Error: rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/733F4B034A3788745713B6F81B211FD8957CF1EE.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/733F4B034A3788745713B6F81B211FD8957CF1EE.mft
File:                     733F4B034A3788745713B6F81B211FD8957CF1EE.mft (raw, json)
Hash identifier:          rjhGRjBqBQJXWKYLk7/KKQvhXL+uoGJNuEUHNKm6rUM=
Subject key identifier:   E4:CC:D6:C2:33:9C:B6:61:02:E4:7B:AC:37:FE:6A:E9:07:F2:D1:45
Authority key identifier: 73:3F:4B:03:4A:37:88:74:57:13:B6:F8:1B:21:1F:D8:95:7C:F1:EE
Certificate issuer:       /CN=733F4B034A3788745713B6F81B211FD8957CF1EE
Certificate serial:       44832263D793101DE05A8E85BDC19946D1169870
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/733F4B034A3788745713B6F81B211FD8957CF1EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/733F4B034A3788745713B6F81B211FD8957CF1EE.mft
Manifest number:          04CD
Signing time:             Wed 14 Oct 2026 01:02:51 +0000
Manifest this update:     Wed 14 Oct 2026 00:57:51 +0000
Manifest next update:     Thu 15 Oct 2026 02:27:51 +0000
Files and hashes:         1: 733F4B034A3788745713B6F81B211FD8957CF1EE.crl (hash: OhaSZdg82YyhwOUp9+naac545BaYkRxQ2y5KVEMlsCM=)
                          2: 3136382e302e3139362e302f32322d3234203d3e20323635323635.roa (hash: uIVDUZk2eLRH+jxk52HbsHUXpJiTBIzFAwde6PQTcGc=)
                          3: 323830343a326433303a3a2f33322d3438203d3e20323635323635.roa (hash: f+YUrCN5kYvokNgrwug1C06hBM0mBzli4EV5hr5Ll6o=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/733F4B034A3788745713B6F81B211FD8957CF1EE.crl
                          rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/733F4B034A3788745713B6F81B211FD8957CF1EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/733F4B034A3788745713B6F81B211FD8957CF1EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 02:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:83:22:63:d7:93:10:1d:e0:5a:8e:85:bd:c1:99:46:d1:16:98:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733F4B034A3788745713B6F81B211FD8957CF1EE
        Validity
            Not Before: Oct 14 00:57:51 2026 GMT
            Not After : Oct 15 02:27:51 2026 GMT
        Subject: CN=E4CCD6C2339CB66102E47BAC37FE6AE907F2D145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:88:01:af:08:2c:12:11:4e:5f:b3:8d:8e:1a:
                    59:8f:5a:11:b4:75:9a:ba:2c:f7:0b:b0:ca:6b:e8:
                    71:d1:02:8c:03:9c:88:80:d5:c4:9b:a7:28:32:ee:
                    77:44:fb:46:10:8f:0e:ab:65:4a:cc:83:f9:b0:b1:
                    f8:35:94:a9:3f:53:78:63:9c:2b:3e:b1:c7:33:9d:
                    db:cb:1c:62:53:c7:b1:02:d0:46:0b:a7:8b:7c:7e:
                    10:ce:2a:d8:12:d4:30:25:88:f7:ba:44:1a:16:94:
                    3f:50:1a:c3:9d:cc:8b:24:91:39:2f:f2:10:17:7b:
                    04:31:d3:e8:7d:2e:34:c5:a6:11:6c:37:38:2a:67:
                    fb:88:3f:64:26:a0:39:e7:84:7e:54:3a:08:74:b6:
                    37:5b:cc:3a:22:5f:c7:cf:59:a9:df:fa:91:9a:09:
                    16:bd:29:f8:17:f7:46:b6:b8:0c:39:b2:90:a6:27:
                    9e:f8:1f:af:9b:c0:d1:e5:44:25:69:5b:a3:e7:29:
                    1b:fb:6d:4d:99:d0:ee:14:2e:75:a2:ea:ca:70:fd:
                    37:aa:c2:89:04:6c:5a:d4:4a:f6:17:af:af:19:4c:
                    36:c2:c6:94:2d:51:a5:ec:19:6c:bb:46:7a:b2:4c:
                    44:84:2b:fb:e2:b8:43:ed:be:be:ee:1d:3c:7e:49:
                    47:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:CC:D6:C2:33:9C:B6:61:02:E4:7B:AC:37:FE:6A:E9:07:F2:D1:45
            X509v3 Authority Key Identifier:
                keyid:73:3F:4B:03:4A:37:88:74:57:13:B6:F8:1B:21:1F:D8:95:7C:F1:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/733F4B034A3788745713B6F81B211FD8957CF1EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/733F4B034A3788745713B6F81B211FD8957CF1EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/733F4B034A3788745713B6F81B211FD8957CF1EE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:3a:5c:30:86:ef:cf:62:17:df:74:e6:f2:0b:18:22:b1:66:
         e9:71:d9:9e:83:49:61:fd:4b:2b:54:3a:21:41:fb:af:ae:45:
         a1:e6:57:11:32:3f:c1:fb:b0:28:69:7d:02:10:02:3a:2f:fb:
         48:09:cc:c4:8d:13:22:73:80:80:f6:dc:48:00:7d:cf:51:22:
         c1:5d:c5:b3:f2:eb:87:bf:7a:84:d1:cf:b5:7a:17:62:e7:0c:
         e2:9c:a9:28:46:1c:32:a8:37:61:bc:04:f7:85:e4:31:a8:64:
         2c:fa:e0:79:c0:8e:0a:46:cb:c2:95:e8:0f:88:a2:fc:b6:3a:
         72:10:3c:7f:c3:e6:8a:83:c0:4f:55:eb:3c:8c:68:9d:99:7b:
         df:4b:8a:b5:88:b9:41:a7:6d:82:95:fc:e0:69:ac:99:80:56:
         aa:8f:1f:a3:b2:64:73:7e:52:13:4f:62:b4:66:20:98:4e:23:
         36:50:cd:11:20:40:f7:06:29:9a:22:93:81:50:0a:13:80:b7:
         a2:86:1b:9f:c4:d7:a3:71:56:bf:4a:99:bc:89:56:ae:ab:b4:
         97:b8:53:1b:77:cc:0c:3c:71:71:4b:9b:81:1a:2d:c2:ea:7b:
         8c:72:d9:c2:0b:d1:26:fa:18:e8:04:8f:c8:01:48:4e:2d:ce:
         41:f6:6a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:01:20 2026 by rpki-client