Error: rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.mft
File:                     5068952903F5F17C21FA5B2EC1BE472DF306072C.mft (raw, json)
Hash identifier:          aOt3V30+3mAyxNYMfUJWU4vqZpYziQW75vK9wr7JvkU=
Subject key identifier:   F7:6B:8F:C9:EA:EC:15:B2:2A:A6:62:CF:CF:E4:72:57:BD:34:53:16
Authority key identifier: 50:68:95:29:03:F5:F1:7C:21:FA:5B:2E:C1:BE:47:2D:F3:06:07:2C
Certificate issuer:       /CN=5068952903F5F17C21FA5B2EC1BE472DF306072C
Certificate serial:       53D58F98A0937C51E404403E119CBFCFC311E8D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.mft
Manifest number:          049B
Signing time:             Sat 31 Oct 2026 13:29:04 +0000
Manifest this update:     Sat 31 Oct 2026 13:24:04 +0000
Manifest next update:     Sun 01 Nov 2026 16:43:04 +0000
Files and hashes:         1: 5068952903F5F17C21FA5B2EC1BE472DF306072C.crl (hash: O5sL2LYhL+8BC7Vq0rkoOpcmksDkBITU+IbuEm/Vi6A=)
                          2: 3137302e37392e302e302f32322d3332203d3e20323636323839.roa (hash: rZTaXIKnQiw3eVa41BnmNEPOZgvOEZc3ujp2ZY+jsfM=)
                          3: 323830343a333537633a3a2f33322d313238203d3e20323636323839.roa (hash: /dqf7ZM/K7ViSc/f3cQWa28CIRpYIbbvi5ldhcT0hCw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.crl
                          rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 16:43:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d5:8f:98:a0:93:7c:51:e4:04:40:3e:11:9c:bf:cf:c3:11:e8:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5068952903F5F17C21FA5B2EC1BE472DF306072C
        Validity
            Not Before: Oct 31 13:24:04 2026 GMT
            Not After : Nov  1 16:43:04 2026 GMT
        Subject: CN=F76B8FC9EAEC15B22AA662CFCFE47257BD345316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a2:d4:c5:3a:e0:9f:30:4e:ed:ba:f8:e8:03:
                    c1:4b:5f:b9:b0:d4:3a:b0:05:ae:87:42:e3:65:60:
                    9c:a3:7b:ec:00:d6:93:ef:fc:00:51:1d:27:52:5a:
                    3d:1e:7c:07:21:fd:4e:fb:f4:36:c3:32:dc:31:e7:
                    b7:da:50:21:d1:00:a8:94:c3:99:bd:c6:63:fc:93:
                    58:77:8b:a4:97:88:09:59:40:96:61:67:40:23:01:
                    ec:0c:f2:fe:e9:6d:db:8f:1f:7b:2a:f9:d2:e6:b1:
                    f0:a9:97:3a:13:2d:46:62:50:fd:05:71:df:bf:2e:
                    e4:a9:1d:8d:a0:83:3c:33:01:bd:67:fd:69:ff:aa:
                    ec:95:cf:20:f8:bd:af:98:c1:ec:c4:bf:1f:1b:a8:
                    55:37:7f:e9:cd:52:e9:e4:87:f4:a3:db:ed:cc:83:
                    c2:6d:13:2d:2e:26:27:90:aa:5e:c6:23:b4:7c:63:
                    20:85:65:c1:28:7f:b3:4a:c8:75:76:3b:a4:0d:15:
                    f9:39:fd:01:0a:2c:24:2e:18:e1:05:73:9c:be:19:
                    08:0d:08:07:b5:db:28:b5:0e:ff:4d:e6:e3:d7:91:
                    a6:d0:96:c7:e1:f5:92:d8:32:0b:cd:76:d0:28:34:
                    03:aa:62:59:be:3d:4e:8e:e9:d6:e4:ab:3c:03:fc:
                    41:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6B:8F:C9:EA:EC:15:B2:2A:A6:62:CF:CF:E4:72:57:BD:34:53:16
            X509v3 Authority Key Identifier:
                keyid:50:68:95:29:03:F5:F1:7C:21:FA:5B:2E:C1:BE:47:2D:F3:06:07:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:0a:a3:8d:fa:93:b4:c8:c8:cd:36:b8:60:89:55:fd:7f:d1:
         5e:88:b5:9f:fd:2a:50:94:20:52:ad:f2:20:4b:59:fc:33:75:
         2a:4d:a9:7b:ff:fc:ee:66:82:3a:3f:58:c2:a9:d0:d8:e6:72:
         17:0d:e2:33:b7:1e:73:43:8b:8e:6b:d7:bb:19:73:66:6a:a3:
         ba:f6:c4:2b:d6:f1:5c:fe:54:ce:0c:49:07:25:b8:41:10:aa:
         6c:04:8e:d7:49:5f:13:21:12:e6:3f:0f:36:01:71:de:ea:f7:
         3f:22:13:a9:31:21:9d:28:45:41:69:bb:9b:85:10:ba:26:cb:
         42:25:f6:a4:03:70:5f:cb:27:da:ed:80:e7:b6:4e:42:f2:c1:
         69:b7:90:1e:d5:40:67:04:2f:97:29:67:ac:44:a0:4b:05:db:
         75:9e:e0:92:90:96:a3:82:27:3e:f0:ce:83:79:1e:47:16:6a:
         31:29:6a:34:bb:c7:d8:db:b1:9e:fa:33:c0:5f:bc:e3:eb:76:
         21:1f:e6:83:2c:34:36:53:bf:58:0a:55:9a:5f:57:10:c6:f2:
         7b:ca:5d:54:83:b7:80:a8:16:50:74:54:07:cc:3a:76:8d:89:
         1d:99:ac:b7:10:5f:6d:52:69:f2:58:cf:d4:75:d3:05:aa:5a:
         aa:3d:c1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 07:04:55 2026 by rpki-client