Error: rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/3E3635534C5268C5F8F31D910454018D21BBA954.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/3E3635534C5268C5F8F31D910454018D21BBA954.mft
File:                     3E3635534C5268C5F8F31D910454018D21BBA954.mft (raw, json)
Hash identifier:          u6uacuB9eBannhY+++rAWUlpWssPDOisdMJI0Ut65/E=
Subject key identifier:   A9:2D:72:70:39:87:2B:EC:31:D7:27:CC:7D:8C:2F:F9:D1:77:1F:43
Authority key identifier: 3E:36:35:53:4C:52:68:C5:F8:F3:1D:91:04:54:01:8D:21:BB:A9:54
Certificate issuer:       /CN=3E3635534C5268C5F8F31D910454018D21BBA954
Certificate serial:       4DAA2B558827DF9FB6E495E4B5893BC3F1D0EC00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E3635534C5268C5F8F31D910454018D21BBA954.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/3E3635534C5268C5F8F31D910454018D21BBA954.mft
Manifest number:          0581
Signing time:             Tue 27 Oct 2026 12:20:00 +0000
Manifest this update:     Tue 27 Oct 2026 12:15:00 +0000
Manifest next update:     Wed 28 Oct 2026 12:20:00 +0000
Files and hashes:         1: 3E3635534C5268C5F8F31D910454018D21BBA954.crl (hash: F0Yqj/NBgll0sAujbtYxSrVJEXgf98vnsV/As0V77IE=)
                          2: 323830343a323730303a3a2f33322d3335203d3e20323633383639.roa (hash: jZxhJTQqmwny21y8m5P5/HKateUCwxPl8xRM7krjfJ0=)
                          3: 3133382e3138362e3139362e302f32322d3234203d3e20323633383639.roa (hash: RoQfLojjxs4Go9NvVNqCM4tyg/i/cKgZvazNzDuKazE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/3E3635534C5268C5F8F31D910454018D21BBA954.crl
                          rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/3E3635534C5268C5F8F31D910454018D21BBA954.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E3635534C5268C5F8F31D910454018D21BBA954.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 12:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:aa:2b:55:88:27:df:9f:b6:e4:95:e4:b5:89:3b:c3:f1:d0:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E3635534C5268C5F8F31D910454018D21BBA954
        Validity
            Not Before: Oct 27 12:15:00 2026 GMT
            Not After : Oct 28 12:20:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d0:7b:71:fb:27:db:5c:1a:b8:13:b5:bc:96:
                    1e:a9:ef:61:f0:cd:12:ac:4f:f0:12:87:24:a8:97:
                    eb:59:1b:02:ef:3a:8e:bd:83:99:2e:25:98:51:02:
                    91:10:55:40:e5:35:4f:84:c1:b3:96:c6:85:63:7b:
                    fb:92:c8:9e:5b:fc:05:5e:0b:51:25:a4:e2:6c:98:
                    2f:4a:4b:d6:ab:28:4c:de:b9:af:bc:14:62:68:e7:
                    3f:ac:43:94:3f:ea:44:51:98:19:df:c2:84:4c:79:
                    81:fc:3b:ed:86:e0:d5:9e:8e:f1:44:de:1e:33:cd:
                    68:95:60:d8:f8:2e:b9:88:25:0b:84:e8:d2:36:61:
                    72:7b:f0:3e:13:0b:0c:49:43:c7:f1:68:2b:10:e8:
                    fc:fc:b5:1b:1f:31:66:ed:63:2b:51:15:6e:64:8b:
                    4a:5f:12:66:26:59:8f:6b:4d:f3:27:26:94:e6:4a:
                    34:1e:06:c6:51:73:a7:2c:b7:84:94:44:7f:2e:26:
                    62:71:82:83:74:24:31:89:a6:c6:bb:ef:6f:bb:c5:
                    74:28:34:55:43:7a:a5:b4:c4:05:fe:46:73:5d:a3:
                    0f:a3:fa:88:52:17:61:9f:73:e0:99:1e:03:80:6b:
                    44:ad:37:d4:c5:43:2d:98:d6:eb:a2:38:e1:d0:2d:
                    d0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:2D:72:70:39:87:2B:EC:31:D7:27:CC:7D:8C:2F:F9:D1:77:1F:43
            X509v3 Authority Key Identifier:
                keyid:3E:36:35:53:4C:52:68:C5:F8:F3:1D:91:04:54:01:8D:21:BB:A9:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/3E3635534C5268C5F8F31D910454018D21BBA954.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E3635534C5268C5F8F31D910454018D21BBA954.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/3E3635534C5268C5F8F31D910454018D21BBA954.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:1c:ba:5d:34:f1:5f:92:13:b7:b0:48:b6:86:cb:c1:98:67:
         bf:fa:fa:03:e6:bc:52:86:f9:7c:ef:7a:ea:cd:ff:19:e9:c4:
         07:57:ed:6b:57:bc:08:de:58:5f:fc:10:b4:ce:59:bd:0b:8f:
         67:a5:fc:d1:56:32:fb:4e:33:5a:b1:b7:fd:3a:d7:05:f3:4a:
         e1:d5:ea:34:72:b6:ed:26:9c:a3:0b:86:b6:4e:d0:63:96:0d:
         43:df:77:bb:91:e9:a5:ef:cc:d8:22:4b:9a:fe:9f:31:00:32:
         34:db:1b:27:3d:43:46:4c:3a:47:21:99:a9:00:05:01:3e:de:
         8a:46:6a:04:21:ae:31:3a:b7:7a:3e:b3:8d:14:a2:e5:38:cb:
         b5:b8:71:55:da:4f:b7:33:90:f6:75:45:3e:8c:3c:72:af:29:
         61:96:8b:18:05:6b:0b:f9:dd:5d:88:3e:e8:d3:61:0b:fa:49:
         d9:86:4f:be:fc:21:d5:94:22:80:73:bc:ac:f5:05:5d:03:97:
         4a:7c:36:b2:15:cd:03:e2:02:a9:bb:45:4b:e6:95:9b:93:ad:
         f6:6a:c6:eb:94:37:7f:b9:89:a0:d6:ca:e1:0d:ed:13:db:49:
         14:37:3a:a6:16:b4:09:8d:d7:d4:15:29:8b:83:21:b8:e8:f3:
         7b:36:26:71
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 27 19:54:18 2026 by rpki-client