Error: rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.mft
File:                     57C950BD274ED8EA04B2AF337313BFE612E66E95.mft (raw, json)
Hash identifier:          YGB86iiMGdAhOG0GHCIDCkv4JgR/DBOVIBRFVq+YOnM=
Subject key identifier:   40:30:8D:D1:2F:2F:EE:1A:35:6A:19:5C:62:41:22:BE:BB:1D:F0:19
Authority key identifier: 57:C9:50:BD:27:4E:D8:EA:04:B2:AF:33:73:13:BF:E6:12:E6:6E:95
Certificate issuer:       /CN=57C950BD274ED8EA04B2AF337313BFE612E66E95
Certificate serial:       53A242B5970C28CBB0DEAE4C6DC7F36CE7A5C0F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.mft
Manifest number:          04EA
Signing time:             Mon 02 Nov 2026 16:54:23 +0000
Manifest this update:     Mon 02 Nov 2026 16:49:23 +0000
Manifest next update:     Tue 03 Nov 2026 19:10:23 +0000
Files and hashes:         1: 323830343a346162343a3a2f33322d3438203d3e20323637323538.roa (hash: LR4jZ+GuY91xTigeeMqi4yPycRLcCBeqf/iQnoo3S0o=)
                          2: 57C950BD274ED8EA04B2AF337313BFE612E66E95.crl (hash: YYbf2F880k5KRd6YWkKAwvVb85gJrm11n4Uar41so/s=)
                          3: 34352e3233322e3130382e302f32322d3234203d3e20323637323538.roa (hash: lB6r9XZ9Vb9pW1jG+53giwTT3+M0CAqMDaEkvtJCnYY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.crl
                          rsync://rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 19:10:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a2:42:b5:97:0c:28:cb:b0:de:ae:4c:6d:c7:f3:6c:e7:a5:c0:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57C950BD274ED8EA04B2AF337313BFE612E66E95
        Validity
            Not Before: Nov  2 16:49:23 2026 GMT
            Not After : Nov  3 19:10:23 2026 GMT
        Subject: CN=40308DD12F2FEE1A356A195C624122BEBB1DF019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e8:e2:8f:bd:c8:95:01:0c:80:7e:c8:5d:eb:
                    e2:0d:ca:d5:d7:16:3e:cd:03:d2:42:32:f2:f5:3e:
                    c5:08:51:19:70:09:33:c2:11:d1:73:9f:93:90:18:
                    70:98:93:8a:e9:f6:7b:7c:66:13:79:79:5b:8f:37:
                    16:42:d4:65:a5:35:1b:84:c9:65:1c:a5:04:af:b4:
                    35:d0:c9:74:8b:99:ca:21:2d:16:12:34:50:d2:71:
                    15:c7:76:e3:73:57:80:93:7f:8b:7d:92:87:2b:39:
                    85:4f:a3:60:37:de:f8:2b:8d:b8:a4:c3:16:a5:e0:
                    63:aa:f5:01:40:b5:ae:29:87:06:81:9c:42:c4:2e:
                    f3:27:a9:d2:c0:74:6b:1c:0d:f3:22:03:f1:b6:da:
                    dd:f8:1d:c4:2f:74:c9:23:84:50:2c:f4:f8:68:f2:
                    f8:65:45:16:2c:cc:b4:90:df:d9:e0:d7:24:d2:39:
                    6a:60:b5:b5:ba:42:57:1f:06:09:39:83:26:26:88:
                    4b:8b:1b:86:74:af:ba:61:41:16:e4:62:e7:87:e6:
                    d3:b7:43:78:be:78:40:e5:51:ba:ac:a3:13:65:70:
                    09:a2:46:ae:fc:98:7a:8c:8c:99:6c:0d:70:5b:1d:
                    db:c1:69:05:a3:62:92:da:23:a5:46:b0:c3:b3:a5:
                    c4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:30:8D:D1:2F:2F:EE:1A:35:6A:19:5C:62:41:22:BE:BB:1D:F0:19
            X509v3 Authority Key Identifier:
                keyid:57:C9:50:BD:27:4E:D8:EA:04:B2:AF:33:73:13:BF:E6:12:E6:6E:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:aa:39:3a:ba:51:95:fa:7a:33:66:c4:9f:07:b7:8f:4a:f4:
         e9:1f:ea:88:83:be:b8:da:61:c6:64:39:63:91:2c:b0:53:f8:
         c5:71:d1:aa:55:44:00:01:1f:01:d3:9c:52:05:e4:9d:5b:36:
         d4:c7:7c:86:0d:f9:fd:db:70:04:ae:3e:e8:e2:4a:3f:3e:a2:
         c1:df:6b:89:d6:2d:e1:16:18:19:ea:f4:22:b5:a7:2c:46:dc:
         a2:d6:17:8b:95:62:0e:e8:f2:ae:73:17:0c:10:65:49:2b:fa:
         1d:2d:52:1c:80:be:8c:d0:2a:f5:0c:14:f5:c0:03:cc:8b:d2:
         08:2f:74:66:4d:d9:59:ba:0b:28:d6:51:0b:ec:a8:ca:a1:6f:
         d7:ee:64:b5:9c:e4:95:17:42:51:12:37:39:02:e1:1f:dd:05:
         bb:a0:4a:3d:c7:84:80:18:a4:a2:8a:1a:0d:c4:6b:cc:46:a6:
         e6:cd:36:c3:cd:7e:88:9b:f6:38:5c:b3:1c:e9:c1:04:0a:30:
         b3:57:f6:74:31:28:c7:e4:d7:21:9b:71:e6:e7:c5:57:5e:be:
         fd:eb:c0:b7:b6:1c:2b:7f:12:91:23:02:0a:36:d1:40:d9:d6:
         97:f2:65:27:ab:52:05:a0:62:92:7b:52:40:0d:2d:8e:63:59:
         f8:de:c9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 10:57:16 2026 by rpki-client