Error: rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.mft
File:                     650CDA051146F7753756149BDB6B92197765D95E.mft (raw, json)
Hash identifier:          /TSP2Bny5L7KyxZYNM94PGo8l8WuBzBgx+9O7OCUxoU=
Subject key identifier:   DE:B7:26:7E:69:9F:06:CC:FB:A0:7F:44:91:B6:59:7E:1D:9D:F6:05
Authority key identifier: 65:0C:DA:05:11:46:F7:75:37:56:14:9B:DB:6B:92:19:77:65:D9:5E
Certificate issuer:       /CN=650CDA051146F7753756149BDB6B92197765D95E
Certificate serial:       7E6EB065D99EB792C85F98E106AFCB08885AAC53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/650CDA051146F7753756149BDB6B92197765D95E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.mft
Manifest number:          04D5
Signing time:             Tue 20 Oct 2026 02:20:00 +0000
Manifest this update:     Tue 20 Oct 2026 02:15:00 +0000
Manifest next update:     Wed 21 Oct 2026 05:49:00 +0000
Files and hashes:         1: 323830343a363937383a3a2f33322d3438203d3e20323730323732.roa (hash: AN25yo3eXMHV1W8PhjsweFfiym7xl37gbOtqoXKPI/o=)
                          2: 650CDA051146F7753756149BDB6B92197765D95E.crl (hash: CaqlztiS1kXSbu2E+2Yv94nlx6Ks2qweDc6Ko212Ygs=)
                          3: 3230302e3131352e3132342e302f32322d3234203d3e20323730323732.roa (hash: I/xnq0bsZM2KCqDQuEwyR/TUNXt4kaaRIw7Q1uq0nSQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.crl
                          rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/650CDA051146F7753756149BDB6B92197765D95E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 Oct 2026 05:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:6e:b0:65:d9:9e:b7:92:c8:5f:98:e1:06:af:cb:08:88:5a:ac:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=650CDA051146F7753756149BDB6B92197765D95E
        Validity
            Not Before: Oct 20 02:15:00 2026 GMT
            Not After : Oct 21 05:49:00 2026 GMT
        Subject: CN=DEB7267E699F06CCFBA07F4491B6597E1D9DF605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fc:49:b7:8f:1b:f5:d6:f2:26:a4:d7:0b:76:
                    47:1b:a3:68:02:ef:88:1c:e0:41:82:cd:a9:29:dd:
                    56:67:ba:b2:14:77:24:44:0c:f1:49:c0:5d:f0:dd:
                    7e:f5:8b:70:ad:5e:22:2f:28:30:bb:af:71:3f:07:
                    c7:58:c7:98:32:3e:67:ff:c2:20:de:ec:f9:b2:b5:
                    c0:cd:ee:94:7f:22:ae:0a:f0:fc:50:87:0a:d3:c1:
                    73:f5:64:f3:80:96:39:04:a6:fa:2a:83:6f:9c:41:
                    f6:2e:d7:54:94:17:b6:7b:9c:bd:df:23:07:9f:0c:
                    f9:4e:64:c7:4d:c4:b2:84:85:0c:72:cd:09:75:1b:
                    ca:72:41:b4:36:c8:e1:b2:66:55:3e:f7:68:3e:41:
                    ec:d7:63:35:a6:21:d0:bc:f0:91:b5:2c:dc:0c:f2:
                    a4:ef:81:ad:4c:e1:74:54:8a:34:d6:10:bb:4f:f0:
                    ff:26:6c:31:9d:d0:96:c0:f0:0b:c4:33:c7:fd:08:
                    1a:48:3a:3c:6e:31:cc:1e:04:60:8f:7b:5d:54:ab:
                    de:e1:fd:97:af:1a:a6:22:24:c0:42:a5:0e:d6:da:
                    a6:61:ee:07:cb:83:c5:b9:4e:df:a2:9b:09:6e:2e:
                    39:f2:1d:46:26:24:cc:71:66:f6:5e:80:50:c9:a3:
                    d4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B7:26:7E:69:9F:06:CC:FB:A0:7F:44:91:B6:59:7E:1D:9D:F6:05
            X509v3 Authority Key Identifier:
                keyid:65:0C:DA:05:11:46:F7:75:37:56:14:9B:DB:6B:92:19:77:65:D9:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/650CDA051146F7753756149BDB6B92197765D95E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:44:81:3e:86:90:16:75:ca:af:5e:0e:53:64:a6:5f:df:43:
         b7:f8:e5:d6:54:75:7c:33:69:21:c7:ae:ac:f8:4e:8f:8d:14:
         8c:2f:94:7a:fc:6b:8a:8a:be:aa:8e:5d:17:b4:13:aa:c6:ec:
         6c:05:cd:25:7b:af:e5:f1:9a:75:2d:3a:94:cc:a5:4c:3b:2d:
         3d:89:06:c7:39:cd:df:b0:3c:a6:eb:98:9b:e4:8f:9a:0b:23:
         ea:f2:4a:15:e1:b9:74:39:85:89:d3:05:35:ef:bc:19:5e:f6:
         ce:73:5e:cf:07:04:5b:bd:65:7d:b1:8f:ca:4e:7c:5e:79:3a:
         e8:fc:12:12:0a:c7:20:e6:2a:0a:39:32:73:6c:05:12:06:c4:
         f7:c7:78:96:67:e3:c4:41:dc:8a:81:32:24:f6:cd:85:34:21:
         e6:68:82:01:29:ec:df:41:32:ff:b3:1c:6a:77:c6:65:aa:f3:
         94:17:de:26:53:50:db:6c:73:8a:c2:6e:4c:6e:ec:76:9b:3d:
         53:d5:ae:b2:61:df:04:74:ce:9d:5e:93:2d:6d:8d:88:a8:0a:
         9a:48:c3:7b:6f:0e:d7:ec:76:d4:92:81:f5:87:f3:89:08:88:
         94:83:e9:2d:c5:b0:a2:79:22:23:6e:64:4b:17:7f:7e:e4:14:
         3e:dc:02:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 07:31:23 2026 by rpki-client