Error: rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft
File:                     233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft (raw, json)
Hash identifier:          QNSvNvJfPS0dYpJ8ZhyhpH09dRkEY4a7OdHtxn+sSkY=
Subject key identifier:   88:A2:28:78:7F:E4:14:1D:CA:AF:7F:1D:EF:C8:78:3E:0C:5A:DF:30
Authority key identifier: 23:3C:0F:0B:57:1F:DA:1C:33:13:BF:8A:F7:D6:86:C7:4B:AF:CB:41
Certificate issuer:       /CN=233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41
Certificate serial:       1CE2E18BE990730237348426839354B2CF7DF467
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft
Manifest number:          04E6
Signing time:             Sun 01 Nov 2026 07:52:35 +0000
Manifest this update:     Sun 01 Nov 2026 07:47:35 +0000
Manifest next update:     Mon 02 Nov 2026 11:09:35 +0000
Files and hashes:         1: 323830343a353162303a3a2f33322d313238203d3e20323638343730.roa (hash: +m9YWZk3TMhLiqol4NpnwKiR2A38eOMIKyxmbrjEwwU=)
                          2: 34352e3136312e3137362e302f32322d3332203d3e20323638343730.roa (hash: infniEWP3j17myDo6uSPhVMIMf9cY06lNVvSV//w480=)
                          3: 233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.crl (hash: cVbIm0l7N83w8sLxLXtPSdg7Wq2LRCNUPkl0ZJCdwiM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.crl
                          rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 11:09:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e2:e1:8b:e9:90:73:02:37:34:84:26:83:93:54:b2:cf:7d:f4:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41
        Validity
            Not Before: Nov  1 07:47:35 2026 GMT
            Not After : Nov  2 11:09:35 2026 GMT
        Subject: CN=88A228787FE4141DCAAF7F1DEFC8783E0C5ADF30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:be:2f:79:fe:96:f4:d7:61:6e:9c:d1:de:6f:
                    96:1f:40:c5:d7:0a:1c:24:a9:62:05:35:9e:2c:6a:
                    8d:57:95:1d:3e:3b:05:84:e8:a0:e0:d9:d0:dd:f9:
                    b8:74:9e:eb:65:36:12:1f:ec:fe:3f:7d:ec:aa:3e:
                    69:83:ae:36:9d:d4:2b:18:3e:ea:22:b4:1f:a9:e1:
                    4a:57:da:e8:66:c7:aa:ff:ff:b0:6c:54:c5:0c:bc:
                    e2:c6:44:73:82:70:cd:48:c6:91:f8:13:2a:49:06:
                    07:15:c4:b5:02:82:76:13:a0:42:e5:8e:d6:68:87:
                    86:d9:7a:74:d6:d0:7d:b0:c6:e5:42:92:2a:02:d5:
                    1b:5d:5e:55:8a:70:49:43:bc:e3:d7:66:e8:e1:75:
                    62:55:5c:d3:4d:cd:77:5d:e6:c6:e7:5c:fd:c7:28:
                    26:04:04:fe:33:db:f6:f6:75:86:44:52:2d:e4:a0:
                    4f:93:0a:5f:43:15:8d:3f:8d:ed:6b:10:ab:b3:c7:
                    88:4d:a0:31:aa:bf:70:d8:60:fb:60:88:d7:28:bc:
                    09:fe:b8:78:57:27:5b:b3:d4:08:11:b5:5a:3f:e8:
                    24:41:b2:bf:44:00:2d:fa:ab:f3:56:30:e3:98:2d:
                    f6:85:15:1c:64:e9:c0:e3:7d:27:11:b1:93:76:f8:
                    1a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A2:28:78:7F:E4:14:1D:CA:AF:7F:1D:EF:C8:78:3E:0C:5A:DF:30
            X509v3 Authority Key Identifier:
                keyid:23:3C:0F:0B:57:1F:DA:1C:33:13:BF:8A:F7:D6:86:C7:4B:AF:CB:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:9e:83:33:eb:a7:31:a8:7d:18:c0:69:eb:5b:b3:27:2f:fd:
         58:f7:a2:36:20:6b:ee:1b:26:ec:44:21:97:9c:1f:48:4b:8e:
         31:2d:f0:a0:31:c8:bd:5a:2a:1d:25:83:fe:0f:93:b9:a1:f0:
         0b:03:89:64:0d:ef:59:57:9e:c2:0a:12:54:6b:39:8a:c6:1f:
         f9:2e:57:3c:fa:91:4f:76:ab:df:da:d8:c1:eb:d7:a9:60:dd:
         13:ef:16:e5:e2:4a:6a:7e:52:7b:f8:d6:47:9f:61:85:5e:7a:
         95:9f:0b:ce:71:03:61:33:67:da:cc:20:ca:8a:b4:06:d1:ec:
         ca:93:37:44:43:d9:d6:93:c4:49:d0:5f:c7:19:80:b9:35:48:
         bd:1c:55:9d:3d:80:e7:2b:4c:21:e9:ab:15:26:94:f5:75:4a:
         8b:10:67:c1:4e:9d:56:ce:6e:0b:60:2e:ff:3e:51:7f:68:c6:
         23:e8:20:51:1c:1b:bd:b6:b6:64:5d:a7:c6:ca:34:aa:8f:5f:
         2b:05:1b:e3:4c:a6:ad:2c:f1:8a:e5:ad:b1:b7:6e:ae:50:56:
         4a:91:73:66:ad:2b:d1:1b:0f:8f:b9:b6:0b:f0:90:0a:42:1c:
         3a:6d:10:a6:f1:64:5b:b6:28:5d:8c:af:b2:2d:1a:6d:22:4f:
         c8:63:a3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 13:25:06 2026 by rpki-client