Error: rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft
File:                     28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft (raw, json)
Hash identifier:          ZGePELcHWi1BykU4bYOfmCMCfNPMZh91Yf16V+LliCY=
Subject key identifier:   A3:EF:BF:3C:95:DD:8F:40:07:21:AB:AA:D3:3C:85:0D:84:8A:EE:86
Authority key identifier: 28:D7:6E:09:39:F0:99:B4:7B:4B:80:EA:2B:9B:07:BA:1A:22:86:F0
Certificate issuer:       /CN=28D76E0939F099B47B4B80EA2B9B07BA1A2286F0
Certificate serial:       5EDA7662E7CAE863EF25535E58B5552A18EA290A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft
Manifest number:          0418
Signing time:             Wed 28 Oct 2026 16:25:30 +0000
Manifest this update:     Wed 28 Oct 2026 16:20:30 +0000
Manifest next update:     Thu 29 Oct 2026 18:30:30 +0000
Files and hashes:         1: 323830343a343762383a3a2f33322d3438203d3e20323637303733.roa (hash: cBtrry0krG7b5QpziVYTrJ98P95UPWg4kULwRV55mXk=)
                          2: 28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl (hash: eeZtQEo4ymraXQN/W2sGBgpETBd0LIwdjL/qpJtwghk=)
                          3: 34352e3232382e3136302e302f32322d3234203d3e20323637303733.roa (hash: Mw9wrwlp9rBBJe6ke/T542y9Rqq2VB03O7vKyLplFQ0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl
                          rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 18:30:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:da:76:62:e7:ca:e8:63:ef:25:53:5e:58:b5:55:2a:18:ea:29:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28D76E0939F099B47B4B80EA2B9B07BA1A2286F0
        Validity
            Not Before: Oct 28 16:20:30 2026 GMT
            Not After : Oct 29 18:30:30 2026 GMT
        Subject: CN=A3EFBF3C95DD8F400721ABAAD33C850D848AEE86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ae:c7:94:27:c4:eb:97:44:e3:6e:c7:60:a3:
                    ee:61:77:ac:38:1e:bc:32:fd:27:8b:b4:d9:60:69:
                    61:92:c9:21:7c:c2:d0:ed:b9:56:c9:79:4b:aa:de:
                    45:30:89:b5:44:c4:ef:34:67:b6:07:15:53:20:21:
                    d6:a8:70:22:b4:81:60:3e:55:da:5e:e7:cc:5b:a7:
                    93:36:20:00:13:05:99:d2:cc:3d:39:30:dc:14:fc:
                    a9:c7:8c:57:1b:8c:a2:49:84:29:98:99:65:e0:c1:
                    95:b3:90:25:19:3d:16:f5:a4:2e:af:7b:df:1e:5c:
                    c8:44:4c:e9:20:ed:87:af:e4:7e:0f:a3:6a:e6:5b:
                    b8:ee:43:f4:e2:3b:0a:00:9e:59:21:e0:c8:73:30:
                    c9:1a:37:8d:cc:c5:29:30:2d:1b:9e:db:ab:61:c0:
                    e2:64:58:f6:66:9c:f6:c5:e2:5d:a7:1c:31:e6:05:
                    3c:78:dc:0b:0e:59:0c:29:b4:65:71:e8:4d:6f:52:
                    8a:7c:e3:5b:4c:f8:55:d1:43:38:f9:26:be:d9:d8:
                    4b:ec:43:3e:f0:82:7b:1c:3b:77:fc:af:24:30:04:
                    81:81:97:fc:10:62:93:a5:ba:b1:f0:c8:e3:93:39:
                    2b:03:fe:d9:de:05:33:c5:48:7f:2c:0e:54:da:27:
                    9b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:EF:BF:3C:95:DD:8F:40:07:21:AB:AA:D3:3C:85:0D:84:8A:EE:86
            X509v3 Authority Key Identifier:
                keyid:28:D7:6E:09:39:F0:99:B4:7B:4B:80:EA:2B:9B:07:BA:1A:22:86:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:22:91:af:f1:b3:98:f1:3a:79:5b:a1:13:31:97:7e:92:21:
         a8:34:e1:6e:b2:2e:f2:ac:8a:10:e8:db:d8:fe:11:86:64:4e:
         bd:45:62:91:59:e6:0c:7c:7b:fb:93:60:07:e0:6b:d2:3e:a1:
         35:5e:25:43:ee:02:57:8f:b8:e1:32:70:06:16:f3:41:c9:5e:
         be:3c:c6:b7:ab:13:b8:a8:b2:a9:68:6b:33:c6:7e:e8:64:8c:
         3a:04:c8:c4:8f:93:9a:b2:18:b1:6f:50:22:9f:b9:43:bb:cd:
         5c:c1:4a:68:f7:c1:d8:5f:b9:44:23:4b:c9:3d:94:0f:aa:3b:
         5e:45:89:e7:1f:55:61:b1:d1:60:4c:6b:65:8a:18:c1:36:e8:
         42:0e:81:e3:e5:ed:fb:8d:9a:69:06:d6:d3:c1:e3:3c:d1:91:
         b4:00:a7:13:ef:e7:6e:57:19:04:03:ae:48:6f:76:46:47:5b:
         93:32:f6:86:c1:46:45:50:ed:27:81:55:5c:2d:bc:e7:8f:94:
         1d:f2:33:f1:6f:bc:08:6c:e1:1b:e5:bd:65:c5:db:64:5f:b4:
         7c:f4:fe:6c:29:2a:7f:c6:73:8f:a8:e6:55:a8:74:6d:89:e6:
         cb:83:11:b8:96:60:ec:6e:71:76:7e:87:06:c1:32:ac:c8:35:
         9c:d8:d7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:37:22 2026 by rpki-client