Error: rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft
File:                     DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft (raw, json)
Hash identifier:          TL+uyFBkMUfssS7bmAFkKKp6ePUuo3DgAu9hf9DnYL4=
Subject key identifier:   02:D5:77:CF:C5:03:7B:7E:DA:74:5B:D8:77:18:A9:6E:49:59:93:FD
Authority key identifier: DA:48:CA:C1:AD:92:76:8B:5C:BC:61:21:9D:BA:6F:EB:CD:8A:22:3F
Certificate issuer:       /CN=DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F
Certificate serial:       4FB2CC35756B4E5D14E666AAFF9EEF86AEB2CD48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft
Manifest number:          04CA
Signing time:             Sun 18 Oct 2026 00:06:41 +0000
Manifest this update:     Sun 18 Oct 2026 00:01:41 +0000
Manifest next update:     Mon 19 Oct 2026 01:21:41 +0000
Files and hashes:         1: DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl (hash: vaMX5F5T2WrPOF0aumDD+2231Q13qFwtsZPr9i5Fy/E=)
                          2: 323830343a333131383a3a2f33322d3438203d3e20323634393932.roa (hash: iZmC1t/fjeUUNQnWbsucToAMSgInG3Ark2xpwjFVDnA=)
                          3: 3137302e38342e39362e302f32322d3234203d3e20323634393932.roa (hash: DYGx/T5AnQgCjOey+UURzZWhb0H67r/Ia6mcIhr9I/8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl
                          rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 01:21:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:b2:cc:35:75:6b:4e:5d:14:e6:66:aa:ff:9e:ef:86:ae:b2:cd:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F
        Validity
            Not Before: Oct 18 00:01:41 2026 GMT
            Not After : Oct 19 01:21:41 2026 GMT
        Subject: CN=02D577CFC5037B7EDA745BD87718A96E495993FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ea:a5:1d:9d:e3:4d:b7:97:a9:2a:9a:9c:0b:
                    f4:22:c6:52:dc:d2:58:00:73:bc:3c:f0:3e:de:26:
                    33:7d:3b:04:a7:ad:98:f1:5b:4f:ac:d6:95:ec:43:
                    60:0c:65:0b:b6:b6:1a:52:ec:5c:6d:41:2b:16:1b:
                    07:82:66:38:f5:2e:9b:f6:39:5f:ab:56:83:44:3e:
                    6b:b0:71:c5:84:2a:40:1c:34:54:e7:7c:7a:34:bf:
                    5f:d8:af:ab:15:24:30:a8:e2:b7:01:2a:d5:f7:82:
                    63:65:4f:9d:12:60:f8:1f:70:52:c4:48:91:1f:89:
                    1a:eb:de:53:01:45:41:78:22:a7:0d:87:fb:7a:fc:
                    04:3e:64:78:17:9c:e4:c9:86:f4:52:96:14:2b:14:
                    a8:ba:3c:31:f6:a7:95:5b:71:ce:58:21:aa:89:a4:
                    04:0a:96:03:c7:c5:0e:8c:21:c1:d2:74:23:00:6f:
                    cf:e3:8f:55:9a:4b:f0:26:bd:f1:5c:08:9a:62:19:
                    d1:ff:d3:02:d0:00:87:b5:cb:0d:6d:a6:9d:11:f0:
                    a1:20:dc:58:ea:de:5b:10:75:1c:74:0b:fb:ca:ae:
                    dc:f7:de:eb:8a:91:e0:14:c7:f7:30:be:32:c9:39:
                    cd:1f:5e:1f:a2:2a:ba:1a:14:59:a4:b0:91:4a:89:
                    36:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D5:77:CF:C5:03:7B:7E:DA:74:5B:D8:77:18:A9:6E:49:59:93:FD
            X509v3 Authority Key Identifier:
                keyid:DA:48:CA:C1:AD:92:76:8B:5C:BC:61:21:9D:BA:6F:EB:CD:8A:22:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:94:20:67:bc:2a:aa:55:bd:83:46:f0:fc:e9:a9:df:a1:87:
         cf:26:b6:3a:25:5d:5e:8d:c1:72:98:62:05:aa:3a:9d:9c:68:
         24:02:55:c8:a8:c2:cb:de:40:a6:f5:eb:5a:5f:eb:80:8e:2a:
         88:1d:50:9c:f8:02:08:8c:49:26:c1:96:bb:d9:01:6a:0c:bf:
         a7:22:f4:0d:11:18:49:80:9c:68:28:b2:1e:13:cc:7f:77:d6:
         8a:3e:88:25:e0:10:1a:9f:d0:d6:df:cb:c2:01:cf:a1:58:4d:
         55:b7:30:13:82:1e:cb:f9:0b:49:37:b7:3f:1c:80:16:bf:92:
         6f:dd:82:f4:56:27:eb:32:12:cd:7f:ca:38:5f:a8:48:c3:79:
         f0:6e:d0:48:48:f8:59:7d:93:6e:25:fb:b4:f3:ec:0e:8f:80:
         d7:5b:10:01:6c:93:3e:27:aa:65:9c:64:78:2b:ad:4b:d1:79:
         db:dd:8c:2c:5e:f9:dd:a5:2d:79:fd:ee:e1:0c:fe:de:33:1b:
         9b:7a:71:44:a2:d6:41:3a:f5:94:44:8d:bc:21:3d:41:bb:50:
         4d:e0:dc:4f:73:de:9d:7a:bf:07:24:91:39:70:9a:e3:f3:75:
         d9:02:72:fb:f2:a9:0e:ec:73:10:a2:15:64:fa:af:24:bd:2e:
         38:6c:f8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 11:41:50 2026 by rpki-client