Error: rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/1/E205EB197526993ADD700764E53493B3E4B2EEB8.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/1/E205EB197526993ADD700764E53493B3E4B2EEB8.mft
File:                     E205EB197526993ADD700764E53493B3E4B2EEB8.mft (raw, json)
Hash identifier:          OgWQskY4EIIRhvzUIJGxrom6EgjcOk3WI1O0ZRNd25E=
Subject key identifier:   EF:A9:75:DB:7C:EB:52:19:DF:F7:CF:29:99:B0:63:3D:35:3F:16:80
Authority key identifier: E2:05:EB:19:75:26:99:3A:DD:70:07:64:E5:34:93:B3:E4:B2:EE:B8
Certificate issuer:       /CN=E205EB197526993ADD700764E53493B3E4B2EEB8
Certificate serial:       76545EBDF1B56AA38C7796377DCCAA52EA4CF20D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E205EB197526993ADD700764E53493B3E4B2EEB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/1/E205EB197526993ADD700764E53493B3E4B2EEB8.mft
Manifest number:          04DB
Signing time:             Fri 30 Oct 2026 13:17:22 +0000
Manifest this update:     Fri 30 Oct 2026 13:12:22 +0000
Manifest next update:     Sat 31 Oct 2026 13:28:22 +0000
Files and hashes:         1: 323830343a356633303a3a2f33322d313238203d3e20323639303832.roa (hash: h/x665YZRICzTdy4jelZNeu8ftauMGTa9bxp59RoUk4=)
                          2: E205EB197526993ADD700764E53493B3E4B2EEB8.crl (hash: OwRe2/XcMXzPhNxHMJm9KefsykcJE6g+nVdmogUIo5s=)
                          3: 34352e3137392e34302e302f32322d3234203d3e20323639303832.roa (hash: T73vgI6yXwB8rXpY68RURAengx9pqcYxh/eKsWhFfEw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/1/E205EB197526993ADD700764E53493B3E4B2EEB8.crl
                          rsync://rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/1/E205EB197526993ADD700764E53493B3E4B2EEB8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E205EB197526993ADD700764E53493B3E4B2EEB8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 13:28:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:54:5e:bd:f1:b5:6a:a3:8c:77:96:37:7d:cc:aa:52:ea:4c:f2:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E205EB197526993ADD700764E53493B3E4B2EEB8
        Validity
            Not Before: Oct 30 13:12:22 2026 GMT
            Not After : Oct 31 13:28:22 2026 GMT
        Subject: CN=EFA975DB7CEB5219DFF7CF2999B0633D353F1680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:43:0b:8d:71:37:c5:16:61:e8:f6:a6:18:a9:
                    a0:bd:05:82:51:2b:ae:83:95:21:d0:78:3b:c3:83:
                    fb:26:77:78:75:dd:70:95:c0:d0:22:ff:a2:86:9e:
                    35:b7:cd:e8:87:52:b7:ac:d7:cc:ea:e0:c8:31:48:
                    1c:a9:ef:ae:88:60:d9:48:20:fd:af:db:af:c2:14:
                    8d:1f:5e:ed:16:be:3e:fe:f1:ef:f9:99:78:b5:aa:
                    eb:75:8b:6e:df:09:c3:0a:b5:0c:e2:60:41:8f:c4:
                    e9:bf:43:b7:8f:4e:02:2b:9f:e0:9a:10:97:c3:e1:
                    e1:d4:49:95:a4:38:c7:a3:7b:28:76:06:b8:14:fc:
                    9e:0e:34:a0:26:5d:65:3c:2f:fd:ba:2c:d1:7d:c6:
                    3e:10:c6:5e:61:2b:4c:50:c7:aa:ef:28:5e:8d:28:
                    8c:15:f9:bf:3f:2b:53:9c:11:c6:2f:e6:1c:56:2c:
                    8c:0c:39:52:75:f4:74:58:0c:da:ea:35:68:8e:07:
                    8d:6c:aa:cd:fb:f9:f9:f5:d5:67:83:b4:94:f3:52:
                    c0:d7:d1:d6:f7:42:82:90:f2:5d:0d:69:c7:9d:9a:
                    64:82:bb:73:7b:1c:6d:b0:46:dc:1a:c3:0f:13:a9:
                    84:ba:6e:67:ef:c8:ca:35:7a:16:03:16:dc:e1:fd:
                    8b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A9:75:DB:7C:EB:52:19:DF:F7:CF:29:99:B0:63:3D:35:3F:16:80
            X509v3 Authority Key Identifier:
                keyid:E2:05:EB:19:75:26:99:3A:DD:70:07:64:E5:34:93:B3:E4:B2:EE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/1/E205EB197526993ADD700764E53493B3E4B2EEB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E205EB197526993ADD700764E53493B3E4B2EEB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/1/E205EB197526993ADD700764E53493B3E4B2EEB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:7f:3b:9f:69:5d:ef:87:8e:8f:b8:ba:89:34:cc:1e:70:cd:
         7a:9b:fa:6c:ac:84:54:74:27:6a:5e:23:17:9a:f8:38:72:80:
         43:42:59:88:2a:8c:99:27:07:54:55:dc:ec:e0:1e:9e:5d:c9:
         ab:dd:da:95:22:c7:17:11:f8:27:0b:a3:b5:f1:5f:4e:87:5b:
         0e:94:83:93:08:67:07:29:8e:f2:ef:cf:f0:0c:e6:7a:3c:27:
         4a:56:e4:ab:53:8c:95:d4:22:3c:94:1d:0a:76:d0:bc:3f:9c:
         78:97:61:25:54:b7:4e:37:4a:d9:8f:a0:ee:ea:6e:3a:59:f0:
         48:71:21:fe:35:70:60:2e:ee:62:cd:6f:f2:47:d3:83:ef:df:
         46:c0:e1:2d:57:e1:de:68:fd:3b:9b:a9:55:48:e3:97:98:16:
         f2:80:b3:79:f2:9c:42:02:fc:aa:1f:f6:33:51:c4:a0:dd:1c:
         28:9a:dc:fa:71:f0:05:00:a2:b8:4c:72:cb:77:7a:b9:c9:20:
         f2:5f:ad:07:e4:c0:88:30:d8:36:ed:b3:cc:bd:28:1d:77:6a:
         1c:28:f8:e4:fe:f4:5d:0e:15:ae:6b:08:0a:a6:4c:5e:dd:c7:
         08:81:d2:f6:85:a0:0f:dc:f2:cb:82:74:1a:e6:47:5d:ca:43:
         1d:af:c4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 23:23:32 2026 by rpki-client