Error: rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.mft
File:                     1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.mft (raw, json)
Hash identifier:          FMgRwBDum2U9xrJfxIz7zvxaHaPJXt0nGF6O+cjLA7g=
Subject key identifier:   48:62:93:28:62:32:5B:DE:84:44:12:12:6A:79:07:18:BD:0C:7A:85
Authority key identifier: 1C:7D:F0:C4:6B:39:4E:8D:79:C9:D3:1B:A2:F0:1A:E6:76:17:82:C7
Certificate issuer:       /CN=1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7
Certificate serial:       29F4AF771E98318D75B480AAC4E04516C557688C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.mft
Manifest number:          04E3
Signing time:             Fri 30 Oct 2026 17:55:40 +0000
Manifest this update:     Fri 30 Oct 2026 17:50:40 +0000
Manifest next update:     Sat 31 Oct 2026 20:04:40 +0000
Files and hashes:         1: 1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.crl (hash: +3Z1EreKL6c+4dDGYNeMTEBiUEfMWv5tJBlf+j8kbM0=)
                          2: 34352e3136392e3132342e302f32322d3235203d3e20323638313038.roa (hash: 0AyEG0mudKFyVV0DXiJWdb7/XM3F/6N+s6UR/6ttaHA=)
                          3: 323830343a353832303a3a2f33322d3634203d3e20323638313038.roa (hash: ZeqWuGQFJx8ldPNGW+dlUZV2TRaUohk9bhBS6J3P+Nk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.crl
                          rsync://rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 20:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f4:af:77:1e:98:31:8d:75:b4:80:aa:c4:e0:45:16:c5:57:68:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7
        Validity
            Not Before: Oct 30 17:50:40 2026 GMT
            Not After : Oct 31 20:04:40 2026 GMT
        Subject: CN=4862932862325BDE844412126A790718BD0C7A85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:74:9f:31:f3:a7:3f:3e:68:2e:cd:94:1e:98:
                    eb:74:14:61:a5:9c:cc:bf:4c:8b:7e:02:7a:63:0a:
                    4d:bb:f8:ad:b2:c0:62:07:29:e7:64:e5:3c:81:6a:
                    e5:16:a2:58:b8:1e:93:97:f6:2a:dc:98:ce:1d:32:
                    3f:98:9a:db:de:6e:06:7a:4e:93:31:bf:cd:b4:fa:
                    03:d7:8d:74:1f:a2:c6:66:0b:94:c2:14:82:76:70:
                    9e:db:e4:d7:60:72:54:b0:ad:95:cc:96:cb:9f:1a:
                    5c:43:79:ad:07:07:be:73:60:d0:4e:05:34:72:b3:
                    b9:8d:d5:e4:3f:4b:66:a5:b5:cb:28:c6:1e:41:19:
                    d7:f3:34:4a:ab:94:20:7a:7d:e8:a5:05:d7:4b:14:
                    de:98:07:18:44:5e:89:3f:98:53:56:cc:ae:b8:26:
                    8a:ba:40:f6:d5:2d:11:59:b6:d7:67:79:46:38:f8:
                    ff:92:53:84:b9:72:9b:f2:b3:39:10:41:77:f7:df:
                    86:46:62:4b:36:09:14:51:16:d1:2c:6c:00:0f:b4:
                    91:a8:61:0d:25:af:74:8c:3e:ec:e4:72:57:4c:e3:
                    9b:07:03:99:ae:93:4c:a2:ca:20:ab:19:4d:95:14:
                    7a:2d:da:7d:13:39:bc:eb:4b:d2:82:67:f6:d4:1d:
                    f8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:62:93:28:62:32:5B:DE:84:44:12:12:6A:79:07:18:BD:0C:7A:85
            X509v3 Authority Key Identifier:
                keyid:1C:7D:F0:C4:6B:39:4E:8D:79:C9:D3:1B:A2:F0:1A:E6:76:17:82:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:88:37:ad:c6:08:f0:60:5e:9a:8e:d9:79:69:af:da:6b:f8:
         31:94:6a:1c:33:a5:3a:e4:6e:00:08:07:b4:c2:74:51:8b:6c:
         a9:ab:a8:1a:63:06:a3:40:1d:40:31:14:2f:a7:f0:17:b3:dc:
         56:32:ad:60:02:ba:00:9a:20:2d:39:3a:6c:34:65:07:bf:bd:
         c2:20:c1:11:25:27:91:5e:eb:5b:87:27:ae:d4:47:39:9a:16:
         54:b1:ea:af:4b:b0:94:8a:b6:db:b6:d4:92:be:8d:d8:97:7e:
         58:ac:8f:65:04:cf:ff:3b:74:47:b2:9c:f2:34:63:c5:a5:85:
         42:a9:ea:19:70:ce:9e:d7:b6:99:5e:47:fc:14:66:0d:cd:58:
         55:60:c0:e8:d7:53:56:be:e8:77:2e:e7:93:b9:32:9b:15:43:
         6c:a3:1c:59:4d:f3:77:f5:7c:3c:05:14:c2:18:7a:22:45:77:
         92:39:05:12:f7:39:fb:b5:2f:08:75:04:c1:74:15:31:aa:b2:
         8d:b7:88:32:1b:af:24:0a:91:4c:03:44:40:32:59:73:ea:32:
         29:41:88:cb:cf:8a:92:8f:89:54:b1:4b:2b:31:21:19:dc:cf:
         98:64:2f:8b:cf:fb:cd:06:20:a3:94:ad:2c:87:b0:6e:5f:4f:
         1c:21:af:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:51:24 2026 by rpki-client