Error: rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.mft
File:                     677267BB5B39E407382A7BBF001BEE00278BE380.mft (raw, json)
Hash identifier:          GqzIgIBfU1ZW8pSvnspm/MwwBBD3EiVXtwxlUuObOzw=
Subject key identifier:   8C:68:CF:92:B6:DB:08:B8:F9:D3:6C:57:D8:6B:EB:20:80:82:9F:5F
Authority key identifier: 67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80
Certificate issuer:       /CN=677267BB5B39E407382A7BBF001BEE00278BE380
Certificate serial:       4DD25412AEAEBE1BBE829CB2FD8D660BF0F4980E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.mft
Manifest number:          047F
Signing time:             Mon 12 Oct 2026 18:05:01 +0000
Manifest this update:     Mon 12 Oct 2026 18:00:01 +0000
Manifest next update:     Tue 13 Oct 2026 19:16:01 +0000
Files and hashes:         1: 323830343a373131303a353130303a3a2f34382d3438203d3e20323730373634.roa (hash: rPirab4PQPwJnSul7EprgLakaM6GggTU+RnaAmMHXZA=)
                          2: 323830343a373131303a333130303a3a2f34382d3438203d3e20323730373634.roa (hash: yPtRbzBnqjQzH9Vzdgaiq+se1xuQ+/poE1k1POnq2uA=)
                          3: 323830343a373131303a313030303a3a2f34382d3438203d3e20323730373634.roa (hash: 96vyuhGkl1b0gO+9uiVrmHV/RQTbnB74uPma7k7V9ac=)
                          4: 3138392e3132372e3136342e302f32342d3234203d3e20323730373634.roa (hash: DlzJunf9iGS8DPDFRBic9bX1BGwXEQPjx+PJOkJc1hE=)
                          5: 323830343a373131303a353030303a3a2f34302d3430203d3e20323730373634.roa (hash: 7gI/Sps7U+mkdQE4eIsOpauZiUmCTaTxy/lyoI+HdUQ=)
                          6: 323830343a373131303a353130303a3a2f34302d3430203d3e20323730373634.roa (hash: SdlVFtYRw+g7Fq7IVm5NYoswyK95X5/pB5Xw7iqwP/8=)
                          7: 323830343a373131303a366166663a3a2f34382d3438203d3e20323730373634.roa (hash: 7BO9GOdyx4pmKJ/UtvIK4BNZzuFIq/ny8XUiH/iVf4U=)
                          8: 323830343a373131303a373130303a3a2f34302d3430203d3e20323730373634.roa (hash: POzjvghn3Vmnnbwr+9/1YAH/dzTVxutNhT105tnzydo=)
                          9: 323830343a373131303a363030303a3a2f34382d3438203d3e20323730373634.roa (hash: DOC+8oRzTbrpqH8IGVQt9VB6JP7tzE1bFfsuRclhKgc=)
                          10: 323830343a373131303a383030303a3a2f34382d3438203d3e20323730373634.roa (hash: SVR7J2UuOnwpuKypvqBPf5ZM4y1V0nafNhyxtr7Z18w=)
                          11: 323830343a373131303a323030303a3a2f34382d3438203d3e20323730373634.roa (hash: 8bEkcSzl12tGyl7eE5cDL+m1hvRXLQhp76V5hkUM+LY=)
                          12: 323830343a373131303a343930303a3a2f34302d3430203d3e20323730373634.roa (hash: RhghMc++exHkMk3M570ZG9CPdiDY5l6pOWYttx55pvg=)
                          13: 323830343a373131303a343930303a3a2f34382d3438203d3e20323730373634.roa (hash: Nadrbb7pYGzaeT2EpvOoieGw2AULXeMa9mYbmhK/1Yc=)
                          14: 323830343a373131303a343030303a3a2f34382d3438203d3e20323730373634.roa (hash: EhHdAbrWns4VKQOmUkTRJJLnohNXef2b03xI2dTdQXU=)
                          15: 323830343a373131303a373130303a3a2f34382d3438203d3e20323730373634.roa (hash: HHMpNbygGK57EzK67MkLC9oL5wu26nM1HSANt3EaWB4=)
                          16: 323830343a373131303a393030303a3a2f34382d3438203d3e20323730373634.roa (hash: qpwQgD4ZLWrXo0PNZC8W5ojPRSB2VlLhDVabvVMOlQo=)
                          17: 677267BB5B39E407382A7BBF001BEE00278BE380.crl (hash: iAsrNwzF1gGNbBKAmL7qL9m3QsZKKTOpIjfzKYTUFkk=)
                          18: 3138392e3132372e3136352e302f32342d3234203d3e20323730373634.roa (hash: 4ritKEtu0cw0NFhr3+Kkd3C+3ti3LGI9rXbnBUhfolA=)
