Error: rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/062347D8F4F770415633E22D794F8D58F390BA86.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/062347D8F4F770415633E22D794F8D58F390BA86.mft
File:                     062347D8F4F770415633E22D794F8D58F390BA86.mft (raw, json)
Hash identifier:          dDjm8tvi/4G4ql0aqIUnVqZEyhm4MBYXpXltVAK1u3c=
Subject key identifier:   96:E2:6D:64:9F:81:6B:68:4A:8C:D9:B3:15:5F:05:88:9F:F2:F1:3F
Authority key identifier: 06:23:47:D8:F4:F7:70:41:56:33:E2:2D:79:4F:8D:58:F3:90:BA:86
Certificate issuer:       /CN=062347D8F4F770415633E22D794F8D58F390BA86
Certificate serial:       477D5A9D0D1B9B7FB155F94FF092C6FE7BFC66F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/062347D8F4F770415633E22D794F8D58F390BA86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/062347D8F4F770415633E22D794F8D58F390BA86.mft
Manifest number:          056A
Signing time:             Tue 13 Oct 2026 11:10:00 +0000
Manifest this update:     Tue 13 Oct 2026 11:05:00 +0000
Manifest next update:     Wed 14 Oct 2026 11:10:00 +0000
Files and hashes:         1: 323830343a366232633a3a2f33322d3335203d3e20323730333833.roa (hash: +MEKwdws3x3s9D2KqYylPSLBoKLUSSShhawfHhm3wbM=)
                          2: 062347D8F4F770415633E22D794F8D58F390BA86.crl (hash: bIYeLPZVP+O7GWtLHvkXoRzL6HoFcwm8Lz2ydGoiw0A=)
                          3: 3139302e38392e3136382e302f32322d3234203d3e20323730333833.roa (hash: SBUrw02b1xdhOVQH1EQlyfdsqcQOVCjMZQ9TaX5wu8Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/062347D8F4F770415633E22D794F8D58F390BA86.crl
                          rsync://rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/062347D8F4F770415633E22D794F8D58F390BA86.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/062347D8F4F770415633E22D794F8D58F390BA86.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 11:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:7d:5a:9d:0d:1b:9b:7f:b1:55:f9:4f:f0:92:c6:fe:7b:fc:66:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=062347D8F4F770415633E22D794F8D58F390BA86
        Validity
            Not Before: Oct 13 11:05:00 2026 GMT
            Not After : Oct 14 11:10:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0c:c4:8a:b3:04:8b:5b:19:df:5d:4b:c6:18:
                    65:00:04:48:64:f3:8b:da:ba:34:5f:9a:98:bf:5c:
                    29:c4:39:ac:23:19:61:58:3b:5d:b0:aa:00:99:68:
                    c6:82:54:30:5a:26:dd:54:82:a8:28:4c:34:3a:a2:
                    bd:c9:41:8e:5e:02:1b:25:cb:61:b5:58:8f:29:b3:
                    fc:3f:b8:4f:0c:bd:93:52:73:b2:fe:ea:fd:05:77:
                    3d:b5:aa:0e:ba:af:f3:b8:5d:28:a3:40:b6:bb:eb:
                    e2:04:9b:95:9d:55:24:ad:3f:4d:0b:80:4b:85:30:
                    fb:65:aa:a7:9d:06:e9:52:68:44:3d:e2:40:36:32:
                    e0:18:19:0d:66:aa:c1:1f:4d:ce:cc:63:61:d9:7a:
                    cf:ad:67:04:5d:64:9e:fa:de:e5:34:1b:d8:fa:e1:
                    31:cc:34:a6:52:a4:8c:59:24:6d:86:fc:e5:df:ba:
                    db:b3:56:df:8e:a0:3b:2d:de:9f:82:bf:99:79:e9:
                    49:21:c6:61:81:34:12:5b:0b:d7:96:c6:7c:51:d4:
                    92:78:14:bf:77:27:a6:3f:29:8c:23:7c:62:f3:64:
                    39:80:ad:56:45:da:c1:00:05:13:7b:9c:cb:d2:20:
                    7d:31:7f:9f:7a:50:2c:55:23:3d:58:eb:24:fc:ca:
                    54:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E2:6D:64:9F:81:6B:68:4A:8C:D9:B3:15:5F:05:88:9F:F2:F1:3F
            X509v3 Authority Key Identifier:
                keyid:06:23:47:D8:F4:F7:70:41:56:33:E2:2D:79:4F:8D:58:F3:90:BA:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/062347D8F4F770415633E22D794F8D58F390BA86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/062347D8F4F770415633E22D794F8D58F390BA86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/062347D8F4F770415633E22D794F8D58F390BA86.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:6a:af:59:cc:36:c4:4f:70:19:44:35:d7:e2:22:c5:c9:ee:
         1a:23:29:ee:af:ac:3d:b3:6d:a3:cf:7b:0d:e7:55:b5:09:a3:
         dd:6e:1f:63:1d:73:62:3e:36:84:50:78:5c:41:a2:75:85:4a:
         9a:db:12:c7:8e:75:3a:94:54:c3:cf:19:7a:7b:86:d4:7e:62:
         0f:c4:10:b6:05:26:48:d3:fa:52:a2:d0:da:09:df:e6:8a:c7:
         52:43:59:5c:f2:f7:d1:15:04:1b:ca:b7:35:da:eb:1f:9f:bb:
         9b:d8:59:02:79:88:f8:47:69:64:ae:cf:60:e8:43:9b:5f:87:
         06:b6:e4:41:21:c7:76:65:d7:d9:03:02:fa:cb:07:22:0a:4b:
         6e:22:3b:67:c9:e4:22:5c:6d:e4:90:6b:92:e2:fd:e0:05:c3:
         03:3b:24:da:b0:88:8c:4c:f6:e3:c9:ce:0b:1f:eb:0a:e6:7a:
         9f:42:c4:f2:fb:60:9a:22:40:8a:d9:68:5e:82:be:93:3b:61:
         82:18:18:50:7a:bf:0a:0b:7a:c1:e2:0a:87:83:a7:0b:31:a2:
         a5:2c:3e:d4:1c:4c:d8:25:b6:ba:0f:9f:04:de:d0:9c:80:4d:
         85:ca:86:be:be:9e:65:b5:01:23:5f:6c:8b:8d:fa:21:55:bc:
         38:e7:27:7d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 13 22:42:46 2026 by rpki-client