Error: rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/1/62764A7C7BACD36BADF866D6C8571C58A651B15B.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/1/62764A7C7BACD36BADF866D6C8571C58A651B15B.mft
File:                     62764A7C7BACD36BADF866D6C8571C58A651B15B.mft (raw, json)
Hash identifier:          DhBqKgDtzZPnFSCCuxy7dOLy6YwBGn9apHMBYI4/uzs=
Subject key identifier:   92:A8:45:5E:4F:A1:F7:D4:35:93:DF:AA:66:2F:A2:8F:38:AC:AC:01
Authority key identifier: 62:76:4A:7C:7B:AC:D3:6B:AD:F8:66:D6:C8:57:1C:58:A6:51:B1:5B
Certificate issuer:       /CN=62764A7C7BACD36BADF866D6C8571C58A651B15B
Certificate serial:       6D7935497D6937EC0862A6D0C756A55CD80D4DDC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62764A7C7BACD36BADF866D6C8571C58A651B15B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/1/62764A7C7BACD36BADF866D6C8571C58A651B15B.mft
Manifest number:          0569
Signing time:             Tue 13 Oct 2026 10:40:00 +0000
Manifest this update:     Tue 13 Oct 2026 10:35:00 +0000
Manifest next update:     Wed 14 Oct 2026 10:40:00 +0000
Files and hashes:         1: 62764A7C7BACD36BADF866D6C8571C58A651B15B.crl (hash: z6Tjn4ydU61vLaEdgrynjdyl4PRX2IApflkbPNNttD0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/1/62764A7C7BACD36BADF866D6C8571C58A651B15B.crl
                          rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/1/62764A7C7BACD36BADF866D6C8571C58A651B15B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62764A7C7BACD36BADF866D6C8571C58A651B15B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 10:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:79:35:49:7d:69:37:ec:08:62:a6:d0:c7:56:a5:5c:d8:0d:4d:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62764A7C7BACD36BADF866D6C8571C58A651B15B
        Validity
            Not Before: Oct 13 10:35:00 2026 GMT
            Not After : Oct 20 10:40:00 2026 GMT
        Subject: CN=3082010A0282010100CC9D1CC1EA98080D0A6CA619D890B4A385260479D0C5DD44083108B9F62CD22AED597C1924DADA21DAA7FC40D91BFB726BB022A67E88D9FAB22D586F9C1A086F62E21BC169D1268B30E96F0F1D5C0F9E0C917E78FB4407151CF696ECD9AFF393947DE1DF03FAD546952141458413A5C53BFCE82E60BE11742E66126A31EDF3941CA7C8AC453602EF14E03E9142CB0DDF1D81C30FE1D16DCEA1CB2525110C397BBE93CB99E0F21B1558C774DDBD8110B9E5B043830EACCB0F37C4FB22EE65182C1F03EFF1C3B779693406EBB8CA098F3EA184A2D8ACE465CD6E290EDF081DABB4B0BC136DF7F270868CA3D2C4FD026AD4D3251898E65CDF03E51EBA5FE87D5C030203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9d:1c:c1:ea:98:08:0d:0a:6c:a6:19:d8:90:
                    b4:a3:85:26:04:79:d0:c5:dd:44:08:31:08:b9:f6:
                    2c:d2:2a:ed:59:7c:19:24:da:da:21:da:a7:fc:40:
                    d9:1b:fb:72:6b:b0:22:a6:7e:88:d9:fa:b2:2d:58:
                    6f:9c:1a:08:6f:62:e2:1b:c1:69:d1:26:8b:30:e9:
                    6f:0f:1d:5c:0f:9e:0c:91:7e:78:fb:44:07:15:1c:
                    f6:96:ec:d9:af:f3:93:94:7d:e1:df:03:fa:d5:46:
                    95:21:41:45:84:13:a5:c5:3b:fc:e8:2e:60:be:11:
                    74:2e:66:12:6a:31:ed:f3:94:1c:a7:c8:ac:45:36:
                    02:ef:14:e0:3e:91:42:cb:0d:df:1d:81:c3:0f:e1:
                    d1:6d:ce:a1:cb:25:25:11:0c:39:7b:be:93:cb:99:
                    e0:f2:1b:15:58:c7:74:dd:bd:81:10:b9:e5:b0:43:
                    83:0e:ac:cb:0f:37:c4:fb:22:ee:65:18:2c:1f:03:
                    ef:f1:c3:b7:79:69:34:06:eb:b8:ca:09:8f:3e:a1:
                    84:a2:d8:ac:e4:65:cd:6e:29:0e:df:08:1d:ab:b4:
                    b0:bc:13:6d:f7:f2:70:86:8c:a3:d2:c4:fd:02:6a:
                    d4:d3:25:18:98:e6:5c:df:03:e5:1e:ba:5f:e8:7d:
                    5c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A8:45:5E:4F:A1:F7:D4:35:93:DF:AA:66:2F:A2:8F:38:AC:AC:01
            X509v3 Authority Key Identifier:
                keyid:62:76:4A:7C:7B:AC:D3:6B:AD:F8:66:D6:C8:57:1C:58:A6:51:B1:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/1/62764A7C7BACD36BADF866D6C8571C58A651B15B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62764A7C7BACD36BADF866D6C8571C58A651B15B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/1/62764A7C7BACD36BADF866D6C8571C58A651B15B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:fc:ca:fc:b5:58:90:85:39:b2:7f:fa:c8:7c:e9:74:20:1f:
         bc:b8:73:0b:96:0a:d4:50:df:42:85:d4:f5:43:89:30:d2:5f:
         0f:c6:15:48:2c:e5:dd:b7:0c:d6:0b:f9:3f:18:37:24:29:dc:
         d8:e7:c4:65:93:17:50:6d:10:dc:59:33:68:b6:fc:1a:57:93:
         7c:1d:b3:1c:f9:a8:d4:b8:99:c7:33:af:6d:e2:a0:18:9b:aa:
         fc:5c:52:1e:62:d6:04:c0:78:61:98:06:5f:93:66:e1:45:72:
         45:32:55:6d:4a:d2:27:b2:92:43:20:51:1f:b5:df:d3:c2:6b:
         33:b1:35:ae:1f:2c:b0:69:c1:a4:5d:10:4d:4d:27:f7:c1:f0:
         48:b5:ba:93:b1:94:1d:a2:ce:46:44:3f:2d:9d:2d:63:46:c4:
         cb:e0:90:0b:40:cb:cd:f5:8e:79:f9:8e:53:f0:ba:44:fe:10:
         3e:b7:1a:4c:07:81:d8:82:68:77:1b:76:ad:8c:12:d4:09:7b:
         98:55:8c:2e:cc:bc:14:b4:7f:72:39:43:0c:66:4a:cc:3d:8e:
         fa:ae:7c:e8:e9:6f:e0:53:ac:6c:ec:e2:d8:3a:15:a4:45:f4:
         eb:93:cb:10:7e:e7:3a:1c:41:7e:45:00:bc:01:e7:7e:03:d6:
         3d:fa:6f:f4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 14 01:47:41 2026 by rpki-client