igWWET3IbGvNy0LegCBu28=)
                          2: 3230372e3234382e342e302f32322d3234203d3e20323731333330.roa (hash: ghF1TGhBZZyNg9ABkTWFCoeZHaXw906fT76yMOCnUfc=)
                          3: BB0A1EEFD67F36B7D7F60A6431C72C8138020661.crl (hash: AFWsMIpEj4rgrMFiKhS4B3tyyar9fGZeC8Gzhlrxhjk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.crl
                          rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:d6:4a:97:2a:1d:b6:93:7e:05:be:28:da:f0:b6:ba:50:74:7c:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB0A1EEFD67F36B7D7F60A6431C72C8138020661
        Validity
            Not Before: Oct 31 10:55:00 2026 GMT
            Not After : Nov  1 11:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:52:8d:89:ff:0b:90:32:a2:bc:14:e4:b0:8f:
                    ba:4e:93:f8:61:58:50:5a:a2:58:4f:8c:98:ce:e0:
                    45:6a:f4:74:dc:72:7c:17:1d:47:e9:8f:a9:4e:0e:
                    dd:9a:33:bf:dc:00:7d:c4:91:ad:b8:24:30:83:b1:
                    3d:5e:10:05:00:f7:7c:48:b6:30:6d:96:3c:aa:7b:
                    e0:e5:b7:8a:3d:0e:fc:ef:5f:3e:1f:77:1b:c2:ce:
                    b1:04:55:68:a3:ce:0e:7d:13:06:36:2b:f8:48:b6:
                    23:bf:ce:d2:45:af:ee:17:ab:6b:98:38:86:a3:78:
                    23:c3:e3:e6:9e:47:9e:7f:f7:e0:19:8e:47:a2:a0:
                    28:cb:26:05:92:70:57:20:61:1e:5e:3e:6a:68:16:
                    02:60:39:0b:b9:1e:aa:ee:4a:ea:50:de:b7:5e:38:
                    cd:57:69:6b:17:0e:37:50:5c:ad:1d:bd:46:a2:88:
                    0d:6d:19:ba:8d:5b:88:2b:3c:de:11:f7:c5:2e:eb:
                    63:34:89:09:52:91:1e:de:8f:9a:24:6a:16:19:2c:
                    3e:88:65:f9:8d:3b:7c:91:6f:84:eb:c9:e2:92:cd:
                    37:9a:50:f5:c2:3b:e7:03:e3:62:70:15:00:8f:9a:
                    5f:ca:6e:d3:ac:e2:45:b9:51:69:19:3e:31:84:93:
                    08:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FF:01:26:B8:E1:FA:E3:81:DB:8B:98:CB:FA:80:A4:20:4C:11:E8
            X509v3 Authority Key Identifier:
                keyid:BB:0A:1E:EF:D6:7F:36:B7:D7:F6:0A:64:31:C7:2C:81:38:02:06:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:4c:41:e8:75:b6:50:df:a6:2d:7e:6d:8b:91:c1:b0:34:f9:
         74:5c:f4:0c:f0:7f:c2:b8:46:2e:69:38:1a:3a:4f:d6:f4:76:
         0e:ee:c2:6a:b5:d3:11:b2:65:5f:80:35:39:c5:12:13:ec:c6:
         8e:50:41:54:f0:fc:27:02:82:e0:f0:fd:2f:d7:e2:5b:f8:f4:
         12:b1:ff:d0:eb:69:a9:94:b1:5d:38:7f:45:39:75:be:40:3e:
         ac:29:60:14:28:72:d3:2f:75:21:5a:79:11:26:8e:81:6f:a7:
         0e:cd:1b:78:04:6e:f2:d7:9a:ce:3f:6d:e7:7f:52:74:35:91:
         58:fe:5e:b7:01:ac:3a:5a:50:1c:83:e7:d6:83:48:9c:33:4a:
         9f:a8:54:d0:95:0d:3f:22:09:60:35:f5:b6:fe:68:83:ce:25:
         b3:c8:51:7b:86:fc:39:c2:65:10:49:9b:ba:60:86:b6:cc:f7:
         fb:c5:c0:26:e0:30:19:f0:a1:c0:96:5a:cf:24:cb:05:8a:d8:
         f8:90:d8:e1:be:7f:70:44:61:89:c1:71:7c:5d:23:84:80:14:
         a2:f0:15:19:b1:a8:37:3a:91:4f:15:f3:ca:6c:51:4c:d8:b8:
         51:a6:33:18:fd:e3:11:06:75:92:f7:19:75:ec:28:7c:58:cf:
         35:94:5e:55
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 31 16:01:17 2026 by rpki-client