Error: rpki-repo.registro.br/repo/Cwuh45HpQzj1jFuNb6eiyygY3RjPKjsYBXUyEfdon5H4/0/B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Cwuh45HpQzj1jFuNb6eiyygY3RjPKjsYBXUyEfdon5H4/0/B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.mft
File:                     B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.mft (raw, json)
Hash identifier:          xoVUZW8hoYusdN0KYkwYcDc3/DxI6pNvotyiLGRlpZU=
Subject key identifier:   E9:F2:E0:F7:35:8E:9E:D0:B0:15:36:75:18:E2:73:97:91:24:82:9E
Authority key identifier: B4:ED:4F:1D:BF:65:11:CF:F8:BB:3D:95:56:54:85:B1:A9:B8:7B:E1
Certificate issuer:       /CN=B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1
Certificate serial:       481114352382AFD38AFBBEC2FC07051AB7881939
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cwuh45HpQzj1jFuNb6eiyygY3RjPKjsYBXUyEfdon5H4/0/B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.mft
Manifest number:          0129
Signing time:             Mon 19 Oct 2026 16:20:51 +0000
Manifest this update:     Mon 19 Oct 2026 16:15:51 +0000
Manifest next update:     Tue 20 Oct 2026 16:46:51 +0000
Files and hashes:         1: B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.crl (hash: fGluI4pGgyegCcpGOUZXcAW/VTRp30ei5U0Cj5QXgI0=)
                          2: 34352e3136362e3232382e302f32322d3332203d3e20323637393732.roa (hash: +Muz8uNJqri90LBPJYy9Sb6dL8N6bt26jmuxWmY7zhA=)
                          3: 323830343a353630383a3a2f33322d313238203d3e20323637393732.roa (hash: g5HGluNoTUYMeIXWNITEz8Bcv3PBAbiGFlvTewawy9g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cwuh45HpQzj1jFuNb6eiyygY3RjPKjsYBXUyEfdon5H4/0/B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.crl
                          rsync://rpki-repo.registro.br/repo/Cwuh45HpQzj1jFuNb6eiyygY3RjPKjsYBXUyEfdon5H4/0/B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 16:46:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:11:14:35:23:82:af:d3:8a:fb:be:c2:fc:07:05:1a:b7:88:19:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1
        Validity
            Not Before: Oct 19 16:15:51 2026 GMT
            Not After : Oct 20 16:46:51 2026 GMT
        Subject: CN=E9F2E0F7358E9ED0B015367518E273979124829E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:59:70:eb:26:2f:bf:cd:17:d2:31:e4:8e:69:
                    cf:1b:74:37:fb:1e:a2:90:40:22:f8:67:37:57:ab:
                    89:0a:ca:03:fb:ba:c8:ad:39:86:8e:3a:30:34:26:
                    d5:d1:0f:3e:74:cc:28:38:06:5e:45:3b:24:19:df:
                    20:10:a8:3b:ea:81:ba:d6:7d:67:55:bc:f1:15:38:
                    81:4c:e1:cd:a4:90:3d:fd:82:7d:06:37:c4:07:81:
                    db:01:5f:2f:83:70:61:cd:cc:dc:07:45:52:f5:22:
                    c8:14:0f:b4:1c:8a:ad:61:20:ed:0e:84:d3:57:93:
                    15:7f:f1:fd:2c:03:8e:34:62:16:e1:fd:1c:82:f4:
                    23:be:6f:82:2b:dd:47:32:43:b1:f2:48:ee:a6:c5:
                    f5:49:ff:6e:03:f7:f4:c2:19:ec:b9:3d:26:a6:03:
                    7b:87:0a:ee:76:52:eb:8a:4b:b6:5f:c2:d9:3e:d6:
                    ce:53:15:7a:c7:5d:09:00:f6:f3:95:34:c8:55:56:
                    87:05:52:05:4e:2c:35:64:92:b1:42:84:3f:13:05:
                    2d:fd:ce:3d:dd:17:84:61:19:fe:5f:51:39:6a:42:
                    29:5d:8b:79:07:bf:e9:1f:30:32:c0:35:63:27:3a:
                    fe:14:ea:e5:b9:24:f8:e8:da:db:7e:5f:6b:8d:68:
                    10:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F2:E0:F7:35:8E:9E:D0:B0:15:36:75:18:E2:73:97:91:24:82:9E
            X509v3 Authority Key Identifier:
                keyid:B4:ED:4F:1D:BF:65:11:CF:F8:BB:3D:95:56:54:85:B1:A9:B8:7B:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cwuh45HpQzj1jFuNb6eiyygY3RjPKjsYBXUyEfdon5H4/0/B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cwuh45HpQzj1jFuNb6eiyygY3RjPKjsYBXUyEfdon5H4/0/B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:e4:f9:aa:0f:0f:91:97:55:29:62:cf:0f:82:dc:37:2a:74:
         1b:1e:ca:8f:88:c2:38:77:7e:4b:24:9a:35:1d:b8:15:d7:98:
         aa:e1:f5:54:87:87:56:e2:ca:b6:94:61:4d:38:98:a2:c9:74:
         41:5d:90:f1:45:cd:33:68:57:ae:b9:67:4d:f8:a0:fa:c8:a4:
         39:c8:2b:1d:8a:0c:8b:85:e8:95:a2:11:29:be:d8:64:20:c0:
         38:18:9f:c6:e6:69:43:b7:47:6e:ec:c8:03:1b:e2:31:4d:ae:
         d1:24:be:38:a8:c2:9c:2b:f9:1c:02:96:b2:c7:7b:6c:a4:1a:
         53:8a:73:af:08:fa:48:c2:fe:77:99:20:c4:37:2e:81:03:e4:
         88:a7:1b:6f:33:90:7d:87:57:8a:ba:5f:98:ff:a4:38:60:63:
         60:be:fe:8a:bd:c7:8b:23:50:e5:d8:5f:bf:9f:92:67:33:71:
         c0:25:1d:29:6c:7c:79:69:a7:58:2a:87:6d:a4:d8:1f:d2:8e:
         7b:19:fb:85:42:74:a4:d9:a5:3a:0a:91:76:85:38:a1:1d:0d:
         69:67:8a:42:28:5e:c4:dc:1a:7f:82:84:b2:19:0f:23:9b:b8:
         2d:2c:04:ff:ad:81:ee:2c:04:a9:18:3b:32:32:c5:82:62:00:
         18:56:0d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 03:40:06 2026 by rpki-client