Error: rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/F7C4DEB12240FF8688C32C67939C04C380824025.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/F7C4DEB12240FF8688C32C67939C04C380824025.mft
File:                     F7C4DEB12240FF8688C32C67939C04C380824025.mft (raw, json)
Hash identifier:          o5JSyuKPn25hMIl63G88XzUbLjsNw+MIkQiPy2DQYLg=
Subject key identifier:   3B:7B:48:8A:13:06:BA:D6:1B:A9:A6:40:D7:B8:8A:F2:D1:39:22:52
Authority key identifier: F7:C4:DE:B1:22:40:FF:86:88:C3:2C:67:93:9C:04:C3:80:82:40:25
Certificate issuer:       /CN=F7C4DEB12240FF8688C32C67939C04C380824025
Certificate serial:       3084EFD160D932CBF9CAECCC875E7B915443BDD1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7C4DEB12240FF8688C32C67939C04C380824025.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/F7C4DEB12240FF8688C32C67939C04C380824025.mft
Manifest number:          058C
Signing time:             Tue 03 Nov 2026 20:40:00 +0000
Manifest this update:     Tue 03 Nov 2026 20:35:00 +0000
Manifest next update:     Wed 04 Nov 2026 20:40:00 +0000
Files and hashes:         1: 3139312e3235332e36382e302f32322d3234203d3e20323633353330.roa (hash: c+JK0T9eR1D8wgwvFSUELxQsmI57MQ13Cr4zEsHTwXs=)
                          2: 323830343a313335633a3a2f33322d3335203d3e20323633353330.roa (hash: jKWlo8DiE6ltfr3pWcLq5MH2NAAiyJ79pwvFCXV+E+w=)
                          3: F7C4DEB12240FF8688C32C67939C04C380824025.crl (hash: qowO4nrHtUJRwNJiHsdE8hv32t1vGzyFLc6EE3T2TXs=)
                          4: 3134332e3133372e36342e302f32322d3234203d3e20323633353330.roa (hash: q5xWhxjiSRnCh/ELjrUHs8/Er3QcjOgqveVlpid0h5w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/F7C4DEB12240FF8688C32C67939C04C380824025.crl
                          rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/F7C4DEB12240FF8688C32C67939C04C380824025.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7C4DEB12240FF8688C32C67939C04C380824025.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 20:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:84:ef:d1:60:d9:32:cb:f9:ca:ec:cc:87:5e:7b:91:54:43:bd:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7C4DEB12240FF8688C32C67939C04C380824025
        Validity
            Not Before: Nov  3 20:35:00 2026 GMT
            Not After : Nov  4 20:40:00 2026 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:39:4f:7e:08:a3:99:55:0e:76:be:ff:16:fe:
                    4f:29:0f:70:fe:d3:c5:ec:6d:58:31:83:f7:b9:1f:
                    dd:da:dc:ee:86:45:fa:a0:dd:ab:ae:3f:56:d5:eb:
                    7e:f0:0d:f4:a7:ed:ab:fa:64:b8:fc:dd:eb:42:36:
                    71:65:8c:ab:66:4a:4d:5d:86:de:73:7a:fa:ac:a2:
                    d0:eb:5d:a1:3d:e0:1a:51:6b:82:77:b1:a0:97:37:
                    80:ea:c3:0b:a9:ee:b4:c9:04:08:f3:31:ce:7c:af:
                    b4:0e:e9:ae:17:3d:3a:d0:c6:07:d3:46:21:cc:3f:
                    c2:37:90:85:08:c5:96:a2:01:43:1c:09:3c:6e:5f:
                    b7:8e:54:b9:0b:b3:07:4e:d5:0a:71:33:fa:b3:5a:
                    c7:5c:00:80:05:68:36:41:d1:00:3c:16:bc:f1:ea:
                    88:47:35:9f:38:e1:89:48:c6:25:52:f7:3f:f3:05:
                    5d:7a:d6:3a:ac:00:3a:34:64:02:5a:a7:2b:75:1f:
                    a2:ee:6e:86:60:df:9d:ad:b6:f3:fa:01:04:29:46:
                    d2:08:1c:6a:36:c7:be:fc:40:27:32:70:2b:18:b3:
                    0e:e9:68:e2:29:c8:09:24:62:50:3e:d3:16:5d:ff:
                    e7:6d:5c:e8:67:fd:9f:a4:78:10:f3:d5:b0:6e:48:
                    49:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7B:48:8A:13:06:BA:D6:1B:A9:A6:40:D7:B8:8A:F2:D1:39:22:52
            X509v3 Authority Key Identifier:
                keyid:F7:C4:DE:B1:22:40:FF:86:88:C3:2C:67:93:9C:04:C3:80:82:40:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/F7C4DEB12240FF8688C32C67939C04C380824025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7C4DEB12240FF8688C32C67939C04C380824025.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/F7C4DEB12240FF8688C32C67939C04C380824025.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:82:1b:2e:ad:6d:e5:48:16:2b:58:18:98:b2:75:ca:64:c6:
         08:36:73:fb:b8:04:d6:31:88:4f:d4:2f:59:90:f7:4d:95:e7:
         7a:28:3e:d4:9f:a3:fd:d2:fd:98:9d:d4:70:43:1a:b9:dc:e3:
         95:a4:1b:ff:d4:a2:3d:82:d0:b6:f1:ab:4b:ff:df:13:57:44:
         05:ff:54:ad:40:bb:ee:a1:d0:9b:4d:5b:a3:3f:b6:59:a3:f6:
         41:db:7e:d7:87:72:0b:19:c7:f7:40:a3:f9:bc:30:22:f7:43:
         a6:9f:5f:af:50:9b:7f:c1:c2:a3:ac:fa:4a:df:bd:41:20:77:
         19:c1:34:e0:07:e3:50:56:ac:4a:b2:a5:46:3c:1f:21:e5:8b:
         5b:70:17:71:99:bd:4c:7f:cd:b8:f4:57:16:cc:8b:36:e3:12:
         0d:e6:a4:cd:9c:99:1b:a1:06:75:8e:58:5b:13:2f:a8:6c:ae:
         16:68:13:c0:f8:63:2d:9f:1f:8a:d6:b9:fc:db:00:75:c4:4d:
         a8:db:4b:0d:34:da:2c:56:72:de:0a:52:6b:91:aa:3c:4c:bb:
         90:3e:82:42:25:2f:21:6a:2c:5d:af:c0:e0:e2:fc:95:ed:a9:
         55:2f:e6:c5:c9:c5:73:d0:4c:ad:b5:05:8e:08:ea:8c:a6:e5:
         ff:0c:9c:cb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 4 00:05:59 2026 by rpki-client