                          19: 323830343a373131303a373230303a3a2f34382d3438203d3e20323730373634.roa (hash: n/ogW4PWa+19trE64dVyTI/v95kn0yuOnuXTsQ7pnAc=)
                          20: 323830343a373131303a353030303a3a2f34382d3438203d3e20323730373634.roa (hash: RKSkDONGDT7S/fIk1fA0VhSpLn+vxb7GfG+d/dQr62U=)
                          21: 323830343a373131303a363130303a3a2f34382d3438203d3e20323730373634.roa (hash: RgaufxsWSWXXXAm2+UgcZJAp3gp56vfKP5emM411XsI=)
                          22: 323830343a373131303a333030303a3a2f34382d3438203d3e20323730373634.roa (hash: Vr1fCgEhrW67b9Pg04bv0c8OElyqkko0uCh8BNwjDo0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl
                          rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 19:16:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d2:54:12:ae:ae:be:1b:be:82:9c:b2:fd:8d:66:0b:f0:f4:98:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677267BB5B39E407382A7BBF001BEE00278BE380
        Validity
            Not Before: Oct 12 18:00:01 2026 GMT
            Not After : Oct 13 19:16:01 2026 GMT
        Subject: CN=8C68CF92B6DB08B8F9D36C57D86BEB2080829F5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:88:7b:64:bd:c9:c9:49:e3:1e:40:33:48:cd:
                    9a:a1:f4:47:e4:e5:65:33:27:39:5e:30:08:21:0b:
                    c2:02:3f:9b:53:9e:a5:b4:bc:e2:3d:69:71:e5:5e:
                    2e:7e:db:12:49:9c:7e:29:96:8b:58:cd:66:94:18:
                    e5:58:b2:02:be:de:7f:8f:3d:e4:62:53:47:ed:90:
                    ba:b9:dd:98:50:87:3b:2d:03:0b:0a:7f:74:06:7b:
                    30:dc:e1:d1:8a:d0:3d:ed:96:eb:85:5f:b8:88:0b:
                    9b:89:21:90:8a:bc:de:b4:1e:b5:dc:8c:11:10:18:
                    27:68:99:80:02:2c:2d:e4:05:1a:1a:78:b1:ea:9f:
                    16:42:5d:2b:6f:54:79:4d:bb:82:b4:19:7a:2f:c7:
                    aa:7e:ad:a3:b1:7d:9c:44:2a:77:ac:a0:dd:75:5a:
                    d0:6d:77:2d:db:ac:27:da:14:16:a0:35:dc:1f:ca:
                    a0:fd:06:e6:c9:a4:79:5d:dd:eb:e7:b6:df:1a:0b:
                    e1:4a:31:25:c5:e0:12:5f:75:c1:99:1f:6e:28:cf:
                    b3:93:b7:20:c3:8a:f6:fb:74:f6:46:26:eb:8a:71:
                    d5:36:09:88:69:df:6d:69:67:4b:bd:a8:64:56:9d:
                    45:27:1a:bb:32:ba:8f:17:04:3f:9c:cc:d6:be:63:
                    d9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:68:CF:92:B6:DB:08:B8:F9:D3:6C:57:D8:6B:EB:20:80:82:9F:5F
            X509v3 Authority Key Identifier:
                keyid:67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:a0:8e:86:6e:a0:1a:f8:3c:da:f8:24:a9:ca:17:52:78:15:
         9e:ad:3b:4b:d5:3e:66:2b:ab:20:0a:fb:79:06:7c:11:04:ee:
         77:43:79:e0:22:46:2c:4a:e7:2c:6d:4c:e0:79:9b:5e:11:80:
         4e:14:a3:a8:2d:a4:b1:02:d1:e0:4f:19:4e:ac:57:d0:cc:27:
         75:cb:65:ae:85:45:cb:ed:90:20:93:c3:4d:3d:03:90:19:48:
         07:ae:5f:72:35:3c:22:34:bd:b2:09:17:74:ba:11:4c:bb:b0:
         49:d0:5e:73:d5:81:35:c4:3a:f5:ed:7b:78:bc:c1:b8:8d:fa:
         18:81:da:ce:46:9e:d1:be:79:8d:bc:40:d3:6d:e8:cd:10:1a:
         7f:83:4c:39:21:c3:ab:76:df:f3:dd:0e:d1:7d:8d:7b:4e:19:
         6c:86:dc:4a:66:fc:be:f7:78:60:dc:e6:14:fb:66:42:8f:a0:
         b6:4b:2f:a0:f6:d7:ba:2e:44:68:83:f5:14:c6:cf:1c:2d:78:
         2d:3a:d5:e8:b7:2f:11:96:f4:e9:50:84:40:d5:64:ff:a2:45:
         41:de:55:f7:ac:e1:bf:59:bb:57:3b:52:d8:06:3e:c9:da:17:
         47:16:9d:10:41:f5:b2:36:19:75:8f:ae:99:e3:8e:a7:bf:b1:
         f1:46:2c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:56:19 2026 by rpki-client