Error: rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.mft
File:                     D2986464325E8FD5DF10CBFA8DD303EF12449774.mft (raw, json)
Hash identifier:          DKYYSDJAFHizWtT2AcivoHINVdJKlMEtv64/Cu3nDe4=
Subject key identifier:   A1:DB:9E:00:48:BF:7E:1C:FB:98:B2:93:6F:1B:8F:C9:B3:31:9C:A4
Authority key identifier: D2:98:64:64:32:5E:8F:D5:DF:10:CB:FA:8D:D3:03:EF:12:44:97:74
Certificate issuer:       /CN=D2986464325E8FD5DF10CBFA8DD303EF12449774
Certificate serial:       1ED0E9851CBA26F72A4A7A7DD69D2C6FEA8AB3A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.mft
Manifest number:          04EC
Signing time:             Tue 03 Nov 2026 21:00:49 +0000
Manifest this update:     Tue 03 Nov 2026 20:55:49 +0000
Manifest next update:     Thu 05 Nov 2026 00:58:49 +0000
Files and hashes:         1: 323830343a343439343a3a2f33322d3438203d3e20323637363430.roa (hash: f7MnHyJkzdNTO1BEnrZgsQBYBh4ro0Q04OtUU9Iejlc=)
                          2: 34352e37312e3234382e302f32322d3234203d3e20323637363430.roa (hash: r7klzKUdJTnnFWbsNasJuaPJzJXzSoOurGolGTkdpnc=)
                          3: D2986464325E8FD5DF10CBFA8DD303EF12449774.crl (hash: EOOgciyQ61X7TanPNBk+HTqru6Oghc7ykT5SX2If5UE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.crl
                          rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 00:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d0:e9:85:1c:ba:26:f7:2a:4a:7a:7d:d6:9d:2c:6f:ea:8a:b3:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2986464325E8FD5DF10CBFA8DD303EF12449774
        Validity
            Not Before: Nov  3 20:55:49 2026 GMT
            Not After : Nov  5 00:58:49 2026 GMT
        Subject: CN=A1DB9E0048BF7E1CFB98B2936F1B8FC9B3319CA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:72:4d:8d:22:00:7c:23:e7:1a:cd:0c:3c:26:
                    30:d7:ac:7a:da:6c:73:dd:17:27:4a:6e:0f:41:44:
                    79:1e:bb:f1:a3:b6:5c:78:69:ce:c3:01:33:df:cd:
                    42:b7:38:e4:4b:62:2d:0c:6d:0a:42:39:3c:e4:08:
                    93:7c:b4:d1:fc:b7:67:7c:c9:81:4c:70:9c:6d:5f:
                    e1:1f:58:b7:95:34:f7:69:55:6d:59:2c:f1:84:a3:
                    48:76:02:4e:00:8d:4d:b8:2b:5e:43:03:bf:2e:b7:
                    9c:fa:16:08:5c:22:d1:fb:5c:26:3a:b0:7f:3a:ad:
                    b9:6b:43:21:42:e7:fb:5d:c1:9b:37:5f:d1:44:ac:
                    ae:18:0b:27:c0:1d:b3:ff:35:61:5b:0d:b9:9a:9a:
                    ce:b1:c4:a8:e4:19:3e:de:bf:a3:3b:5c:64:a6:ca:
                    b0:72:9b:df:f1:31:7e:c7:27:86:d8:eb:d4:f9:52:
                    53:35:14:ba:c3:2c:9a:0e:bf:9c:d5:60:15:07:dd:
                    b3:fa:d0:41:da:b3:c8:0c:04:ff:12:5d:7d:c5:7d:
                    3b:cc:fc:1a:f3:59:f7:1d:f7:a9:59:c5:7e:9e:a3:
                    57:27:13:a1:be:a8:b4:d7:90:c4:8e:b3:fa:6b:64:
                    11:b4:2f:4c:d2:b7:94:a4:ef:ed:c8:44:0c:fb:6d:
                    42:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DB:9E:00:48:BF:7E:1C:FB:98:B2:93:6F:1B:8F:C9:B3:31:9C:A4
            X509v3 Authority Key Identifier:
                keyid:D2:98:64:64:32:5E:8F:D5:DF:10:CB:FA:8D:D3:03:EF:12:44:97:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:87:79:13:9e:93:ee:fd:7e:26:99:fe:3c:2a:55:c0:0a:56:
         f0:a8:29:68:08:18:af:5f:27:85:ef:76:c6:a8:fb:b5:88:77:
         64:7f:1d:f7:dd:db:e1:a1:49:e9:b3:45:8f:2d:19:38:2c:24:
         40:e6:96:cc:88:d0:7f:dd:93:e9:99:fc:00:20:0b:8f:17:d3:
         75:7b:27:c1:9d:e6:9c:78:ff:63:93:28:3e:49:71:8c:d5:38:
         48:1e:4e:71:b6:9a:3c:b3:09:21:c8:a8:c0:4c:99:48:72:2e:
         21:bc:9b:58:9b:7f:61:4d:cf:f8:1d:6e:7a:55:d2:d1:60:3d:
         6e:6d:15:b8:e1:0e:ff:83:49:b1:a3:7c:ea:81:c1:6b:98:4f:
         91:cb:c3:57:d6:44:bd:51:25:a9:84:d0:25:62:a2:c7:28:58:
         5d:6d:a9:64:df:cb:72:72:36:72:a3:e6:74:84:0b:39:d0:d5:
         87:a9:b0:8c:cd:25:37:bf:62:da:19:f8:a2:2e:89:7d:3a:cf:
         88:fe:0f:31:4c:c0:64:e9:1e:0b:cf:55:d8:ca:27:b0:45:11:
         4c:b8:69:58:ec:26:2c:38:1d:89:5a:34:b2:ae:ba:b9:b6:d0:
         9b:f6:f7:c5:3f:14:18:af:46:18:13:f2:b9:3d:2a:c1:f8:ec:
         fc:5e:b5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 12:20:06 2026 by rpki-client