Error: rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/1/6E9AAAC5325433AB1BE58FD2578F26BD250375E5.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/1/6E9AAAC5325433AB1BE58FD2578F26BD250375E5.mft
File:                     6E9AAAC5325433AB1BE58FD2578F26BD250375E5.mft (raw, json)
Hash identifier:          ou6ykhuhVW2eUOesOts1aZV64xqMjawR7IbVyPxhP0k=
Subject key identifier:   C6:82:56:01:E4:97:71:3B:50:C2:CE:A4:54:E5:DF:CD:06:22:54:A4
Authority key identifier: 6E:9A:AA:C5:32:54:33:AB:1B:E5:8F:D2:57:8F:26:BD:25:03:75:E5
Certificate issuer:       /CN=6E9AAAC5325433AB1BE58FD2578F26BD250375E5
Certificate serial:       74959AF25C061F382D28590F74700B6323D4AD43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E9AAAC5325433AB1BE58FD2578F26BD250375E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/1/6E9AAAC5325433AB1BE58FD2578F26BD250375E5.mft
Manifest number:          0587
Signing time:             Mon 02 Nov 2026 12:40:00 +0000
Manifest this update:     Mon 02 Nov 2026 12:35:00 +0000
Manifest next update:     Tue 03 Nov 2026 12:40:00 +0000
Files and hashes:         1: 6E9AAAC5325433AB1BE58FD2578F26BD250375E5.crl (hash: uCmTba8l6TkXuB5Jssr58/fFJE7qq0roqjznh6YGaic=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/1/6E9AAAC5325433AB1BE58FD2578F26BD250375E5.crl
                          rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/1/6E9AAAC5325433AB1BE58FD2578F26BD250375E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E9AAAC5325433AB1BE58FD2578F26BD250375E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 12:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:95:9a:f2:5c:06:1f:38:2d:28:59:0f:74:70:0b:63:23:d4:ad:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E9AAAC5325433AB1BE58FD2578F26BD250375E5
        Validity
            Not Before: Nov  2 12:35:00 2026 GMT
            Not After : Nov  9 12:40:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:64:2a:b8:5d:1f:ba:3f:d0:50:fa:3e:71:33:
                    f0:17:6f:74:1a:c4:aa:2c:c9:82:ae:20:a7:68:f5:
                    16:3e:f2:a7:3f:ce:c8:7c:a1:b6:07:1d:28:0d:9a:
                    23:c0:63:6b:5d:2c:c2:5d:97:52:33:2b:2e:42:69:
                    49:35:2e:41:9e:5a:94:8a:56:e1:8e:f6:90:dc:e2:
                    24:a8:af:da:9e:e8:88:30:d8:30:8c:53:d2:ee:40:
                    d9:d7:c7:6b:cb:c3:86:f4:46:85:fe:02:70:d0:85:
                    56:77:8e:1d:d2:13:40:68:35:d7:6a:89:04:9d:b0:
                    41:13:83:67:96:27:ea:1d:a7:89:6e:29:10:6c:4a:
                    3f:73:55:51:b7:e9:96:d1:39:e1:d1:10:d0:88:1d:
                    27:4d:71:d6:17:5b:7e:65:48:e2:cf:4d:c7:f8:5a:
                    22:a6:16:58:04:d5:f4:88:4c:6d:67:d3:0b:24:35:
                    93:92:cc:fd:d9:32:c0:fe:ea:35:0e:5b:1e:19:63:
                    61:b0:54:2d:20:5e:a6:f5:d5:ba:c5:9f:9b:fa:94:
                    41:99:fa:19:10:98:77:67:df:6c:81:32:1e:6e:76:
                    ff:b4:33:98:51:73:a6:63:45:8d:78:cb:56:10:8e:
                    12:15:e4:0d:f1:c7:3d:81:40:cd:17:5f:74:11:29:
                    82:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:82:56:01:E4:97:71:3B:50:C2:CE:A4:54:E5:DF:CD:06:22:54:A4
            X509v3 Authority Key Identifier:
                keyid:6E:9A:AA:C5:32:54:33:AB:1B:E5:8F:D2:57:8F:26:BD:25:03:75:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/1/6E9AAAC5325433AB1BE58FD2578F26BD250375E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E9AAAC5325433AB1BE58FD2578F26BD250375E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/1/6E9AAAC5325433AB1BE58FD2578F26BD250375E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:21:39:5b:19:47:b0:d2:2d:65:08:34:3a:b5:ff:de:8d:2b:
         e0:04:16:51:19:2e:89:5d:a7:d6:6c:1a:6a:37:53:08:4b:57:
         29:94:ff:0f:f7:2e:ef:a3:56:cf:12:53:27:f0:cc:aa:96:6c:
         a3:83:1e:f5:7f:0f:55:a0:ef:91:e0:ef:ee:cb:5d:c1:06:20:
         c9:4e:31:ab:3b:c8:aa:89:4e:28:6b:e3:83:d5:33:4e:fe:78:
         36:01:c9:59:92:e0:31:54:ce:4b:69:5c:4f:9f:a9:ff:2c:98:
         5c:c6:37:0d:69:d5:6e:ec:57:4d:c7:33:f3:9e:d1:bc:06:9b:
         ff:6e:eb:db:00:b7:03:ea:82:d9:93:fe:c5:e4:74:b9:4a:50:
         66:2e:58:7b:26:07:11:1b:e4:ba:65:e0:9e:ae:28:2f:2f:2f:
         9c:55:90:39:aa:a5:ec:fd:97:c7:c1:61:ac:69:a8:9c:27:49:
         58:1d:07:50:c2:cb:ad:f9:a9:93:a5:00:e5:9c:5a:21:e8:9a:
         29:48:21:b7:0d:47:ec:c2:1b:f8:1f:ce:1e:c7:66:dd:70:88:
         02:c7:af:6d:56:62:e9:1b:30:53:53:de:08:49:fc:bc:57:10:
         c9:e4:8e:7c:54:10:14:c7:16:4e:7b:78:fb:e8:3c:94:dd:f2:
         f7:d3:d0:05
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 2 22:20:55 2026 by rpki-client