Error: rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/1/BC4626991569184D81CCF322C25715DD37F1D01B.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/1/BC4626991569184D81CCF322C25715DD37F1D01B.mft
File:                     BC4626991569184D81CCF322C25715DD37F1D01B.mft (raw, json)
Hash identifier:          M8uXV/k5QcXYQM93hkuH8RU6bsBaZe2wcFCWkLuBRHw=
Subject key identifier:   A4:4B:28:75:1E:D0:3C:CA:85:D1:81:9E:8D:C1:3A:21:57:C6:7F:F2
Authority key identifier: BC:46:26:99:15:69:18:4D:81:CC:F3:22:C2:57:15:DD:37:F1:D0:1B
Certificate issuer:       /CN=BC4626991569184D81CCF322C25715DD37F1D01B
Certificate serial:       7F45CD7C007CF2EA2019A9AAD18C158693FD1311
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC4626991569184D81CCF322C25715DD37F1D01B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/1/BC4626991569184D81CCF322C25715DD37F1D01B.mft
Manifest number:          0548
Signing time:             Sun 20 Sep 2026 03:00:00 +0000
Manifest this update:     Sun 20 Sep 2026 02:55:00 +0000
Manifest next update:     Mon 21 Sep 2026 03:00:00 +0000
Files and hashes:         1: BC4626991569184D81CCF322C25715DD37F1D01B.crl (hash: 5pJrUn5k/qlwxGoRp1DIlmfd3pb1g/hHqKi9LTaUgao=)
                          2: 323830343a356630303a3a2f33322d313238203d3e20323639303730.roa (hash: 6uu975bsToD06Tj7+sYQDdzdaOEn5RxQJ0V3+i9YA3M=)
                          3: 34352e3137392e38382e302f32322d3332203d3e20323639303730.roa (hash: tbDqUC9/XHrOLP4+5hos2AWihZViPkV4+9bGr742+wo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/1/BC4626991569184D81CCF322C25715DD37F1D01B.crl
                          rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/1/BC4626991569184D81CCF322C25715DD37F1D01B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC4626991569184D81CCF322C25715DD37F1D01B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Sep 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:45:cd:7c:00:7c:f2:ea:20:19:a9:aa:d1:8c:15:86:93:fd:13:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC4626991569184D81CCF322C25715DD37F1D01B
        Validity
            Not Before: Sep 20 02:55:00 2026 GMT
            Not After : Sep 21 03:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3a:4a:d6:16:86:bf:be:49:c8:8f:d6:c1:38:
                    2f:db:7a:72:88:cc:6c:84:d9:04:e8:ea:fc:4a:c4:
                    3e:32:81:2a:ee:62:2b:34:46:28:c3:55:52:79:c7:
                    2b:22:a8:de:14:95:e8:17:c7:c2:f8:63:9f:0d:e1:
                    21:6b:6a:bf:d2:23:46:ae:3a:f2:5b:27:65:92:f0:
                    cc:44:da:86:a2:20:a8:cf:3b:cf:81:d3:a9:80:7e:
                    89:ff:57:13:eb:b1:3e:e1:78:93:e3:20:85:40:35:
                    bb:ad:66:54:56:ef:e5:d3:48:9d:8b:54:4e:5c:9f:
                    51:b2:ca:02:df:a7:34:68:b8:88:e5:f6:33:25:38:
                    18:27:03:79:63:44:e4:16:17:c0:c7:f7:eb:cd:16:
                    91:13:c3:8d:d7:88:38:fe:1b:3c:af:50:60:d2:33:
                    a2:77:88:f4:72:e1:31:cc:72:51:2c:e7:51:9a:ec:
                    0b:2d:1e:35:fb:15:a2:59:39:eb:cb:ba:65:ff:61:
                    d9:b5:33:31:14:90:9b:8c:8d:05:28:c8:42:d1:1d:
                    45:65:2d:95:ec:09:20:33:0f:48:e1:c4:e9:ba:8e:
                    3f:de:21:b9:dc:90:6f:a1:29:a2:4e:89:3c:9d:01:
                    71:39:da:95:47:0a:f5:67:cd:bd:c5:a6:0c:fe:e3:
                    5b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:4B:28:75:1E:D0:3C:CA:85:D1:81:9E:8D:C1:3A:21:57:C6:7F:F2
            X509v3 Authority Key Identifier:
                keyid:BC:46:26:99:15:69:18:4D:81:CC:F3:22:C2:57:15:DD:37:F1:D0:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/1/BC4626991569184D81CCF322C25715DD37F1D01B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC4626991569184D81CCF322C25715DD37F1D01B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/1/BC4626991569184D81CCF322C25715DD37F1D01B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:e0:23:72:c9:4d:f0:c7:5e:1e:5c:fd:d5:dd:31:97:cf:f5:
         de:d8:51:1e:4a:10:5e:9b:18:f2:18:1d:72:8b:1b:70:b4:6b:
         06:94:a3:8e:b5:9e:ac:c6:bd:c8:01:e8:0b:21:4b:6e:b6:b3:
         98:3e:4f:d4:52:f3:69:c4:50:5d:27:5d:0c:1f:9d:8f:fc:2b:
         3a:c1:63:b7:7e:0f:b6:e5:92:59:ca:3b:dc:2b:aa:d5:b4:7a:
         e1:b8:3f:a6:f9:2e:9e:b1:b1:7a:05:ec:31:6f:6e:ce:ec:db:
         06:73:df:e7:5f:66:c7:3e:c7:b1:d2:a0:1b:0e:66:09:79:74:
         ca:bc:aa:f3:92:b4:98:47:11:45:1e:ef:6a:67:2d:55:ae:c3:
         fe:fc:82:40:b7:82:7c:03:27:a8:2b:91:e3:3b:2c:d8:9e:8c:
         cf:1c:0c:f1:6d:d0:b9:d0:51:50:cb:d8:18:78:b9:06:63:c6:
         90:55:8d:13:5b:3f:7e:43:ef:2a:b5:74:4a:fa:62:6e:c8:61:
         5d:ee:c5:91:2a:62:f0:38:cd:10:27:88:aa:86:14:56:70:d8:
         60:a0:05:28:e4:e9:eb:ab:f3:3b:36:64:4e:d4:41:dc:78:96:
         66:f1:20:e4:36:23:d7:f0:16:32:14:8b:d5:d6:cc:0c:82:59:
         4d:35:02:29
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 20 15:21:43 2026 by rpki-client