Error: rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.mft
File:                     E1358C78FC7E005E12280CFDE60E73419CC6A38A.mft (raw, json)
Hash identifier:          hnjbRGLW79Vk2CI1BADWdbiIEMiKYsoLpy5pX25iKmc=
Subject key identifier:   8A:D5:41:63:66:4A:83:0E:6F:02:8A:63:F9:DB:AF:9A:C6:26:32:5B
Authority key identifier: E1:35:8C:78:FC:7E:00:5E:12:28:0C:FD:E6:0E:73:41:9C:C6:A3:8A
Certificate issuer:       /CN=E1358C78FC7E005E12280CFDE60E73419CC6A38A
Certificate serial:       7FCDA6565925BB4DF7F0552DB7372BBDF03D43E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.mft
Manifest number:          04CF
Signing time:             Wed 14 Oct 2026 11:57:55 +0000
Manifest this update:     Wed 14 Oct 2026 11:52:55 +0000
Manifest next update:     Thu 15 Oct 2026 12:17:55 +0000
Files and hashes:         1: E1358C78FC7E005E12280CFDE60E73419CC6A38A.crl (hash: +lz59j3bwNzTE8x+PU8lAOMxbk1sDRmFyuwZKb9egu0=)
                          2: 3137302e3135302e3232342e302f32322d3234203d3e20323635303336.roa (hash: Qo71QGZ9woegBbILiBBordLVHq7zvNeXN6kD/86h7hI=)
                          3: 323830343a333163343a3a2f33322d3438203d3e20323635303336.roa (hash: N7bfUjlulTd84mWzIVaRJJZIcr+4ErrhVlo8DGadX3Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.crl
                          rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 12:17:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:cd:a6:56:59:25:bb:4d:f7:f0:55:2d:b7:37:2b:bd:f0:3d:43:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1358C78FC7E005E12280CFDE60E73419CC6A38A
        Validity
            Not Before: Oct 14 11:52:55 2026 GMT
            Not After : Oct 15 12:17:55 2026 GMT
        Subject: CN=8AD54163664A830E6F028A63F9DBAF9AC626325B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8c:bd:44:19:e7:64:94:6d:55:fe:d7:fc:e8:
                    4b:a0:e9:cf:23:81:c4:de:67:55:24:08:96:32:98:
                    95:19:26:2c:91:6e:22:89:51:68:11:aa:9d:ad:3c:
                    b0:4f:7c:05:37:5e:43:06:d6:24:ae:90:8d:ea:3d:
                    e5:82:50:7c:82:90:e4:40:3d:9c:3d:8e:b5:20:0c:
                    f5:d1:af:8e:32:f8:5c:6b:93:dd:2b:4d:9e:04:35:
                    c1:f0:cd:8d:84:c3:fa:f9:24:cc:18:82:71:5d:8c:
                    a8:be:4c:9e:49:57:8f:bc:4a:9d:a5:00:23:76:6d:
                    34:4c:40:52:a0:ee:c9:54:df:12:99:fb:c6:c0:9b:
                    76:03:d3:9b:8e:26:b0:41:28:36:a4:60:89:be:2e:
                    4f:69:47:49:f7:74:0e:6f:52:03:d9:bf:3b:c3:99:
                    91:61:64:2e:19:c6:40:a9:fa:71:02:3e:b0:c6:6b:
                    fc:67:57:e1:62:7f:42:c5:5b:45:a3:56:73:ac:f6:
                    a9:19:20:a1:f0:96:29:82:a3:eb:1c:26:cc:de:5e:
                    a3:77:81:4d:7f:88:e2:47:ba:80:82:96:27:ff:3d:
                    75:41:9d:5f:a4:af:35:58:e6:b2:fc:79:50:0a:20:
                    81:dc:85:bf:e9:ce:8a:43:e2:c7:d1:2c:79:94:7f:
                    24:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D5:41:63:66:4A:83:0E:6F:02:8A:63:F9:DB:AF:9A:C6:26:32:5B
            X509v3 Authority Key Identifier:
                keyid:E1:35:8C:78:FC:7E:00:5E:12:28:0C:FD:E6:0E:73:41:9C:C6:A3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:3f:55:55:b7:ab:cb:9c:14:3a:1f:b7:79:04:05:44:8e:85:
         cc:e5:05:07:ad:a3:85:32:ae:67:fc:3e:e7:ab:01:14:3d:84:
         fc:16:95:db:58:bb:d8:92:8e:68:63:1f:d2:9b:78:23:44:35:
         cf:f8:d1:86:a2:ad:a8:48:ad:f7:f8:f8:db:1a:c4:40:31:d2:
         f5:10:d5:46:dd:21:df:c3:74:94:91:5e:ad:f0:a8:4f:c8:a9:
         87:35:ae:e2:09:4a:fd:e7:8f:22:8c:4e:ac:a5:66:02:74:e5:
         11:f6:2f:d4:bb:bd:27:d2:30:da:c3:4f:0e:36:7d:04:94:bc:
         f1:95:88:fe:3e:1e:ff:0e:8b:86:31:da:50:fc:b9:c1:0c:c0:
         76:1e:b7:aa:0f:08:20:92:7f:7c:7f:de:59:b3:e5:ec:21:cd:
         6e:01:6c:eb:71:0c:c8:d5:c8:ee:2c:fa:f3:c9:eb:41:4b:a7:
         c5:d1:65:7f:14:8b:b2:ac:66:f8:6b:aa:77:0f:4f:41:a6:5c:
         36:7e:6f:54:69:37:37:26:a2:7f:c6:13:c8:f2:8f:fb:c5:d2:
         96:e7:8c:4c:d6:eb:d5:32:7b:79:4c:e0:26:11:04:c9:7f:73:
         22:9b:21:ca:9f:ec:09:2b:86:97:08:f6:2b:51:66:a0:cc:68:
         e4:47:25:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 01:48:58 2026 by rpki-client