Error: rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft
File:                     50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft (raw, json)
Hash identifier:          vamKYuEVGiXYYY71RnH+LPeQc/Mxp/9CqZAS5c53TII=
Subject key identifier:   CD:F6:02:98:7D:3D:BD:85:26:57:61:FB:D7:C8:AE:EF:E3:02:E2:43
Authority key identifier: 50:C3:3A:7F:B5:FF:DC:CE:C9:9E:EF:8A:69:CA:F9:1D:57:91:A9:A3
Certificate issuer:       /CN=50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3
Certificate serial:       7F6487B811C96CC5297751A8BFCB555BDBF5931C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft
Manifest number:          0431
Signing time:             Wed 14 Oct 2026 05:51:19 +0000
Manifest this update:     Wed 14 Oct 2026 05:46:19 +0000
Manifest next update:     Thu 15 Oct 2026 07:44:19 +0000
Files and hashes:         1: 323830343a376233303a3a2f33322d313238203d3e20323731343136.roa (hash: OQmF0Jk90VHvSqF5ofjjQsI1Xy469L2IQZ9fHgYE6JQ=)
                          2: 50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.crl (hash: 9yFe0uDUm/Z0uAuTBwZ27ym/SP7heLgLgHNt5AGJMHY=)
                          3: 3138312e3138392e34302e302f32322d3332203d3e20323731343136.roa (hash: z+YShh2i7AQbjwfbZCScAlLVJtG/p4Cg8MeyqUB1gOA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.crl
                          rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 07:44:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:64:87:b8:11:c9:6c:c5:29:77:51:a8:bf:cb:55:5b:db:f5:93:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3
        Validity
            Not Before: Oct 14 05:46:19 2026 GMT
            Not After : Oct 15 07:44:19 2026 GMT
        Subject: CN=CDF602987D3DBD85265761FBD7C8AEEFE302E243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:88:b5:8d:ec:a0:86:46:6d:7b:7c:12:c7:7d:
                    75:84:ab:77:c8:52:67:2c:b7:ae:51:08:7c:cf:6b:
                    84:fc:96:ee:86:f6:96:b3:97:da:3f:a1:46:ad:88:
                    53:c5:2d:7a:63:7d:47:80:ef:27:df:f0:38:33:c1:
                    d2:f0:ad:ef:4d:11:e9:1a:4f:7d:51:7e:8b:63:e5:
                    47:d0:c4:7f:06:9d:61:6a:24:db:3d:4c:14:6d:32:
                    a3:01:28:d4:be:b8:36:aa:ed:31:81:ed:6d:c4:9d:
                    fd:25:76:d3:dd:91:f8:a2:fa:e0:b2:4b:92:5a:b9:
                    e0:89:20:e5:d6:2c:0f:4c:75:a4:15:fc:bc:88:d2:
                    01:06:57:9c:d5:2e:68:53:2d:60:0e:99:12:c1:48:
                    de:23:6d:f0:25:11:3d:73:eb:df:00:1a:fc:b3:51:
                    89:a0:6d:29:48:ac:7e:0c:76:05:eb:57:a5:04:77:
                    d2:89:02:64:d5:24:08:71:22:5d:46:c8:2a:a1:46:
                    c2:5c:ea:19:dc:32:2e:e6:1d:2b:9b:64:2a:32:a0:
                    2c:37:a3:dc:07:5c:7f:48:33:77:44:7c:81:5d:06:
                    ac:77:0a:12:3b:90:cd:f6:dc:a2:a0:12:d6:13:3f:
                    09:5c:0d:20:85:87:d4:40:3c:2a:3c:d1:4b:33:c8:
                    d0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F6:02:98:7D:3D:BD:85:26:57:61:FB:D7:C8:AE:EF:E3:02:E2:43
            X509v3 Authority Key Identifier:
                keyid:50:C3:3A:7F:B5:FF:DC:CE:C9:9E:EF:8A:69:CA:F9:1D:57:91:A9:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:c3:69:1e:0c:c4:2e:0e:dc:9e:47:ed:21:91:f8:91:d2:a2:
         af:f6:13:1c:59:0a:29:1b:3a:7a:d3:89:3a:56:64:ae:32:c4:
         2c:ef:1c:39:a4:6e:26:ee:af:8a:9f:b6:ea:9c:2f:02:75:2b:
         08:17:ad:b4:da:8c:93:7d:f7:e5:b2:5c:be:c0:38:23:88:e2:
         c9:e3:aa:65:f4:0f:cb:70:f5:3f:c7:77:17:9b:ef:98:0a:b6:
         0f:f5:94:eb:cc:b9:d5:53:f2:29:be:2b:c7:af:3f:7a:72:5e:
         5d:02:7a:05:29:f5:c4:90:bc:a6:8e:81:36:d3:a6:c6:81:38:
         d6:0f:80:13:5b:72:07:8e:2b:9d:ed:5c:90:b2:8b:ed:f0:31:
         ea:aa:58:15:a5:5f:42:ca:c2:7d:72:eb:1b:32:cc:01:4a:47:
         16:f1:f6:0e:5a:30:b5:a6:3f:fd:37:ac:bf:28:15:fa:99:6c:
         df:39:c5:6d:b9:31:d9:e5:17:c2:c7:59:09:94:36:f7:9f:1f:
         8b:88:6d:5e:c5:a6:07:42:ed:00:66:12:6e:09:35:1a:5e:7f:
         6b:45:ca:32:35:bd:ae:61:91:53:09:c3:80:85:61:7c:9b:2b:
         60:04:b8:8d:74:d1:15:f8:5e:e4:3b:42:fd:68:1e:20:2a:09:
         fc:03:50:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 23:37:58 2026 by rpki-client