Error: rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.mft
File:                     FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.mft (raw, json)
Hash identifier:          /MfsRpHjWZ2k4Obb6iotqrXmdpMBDWn5+KRo8nRZOSY=
Subject key identifier:   CD:AC:92:17:68:04:35:40:7C:8E:DA:AE:D4:0A:2E:D7:3B:3D:DD:42
Authority key identifier: FA:15:85:E4:2E:73:8E:E5:96:DB:2F:2B:97:0C:C3:CB:74:3B:D8:FC
Certificate issuer:       /CN=FA1585E42E738EE596DB2F2B970CC3CB743BD8FC
Certificate serial:       29D5A0CA752953B571049BF546BC9EC29B8F555B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.mft
Manifest number:          04CD
Signing time:             Tue 13 Oct 2026 00:00:00 +0000
Manifest this update:     Mon 12 Oct 2026 23:55:00 +0000
Manifest next update:     Wed 14 Oct 2026 01:49:00 +0000
Files and hashes:         1: 3137372e32332e36342e302f32312d3231203d3e20323632383931.roa (hash: 1O+C4gKehoZbB1bzgM9P5Hl3u1YA7QbbPbBfTZuNlJA=)
                          2: FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.crl (hash: 7yP6+QylfHY7xSLxhaBOQRM5w4+sowb4OnfG1L5QBqw=)
                          3: 3139312e3235332e37322e302f32312d3231203d3e20323632383931.roa (hash: 32MUjmMlipIQ5w66Tg0yyXCGK7iNkWxFA5S1Vz0pfXE=)
                          4: 323830343a6335303a3a2f33322d3332203d3e20323632383931.roa (hash: rY/AbGdTlh2PZKTUHZ0W9omjzqensEoBLVsBXZuCsrQ=)
                          5: 3137372e32302e3138342e302f32312d3231203d3e20323632383931.roa (hash: m+nssQYHrnXOq/hb0eyIYVP0zd1CutzVa1h16yS87XE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.crl
                          rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 01:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:d5:a0:ca:75:29:53:b5:71:04:9b:f5:46:bc:9e:c2:9b:8f:55:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA1585E42E738EE596DB2F2B970CC3CB743BD8FC
        Validity
            Not Before: Oct 12 23:55:00 2026 GMT
            Not After : Oct 14 01:49:00 2026 GMT
        Subject: CN=CDAC9217680435407C8EDAAED40A2ED73B3DDD42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e8:77:da:ed:ee:f4:6c:d3:10:f4:bb:d9:df:
                    b0:97:43:bd:d7:89:9c:4e:87:90:f9:f2:ce:ae:71:
                    ce:a9:87:50:02:3f:1d:5e:29:37:8f:b5:73:2c:f6:
                    b0:a9:dd:f8:e3:0f:1d:4a:0e:7b:19:02:bd:94:9c:
                    d4:95:af:61:db:cf:73:18:8d:4f:96:5a:88:da:b2:
                    6a:10:4d:49:66:72:52:fd:3d:20:ba:e8:e9:9f:c6:
                    8c:94:e9:82:e1:99:38:a1:01:c5:3f:6e:45:20:bc:
                    c6:49:fa:52:cb:ba:b7:b0:b4:07:6b:58:f9:eb:0c:
                    25:da:7a:b8:2b:48:b3:29:e6:43:9c:31:1a:af:06:
                    8c:f3:e8:af:f3:26:66:43:ad:9a:13:a0:c4:03:9c:
                    be:dd:d7:dd:c8:e6:b6:33:53:d8:42:9e:c8:8c:d8:
                    c7:e5:4e:93:64:a5:2e:b2:d8:b3:eb:7f:78:86:fe:
                    18:26:e6:3d:71:ad:19:33:ec:54:0e:0b:a3:e8:d1:
                    6a:d7:60:23:cb:50:40:c9:76:d5:22:31:47:ef:0a:
                    3c:38:b3:68:aa:21:a3:b6:36:ac:fc:2e:e1:9f:0d:
                    e2:7d:bf:f6:23:81:18:56:07:11:8a:d4:4e:e6:95:
                    25:7d:b1:6d:68:fb:80:a1:24:63:ff:41:b1:8c:f2:
                    dc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:AC:92:17:68:04:35:40:7C:8E:DA:AE:D4:0A:2E:D7:3B:3D:DD:42
            X509v3 Authority Key Identifier:
                keyid:FA:15:85:E4:2E:73:8E:E5:96:DB:2F:2B:97:0C:C3:CB:74:3B:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:a6:ae:3f:6e:9d:51:9e:2e:49:4c:b1:ed:8b:5e:41:d8:58:
         83:8e:8f:74:24:e2:50:80:9e:bd:09:63:42:ce:84:0b:b7:87:
         c5:e7:af:77:7d:c3:56:2a:cb:aa:2f:79:a2:9e:4c:7e:9f:fc:
         1b:2d:ab:81:02:ad:e8:12:cf:fb:c2:84:63:90:85:7a:ba:b0:
         76:4a:55:92:6d:e0:79:9c:b6:ed:75:5c:26:60:32:ad:18:2b:
         b9:c7:49:e0:b8:f6:db:46:71:a4:53:fb:f2:c1:e6:09:fb:87:
         62:55:ee:ea:02:aa:43:6b:2e:22:da:2d:78:0f:9e:e6:4f:50:
         7b:f8:0e:17:98:1e:33:d6:03:84:cc:f8:a0:d6:57:f7:70:23:
         1c:20:dd:a9:68:b2:22:fe:7a:93:49:2d:73:7a:93:ce:fd:27:
         5d:c3:11:99:01:28:87:d6:bc:22:69:f9:76:0b:fc:11:33:2c:
         e0:8d:14:86:5c:4b:bd:7e:dd:f1:bb:f3:c1:4c:82:5d:06:d4:
         90:ef:b5:d9:2b:e4:47:29:56:a9:49:0b:ae:71:7e:77:e4:69:
         49:c9:84:cc:39:cb:e3:18:c4:3c:eb:bf:bf:10:d0:d8:29:d8:
         d9:c3:86:31:28:85:e5:a6:43:b3:00:49:18:ec:c7:e8:34:fb:
         5c:04:1a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 09:24:31 2026 by rpki-client