Error: rpki-repo.registro.br/repo/D5EYetUMawp9rnhQduRX59tW73vH6jCBm9fu4dobubqg/0/824E306D67C40D73D502C221E4F1A4CFFC71485A.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/D5EYetUMawp9rnhQduRX59tW73vH6jCBm9fu4dobubqg/0/824E306D67C40D73D502C221E4F1A4CFFC71485A.mft
File:                     824E306D67C40D73D502C221E4F1A4CFFC71485A.mft (raw, json)
Hash identifier:          Ax74A4D86RdHhr+w29zFfCkLJoH+iaL87eCbHO6DauM=
Subject key identifier:   C4:0F:B7:31:00:21:28:5A:FC:F2:15:F3:52:AD:FD:62:32:1A:15:0C
Authority key identifier: 82:4E:30:6D:67:C4:0D:73:D5:02:C2:21:E4:F1:A4:CF:FC:71:48:5A
Certificate issuer:       /CN=824E306D67C40D73D502C221E4F1A4CFFC71485A
Certificate serial:       20C0F5ECB4AFC45072F62EE7B52542732DACE489
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/824E306D67C40D73D502C221E4F1A4CFFC71485A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5EYetUMawp9rnhQduRX59tW73vH6jCBm9fu4dobubqg/0/824E306D67C40D73D502C221E4F1A4CFFC71485A.mft
Manifest number:          61
Signing time:             Thu 15 Oct 2026 11:42:05 +0000
Manifest this update:     Thu 15 Oct 2026 11:37:05 +0000
Manifest next update:     Fri 16 Oct 2026 14:43:05 +0000
Files and hashes:         1: 3139302e3137312e38342e302f32322d3234203d3e20323731323630.roa (hash: Fq5P2Pq5d7tfWM4rnQ58/Ke6FtzMqN484d7AKlL1fB8=)
                          2: 824E306D67C40D73D502C221E4F1A4CFFC71485A.crl (hash: nmYtyc8i6htOKMh/DDVgs1zH3h3+PI4aRtNZ8zQ5sNY=)
                          3: 323830343a373862343a3a2f33322d3438203d3e20323731323630.roa (hash: NJluVR5LwLr0AMMNNbPRGRGpM84MelSrKC4L3ONMETY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5EYetUMawp9rnhQduRX59tW73vH6jCBm9fu4dobubqg/0/824E306D67C40D73D502C221E4F1A4CFFC71485A.crl
                          rsync://rpki-repo.registro.br/repo/D5EYetUMawp9rnhQduRX59tW73vH6jCBm9fu4dobubqg/0/824E306D67C40D73D502C221E4F1A4CFFC71485A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/824E306D67C40D73D502C221E4F1A4CFFC71485A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 14:43:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c0:f5:ec:b4:af:c4:50:72:f6:2e:e7:b5:25:42:73:2d:ac:e4:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824E306D67C40D73D502C221E4F1A4CFFC71485A
        Validity
            Not Before: Oct 15 11:37:05 2026 GMT
            Not After : Oct 16 14:43:05 2026 GMT
        Subject: CN=C40FB7310021285AFCF215F352ADFD62321A150C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5d:f2:ba:2a:97:44:e7:78:30:9e:ff:22:ee:
                    79:7e:34:6c:8b:8c:c2:46:43:08:1e:90:6c:f9:ed:
                    4f:43:cd:9e:f3:b4:1b:1e:4d:13:1e:9d:42:de:cd:
                    ca:1a:bd:5d:f5:fa:5d:69:d7:0e:71:25:75:af:53:
                    fb:bf:c8:09:2b:94:07:2c:9e:f9:66:a7:a5:59:f9:
                    c2:29:a2:e4:a2:89:3c:7e:6b:1b:cc:ed:d1:b5:b0:
                    e0:2f:8e:ff:4f:09:05:94:44:74:31:85:cd:c4:87:
                    70:77:04:45:bb:53:4f:c7:5b:58:50:79:e5:02:d3:
                    0a:0a:f5:3d:9c:a0:32:b6:63:11:41:03:4c:41:71:
                    62:b4:d1:f4:53:65:fd:24:1c:f1:98:50:93:fa:e9:
                    b6:5b:9b:1b:bd:c3:07:89:0a:19:97:7f:20:48:8b:
                    86:97:d7:96:cd:91:31:9c:18:45:96:85:33:86:fd:
                    b5:3a:eb:51:13:24:15:62:b4:eb:44:ef:3e:af:65:
                    c7:66:ef:ac:f1:81:9e:09:a4:f6:dd:85:b4:c5:c6:
                    59:a8:a0:b1:0a:43:40:b3:78:97:38:12:6a:30:e7:
                    cb:9f:63:73:9b:b4:22:1d:89:a5:bd:2e:a2:66:70:
                    a6:29:e3:a4:7e:eb:28:31:89:3c:f3:67:e3:d5:e0:
                    7f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0F:B7:31:00:21:28:5A:FC:F2:15:F3:52:AD:FD:62:32:1A:15:0C
            X509v3 Authority Key Identifier:
                keyid:82:4E:30:6D:67:C4:0D:73:D5:02:C2:21:E4:F1:A4:CF:FC:71:48:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5EYetUMawp9rnhQduRX59tW73vH6jCBm9fu4dobubqg/0/824E306D67C40D73D502C221E4F1A4CFFC71485A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/824E306D67C40D73D502C221E4F1A4CFFC71485A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5EYetUMawp9rnhQduRX59tW73vH6jCBm9fu4dobubqg/0/824E306D67C40D73D502C221E4F1A4CFFC71485A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:75:f1:2d:c3:2d:e3:af:6f:18:08:0a:b9:a8:de:04:b3:c8:
         3f:81:0b:9e:56:73:80:48:2c:8b:d6:14:9a:8b:8a:5e:50:c9:
         a8:03:d9:81:e3:79:1a:a6:c5:89:f8:a3:96:9e:95:39:af:25:
         ff:2a:7c:4b:34:4a:d1:70:5b:16:18:21:c0:9e:51:1c:e3:56:
         1c:d7:cf:87:51:0f:f9:75:0d:e3:80:b1:ab:eb:f3:da:f5:97:
         d9:d0:f2:7d:40:c1:47:89:9c:8b:8a:0f:c3:79:e8:b2:04:20:
         06:94:a0:d8:08:5f:25:d3:bc:05:2f:46:eb:d5:ce:f6:31:7e:
         5a:44:af:d8:88:a8:69:7f:9b:cb:b3:2f:4e:e4:fd:14:b2:46:
         cc:b7:6e:7c:9e:0b:2f:0d:b3:a7:ad:46:8e:7e:b7:ec:99:b8:
         7a:03:e0:dd:b7:3e:0f:f8:7d:cb:a7:af:a7:1a:4e:55:70:d9:
         03:f6:f7:47:3f:00:b2:ab:bc:66:39:6f:10:17:2f:71:1f:44:
         3e:95:1b:97:2c:33:5d:99:7c:62:5c:e1:65:87:79:62:6a:3e:
         12:74:dd:f5:1b:d9:68:c2:fa:87:46:d8:eb:c7:15:2f:4e:0c:
         0b:a1:6a:07:ce:35:7d:c0:25:66:cb:28:57:2c:08:35:62:b4:
         6a:b6:b6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:43:08 2026 by rpki-client