Error: rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/813D65FBA309A9EA091B5CF0F748FC498935778B.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/813D65FBA309A9EA091B5CF0F748FC498935778B.mft
File:                     813D65FBA309A9EA091B5CF0F748FC498935778B.mft (raw, json)
Hash identifier:          XQVQoBEGZmUXlwj+kareU3jxSQYcftdJPbeKXfuy4Kk=
Subject key identifier:   7D:6B:A8:EA:BC:99:54:72:AA:75:3A:5A:C8:75:85:A1:13:9E:B8:33
Authority key identifier: 81:3D:65:FB:A3:09:A9:EA:09:1B:5C:F0:F7:48:FC:49:89:35:77:8B
Certificate issuer:       /CN=813D65FBA309A9EA091B5CF0F748FC498935778B
Certificate serial:       61C3EB893C480C29419C08A351AE3D685BA61FBF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/813D65FBA309A9EA091B5CF0F748FC498935778B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/813D65FBA309A9EA091B5CF0F748FC498935778B.mft
Manifest number:          04AA
Signing time:             Mon 02 Nov 2026 04:07:18 +0000
Manifest this update:     Mon 02 Nov 2026 04:02:18 +0000
Manifest next update:     Tue 03 Nov 2026 05:16:18 +0000
Files and hashes:         1: 813D65FBA309A9EA091B5CF0F748FC498935778B.crl (hash: V4p8OUtzV138wT0/MZR2DqVYkSSwqPAqFnI0hDTAGcE=)
                          2: 323830343a356463343a3a2f33322d313238203d3e20323638393931.roa (hash: RMAEq78x7MQGVpWSYSvwTYbjvJK8MWfaxDGS1nBvaGk=)
                          3: 34352e3137372e3131362e302f32322d3332203d3e20323638393931.roa (hash: Gp2B6Sm5E8QH4lb91CHk+nWT5hdy589nOvNEKQeOUDY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/813D65FBA309A9EA091B5CF0F748FC498935778B.crl
                          rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/813D65FBA309A9EA091B5CF0F748FC498935778B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/813D65FBA309A9EA091B5CF0F748FC498935778B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 05:16:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:c3:eb:89:3c:48:0c:29:41:9c:08:a3:51:ae:3d:68:5b:a6:1f:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=813D65FBA309A9EA091B5CF0F748FC498935778B
        Validity
            Not Before: Nov  2 04:02:18 2026 GMT
            Not After : Nov  3 05:16:18 2026 GMT
        Subject: CN=7D6BA8EABC995472AA753A5AC87585A1139EB833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:22:d7:3b:ed:90:50:f5:18:dd:95:26:f6:67:
                    c3:c7:fb:ed:5f:75:a7:da:a4:86:37:3b:a9:d4:3f:
                    1a:7e:66:23:69:21:b9:7b:ad:2e:8f:e7:9f:51:fd:
                    ef:80:db:5a:eb:99:a2:72:7d:84:5e:56:43:ba:eb:
                    42:6c:f8:2e:16:d9:0e:87:57:05:0c:de:e2:d1:25:
                    dc:77:7e:d7:b9:1b:6e:d9:51:f4:37:ab:80:7f:bc:
                    d2:d5:19:35:f7:9d:1b:0b:66:8b:da:95:f6:2b:ad:
                    d4:59:45:9c:7a:d0:7e:48:74:e7:60:1a:e7:28:9c:
                    3a:ab:29:2b:ab:73:de:23:6e:c4:35:16:22:e3:06:
                    8a:cc:73:f9:1c:48:dd:4d:07:d0:d1:8d:15:3c:40:
                    06:c6:c5:ce:99:0f:33:bd:1f:c2:3d:c5:95:50:b8:
                    d0:c0:da:8b:f5:32:55:65:04:b5:65:e5:c9:7a:d2:
                    63:89:5c:ad:be:61:e6:11:36:63:4c:cc:94:b9:06:
                    a0:fb:6d:8c:b4:68:18:ce:e5:c6:07:5d:f5:c2:21:
                    f1:96:17:19:85:76:d3:b8:c2:95:64:3b:72:32:31:
                    f4:09:26:f7:be:7b:99:bc:7b:e9:c6:bf:a2:5a:95:
                    88:12:cc:76:44:28:0d:c5:e0:63:9e:db:38:e5:f7:
                    13:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:6B:A8:EA:BC:99:54:72:AA:75:3A:5A:C8:75:85:A1:13:9E:B8:33
            X509v3 Authority Key Identifier:
                keyid:81:3D:65:FB:A3:09:A9:EA:09:1B:5C:F0:F7:48:FC:49:89:35:77:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/813D65FBA309A9EA091B5CF0F748FC498935778B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/813D65FBA309A9EA091B5CF0F748FC498935778B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/813D65FBA309A9EA091B5CF0F748FC498935778B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:05:82:53:6e:75:f5:c7:41:72:c2:ac:c4:2e:9a:2c:ec:65:
         56:81:9f:ec:8a:34:75:17:fd:48:bc:28:e9:b7:70:7d:70:cf:
         b4:97:34:49:60:6b:e5:11:4a:5d:98:27:cd:60:6d:dd:44:d8:
         e2:4a:16:1a:76:35:e6:b3:b1:ab:d3:6e:9f:6a:22:b2:39:66:
         a3:22:d1:2d:17:ad:24:22:bb:7c:55:ae:fa:df:15:81:d6:b5:
         de:58:7e:df:bc:b4:5f:db:0d:72:9d:80:39:45:d6:c4:b9:3e:
         a8:4f:03:c7:19:e6:58:8a:24:56:8e:ea:0a:e4:4d:64:ba:dc:
         5b:af:83:f0:42:1c:51:7f:58:a6:32:95:67:5a:24:59:91:14:
         5c:ea:05:af:d3:16:61:68:f2:c2:20:a1:9a:70:a5:51:ba:2e:
         09:50:76:0e:27:c4:cd:33:93:fd:f0:aa:1e:ae:40:7c:67:1f:
         1c:54:8e:2a:5a:ce:f9:18:ec:39:70:83:3f:91:1c:83:6e:eb:
         84:83:5d:72:1b:7e:e7:6e:e8:ee:c8:cd:e9:a9:78:b1:5f:19:
         8d:e4:02:7f:ea:e7:2e:a1:d1:aa:b2:95:39:fa:5a:98:8e:75:
         ce:fe:d3:57:8b:ec:24:eb:57:53:b3:d9:45:ff:87:6c:96:6b:
         56:7d:00:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:17:10 2026 by rpki-client