Error: rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.mft
File:                     511754C54989305CCE22941E6D3C0BF8AF6D7F6C.mft (raw, json)
Hash identifier:          hh9fWaVit2VU/wOwRYMGp0GBSc01C+Pahwgc7oZM9CU=
Subject key identifier:   9A:E0:CC:4B:78:0E:97:21:24:79:62:0D:48:6F:D6:25:67:BB:DC:06
Authority key identifier: 51:17:54:C5:49:89:30:5C:CE:22:94:1E:6D:3C:0B:F8:AF:6D:7F:6C
Certificate issuer:       /CN=511754C54989305CCE22941E6D3C0BF8AF6D7F6C
Certificate serial:       610AE5AF8A61BE3030F931017F1FA6D6AB2F7BFB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.mft
Manifest number:          04CB
Signing time:             Tue 13 Oct 2026 20:09:34 +0000
Manifest this update:     Tue 13 Oct 2026 20:04:34 +0000
Manifest next update:     Wed 14 Oct 2026 23:09:34 +0000
Files and hashes:         1: 3230302e3130372e3232302e302f32322d3234203d3e20323730323539.roa (hash: I8k9lNineL+fGEvlxjqpRKtI3gWOzWc8TsBSfBCOrvU=)
                          2: 323830343a363934343a3a2f33322d3438203d3e20323730323539.roa (hash: jlLzwxWLTfsMst6DSIjvNKvp466a7Vvec48Ngs6mVOI=)
                          3: 511754C54989305CCE22941E6D3C0BF8AF6D7F6C.crl (hash: JOovjayKiIjshjdiswYo4QBqYkf+Xe0gXq191S9ZV0Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.crl
                          rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 23:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:0a:e5:af:8a:61:be:30:30:f9:31:01:7f:1f:a6:d6:ab:2f:7b:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=511754C54989305CCE22941E6D3C0BF8AF6D7F6C
        Validity
            Not Before: Oct 13 20:04:34 2026 GMT
            Not After : Oct 14 23:09:34 2026 GMT
        Subject: CN=9AE0CC4B780E97212479620D486FD62567BBDC06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:94:ee:e0:95:54:02:55:f6:73:6b:fa:09:24:
                    98:9b:83:c2:1d:5d:22:70:89:db:9c:30:46:c2:0d:
                    bf:67:f1:a0:fb:88:0b:c7:1c:5a:27:82:12:9b:8f:
                    16:1b:4c:65:a6:ce:46:27:d5:e1:10:4a:37:f4:25:
                    d1:47:f4:cd:26:85:11:15:ee:31:00:80:1a:0f:72:
                    14:02:b3:14:71:c6:33:d2:e3:3a:f2:80:c9:0e:db:
                    f5:0b:24:d0:30:41:81:a4:c6:0b:3e:54:79:2a:d8:
                    3f:f6:19:1d:0e:ee:04:42:f8:77:eb:cf:c6:9b:95:
                    74:34:dc:c2:ad:07:3f:76:ef:d9:57:45:24:79:c1:
                    c3:8a:03:af:ac:9e:ce:1c:8d:43:eb:31:10:dd:ee:
                    e9:ad:26:2a:04:da:92:f1:71:e7:6e:30:df:b3:25:
                    2d:a5:1c:aa:e7:c0:30:e3:ca:1c:a2:9a:9d:d0:0f:
                    94:67:d5:5b:aa:74:7e:da:f0:2c:c4:ce:c4:c2:99:
                    ed:8c:06:3f:b6:7e:10:dc:80:c8:c2:65:e9:27:80:
                    10:58:5e:0b:c8:6f:1c:48:40:05:42:95:63:0c:23:
                    b2:16:ae:fd:92:76:a7:af:84:4f:7e:0c:91:c3:85:
                    cc:40:47:65:28:35:53:6b:7a:b7:72:9b:66:e3:92:
                    aa:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E0:CC:4B:78:0E:97:21:24:79:62:0D:48:6F:D6:25:67:BB:DC:06
            X509v3 Authority Key Identifier:
                keyid:51:17:54:C5:49:89:30:5C:CE:22:94:1E:6D:3C:0B:F8:AF:6D:7F:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:5b:68:06:60:40:22:50:08:57:f1:c4:33:a9:bb:5b:f9:23:
         10:61:3d:fd:e1:30:9e:62:a0:f9:73:9d:04:ab:c2:f3:dc:0d:
         80:7e:5a:7f:81:6e:66:70:47:45:36:ee:9f:14:2f:32:fa:8b:
         63:8a:b8:3a:f3:36:8c:e8:15:51:f9:eb:eb:f7:2f:1d:1b:12:
         45:83:40:82:2f:8f:87:e9:92:58:e2:2a:97:1a:16:3a:f8:ce:
         df:ff:10:a7:7e:67:9b:5d:c9:48:d8:63:2f:3e:47:3d:e6:6e:
         68:95:b4:c3:12:c9:57:c9:ad:e7:da:21:11:6d:d1:ef:a4:f0:
         5a:cd:6e:f7:c8:e8:c4:23:7b:af:d7:83:34:ba:4a:c8:69:93:
         e2:ed:63:90:d6:de:65:e2:d3:a1:3d:ce:73:4a:0e:5b:71:79:
         db:d0:2c:67:f7:85:91:c3:e8:4f:ff:65:8a:b6:06:eb:e2:09:
         ff:89:49:b9:fc:f6:7c:85:5d:7b:1b:11:94:ce:73:97:66:9e:
         e2:5e:b2:5b:1c:fe:49:b4:62:eb:77:5d:c9:19:31:2f:2d:f2:
         e4:89:bd:c9:4e:fe:ce:e8:80:db:88:c7:b5:86:1c:8c:c8:26:
         65:d7:74:a2:96:1d:e8:43:b7:22:dc:ee:c0:9a:0c:4e:82:c3:
         43:fd:1c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:05:18 2026 by rpki-client