Error: rpki-repo.registro.br/repo/DRcn5bfRYzVkUCnkKtS2iibdWmwTWD1kgyes5dXidZRF/0/13444CACBA70082038368F9FE638A30F9C9B0F6B.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/DRcn5bfRYzVkUCnkKtS2iibdWmwTWD1kgyes5dXidZRF/0/13444CACBA70082038368F9FE638A30F9C9B0F6B.mft
File:                     13444CACBA70082038368F9FE638A30F9C9B0F6B.mft (raw, json)
Hash identifier:          uG59HlRkMifhB2grKFZu3S8Ipkp9jUpRNFyjuKsbZ50=
Subject key identifier:   CD:A6:A9:39:31:65:22:51:2B:F1:47:C5:6C:02:3D:63:1C:62:13:4F
Authority key identifier: 13:44:4C:AC:BA:70:08:20:38:36:8F:9F:E6:38:A3:0F:9C:9B:0F:6B
Certificate issuer:       /CN=13444CACBA70082038368F9FE638A30F9C9B0F6B
Certificate serial:       5EDF0872BB56F0C08C8DF0FF7AD2252FF4E4BED3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13444CACBA70082038368F9FE638A30F9C9B0F6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRcn5bfRYzVkUCnkKtS2iibdWmwTWD1kgyes5dXidZRF/0/13444CACBA70082038368F9FE638A30F9C9B0F6B.mft
Manifest number:          6E
Signing time:             Thu 15 Oct 2026 12:23:37 +0000
Manifest this update:     Thu 15 Oct 2026 12:18:37 +0000
Manifest next update:     Fri 16 Oct 2026 13:32:37 +0000
Files and hashes:         1: 13444CACBA70082038368F9FE638A30F9C9B0F6B.crl (hash: iqiEDIYVXzjcW5ZksMcBy3gb8hQRre6OfqQuQAuvk0U=)
                          2: 323830343a383234303a3a2f33322d3438203d3e20323732353038.roa (hash: zt1SFnyBViNTsxTfqshRQlcco6qHA7SCoY1SiV3a2F8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DRcn5bfRYzVkUCnkKtS2iibdWmwTWD1kgyes5dXidZRF/0/13444CACBA70082038368F9FE638A30F9C9B0F6B.crl
                          rsync://rpki-repo.registro.br/repo/DRcn5bfRYzVkUCnkKtS2iibdWmwTWD1kgyes5dXidZRF/0/13444CACBA70082038368F9FE638A30F9C9B0F6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13444CACBA70082038368F9FE638A30F9C9B0F6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 13:32:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:df:08:72:bb:56:f0:c0:8c:8d:f0:ff:7a:d2:25:2f:f4:e4:be:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13444CACBA70082038368F9FE638A30F9C9B0F6B
        Validity
            Not Before: Oct 15 12:18:37 2026 GMT
            Not After : Oct 16 13:32:37 2026 GMT
        Subject: CN=CDA6A939316522512BF147C56C023D631C62134F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:61:94:ff:03:d8:da:42:a0:f6:c9:84:2d:b8:
                    ac:64:d5:97:73:f1:e5:50:e4:e3:a0:0f:8b:4d:1c:
                    81:de:79:a4:26:f1:4b:af:3b:b6:64:a1:72:c6:3b:
                    04:d3:b1:06:4c:3b:64:76:ef:00:cf:69:d1:5a:f7:
                    35:b1:b5:81:1c:0f:3f:d7:3e:ec:90:4a:bb:50:90:
                    42:b1:65:45:d4:38:73:40:2c:09:d6:4c:45:35:5e:
                    42:28:21:97:6f:47:e7:fc:f8:00:af:ff:cb:0c:3d:
                    b3:17:5c:de:c1:08:b6:cd:f8:40:e7:59:73:b2:6d:
                    1a:5e:79:0c:05:e4:53:ae:8c:67:c3:53:cb:73:60:
                    4e:2b:92:be:c7:17:11:ee:d9:b9:d3:ef:cc:08:f0:
                    e5:16:1b:a0:aa:11:7d:41:b8:f8:7f:f1:a2:40:fb:
                    50:6a:cb:5c:c3:70:59:ca:60:38:46:94:ed:1b:b6:
                    b4:00:2f:a4:72:53:28:90:f2:03:1d:ad:e7:0e:01:
                    5b:8b:11:49:12:0d:71:4b:aa:9d:9e:6c:4c:6b:3c:
                    c9:aa:77:8c:f9:36:c3:1e:23:86:69:46:dd:88:a8:
                    de:88:7d:b8:e4:0f:8a:78:1c:42:18:0e:e2:e6:a8:
                    00:10:7d:1a:19:b0:71:f5:3e:26:5c:e5:1e:7c:ad:
                    80:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A6:A9:39:31:65:22:51:2B:F1:47:C5:6C:02:3D:63:1C:62:13:4F
            X509v3 Authority Key Identifier:
                keyid:13:44:4C:AC:BA:70:08:20:38:36:8F:9F:E6:38:A3:0F:9C:9B:0F:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRcn5bfRYzVkUCnkKtS2iibdWmwTWD1kgyes5dXidZRF/0/13444CACBA70082038368F9FE638A30F9C9B0F6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13444CACBA70082038368F9FE638A30F9C9B0F6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRcn5bfRYzVkUCnkKtS2iibdWmwTWD1kgyes5dXidZRF/0/13444CACBA70082038368F9FE638A30F9C9B0F6B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:9d:a7:9a:9f:69:e6:29:d8:29:32:79:52:d7:18:46:9e:4b:
         36:12:e0:f9:8e:ee:a6:35:7c:5d:48:fb:92:84:0c:92:a6:0b:
         2b:e6:81:aa:9a:73:52:8a:6f:c7:9a:4d:bb:fe:b2:b9:be:10:
         9d:eb:1e:d0:18:eb:0d:cd:d3:04:78:9e:68:34:30:b7:8f:87:
         d2:dd:11:49:a6:a7:bc:df:66:2e:48:87:08:ef:65:0c:20:f6:
         74:0e:b6:f3:32:09:88:6a:e3:ec:d9:b5:85:d2:db:d2:00:f5:
         50:46:d0:6a:5f:f6:86:dc:16:a3:2e:16:80:11:cc:64:4d:28:
         3e:17:8a:59:4f:0c:22:1c:5c:a8:6f:26:31:5f:58:ad:39:4c:
         5f:c0:4b:a2:8f:91:9b:d7:9e:7b:4f:78:5a:12:b3:aa:86:95:
         9a:12:7b:67:dd:72:49:ad:1c:5c:dd:38:54:01:c9:4c:20:d9:
         a4:d0:68:36:c6:b8:98:c8:ec:8a:35:b5:bd:f2:e4:2b:ed:62:
         d7:88:5d:8a:2d:75:6a:8d:b4:af:9d:06:89:0b:5a:85:43:3e:
         2f:54:01:0f:0c:98:ff:be:a0:f2:89:cf:59:e8:27:e8:b2:ba:
         dc:94:bf:df:1c:1f:c3:84:08:1a:c8:35:ac:b9:e4:06:37:16:
         a7:ac:d8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:51:05 2026 by rpki-client