Error: rpki-repo.registro.br/repo/Gp8RUjhxTDvLHSAmF5J9ohGErXdKfDTgNCLh9SKoHhbs/1/5EA0A0802D5FBA076B06703D21D6D32026825F6D.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Gp8RUjhxTDvLHSAmF5J9ohGErXdKfDTgNCLh9SKoHhbs/1/5EA0A0802D5FBA076B06703D21D6D32026825F6D.mft
File:                     5EA0A0802D5FBA076B06703D21D6D32026825F6D.mft (raw, json)
Hash identifier:          qRktIqZdI1X/PDZDx5YiwwHJJdOzLnp6BHkEf2By8o8=
Subject key identifier:   90:B3:B5:83:BF:C5:A1:A5:65:59:D8:AF:C5:5B:82:38:57:C9:00:5B
Authority key identifier: 5E:A0:A0:80:2D:5F:BA:07:6B:06:70:3D:21:D6:D3:20:26:82:5F:6D
Certificate issuer:       /CN=5EA0A0802D5FBA076B06703D21D6D32026825F6D
Certificate serial:       0253F3F4AD61FF95B3C74BA31E1E0069E0082F48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EA0A0802D5FBA076B06703D21D6D32026825F6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gp8RUjhxTDvLHSAmF5J9ohGErXdKfDTgNCLh9SKoHhbs/1/5EA0A0802D5FBA076B06703D21D6D32026825F6D.mft
Manifest number:          056C
Signing time:             Thu 15 Oct 2026 00:20:00 +0000
Manifest this update:     Thu 15 Oct 2026 00:15:00 +0000
Manifest next update:     Fri 16 Oct 2026 00:20:00 +0000
Files and hashes:         1: 323830343a353134383a3a2f33322d3335203d3e20323638343433.roa (hash: zO9f4DqGnsTM+YIwa7xEs2UaueB35HnunKLWoYhwlmI=)
                          2: 5EA0A0802D5FBA076B06703D21D6D32026825F6D.crl (hash: YG1sq0zTdR/spcWyS7ROKzNosU3ukq1svzkQWbUyTVk=)
                          3: 34352e3136312e34302e302f32322d3234203d3e20323638343433.roa (hash: pSiI6KFPxpl0ITfEdgVUA0UWCo5isrVWbuBmZKh9pE4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gp8RUjhxTDvLHSAmF5J9ohGErXdKfDTgNCLh9SKoHhbs/1/5EA0A0802D5FBA076B06703D21D6D32026825F6D.crl
                          rsync://rpki-repo.registro.br/repo/Gp8RUjhxTDvLHSAmF5J9ohGErXdKfDTgNCLh9SKoHhbs/1/5EA0A0802D5FBA076B06703D21D6D32026825F6D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EA0A0802D5FBA076B06703D21D6D32026825F6D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 00:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:53:f3:f4:ad:61:ff:95:b3:c7:4b:a3:1e:1e:00:69:e0:08:2f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EA0A0802D5FBA076B06703D21D6D32026825F6D
        Validity
            Not Before: Oct 15 00:15:00 2026 GMT
            Not After : Oct 16 00:20:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1b:01:e4:a4:46:a5:3f:ee:0d:01:fb:28:0a:
                    92:2d:0b:dd:18:c3:a9:00:83:4e:52:bb:21:51:7e:
                    d5:2e:9c:3c:42:93:3f:b2:af:eb:1d:98:8f:04:2b:
                    89:2a:35:a1:50:59:b4:8b:ed:24:86:a0:e7:4b:47:
                    4c:b1:29:65:68:95:e6:39:11:c8:d1:92:b6:94:46:
                    57:5b:ad:71:7b:09:62:52:2e:34:5a:19:7a:a3:b1:
                    c2:91:5d:c0:32:c6:e1:42:42:e9:9d:1a:29:6e:1b:
                    14:8b:83:b6:13:cb:7a:2d:ac:f4:17:ad:0c:0d:0f:
                    b8:f3:b5:47:69:43:5e:a0:91:1d:70:26:10:69:95:
                    6e:7f:78:69:1a:01:97:8b:a8:cc:d2:c1:29:43:b5:
                    a0:ac:0f:db:5b:57:b5:8a:e2:fc:9b:87:2f:ac:14:
                    4b:a0:59:20:43:45:0f:45:91:03:f4:df:f1:57:75:
                    85:59:70:03:7d:c5:57:00:16:4c:d3:97:34:30:2f:
                    27:5e:d5:56:45:f2:32:10:e2:9b:3f:b0:52:cd:1b:
                    a9:b1:4b:83:c7:9d:61:12:2a:36:ea:cc:30:38:eb:
                    2f:e3:e6:9b:6a:e7:a8:b9:af:de:de:bc:20:9a:c1:
                    f8:17:48:e2:15:9e:d4:aa:52:4e:3c:6b:a2:6e:9b:
                    ae:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B3:B5:83:BF:C5:A1:A5:65:59:D8:AF:C5:5B:82:38:57:C9:00:5B
            X509v3 Authority Key Identifier:
                keyid:5E:A0:A0:80:2D:5F:BA:07:6B:06:70:3D:21:D6:D3:20:26:82:5F:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gp8RUjhxTDvLHSAmF5J9ohGErXdKfDTgNCLh9SKoHhbs/1/5EA0A0802D5FBA076B06703D21D6D32026825F6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EA0A0802D5FBA076B06703D21D6D32026825F6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gp8RUjhxTDvLHSAmF5J9ohGErXdKfDTgNCLh9SKoHhbs/1/5EA0A0802D5FBA076B06703D21D6D32026825F6D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ff:6f:00:01:93:2d:69:ea:44:95:f1:28:85:76:b1:2b:55:
         6f:2d:16:c0:ad:37:fa:f9:e3:83:0c:b5:45:cd:49:01:7b:37:
         22:a6:4d:44:b7:6d:9c:03:8a:af:81:34:cd:03:8c:73:28:29:
         b4:4f:5e:47:d0:71:a7:aa:18:8e:29:b4:d5:3a:13:be:2a:13:
         68:ac:2f:f1:27:49:b6:e1:0a:57:4d:f0:96:66:26:1f:31:24:
         8b:68:77:44:f6:b1:b2:2c:33:07:9c:40:0f:29:7f:19:9a:a5:
         b0:aa:e7:92:31:f3:fe:88:fa:85:7d:52:ad:fb:7c:94:80:c8:
         63:0d:e0:22:b0:04:17:25:d4:cc:f0:94:26:c2:8d:f2:87:7d:
         a2:9a:4a:d5:10:92:8c:0b:d8:42:b7:9a:a2:64:cd:60:f1:ce:
         b9:c4:64:c1:8b:7a:1a:ee:b3:e8:4b:24:57:93:a1:8e:a8:8f:
         dc:b2:94:9f:b7:82:fd:15:00:0a:ff:ff:97:55:37:d4:0b:b9:
         b0:bc:35:1b:f8:f6:c1:42:e1:a9:09:5a:42:18:56:06:c1:24:
         9f:fc:8e:bc:ec:89:d7:99:c5:d9:97:75:76:26:99:fb:6e:3d:
         8b:53:41:66:91:27:c4:92:ee:93:76:5f:09:60:06:e9:4f:6f:
         2a:69:4b:46
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Oct 15 03:25:53 2026 by rpki-client