Error: rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.mft
File:                     638087ED81E6ABF3705A6FE4584C399C4C56720F.mft (raw, json)
Hash identifier:          rpWRSYh5ZWQeNYRigG2YKSknRWr0O/AxXkOgPg2wHPw=
Subject key identifier:   FB:14:72:D7:97:12:B5:95:B8:AE:29:13:42:48:70:10:33:95:A4:1B
Authority key identifier: 63:80:87:ED:81:E6:AB:F3:70:5A:6F:E4:58:4C:39:9C:4C:56:72:0F
Certificate issuer:       /CN=638087ED81E6ABF3705A6FE4584C399C4C56720F
Certificate serial:       5CA6EB5D845A08EC0686B108F1FE54F256D2E122
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.mft
Manifest number:          04CC
Signing time:             Thu 15 Oct 2026 12:08:36 +0000
Manifest this update:     Thu 15 Oct 2026 12:03:36 +0000
Manifest next update:     Fri 16 Oct 2026 14:49:36 +0000
Files and hashes:         1: 638087ED81E6ABF3705A6FE4584C399C4C56720F.crl (hash: j2GAdVVRwpiAhmkdez8FJ85FeGXSO75h+TmnHf9QCD0=)
                          2: 34352e3233342e3235322e302f32322d3234203d3e20323637333839.roa (hash: NcX8DmYwOhidfbgXFtgECDJPrZ1DsIjYcSX1IcC6GEo=)
                          3: 323830343a346363303a3a2f33322d3438203d3e20323637333839.roa (hash: 2kr5rfRzMzD1wPmAIdWvagse3SQ92MFtEsM3GOb9H6U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.crl
                          rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 14:43:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:a6:eb:5d:84:5a:08:ec:06:86:b1:08:f1:fe:54:f2:56:d2:e1:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=638087ED81E6ABF3705A6FE4584C399C4C56720F
        Validity
            Not Before: Oct 15 12:03:36 2026 GMT
            Not After : Oct 16 14:49:36 2026 GMT
        Subject: CN=FB1472D79712B595B8AE2913424870103395A41B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:03:39:32:7a:db:ed:02:a7:18:ad:26:35:9a:
                    5f:1c:9b:15:29:9c:a6:00:da:7f:e2:5f:5e:d5:26:
                    82:42:8a:10:17:e4:7e:74:6f:76:3c:64:89:f6:6f:
                    98:d1:b5:f8:84:c7:26:c1:e9:9b:ca:14:21:e5:19:
                    87:6c:d7:3e:a8:f5:00:3d:36:37:10:7e:f9:79:47:
                    f3:e7:4e:88:88:38:20:cc:5d:3c:1d:13:77:fc:cf:
                    fb:d5:92:90:95:f7:44:c4:b3:05:27:b1:c9:ea:2d:
                    48:82:fa:e8:97:ff:67:56:a4:fd:95:46:e4:ee:f5:
                    fb:02:41:a4:f2:ed:38:bf:33:86:53:cc:8d:6c:a1:
                    93:4f:62:98:e0:fe:a2:32:0c:5c:5f:c2:d6:24:9a:
                    69:27:0e:4b:c8:5a:fe:cd:cc:aa:56:c6:75:82:11:
                    a9:81:ef:8d:3b:53:92:52:7e:c6:4f:5a:44:0d:53:
                    f4:03:f5:d2:4d:be:24:17:a8:1a:55:f8:0e:90:b1:
                    3a:bd:da:77:f6:e4:17:1b:45:79:9c:eb:f3:ff:9f:
                    b9:29:fa:fa:4a:7c:a4:d6:5c:58:2a:82:13:01:7d:
                    4f:81:2e:2d:d7:a8:5e:f2:60:d4:32:df:db:b0:73:
                    15:50:d1:52:e8:9d:e1:61:3e:c2:96:7e:db:ce:66:
                    47:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:14:72:D7:97:12:B5:95:B8:AE:29:13:42:48:70:10:33:95:A4:1B
            X509v3 Authority Key Identifier:
                keyid:63:80:87:ED:81:E6:AB:F3:70:5A:6F:E4:58:4C:39:9C:4C:56:72:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:b6:f9:b5:5e:d3:f1:63:28:67:0d:c5:06:7a:13:31:7c:be:
         a5:b8:03:6d:25:fc:24:99:a7:9f:5a:39:48:77:f7:97:dd:ef:
         9c:53:cf:e7:bc:53:7a:b4:23:0c:7b:e6:fa:9b:8a:c3:84:90:
         4b:93:1d:1e:25:77:18:ad:2a:12:bc:89:b5:79:3b:c8:af:ef:
         5b:75:d0:b3:0c:d1:e2:fb:1d:74:45:de:bb:c0:9f:c8:5f:68:
         29:94:ca:91:13:87:39:e6:3b:af:f1:8b:c3:36:c0:d9:28:a1:
         bd:ad:98:ca:2d:a1:66:72:74:fc:d0:66:cc:8c:30:58:33:c4:
         12:a5:45:a2:63:55:fb:d8:8e:a8:85:5c:b9:b5:b4:4d:0f:1c:
         f4:9a:1f:d2:55:2e:b0:78:65:02:de:7b:05:29:26:e5:9b:74:
         cd:54:81:61:d1:64:43:26:58:60:fc:b7:17:e7:73:20:48:c9:
         65:6e:a0:c2:03:43:c6:6e:cc:51:ce:55:ce:0d:13:2c:fc:bf:
         40:5b:65:b5:ec:f6:d8:6d:81:28:ee:0c:0a:8b:8b:d7:1a:82:
         21:1c:21:e6:9e:6c:71:d1:89:82:9e:f8:c5:60:d1:29:58:e2:
         43:a1:39:fb:2b:b2:13:80:04:25:d5:1d:31:56:9a:5c:ee:f2:
         91:56:1c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:11:28 2026 by rpki-client