Error: rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/2/B191F3F408D040D446471CC8A3AEA811CB825DF0.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/2/B191F3F408D040D446471CC8A3AEA811CB825DF0.mft
File:                     B191F3F408D040D446471CC8A3AEA811CB825DF0.mft (raw, json)
Hash identifier:          1fbqWO3QMOBeVd6+Ccf17+4D72dW+ZqtJH0mYCXbgNg=
Subject key identifier:   82:1D:D2:95:4A:92:7C:4A:1D:49:46:D4:77:35:2C:7B:34:A3:46:F0
Authority key identifier: B1:91:F3:F4:08:D0:40:D4:46:47:1C:C8:A3:AE:A8:11:CB:82:5D:F0
Certificate issuer:       /CN=B191F3F408D040D446471CC8A3AEA811CB825DF0
Certificate serial:       49E8C0CD5B505E6A357DF793A04F8F58D606055E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B191F3F408D040D446471CC8A3AEA811CB825DF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/2/B191F3F408D040D446471CC8A3AEA811CB825DF0.mft
Manifest number:          0484
Signing time:             Wed 14 Oct 2026 13:10:33 +0000
Manifest this update:     Wed 14 Oct 2026 13:05:33 +0000
Manifest next update:     Thu 15 Oct 2026 17:09:33 +0000
Files and hashes:         1: 323830343a346338303a3a2f33322d3332203d3e20323637333734.roa (hash: VbMLZYPOyU0MhLQmiVTR6uY5o0hLuLazVKjKNn7AbB0=)
                          2: 34352e3233342e3132342e302f32322d3234203d3e20323637333734.roa (hash: X5O0vn4SFPaqxdEOdw3LpJLJ+obXUAL5uWCC6VE3Toc=)
                          3: B191F3F408D040D446471CC8A3AEA811CB825DF0.crl (hash: K074PIpHDtp+YP/8JzhHVwbznD6QpZay8Lw0fWCy+o4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/2/B191F3F408D040D446471CC8A3AEA811CB825DF0.crl
                          rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/2/B191F3F408D040D446471CC8A3AEA811CB825DF0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B191F3F408D040D446471CC8A3AEA811CB825DF0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 17:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e8:c0:cd:5b:50:5e:6a:35:7d:f7:93:a0:4f:8f:58:d6:06:05:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B191F3F408D040D446471CC8A3AEA811CB825DF0
        Validity
            Not Before: Oct 14 13:05:33 2026 GMT
            Not After : Oct 15 17:09:33 2026 GMT
        Subject: CN=821DD2954A927C4A1D4946D477352C7B34A346F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:7d:b4:f3:41:5e:ea:b9:f5:26:8b:39:e2:94:
                    8b:5b:27:38:41:71:1f:65:00:c3:e0:f4:65:8c:e0:
                    e3:6c:42:b7:fe:64:9b:32:78:be:25:0a:7c:71:74:
                    8f:48:e6:de:2b:17:0f:80:ce:6a:80:6b:0d:96:6a:
                    9b:2c:7f:b6:9d:61:9c:fd:07:2b:c8:8d:ea:aa:0f:
                    1f:f5:d6:0e:ed:35:30:15:71:12:5c:55:d3:6d:24:
                    cd:b2:65:16:95:56:17:89:3e:c0:6e:be:78:f4:73:
                    dd:d0:c0:ea:91:c3:e8:6a:f8:3a:5d:cb:01:8e:14:
                    de:02:79:31:1b:40:e4:54:a0:a7:bb:53:1b:de:e4:
                    f5:50:ee:28:9e:61:81:63:2a:65:8d:09:17:56:62:
                    58:cd:a6:cb:1d:32:87:ac:b3:d9:ee:23:53:eb:a3:
                    60:55:67:65:62:47:a9:bc:5e:cf:c2:56:7f:25:09:
                    a1:08:04:1f:43:33:0a:05:5d:34:1c:bb:c4:50:89:
                    a0:7e:fb:ba:b7:06:87:63:ff:16:2f:ab:80:64:e5:
                    3b:68:c1:d2:42:9d:92:a9:03:2a:55:65:82:47:ae:
                    fc:b1:d9:f3:68:8c:2c:e4:22:3a:45:a0:9f:ab:dc:
                    73:c9:a7:b7:cf:e6:1e:bd:a4:9e:51:78:71:80:15:
                    14:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:1D:D2:95:4A:92:7C:4A:1D:49:46:D4:77:35:2C:7B:34:A3:46:F0
            X509v3 Authority Key Identifier:
                keyid:B1:91:F3:F4:08:D0:40:D4:46:47:1C:C8:A3:AE:A8:11:CB:82:5D:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/2/B191F3F408D040D446471CC8A3AEA811CB825DF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B191F3F408D040D446471CC8A3AEA811CB825DF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/2/B191F3F408D040D446471CC8A3AEA811CB825DF0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:7b:c8:8d:88:dd:01:63:2f:47:3d:7c:c1:51:02:ed:37:c6:
         98:d9:8f:1a:16:d0:4b:25:1e:77:6a:42:0f:e6:8f:e0:ff:2f:
         b9:be:d4:f9:f8:a1:20:3d:58:be:d4:38:80:1e:65:c0:fd:b5:
         90:b8:b6:f2:60:ed:ca:5d:51:7d:44:e6:ba:b1:74:ca:f2:0c:
         d0:22:74:9d:12:e8:16:b5:04:32:b5:d4:a0:34:fc:17:af:6e:
         77:89:7d:2a:c3:db:f9:cc:e0:57:8a:9c:87:11:5c:67:1a:1b:
         fa:76:fa:9a:08:5f:07:69:8c:9f:94:48:16:e8:86:01:5f:ca:
         f1:37:58:7e:a7:8f:d6:d6:fa:c6:c4:0b:6d:8c:24:b0:6c:20:
         c2:73:0e:93:3c:05:b0:da:5c:fa:cf:89:d8:1c:ac:82:e6:cc:
         9c:ce:7c:f4:9f:10:04:f7:5e:8b:74:af:a4:c0:fe:7a:c9:bb:
         4d:6c:9e:b4:7b:1f:34:10:dc:6f:7d:d6:19:9b:02:f2:2c:50:
         bd:9f:69:48:ee:62:ad:ad:a0:e9:c2:0f:47:8c:db:16:8c:a8:
         73:ac:f0:1d:3a:66:5e:bb:01:bf:c0:f3:d5:f4:2b:89:2c:8b:
         79:dc:31:86:c8:32:d7:bc:39:a6:7c:1f:18:0a:02:33:d5:88:
         64:c2:c8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:26:15 2026 by rpki-client