Error: rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.mft
File:                     37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.mft (raw, json)
Hash identifier:          SteDNKXaAySNYJzBs54GsLEotVlZSrU/Osoz31b3Q8Q=
Subject key identifier:   FD:56:A3:0B:8D:C3:3C:48:5B:BC:4F:09:B2:53:68:0B:8B:90:75:A4
Authority key identifier: 37:F5:5E:91:32:B6:5D:F9:3A:C7:E8:F5:42:B2:A3:11:5C:FE:1A:79
Certificate issuer:       /CN=37F55E9132B65DF93AC7E8F542B2A3115CFE1A79
Certificate serial:       0110D5B4E98CA536CC18DADF43C511D588AE9E97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.mft
Manifest number:          04EC
Signing time:             Sun 01 Nov 2026 00:51:55 +0000
Manifest this update:     Sun 01 Nov 2026 00:46:55 +0000
Manifest next update:     Mon 02 Nov 2026 01:32:55 +0000
Files and hashes:         1: 37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.crl (hash: tpBJtYADuovf2js4QGrxuPqHyonfyDZbTTquEHIbTZw=)
                          2: 323830343a326330383a3a2f33322d3438203d3e20323635313839.roa (hash: Iegqjvpt7xD+5+IM0EUE5suoELW/Irgw5yY5ioACdFA=)
                          3: 3136372e3235302e34342e302f32322d3234203d3e20323635313839.roa (hash: an5Qs1cRubZBVqVzqQB2Xa+oY52qYd0b7fndSzp2AhQ=)
                          4: 3137302e3234342e3130302e302f32322d3234203d3e20323635313839.roa (hash: WEANhVMN0FEEGQBH8SIdobfXyU0uk68mBo1xV757N2k=)
                          5: 323830343a326330383a3a2f3332203d3e20323635313839.roa (hash: 14DVZX6+lrWsUnFwcaIY2YQwsSYL4SGq5WA45/ugDFg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.crl
                          rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 01:32:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:10:d5:b4:e9:8c:a5:36:cc:18:da:df:43:c5:11:d5:88:ae:9e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37F55E9132B65DF93AC7E8F542B2A3115CFE1A79
        Validity
            Not Before: Nov  1 00:46:55 2026 GMT
            Not After : Nov  2 01:32:55 2026 GMT
        Subject: CN=FD56A30B8DC33C485BBC4F09B253680B8B9075A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:76:0f:87:f4:3d:33:8e:4e:65:a0:c0:52:21:
                    ae:c7:e6:3e:3b:77:6c:ed:61:16:da:34:af:87:3c:
                    53:f0:53:3c:80:ce:70:1b:1c:bb:1b:7d:3b:ef:40:
                    1b:96:ed:a9:f6:86:79:c1:31:fc:bb:23:1b:84:8a:
                    40:75:69:2b:b6:57:44:c6:f3:98:d2:3a:e1:fa:02:
                    13:4b:27:6e:e9:d4:de:c1:2e:cc:ba:cc:19:ec:e6:
                    8b:7a:12:cd:6a:85:f9:e7:bf:15:fe:41:53:af:6b:
                    5f:0e:d1:8d:aa:95:22:35:20:49:1f:61:ca:28:26:
                    3b:2f:ed:5c:bc:77:73:4c:48:17:7b:17:70:6d:eb:
                    91:a2:9c:be:5d:47:3b:bd:7d:59:28:30:b7:39:10:
                    11:1b:da:c4:7e:df:34:6c:39:8b:75:61:29:21:70:
                    f1:ec:2c:88:cb:ac:a6:19:bd:5e:51:80:ad:31:11:
                    bb:17:82:0e:d1:c3:b1:23:36:d9:9c:e6:57:73:61:
                    5d:4a:4b:4c:53:57:23:03:03:94:bf:03:8d:4f:4e:
                    5c:de:0d:74:5f:54:bf:d7:b1:52:d3:9b:f1:7b:18:
                    ab:a7:d9:e2:5a:21:ed:ff:a2:1b:34:a4:4a:19:6c:
                    e2:30:60:93:36:ec:c5:ca:e5:8d:27:f3:46:6e:2d:
                    fd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:56:A3:0B:8D:C3:3C:48:5B:BC:4F:09:B2:53:68:0B:8B:90:75:A4
            X509v3 Authority Key Identifier:
                keyid:37:F5:5E:91:32:B6:5D:F9:3A:C7:E8:F5:42:B2:A3:11:5C:FE:1A:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:3c:19:22:e0:e3:23:1f:fb:aa:04:cf:48:10:fa:23:68:bd:
         75:93:6b:a1:12:89:19:39:bc:81:3d:6a:43:73:c1:da:dd:00:
         a1:b7:de:7c:46:70:13:c5:6a:e4:fb:f3:fb:4d:e8:e1:f8:70:
         7e:07:a5:89:37:bb:88:cd:e6:b6:68:fe:63:9a:45:07:6b:ee:
         5b:1d:0c:ef:5b:c6:60:0c:84:63:fd:ea:3a:20:9c:68:71:4f:
         70:f8:5e:5e:4d:30:90:18:08:8f:db:8d:1d:39:b0:3b:33:df:
         2b:2e:34:48:36:20:d5:26:0e:52:34:7e:ae:6e:f4:8f:72:0c:
         0b:e6:4d:3b:dc:31:0e:b4:f1:12:0d:71:8d:b5:b4:4a:fa:1b:
         e6:b6:9b:f1:28:b9:5f:b4:ba:43:5a:65:ff:88:e2:a1:ae:44:
         cb:a7:0f:7f:ce:b9:2d:cc:0d:a1:10:8d:f0:47:d1:bb:70:26:
         e2:ac:00:ff:55:68:4c:9e:17:8a:28:62:26:b0:1d:4f:39:4a:
         5a:3d:8d:93:42:f7:8e:ac:c6:f7:26:0a:7f:a0:e5:78:4f:a4:
         02:f7:e8:34:70:45:9d:7f:ee:60:68:8d:3f:c4:b7:58:9b:07:
         fc:1a:1d:b0:c9:fc:c2:06:05:ca:b7:80:73:aa:20:6a:12:f3:
         b3:39:f2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 05:44:44 2026 by rpki-client