Error: rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.mft
File:                     FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.mft (raw, json)
Hash identifier:          G9fgzKFpqBXw8jrliK2T5Er7IG8dv0SujbyE3yVGsuc=
Subject key identifier:   81:71:EB:76:4D:97:D9:44:BC:2A:E8:35:8D:24:5A:CB:1E:F7:71:8C
Authority key identifier: FE:37:39:3A:C5:C8:D2:83:40:27:EE:7B:AE:80:CB:6B:AA:05:1C:AD
Certificate issuer:       /CN=FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD
Certificate serial:       774ADB0228CC7C7829CD974E7433692FA8095EFE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.mft
Manifest number:          04CA
Signing time:             Sun 11 Oct 2026 16:04:40 +0000
Manifest this update:     Sun 11 Oct 2026 15:59:40 +0000
Manifest next update:     Mon 12 Oct 2026 18:55:40 +0000
Files and hashes:         1: FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.crl (hash: NFWjRVdqG3dn0TDxd9Yl9Gg77xqg/B3WwDj/nTdAABE=)
                          2: 323830343a386264383a3a2f33322d313238203d3e20323733373633.roa (hash: LXEaWXWcWiUpACwGRPLQ6lb8i3QatNxytAhakQXdBVk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.crl
                          rsync://rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 18:43:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:4a:db:02:28:cc:7c:78:29:cd:97:4e:74:33:69:2f:a8:09:5e:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD
        Validity
            Not Before: Oct 11 15:59:40 2026 GMT
            Not After : Oct 12 18:55:40 2026 GMT
        Subject: CN=8171EB764D97D944BC2AE8358D245ACB1EF7718C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3d:d6:20:18:fd:46:43:41:91:8b:74:4c:41:
                    13:ab:ee:89:68:97:39:9d:38:dd:3f:ad:5e:83:30:
                    0c:fe:00:06:1a:1a:0c:e0:e6:5a:ba:15:bc:df:9a:
                    51:88:81:47:71:9a:62:0f:32:6c:96:ed:f1:77:88:
                    62:46:19:b7:4d:8b:0e:1e:73:b6:99:df:33:4e:ea:
                    0f:4f:e5:b5:ef:36:cd:a4:b1:87:e5:b1:66:36:ce:
                    72:89:31:8e:83:f5:80:53:d4:a8:21:c9:2a:c6:bc:
                    a5:a9:1a:82:64:5a:62:d0:89:33:16:10:81:05:6f:
                    fd:fd:7b:f6:3e:95:8b:8a:56:8c:73:fe:29:e7:eb:
                    89:b5:4c:ec:ca:51:d4:9f:c2:4e:76:7c:72:e2:82:
                    89:92:33:1f:18:4b:87:54:f3:cc:f6:78:6b:4b:88:
                    3c:ba:f7:f5:c9:4e:60:38:81:9b:93:c4:21:54:58:
                    62:22:da:bc:f1:20:97:1d:dd:de:e0:17:58:98:e0:
                    16:61:9d:23:ec:bf:16:78:d6:46:74:1d:e8:6b:ba:
                    cc:ef:92:70:f7:b4:a9:d4:af:05:24:19:1b:c4:e5:
                    4d:f4:51:de:c4:c4:eb:74:86:d7:36:52:f8:87:fe:
                    9c:4b:30:ae:02:a5:93:b9:36:11:7d:a7:a3:70:65:
                    4e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:71:EB:76:4D:97:D9:44:BC:2A:E8:35:8D:24:5A:CB:1E:F7:71:8C
            X509v3 Authority Key Identifier:
                keyid:FE:37:39:3A:C5:C8:D2:83:40:27:EE:7B:AE:80:CB:6B:AA:05:1C:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:58:11:8c:7d:88:7f:37:62:e6:63:d6:b5:ad:41:5b:dd:69:
         8d:fb:d6:8a:08:58:d7:1d:68:ef:5f:3a:63:d8:b2:fd:ac:84:
         7e:b1:31:7a:08:ec:61:43:87:92:8b:d6:32:70:58:f9:1c:4a:
         98:2a:d1:27:fb:46:fa:97:cc:66:5f:37:61:0d:3c:da:56:fd:
         2c:00:99:4a:32:b7:37:ab:b3:f9:01:00:3a:04:ab:d6:68:fd:
         04:45:aa:70:05:f1:23:ae:2a:18:49:08:53:0e:79:48:33:fa:
         af:4d:5c:da:5c:45:d8:1d:26:74:0b:bb:e8:87:4d:6f:e5:61:
         5c:3b:b1:52:0a:86:e1:23:b5:91:ec:2d:94:02:d2:f5:9f:ac:
         53:9c:04:72:80:a9:21:c3:77:44:3d:91:65:cc:22:cf:06:08:
         98:17:1e:97:72:4e:55:f5:ff:b2:c7:a7:b7:33:4d:cd:05:57:
         bf:25:b5:aa:a3:4c:80:3d:5b:80:3b:91:dd:19:c0:82:18:84:
         9d:60:90:b8:1b:2b:32:bf:3c:8a:95:77:a2:5b:78:a3:92:84:
         16:01:c6:5f:84:6d:f8:4f:a4:a7:fe:d8:0e:ae:d4:81:e5:be:
         86:22:60:94:9b:30:00:ad:fb:74:2a:40:3e:fb:df:f2:c7:8b:
         20:42:3c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:34:49 2026 by rpki-client