Error: rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/82564553AE299B22FAC12CA23483B4453FF22D0A.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/82564553AE299B22FAC12CA23483B4453FF22D0A.mft
File:                     82564553AE299B22FAC12CA23483B4453FF22D0A.mft (raw, json)
Hash identifier:          86mLTW1IZrIGVDYatA0BBBf/k6/n2XHBzSguvgjBs6g=
Subject key identifier:   B8:54:6B:FA:86:46:7C:AF:5E:29:F3:78:91:CF:50:35:5E:22:47:39
Authority key identifier: 82:56:45:53:AE:29:9B:22:FA:C1:2C:A2:34:83:B4:45:3F:F2:2D:0A
Certificate issuer:       /CN=82564553AE299B22FAC12CA23483B4453FF22D0A
Certificate serial:       1AE4A8BBE7DCC631C19504D6B387FFD35E46EB3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82564553AE299B22FAC12CA23483B4453FF22D0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/82564553AE299B22FAC12CA23483B4453FF22D0A.mft
Manifest number:          04ED
Signing time:             Tue 03 Nov 2026 17:45:10 +0000
Manifest this update:     Tue 03 Nov 2026 17:40:10 +0000
Manifest next update:     Wed 04 Nov 2026 18:11:10 +0000
Files and hashes:         1: 323830343a346534343a3a2f33322d3438203d3e20323638323530.roa (hash: rPKECQmhJgrhlnYz1Hkz1YO+GT3uTQhk8qlOxG/cHvY=)
                          2: 82564553AE299B22FAC12CA23483B4453FF22D0A.crl (hash: J5+15TKI70OTRG4Knej1FdkETdUMRFyD96BH6cjNesk=)
                          3: 34352e3233362e3233362e302f32322d3234203d3e20323638323530.roa (hash: /Ojdaw9jWWMSQk2sBUiYCLAwVgbJtg6gsdZLdRV+m0g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/82564553AE299B22FAC12CA23483B4453FF22D0A.crl
                          rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/82564553AE299B22FAC12CA23483B4453FF22D0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82564553AE299B22FAC12CA23483B4453FF22D0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 18:11:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e4:a8:bb:e7:dc:c6:31:c1:95:04:d6:b3:87:ff:d3:5e:46:eb:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82564553AE299B22FAC12CA23483B4453FF22D0A
        Validity
            Not Before: Nov  3 17:40:10 2026 GMT
            Not After : Nov  4 18:11:10 2026 GMT
        Subject: CN=B8546BFA86467CAF5E29F37891CF50355E224739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f3:3c:2b:85:cc:5e:eb:53:67:32:28:5c:7d:
                    62:cd:8a:2b:69:12:26:ae:1b:30:65:aa:63:fe:ae:
                    5d:b0:03:5d:d8:94:af:2c:4f:51:8d:2d:6d:dd:4f:
                    b1:26:1a:50:7d:40:9d:2d:b1:eb:4a:80:fb:f9:5e:
                    50:cc:b2:d3:83:74:55:d5:52:a4:c7:43:4b:24:24:
                    92:94:32:ae:a3:18:e8:78:1e:1b:a3:84:7c:90:35:
                    fa:55:c0:03:a0:d0:cb:cc:f5:45:3b:35:22:5d:e6:
                    b6:40:60:9e:5a:97:39:f0:a6:69:5b:e2:bf:56:c1:
                    d6:c5:06:2a:38:74:16:f8:d5:43:d5:d2:68:01:5d:
                    49:ab:ad:6d:3a:1c:7f:11:ce:2d:ee:ac:ec:f0:91:
                    52:bf:d3:b6:e3:bd:86:6c:34:ac:61:61:d5:44:26:
                    62:88:0c:a5:4b:1b:2b:19:1f:56:d8:a8:55:e7:17:
                    37:19:59:13:d4:55:8d:1b:57:37:2c:4e:fe:a8:b8:
                    d7:c3:cb:e6:5a:20:ba:a1:c9:f5:cd:e7:64:33:ae:
                    5b:e5:7b:98:47:44:52:64:17:f2:40:b6:3e:92:e8:
                    58:c0:f3:8d:ea:4b:b5:49:bb:02:df:cb:98:7a:60:
                    60:6a:fa:75:4d:2d:fb:43:2d:e4:d7:5e:d0:46:1a:
                    13:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:54:6B:FA:86:46:7C:AF:5E:29:F3:78:91:CF:50:35:5E:22:47:39
            X509v3 Authority Key Identifier:
                keyid:82:56:45:53:AE:29:9B:22:FA:C1:2C:A2:34:83:B4:45:3F:F2:2D:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/82564553AE299B22FAC12CA23483B4453FF22D0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82564553AE299B22FAC12CA23483B4453FF22D0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/82564553AE299B22FAC12CA23483B4453FF22D0A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:65:29:a2:7d:0e:75:d2:39:11:54:7a:a9:9e:65:e6:7d:1b:
         99:ae:14:f7:81:6a:b0:7c:f4:be:23:b9:c7:7b:5d:15:fd:81:
         05:5a:d1:11:2b:c2:8c:e6:ac:74:97:5d:ac:71:34:57:92:05:
         d8:7e:e1:09:86:8d:61:44:ee:20:f1:17:d4:bc:e4:ec:f7:17:
         42:9b:9b:e4:ac:7c:ff:2e:cd:0e:fa:d0:21:81:e1:63:46:e3:
         d8:c5:4b:52:57:40:94:bc:0f:bb:2b:5b:0d:34:df:45:60:c6:
         c0:b7:e4:4a:34:03:2b:0a:4f:03:7e:28:8a:f6:77:df:61:d0:
         ae:72:c1:9a:56:2e:b6:4b:80:ea:19:6d:68:06:8a:8e:64:4e:
         d5:ab:ec:f0:2f:71:82:45:bb:19:e2:7b:4c:b1:21:07:dc:2c:
         01:a4:93:fd:c8:29:49:5d:89:d8:3e:08:0d:aa:04:e1:5b:d1:
         dd:f3:66:07:be:4f:ef:c4:20:f1:f6:92:cc:fa:2b:2e:f9:44:
         cd:19:01:8c:ce:87:e1:2d:d9:f3:e1:c1:05:a3:7f:45:fe:7a:
         4e:b3:17:59:b8:d6:d8:3f:5a:e2:18:db:68:7a:a6:ce:d0:57:
         14:94:c6:74:15:99:1e:17:ae:f1:dc:a5:bf:b2:0b:78:3a:dc:
         8d:7c:1c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 19:51:17 2026 by rpki-client