Error: rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.mft
File:                     B45683C1BB4344BEACD72830DD6175D3188D8B0A.mft (raw, json)
Hash identifier:          798yP76Ey+DxRHaYHi7PmUFM6x6OsKXhXuOPLE1xtSc=
Subject key identifier:   AA:F0:AB:7C:E7:E8:6F:EA:75:75:A9:0E:29:52:C7:7C:7D:2F:85:F7
Authority key identifier: B4:56:83:C1:BB:43:44:BE:AC:D7:28:30:DD:61:75:D3:18:8D:8B:0A
Certificate issuer:       /CN=B45683C1BB4344BEACD72830DD6175D3188D8B0A
Certificate serial:       5C3A2F578ADDE60BC040C371DDF1D9123A022A89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.mft
Manifest number:          0587
Signing time:             Sat 31 Oct 2026 12:20:00 +0000
Manifest this update:     Sat 31 Oct 2026 12:15:00 +0000
Manifest next update:     Sun 01 Nov 2026 12:20:00 +0000
Files and hashes:         1: B45683C1BB4344BEACD72830DD6175D3188D8B0A.crl (hash: g/gO5JZiST6HUG4RCL2aawyS9cBSJ1kCBVyO+kdY5H4=)
                          2: 3133312e302e342e302f32322d3234203d3e203631383535.roa (hash: Y5Z0CQaEr/dwqDkaTrRESskpnXsYVXiY/jjRgICP5UQ=)
                          3: 323830343a316135383a3a2f33322d3335203d3e203631383535.roa (hash: N1TSHRs4e3yyYcCA+FN3Ea1ZRsQUiFJ3yNsDsim5UDI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.crl
                          rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 12:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:3a:2f:57:8a:dd:e6:0b:c0:40:c3:71:dd:f1:d9:12:3a:02:2a:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B45683C1BB4344BEACD72830DD6175D3188D8B0A
        Validity
            Not Before: Oct 31 12:15:00 2026 GMT
            Not After : Nov  1 12:20:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:bd:cf:2e:2e:72:03:6c:c7:fe:a3:56:ef:28:
                    8b:9e:f5:e3:48:b1:f4:21:a3:fe:e6:c7:00:b5:db:
                    5b:01:73:ed:d5:fd:34:db:11:10:f7:cc:2b:71:d4:
                    e4:07:82:17:2b:cd:f1:71:4c:9d:89:ee:ed:ea:7a:
                    f6:0b:8e:bb:05:c0:6d:8c:68:8a:5c:58:88:4b:18:
                    e2:fc:f7:66:b7:58:7f:35:15:d1:3d:df:d8:1d:ca:
                    13:ca:64:bf:19:36:cb:c0:23:07:6c:6b:b1:25:13:
                    ca:79:2e:9b:7d:73:ae:dd:b9:f1:a0:13:82:e3:83:
                    fa:ae:d2:e5:16:1a:e0:78:43:44:34:4d:92:9b:89:
                    a7:87:05:ca:1e:e4:c5:7d:e3:4e:74:74:4b:01:85:
                    fa:1a:4a:c0:93:8b:60:a9:e7:d7:3a:f3:0a:ef:cc:
                    4e:c0:55:aa:eb:7f:c9:b4:2e:a1:81:ea:c3:a7:44:
                    43:2d:0c:57:f2:ac:27:8d:8d:1e:35:7d:af:c6:66:
                    6b:fe:4d:67:b5:de:58:20:ef:b2:03:b0:34:d1:17:
                    9c:0b:20:66:c9:1a:3e:dc:f3:ae:8c:75:82:93:dc:
                    74:b8:5f:62:e0:ae:79:e7:1e:ea:e8:32:52:f9:11:
                    8c:ad:f9:05:53:a7:8f:9a:d0:2d:5a:c2:a4:6d:0a:
                    86:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F0:AB:7C:E7:E8:6F:EA:75:75:A9:0E:29:52:C7:7C:7D:2F:85:F7
            X509v3 Authority Key Identifier:
                keyid:B4:56:83:C1:BB:43:44:BE:AC:D7:28:30:DD:61:75:D3:18:8D:8B:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:3d:3b:78:71:39:03:69:28:f6:6f:b4:dc:51:fe:a3:b7:74:
         12:77:c2:0a:89:7f:18:b4:9e:27:87:ce:d2:94:59:dd:56:4b:
         5d:0b:1a:a9:a8:a4:65:86:1d:ae:a1:c9:bc:af:d5:7d:af:cf:
         7f:45:f7:bb:fc:53:b2:64:1c:e6:66:73:8d:64:50:13:cf:2a:
         df:92:a0:b3:76:82:04:64:d6:7d:1d:42:1e:b7:ac:80:df:d5:
         04:47:ed:b3:52:eb:76:99:d4:cd:30:0c:64:54:1c:3c:b4:5b:
         9a:c5:6b:f0:ee:b1:7b:3b:81:97:fc:f5:12:fe:e4:72:5a:b3:
         c4:74:8f:68:97:07:99:4c:8f:9f:00:6d:23:56:1d:b9:15:24:
         9c:98:b4:a8:be:c5:94:2e:0c:64:ff:fa:04:73:b0:49:2a:eb:
         b1:c8:cd:46:1c:0b:e2:3b:7c:fe:e8:a5:ee:4e:2c:65:c2:d8:
         4c:ad:81:62:9c:f4:a8:66:be:54:ef:41:ca:6c:12:d0:da:a0:
         4d:d1:33:23:8d:13:7e:08:e2:31:11:82:de:c3:4d:f1:62:62:
         6e:6d:d5:6e:25:28:9b:96:96:be:79:c8:53:bb:df:8f:26:e9:
         d6:e0:20:b7:62:f1:33:d9:ac:56:24:4b:36:3f:67:39:6d:d5:
         8e:09:3e:ad
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 31 20:57:08 2026 by rpki-client