Error: rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/062347D8F4F770415633E22D794F8D58F390BA86.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/062347D8F4F770415633E22D794F8D58F390BA86.mft
File:                     062347D8F4F770415633E22D794F8D58F390BA86.mft (raw, json)
Hash identifier:          nQsrWFF0xEJNsV5Yb0VaJqUlDmh/KeS5ftWBPVii2jY=
Subject key identifier:   C8:B8:49:9C:67:6C:A8:98:13:25:78:83:72:EA:7E:EC:FA:86:9F:D7
Authority key identifier: 06:23:47:D8:F4:F7:70:41:56:33:E2:2D:79:4F:8D:58:F3:90:BA:86
Certificate issuer:       /CN=062347D8F4F770415633E22D794F8D58F390BA86
Certificate serial:       4EE5A72E08DD9C84D84FF4394EDA6DF000A373FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/062347D8F4F770415633E22D794F8D58F390BA86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/062347D8F4F770415633E22D794F8D58F390BA86.mft
Manifest number:          0584
Signing time:             Fri 30 Oct 2026 19:10:00 +0000
Manifest this update:     Fri 30 Oct 2026 19:05:00 +0000
Manifest next update:     Sat 31 Oct 2026 19:10:00 +0000
Files and hashes:         1: 3139302e38392e3136382e302f32322d3234203d3e20323730333833.roa (hash: SBUrw02b1xdhOVQH1EQlyfdsqcQOVCjMZQ9TaX5wu8Q=)
                          2: 062347D8F4F770415633E22D794F8D58F390BA86.crl (hash: EA+lQA9IlS1GgkzA5Lg+3oem1lPoCBHwRHPt/8YYwDQ=)
                          3: 323830343a366232633a3a2f33322d3335203d3e20323730333833.roa (hash: +MEKwdws3x3s9D2KqYylPSLBoKLUSSShhawfHhm3wbM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/062347D8F4F770415633E22D794F8D58F390BA86.crl
                          rsync://rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/062347D8F4F770415633E22D794F8D58F390BA86.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/062347D8F4F770415633E22D794F8D58F390BA86.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e5:a7:2e:08:dd:9c:84:d8:4f:f4:39:4e:da:6d:f0:00:a3:73:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=062347D8F4F770415633E22D794F8D58F390BA86
        Validity
            Not Before: Oct 30 19:05:00 2026 GMT
            Not After : Oct 31 19:10:00 2026 GMT
        Subject: CN=3082010A0282010100C67E443E4AB10FA5E7416AEFF5EF51071FA24BFAE16A55E998EFC6842DA3D0B36FD0D79FC256996FE6CB4C652087E78A0123F9A2D06D67A19E6786F16949D15EA25C05B441067A6670622F9166FD1284F814910F3CEF6BE122AF431711BD7D5B7D0758B832681B6DE679CCB7B296ACE664CB8A83D387B7AD21F7FDBD957F5F0C847E442E38AA015AD96DD504F7A8A87E88A501C16226537FFDC7FDDDFAC9AB0B06E7D0A039BFC2EC927BFC5BA737934823503B13F21E974177E0CB80611C192C1DC8423080ACF464236C617A0978D29BA11D0BADD2D09E72C8F2AE60ADF98B98BCFF51B0291427458839C22B5F329B53B32A68D98D1485B32B8E60E5D3FA0DED0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7e:44:3e:4a:b1:0f:a5:e7:41:6a:ef:f5:ef:
                    51:07:1f:a2:4b:fa:e1:6a:55:e9:98:ef:c6:84:2d:
                    a3:d0:b3:6f:d0:d7:9f:c2:56:99:6f:e6:cb:4c:65:
                    20:87:e7:8a:01:23:f9:a2:d0:6d:67:a1:9e:67:86:
                    f1:69:49:d1:5e:a2:5c:05:b4:41:06:7a:66:70:62:
                    2f:91:66:fd:12:84:f8:14:91:0f:3c:ef:6b:e1:22:
                    af:43:17:11:bd:7d:5b:7d:07:58:b8:32:68:1b:6d:
                    e6:79:cc:b7:b2:96:ac:e6:64:cb:8a:83:d3:87:b7:
                    ad:21:f7:fd:bd:95:7f:5f:0c:84:7e:44:2e:38:aa:
                    01:5a:d9:6d:d5:04:f7:a8:a8:7e:88:a5:01:c1:62:
                    26:53:7f:fd:c7:fd:dd:fa:c9:ab:0b:06:e7:d0:a0:
                    39:bf:c2:ec:92:7b:fc:5b:a7:37:93:48:23:50:3b:
                    13:f2:1e:97:41:77:e0:cb:80:61:1c:19:2c:1d:c8:
                    42:30:80:ac:f4:64:23:6c:61:7a:09:78:d2:9b:a1:
                    1d:0b:ad:d2:d0:9e:72:c8:f2:ae:60:ad:f9:8b:98:
                    bc:ff:51:b0:29:14:27:45:88:39:c2:2b:5f:32:9b:
                    53:b3:2a:68:d9:8d:14:85:b3:2b:8e:60:e5:d3:fa:
                    0d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B8:49:9C:67:6C:A8:98:13:25:78:83:72:EA:7E:EC:FA:86:9F:D7
            X509v3 Authority Key Identifier:
                keyid:06:23:47:D8:F4:F7:70:41:56:33:E2:2D:79:4F:8D:58:F3:90:BA:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/062347D8F4F770415633E22D794F8D58F390BA86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/062347D8F4F770415633E22D794F8D58F390BA86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/062347D8F4F770415633E22D794F8D58F390BA86.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:ed:c2:24:b1:a2:7a:46:42:af:b2:da:50:ca:1c:40:ab:08:
         97:2a:71:64:89:23:b3:3f:19:a0:29:12:c9:04:c1:9e:58:d3:
         b0:f7:d7:26:51:99:f0:43:4c:06:90:12:b2:53:4a:22:eb:5c:
         f7:cc:56:2b:38:00:a0:11:92:b4:61:e0:ce:cb:8b:9f:47:cf:
         cf:ca:07:88:ec:ea:94:aa:c1:d3:f8:26:0b:6c:ce:c5:b4:48:
         81:e2:68:2e:67:82:42:0f:af:82:e8:bf:88:13:f1:3f:68:cd:
         2b:11:6c:58:36:47:42:0a:c3:9c:05:d4:5c:e2:ee:bc:c3:1f:
         1c:e4:c6:6f:db:df:d9:ae:67:f6:50:3e:5b:99:0e:af:b9:13:
         a0:27:20:91:35:78:c5:97:6d:10:4b:5b:ae:fb:3c:1a:77:0e:
         94:6c:ae:c7:08:fb:02:a5:93:f8:4f:9b:80:dc:c3:76:c2:b1:
         ee:ea:d6:98:cf:83:c8:d9:41:fe:85:98:ad:61:84:1d:f8:70:
         a2:03:da:e8:89:a4:14:0d:0d:6c:81:71:4b:4d:88:3b:26:88:
         88:d9:03:73:d2:51:d9:ef:6e:82:dd:db:a4:6c:18:b3:24:c8:
         1d:13:d1:43:3e:2a:19:16:0c:7f:11:96:6b:04:53:5f:40:3c:
         f6:1f:1d:73
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 31 10:12:23 2026 by rpki-client