Error: rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.mft
File:                     57C950BD274ED8EA04B2AF337313BFE612E66E95.mft (raw, json)
Hash identifier:          MgobhzJRFJCkWNN1UYNCSS2hKyMty0K8OlEPdOoLpgo=
Subject key identifier:   F1:DD:44:77:98:5F:3A:6D:92:B9:7A:A1:4B:94:6D:76:EA:9E:A8:76
Authority key identifier: 57:C9:50:BD:27:4E:D8:EA:04:B2:AF:33:73:13:BF:E6:12:E6:6E:95
Certificate issuer:       /CN=57C950BD274ED8EA04B2AF337313BFE612E66E95
Certificate serial:       4A23DE27B1F2F1A52CB60F2CC9268418399FB06A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.mft
Manifest number:          04E8
Signing time:             Sun 01 Nov 2026 03:56:24 +0000
Manifest this update:     Sun 01 Nov 2026 03:51:24 +0000
Manifest next update:     Mon 02 Nov 2026 07:10:24 +0000
Files and hashes:         1: 323830343a346162343a3a2f33322d3438203d3e20323637323538.roa (hash: LR4jZ+GuY91xTigeeMqi4yPycRLcCBeqf/iQnoo3S0o=)
                          2: 34352e3233322e3130382e302f32322d3234203d3e20323637323538.roa (hash: lB6r9XZ9Vb9pW1jG+53giwTT3+M0CAqMDaEkvtJCnYY=)
                          3: 57C950BD274ED8EA04B2AF337313BFE612E66E95.crl (hash: gcmue+ud4hJlEKttu5U+v2DHTrorQ05t2XlRYNrxAeQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.crl
                          rsync://rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 07:10:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:23:de:27:b1:f2:f1:a5:2c:b6:0f:2c:c9:26:84:18:39:9f:b0:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57C950BD274ED8EA04B2AF337313BFE612E66E95
        Validity
            Not Before: Nov  1 03:51:24 2026 GMT
            Not After : Nov  2 07:10:24 2026 GMT
        Subject: CN=F1DD4477985F3A6D92B97AA14B946D76EA9EA876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b6:83:35:a3:8d:2b:c8:df:7b:9d:2f:86:db:
                    83:9e:74:9b:e7:a4:a1:cd:d9:34:ad:10:fd:b7:68:
                    4d:e4:8d:2b:15:46:6b:dc:7f:e3:60:9d:01:da:29:
                    37:2d:3c:cd:3e:d8:a3:4e:a4:be:1b:ab:ca:41:f5:
                    e6:1e:70:cc:07:21:cc:4d:70:99:71:19:ff:72:b5:
                    fc:3d:97:d1:08:ab:5b:57:47:87:ac:05:a1:9c:f2:
                    3e:a6:54:e9:b8:39:10:aa:a1:02:d6:52:3f:42:5f:
                    35:d9:e9:1b:48:f4:5c:54:29:bc:95:87:10:72:5a:
                    3b:b7:ba:8a:b8:cc:01:12:3c:06:33:b1:55:97:2a:
                    75:e3:c7:4e:cb:0f:e3:04:18:2f:5f:79:d3:4a:84:
                    2a:f2:43:62:1b:e2:74:06:0c:0e:40:de:1d:bc:e7:
                    85:29:b3:e0:0d:6c:59:1c:0c:f2:2b:fe:ba:e0:f7:
                    53:f8:6a:b8:f4:f0:cb:1f:bc:aa:90:8e:80:c6:ff:
                    36:80:98:6c:da:2f:50:59:27:52:bd:ed:1d:49:3a:
                    d4:e5:56:c8:a3:2e:68:7d:92:8f:56:4c:6c:56:24:
                    89:1b:1e:0d:4e:1d:f6:2e:08:7a:7f:1a:fc:0c:c0:
                    d2:15:82:e3:39:1c:4e:a8:5d:c4:34:cc:8b:35:f9:
                    06:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DD:44:77:98:5F:3A:6D:92:B9:7A:A1:4B:94:6D:76:EA:9E:A8:76
            X509v3 Authority Key Identifier:
                keyid:57:C9:50:BD:27:4E:D8:EA:04:B2:AF:33:73:13:BF:E6:12:E6:6E:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:ff:69:3f:f4:3f:d9:1a:88:1a:81:3b:69:ae:dd:e8:70:95:
         cc:9c:a3:11:50:fa:30:3c:96:0c:2b:4f:87:2d:8a:a6:8e:3d:
         2a:48:a7:3c:9b:10:41:45:22:dd:33:f0:7d:90:5b:0b:9d:c4:
         06:42:49:24:8c:be:e3:af:b9:27:f8:8c:4c:74:38:42:2d:aa:
         35:1a:36:60:8b:01:bf:0a:e8:8b:4b:e6:1c:8c:b1:a4:20:c1:
         b3:7b:72:f0:5d:f0:93:07:74:65:87:68:44:09:ad:7d:ee:23:
         27:06:db:f9:02:d9:51:80:71:0f:79:f1:6d:b0:39:ec:1d:cc:
         57:52:3b:ee:f5:07:a9:33:18:46:f9:e0:bb:ff:73:c9:71:3c:
         98:c0:f1:4b:75:d9:c3:25:db:42:e2:9a:ab:55:36:89:21:5b:
         b7:6b:0c:b5:6e:13:2e:9d:2d:68:b5:99:7e:02:f2:10:ae:0e:
         1a:aa:42:83:cf:72:79:e6:97:b6:11:aa:67:53:4b:f0:c3:57:
         ce:3e:fd:7e:b6:4c:ff:29:28:39:16:7c:32:2e:1d:db:3c:fd:
         f6:bc:e6:63:17:c7:4a:f8:73:61:d8:b5:20:a0:07:88:24:18:
         8b:e4:41:b3:95:52:05:7b:4e:39:cd:51:51:29:d8:72:02:5f:
         89:56:62:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 10:48:53 2026 by rpki-client