Error: rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/1/2462400704F6961586259385F73DD3F78898EBF4.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/1/2462400704F6961586259385F73DD3F78898EBF4.mft
File:                     2462400704F6961586259385F73DD3F78898EBF4.mft (raw, json)
Hash identifier:          86VwJK63ACwoIhR8dsl8C3cqL7+GslPLRVu4D/jej+g=
Subject key identifier:   73:28:E6:7E:21:35:89:AA:23:3E:34:28:80:33:41:A3:3A:06:E1:F2
Authority key identifier: 24:62:40:07:04:F6:96:15:86:25:93:85:F7:3D:D3:F7:88:98:EB:F4
Certificate issuer:       /CN=2462400704F6961586259385F73DD3F78898EBF4
Certificate serial:       5815D9F2FDF0177E793C440587C8B84457AD6813
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2462400704F6961586259385F73DD3F78898EBF4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/1/2462400704F6961586259385F73DD3F78898EBF4.mft
Manifest number:          0571
Signing time:             Sun 18 Oct 2026 19:10:00 +0000
Manifest this update:     Sun 18 Oct 2026 19:05:00 +0000
Manifest next update:     Mon 19 Oct 2026 19:10:00 +0000
Files and hashes:         1: 2462400704F6961586259385F73DD3F78898EBF4.crl (hash: LPGiU8BtG1mTs/npYCUSQ41NREgrplUxIMX+8otYJ+k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/1/2462400704F6961586259385F73DD3F78898EBF4.crl
                          rsync://rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/1/2462400704F6961586259385F73DD3F78898EBF4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2462400704F6961586259385F73DD3F78898EBF4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:15:d9:f2:fd:f0:17:7e:79:3c:44:05:87:c8:b8:44:57:ad:68:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2462400704F6961586259385F73DD3F78898EBF4
        Validity
            Not Before: Oct 18 19:05:00 2026 GMT
            Not After : Oct 25 19:10:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ee:68:14:0e:53:f2:ae:be:fb:7c:94:2e:df:
                    38:04:5c:0f:f5:5f:4f:b1:ae:5a:86:53:36:a7:6a:
                    e6:93:7d:37:ae:89:fb:fd:8a:42:16:e5:30:0e:bd:
                    a4:5c:21:59:e3:1a:84:68:fd:63:0c:55:99:c2:30:
                    a9:7e:23:1d:1f:93:d0:9d:88:22:fc:fa:91:8a:75:
                    9a:1c:97:8c:3d:f2:51:84:63:44:19:f1:09:82:4b:
                    4b:0f:7b:b5:e6:2c:70:92:64:d4:fa:84:ad:07:44:
                    74:12:db:c7:49:6a:10:da:e6:62:50:c1:97:42:b5:
                    c2:e1:8e:f8:3d:1a:b9:e4:ff:80:74:21:fc:b9:90:
                    f6:21:0c:d7:08:73:1e:86:2c:f9:19:74:dd:83:87:
                    cf:e3:55:69:a3:28:1e:87:12:12:52:70:6f:8a:4f:
                    d8:a5:43:1a:61:f8:72:24:c9:91:9f:8a:79:2b:63:
                    2e:24:17:30:01:2f:f5:d8:03:97:b5:ac:2a:5b:a6:
                    46:90:f0:ef:96:fa:c8:77:32:15:e9:18:8f:df:cf:
                    ea:51:90:f8:99:06:81:b4:82:d1:9f:80:ea:b6:0f:
                    5f:de:bb:39:78:68:1a:e9:0c:64:41:25:14:8c:ca:
                    6f:b1:bc:86:cf:e9:a0:cd:e0:ee:78:1e:5d:44:6c:
                    c0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:28:E6:7E:21:35:89:AA:23:3E:34:28:80:33:41:A3:3A:06:E1:F2
            X509v3 Authority Key Identifier:
                keyid:24:62:40:07:04:F6:96:15:86:25:93:85:F7:3D:D3:F7:88:98:EB:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/1/2462400704F6961586259385F73DD3F78898EBF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2462400704F6961586259385F73DD3F78898EBF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/1/2462400704F6961586259385F73DD3F78898EBF4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:56:8b:be:e8:8c:e9:f8:b3:45:ee:2a:8c:be:23:b0:9b:c1:
         c2:60:b6:29:59:d5:37:ea:0b:d6:3a:e1:f0:03:c9:a7:30:4a:
         24:85:96:06:22:39:4b:81:b0:ea:2b:6d:85:c9:2f:76:b6:62:
         e6:76:e6:74:ae:d9:47:6f:36:da:02:53:cd:48:e6:ab:05:2b:
         8b:04:d9:2a:61:6f:3d:81:60:52:77:65:e9:09:0c:3f:2a:6d:
         b0:2b:26:6e:a2:0f:32:c6:6e:cb:3e:ac:34:12:a9:02:80:d0:
         d4:be:37:8e:b2:77:cc:ff:42:ab:ae:54:49:21:58:9f:2b:38:
         c5:b3:ba:67:30:44:b7:ee:99:f2:cc:82:64:8c:72:01:7b:ad:
         94:c0:bb:1b:f9:fe:66:a0:1e:e0:5a:aa:9d:8d:61:0b:33:64:
         12:c7:83:52:0c:ad:a0:07:f9:75:a6:db:e2:5b:33:14:a8:0f:
         5f:43:61:c0:6f:e7:a6:72:1b:21:a2:12:20:05:14:ff:3e:05:
         61:6d:ea:3a:53:35:84:f4:21:63:b9:e6:1d:ec:2a:59:0d:41:
         9a:0c:32:c0:cd:0f:3b:a7:d1:20:75:75:fe:ad:9e:41:1c:1d:
         fa:c0:c7:13:22:01:8c:ad:0d:96:3c:83:61:d3:05:f5:ae:da:
         22:99:7b:bd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 19 04:01:55 2026 by rpki-client