Error: rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft
File:                     2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft (raw, json)
Hash identifier:          FqZNuMCnC1gf6VPV8Mm4Vbn3SvW7lUtzWq+1RN3knL8=
Subject key identifier:   67:6C:F1:4B:69:3E:68:00:A0:B9:4C:25:FD:C6:06:89:C9:4A:4E:B4
Authority key identifier: 2A:4D:F9:09:7F:97:66:4A:00:A3:18:EF:AE:22:DC:10:36:E9:1B:5C
Certificate issuer:       /CN=2A4DF9097F97664A00A318EFAE22DC1036E91B5C
Certificate serial:       2210A71C2EAC986ED5B33FFAF626F8BE4A5258A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft
Manifest number:          04D4
Signing time:             Wed 28 Oct 2026 11:49:08 +0000
Manifest this update:     Wed 28 Oct 2026 11:44:08 +0000
Manifest next update:     Thu 29 Oct 2026 13:24:08 +0000
Files and hashes:         1: 3230302e3232392e38342e302f32322d3332203d3e203631373735.roa (hash: RZ00+qXW/BPYoY+V3LazcZSeSl7+kD6hzoXFr0qzr8Q=)
                          2: 323830343a313932383a3a2f33322d313238203d3e203631373735.roa (hash: balLqWtekE7xoXyozNcnhLY0gSCHw8MWCc2OS3afiiI=)
                          3: 2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl (hash: OO+jhtaXfsaCCyJk7xtpW0RV0WEIE/D/reE7X0pm+IA=)
                          4: 3133382e3230342e33362e302f32322d3332203d3e203631373735.roa (hash: QymnaSDu1ODQfT5ybG3gM6X4xk9jNNtTQ+zkNvj0XzM=)
                          5: 3133382e3230342e33372e302f32342d3332203d3e203631373735.roa (hash: UpP12LnX8V9yOeNpWAhngLI5xTreMtmtTfodbgcvkaQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl
                          rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 13:24:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:10:a7:1c:2e:ac:98:6e:d5:b3:3f:fa:f6:26:f8:be:4a:52:58:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A4DF9097F97664A00A318EFAE22DC1036E91B5C
        Validity
            Not Before: Oct 28 11:44:08 2026 GMT
            Not After : Oct 29 13:24:08 2026 GMT
        Subject: CN=676CF14B693E6800A0B94C25FDC60689C94A4EB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3a:ce:bc:89:d9:c8:00:da:de:3b:84:b4:40:
                    82:f9:0f:f8:87:a1:2c:04:f0:5d:58:cd:1e:36:ea:
                    3a:84:0f:e8:32:13:0b:05:20:83:36:c0:45:a1:ab:
                    9f:d4:eb:db:05:23:fc:54:fd:48:e4:8b:00:90:a7:
                    35:05:6d:9d:e8:2d:11:f8:b0:80:b0:13:fb:53:6e:
                    9a:28:09:18:c0:88:e5:bf:1e:ca:77:4a:79:8d:15:
                    27:e8:c7:78:ce:f0:fd:0b:6b:c1:98:f7:b2:df:1f:
                    c2:41:a3:7d:c8:98:93:57:92:a2:37:96:f6:4b:03:
                    b4:dc:2e:d6:c9:67:6d:21:bd:5d:54:9b:41:d3:8c:
                    b7:98:a8:35:33:17:74:6c:59:a8:19:86:a2:c6:d2:
                    88:b9:75:29:8b:0e:5d:e3:47:64:09:80:d7:3d:e8:
                    6c:f5:7a:25:95:1a:41:9f:1a:ed:a1:8a:c2:f1:36:
                    23:ed:fa:5f:88:6f:b3:00:e4:f3:8a:67:6a:c2:23:
                    d8:bf:a6:19:0f:1b:a1:f8:b6:1d:94:4b:e1:48:26:
                    98:4b:f5:55:27:ba:9d:9b:d0:cd:6c:7c:b7:15:c8:
                    dc:a6:35:40:cc:86:a4:d8:36:e7:55:01:bc:a6:f9:
                    32:30:b7:da:b6:a7:ca:a6:a8:cf:5b:7b:6a:15:4c:
                    e6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6C:F1:4B:69:3E:68:00:A0:B9:4C:25:FD:C6:06:89:C9:4A:4E:B4
            X509v3 Authority Key Identifier:
                keyid:2A:4D:F9:09:7F:97:66:4A:00:A3:18:EF:AE:22:DC:10:36:E9:1B:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:c3:44:ac:47:da:ef:2b:f8:b7:9f:69:51:09:54:18:e3:db:
         44:51:bf:38:bd:6f:d3:db:24:b2:1a:0b:b2:a0:65:0f:f8:05:
         8b:3a:b8:59:11:6e:95:a4:cd:a8:8e:30:fb:55:d8:87:8c:c1:
         87:76:d3:44:45:52:2f:42:0c:f3:7d:dc:df:a1:26:09:d7:bb:
         e7:7b:bf:88:87:c8:e5:48:f5:c6:13:7e:df:d8:10:c2:f5:e9:
         c2:90:3d:5c:b4:7d:aa:71:81:40:13:34:11:01:51:5c:ff:be:
         0f:f2:c2:e4:2b:88:e1:c4:55:41:00:69:9b:15:81:40:d3:3f:
         ea:59:a5:4a:a4:71:61:ca:8d:a5:d8:77:85:79:e9:0a:2b:45:
         65:a9:df:9c:05:90:fc:9f:5b:0b:0d:65:25:06:13:3c:ad:1a:
         a3:60:92:ec:fc:05:51:9b:53:bb:b1:a1:91:c7:fb:c9:03:b4:
         df:21:5e:4f:0f:e8:30:69:8a:5a:ae:f5:10:84:3d:12:0e:3a:
         bc:69:a0:e0:0f:df:5b:49:e0:df:13:50:b2:1a:8a:f8:d0:0f:
         a1:a4:d0:0d:a5:81:8c:36:45:59:0b:c0:4c:c0:2a:08:f8:0f:
         c3:ea:37:21:0b:12:a7:c0:ea:e3:41:ce:94:49:2b:27:3d:3e:
         eb:48:c9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 20:42:30 2026 by rpki-client