Error: rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.mft
File:                     0B31CCC1E89F4389597737BE4B57373331925A2F.mft (raw, json)
Hash identifier:          dJ8vorFkr2ApyNB++Hjlos5GvUefEzOvfcDYuniE3BI=
Subject key identifier:   26:20:03:76:F9:B7:E8:F3:1A:C6:4A:3E:21:21:1A:B9:A3:D7:6B:8D
Authority key identifier: 0B:31:CC:C1:E8:9F:43:89:59:77:37:BE:4B:57:37:33:31:92:5A:2F
Certificate issuer:       /CN=0B31CCC1E89F4389597737BE4B57373331925A2F
Certificate serial:       35B780904DE68627EC08DBE76B0DEAB28A05C991
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B31CCC1E89F4389597737BE4B57373331925A2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.mft
Manifest number:          04E5
Signing time:             Sat 31 Oct 2026 20:15:59 +0000
Manifest this update:     Sat 31 Oct 2026 20:10:59 +0000
Manifest next update:     Sun 01 Nov 2026 22:51:59 +0000
Files and hashes:         1: 3133382e39372e32342e302f32322d3234203d3e20323634313138.roa (hash: BbKjWSX1BNqL53gf1loDf0fDUnT62Bw4A5d2ZQuI+3I=)
                          2: 323830343a323262383a3a2f3332203d3e20323634313138.roa (hash: K1hHSS7LnwmmFe8eu9aGkC+sbIx+To//Z9JsfByIiNc=)
                          3: 0B31CCC1E89F4389597737BE4B57373331925A2F.crl (hash: VHoNzrQccGuiGlCxPXwPv5NeXghjUKq0ZOINOMpOMhk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.crl
                          rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B31CCC1E89F4389597737BE4B57373331925A2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 22:51:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:b7:80:90:4d:e6:86:27:ec:08:db:e7:6b:0d:ea:b2:8a:05:c9:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B31CCC1E89F4389597737BE4B57373331925A2F
        Validity
            Not Before: Oct 31 20:10:59 2026 GMT
            Not After : Nov  1 22:51:59 2026 GMT
        Subject: CN=26200376F9B7E8F31AC64A3E21211AB9A3D76B8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:79:66:83:f9:2f:40:0f:fb:2a:d0:81:5e:6d:
                    96:d9:26:fe:55:5a:d9:25:e2:41:6d:47:75:91:0d:
                    e1:a1:c5:77:06:31:c0:30:26:b6:68:dc:18:37:60:
                    c2:4c:1f:fe:4e:21:8a:8d:a9:fc:49:a5:04:b0:e4:
                    1d:18:a7:d8:80:64:a2:83:79:fb:cf:08:22:70:5c:
                    b6:ad:d1:b7:b2:0e:4f:76:9b:93:0c:51:de:5d:a3:
                    9c:a8:81:52:19:4d:70:02:14:5c:73:d8:d8:b5:4e:
                    9b:f3:13:c9:79:95:05:db:fb:0e:44:27:db:15:ce:
                    d7:2a:48:bf:9a:50:76:f5:06:ee:43:73:39:7b:92:
                    75:bc:f3:60:31:b6:f0:67:98:0e:c9:f0:db:70:b7:
                    2a:82:54:43:d0:84:a4:43:6a:e0:e7:e1:2b:99:a1:
                    89:4d:10:eb:6d:0b:72:df:1f:cb:3f:29:8a:b1:09:
                    09:11:fb:a2:81:3d:e9:0c:16:bd:74:21:56:1d:43:
                    eb:d6:89:4b:b7:dc:5c:ff:14:d6:1c:72:ca:44:f3:
                    2e:b6:cf:c7:63:70:06:5f:47:0c:a6:ca:94:fc:c3:
                    9c:5b:6a:96:69:ac:51:90:3e:86:3d:c0:4b:be:5c:
                    24:4f:15:16:0b:a9:c5:e8:50:48:1c:31:d8:e6:46:
                    e1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:20:03:76:F9:B7:E8:F3:1A:C6:4A:3E:21:21:1A:B9:A3:D7:6B:8D
            X509v3 Authority Key Identifier:
                keyid:0B:31:CC:C1:E8:9F:43:89:59:77:37:BE:4B:57:37:33:31:92:5A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B31CCC1E89F4389597737BE4B57373331925A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:19:9d:b4:8e:b2:dd:27:30:a5:8b:65:d7:21:d7:2a:73:78:
         aa:25:f7:4b:3b:31:eb:dd:29:e2:61:14:d7:4b:59:fb:87:a3:
         97:6c:57:5c:5f:53:6e:53:07:20:97:56:0d:5b:25:49:75:f9:
         d4:13:e0:75:ce:e4:74:0d:66:80:92:0e:6e:b2:b2:42:9e:4f:
         1f:bb:16:81:db:06:85:63:e1:56:b3:77:95:ed:80:a3:60:e1:
         dd:8b:98:4f:0a:1a:9e:c0:98:be:b7:80:02:f0:60:ef:50:e8:
         2f:76:1e:ad:24:2e:f3:31:72:b2:2e:9c:58:6b:80:57:33:5c:
         a9:b4:a2:d9:77:b1:d2:25:31:e1:6e:98:f1:ee:5d:65:4e:d8:
         95:30:05:2f:19:bd:53:ac:26:31:a5:72:48:40:dc:1b:81:d4:
         db:a3:02:42:4d:5a:e6:af:62:75:52:3a:4c:63:cb:57:a4:d3:
         49:49:f3:c3:28:9f:29:ee:50:d6:7a:c5:e9:65:8c:c6:cb:f1:
         99:0b:5e:1e:f5:e0:c6:9d:5f:c0:eb:bc:eb:de:72:12:d2:5f:
         1b:dc:cb:fb:c1:66:7e:ec:59:d0:c0:1c:5e:2b:48:ab:e2:1b:
         3d:5d:82:41:db:3b:41:b1:bd:dc:f2:1a:67:c0:31:82:e4:a2:
         d2:3c:70:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 00:48:43 2026 by rpki-client