Error: rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.mft
File:                     E1358C78FC7E005E12280CFDE60E73419CC6A38A.mft (raw, json)
Hash identifier:          PuEv8LEqg3CyELcDpjjwk+mshGNvjSvcGAnN8GPdnjU=
Subject key identifier:   3C:30:06:20:2D:32:62:50:3A:B6:57:B7:DC:B3:6F:E0:85:6D:55:1A
Authority key identifier: E1:35:8C:78:FC:7E:00:5E:12:28:0C:FD:E6:0E:73:41:9C:C6:A3:8A
Certificate issuer:       /CN=E1358C78FC7E005E12280CFDE60E73419CC6A38A
Certificate serial:       22BB069866F31385239C7607085097E7C0FDEB35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.mft
Manifest number:          04E5
Signing time:             Sat 31 Oct 2026 04:11:19 +0000
Manifest this update:     Sat 31 Oct 2026 04:06:19 +0000
Manifest next update:     Sun 01 Nov 2026 06:42:19 +0000
Files and hashes:         1: 3137302e3135302e3232342e302f32322d3234203d3e20323635303336.roa (hash: Qo71QGZ9woegBbILiBBordLVHq7zvNeXN6kD/86h7hI=)
                          2: E1358C78FC7E005E12280CFDE60E73419CC6A38A.crl (hash: o8E1x1csGlVtUn8yscY+TC+LAZJZzh/IdqhKnIsbtOc=)
                          3: 323830343a333163343a3a2f33322d3438203d3e20323635303336.roa (hash: N7bfUjlulTd84mWzIVaRJJZIcr+4ErrhVlo8DGadX3Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.crl
                          rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 06:42:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:bb:06:98:66:f3:13:85:23:9c:76:07:08:50:97:e7:c0:fd:eb:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1358C78FC7E005E12280CFDE60E73419CC6A38A
        Validity
            Not Before: Oct 31 04:06:19 2026 GMT
            Not After : Nov  1 06:42:19 2026 GMT
        Subject: CN=3C3006202D3262503AB657B7DCB36FE0856D551A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9d:ef:e1:cb:0f:13:91:1d:bc:6b:46:6d:67:
                    db:9f:00:ef:ca:62:a5:fb:c6:4b:eb:fd:ae:df:fb:
                    28:a8:02:3e:49:8f:39:8c:1a:10:2c:ed:c0:d3:34:
                    90:eb:ca:83:68:e1:7e:d3:50:19:0a:48:f5:56:cb:
                    85:3f:88:45:21:8c:91:7e:fb:10:d5:6f:33:ec:c8:
                    5a:c8:71:d1:e1:51:7d:0b:81:ae:c4:84:88:5f:4c:
                    fe:53:31:d5:f1:07:32:87:6a:b9:1e:af:a0:5f:30:
                    3f:7f:44:39:a8:af:33:f7:41:b7:6a:d5:14:38:ae:
                    ce:e9:52:e3:e0:fa:18:e3:82:72:19:f7:db:27:dc:
                    41:e5:b6:cd:ff:43:9a:20:fb:38:1d:84:9f:4e:ce:
                    84:20:51:da:3b:b2:41:ab:26:76:53:52:69:5d:73:
                    16:24:d0:56:8b:94:84:d1:e5:15:81:e9:bd:4b:b0:
                    59:f1:17:47:d8:4c:2f:2c:b7:b8:48:06:74:bc:d9:
                    52:56:14:2b:00:68:cb:0f:40:bc:74:ef:6f:e2:cd:
                    e1:c6:65:f7:7b:52:8a:9b:e0:ad:76:54:2b:b9:e5:
                    8b:01:b4:cf:ae:ce:20:35:8b:56:b1:8d:f6:ca:e7:
                    3a:d2:8b:0e:01:a5:26:16:77:de:a6:fb:cd:7a:51:
                    29:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:30:06:20:2D:32:62:50:3A:B6:57:B7:DC:B3:6F:E0:85:6D:55:1A
            X509v3 Authority Key Identifier:
                keyid:E1:35:8C:78:FC:7E:00:5E:12:28:0C:FD:E6:0E:73:41:9C:C6:A3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:2a:a7:98:f9:bb:d9:97:eb:55:02:ae:ec:12:cc:df:a8:1a:
         2f:e4:0e:c2:cc:1c:4f:a1:1b:89:a1:e5:08:db:d2:44:d5:9e:
         92:79:e5:90:b2:4a:62:ea:1d:e6:bb:95:cd:f3:bd:f7:4b:16:
         70:a6:05:cb:db:54:53:a9:bb:a6:d9:83:4a:94:d3:49:67:7d:
         42:54:46:91:ad:b6:aa:b0:b1:82:08:e3:8c:16:b2:a7:5a:5a:
         c7:88:74:68:ae:38:34:83:fd:e7:c4:b8:c4:2b:2f:c6:78:c2:
         cf:67:66:d1:b0:5d:d5:47:41:2f:74:07:cc:4c:d1:95:ef:3c:
         b0:3a:d5:85:7e:b2:51:ba:b1:25:3f:b5:29:5a:27:c5:e5:e7:
         08:45:1e:c1:ac:9c:55:d0:76:bb:43:06:86:1f:7c:69:4e:82:
         ef:07:13:22:45:cd:64:86:07:16:d8:24:bf:c8:c0:c3:d2:dc:
         44:0a:f1:43:47:20:f8:4c:90:a0:01:0e:53:8c:44:3a:85:e9:
         10:1f:c4:ad:c8:d1:8e:eb:8b:2f:ff:c0:e0:02:84:90:54:a9:
         57:3b:f2:05:0f:c9:59:18:06:de:39:b3:5a:8c:f6:0b:d7:62:
         e0:d2:6b:df:28:95:9f:2e:c1:71:38:8e:e3:d9:14:79:bc:8a:
         63:10:ff:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:32:07 2026 by rpki-client