Error: rpki-repo.registro.br/repo/5fhfyQuYGKoaC4AuquuLLrGXcSESsHurje5ca5DwoHBF/1/813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5fhfyQuYGKoaC4AuquuLLrGXcSESsHurje5ca5DwoHBF/1/813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.mft
File:                     813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.mft (raw, json)
Hash identifier:          pSqvbrgJANLHJ5c4tj1imqbzvpU+0BDK1wOiVqyL52s=
Subject key identifier:   02:70:83:E6:58:11:9D:EC:4F:CA:FF:57:A8:E4:20:2B:B5:CC:8F:CE
Authority key identifier: 81:3D:EF:2E:5D:0C:2D:2A:3D:E1:A9:02:DF:00:38:64:9A:49:72:D3
Certificate issuer:       /CN=813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3
Certificate serial:       6A9AA6AC7E953B48DA9AB08F932C3E0F3FE78B5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5fhfyQuYGKoaC4AuquuLLrGXcSESsHurje5ca5DwoHBF/1/813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.mft
Manifest number:          04EB
Signing time:             Sun 01 Nov 2026 22:11:16 +0000
Manifest this update:     Sun 01 Nov 2026 22:06:16 +0000
Manifest next update:     Tue 03 Nov 2026 01:18:16 +0000
Files and hashes:         1: 813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.crl (hash: 50o530fWW9okaIuueR7ouSB80H+5eKgUVBOc4L3Z7e0=)
                          2: 323830343a386163633a3a2f33322d3438203d3e20323632393036.roa (hash: M5EBJVvYkvqY2ct/L07FB3hqo/mUxzbvf8Xze0xvUpU=)
                          3: 3137372e32332e3234382e302f32322d3234203d3e20323632393036.roa (hash: l1Qqki7J1OMupR6pqbSkQmpfYsRjQkzyo/B9cvHfgNk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5fhfyQuYGKoaC4AuquuLLrGXcSESsHurje5ca5DwoHBF/1/813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.crl
                          rsync://rpki-repo.registro.br/repo/5fhfyQuYGKoaC4AuquuLLrGXcSESsHurje5ca5DwoHBF/1/813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 23:44:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:9a:a6:ac:7e:95:3b:48:da:9a:b0:8f:93:2c:3e:0f:3f:e7:8b:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3
        Validity
            Not Before: Nov  1 22:06:16 2026 GMT
            Not After : Nov  3 01:18:16 2026 GMT
        Subject: CN=027083E658119DEC4FCAFF57A8E4202BB5CC8FCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1e:e1:f4:b5:d9:c3:05:95:8f:39:9f:75:5a:
                    1e:7e:8b:c4:18:e1:f2:4d:86:ac:06:c8:54:c1:69:
                    19:5e:bd:ab:47:bc:ee:fd:8c:15:53:d2:42:33:65:
                    36:1c:82:3a:81:90:54:03:8e:47:94:77:fc:a6:ff:
                    1f:b5:19:e3:28:1f:93:12:ec:3f:02:3b:0e:7c:36:
                    f3:24:b9:91:03:11:87:f3:07:51:2d:fa:7b:16:81:
                    91:4a:a8:15:5d:c1:56:11:80:99:e7:29:f5:e7:05:
                    65:55:3c:c1:9c:19:fe:02:cb:d1:12:db:b9:90:bd:
                    76:aa:9c:88:cc:cc:bb:4d:e7:58:9d:43:d1:84:01:
                    4b:d3:10:85:09:d9:06:e8:60:0a:39:32:31:60:bd:
                    a2:58:98:a0:96:3f:8b:87:81:89:c2:82:a7:b9:b0:
                    83:5e:b0:f9:90:6e:d4:78:fd:05:1f:fb:e3:06:88:
                    ed:5b:25:e3:9b:cc:2f:83:d4:32:52:2b:8b:2b:5c:
                    43:df:22:22:ff:51:d6:f4:e9:73:27:7f:f8:97:d8:
                    7c:ad:22:42:8f:8b:3e:8f:8f:f2:51:2d:67:94:ee:
                    fe:55:21:35:eb:83:d2:7c:50:7f:ee:5f:29:77:36:
                    99:ee:74:82:f9:10:ff:4b:69:b8:b9:be:43:3f:e6:
                    1b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:70:83:E6:58:11:9D:EC:4F:CA:FF:57:A8:E4:20:2B:B5:CC:8F:CE
            X509v3 Authority Key Identifier:
                keyid:81:3D:EF:2E:5D:0C:2D:2A:3D:E1:A9:02:DF:00:38:64:9A:49:72:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5fhfyQuYGKoaC4AuquuLLrGXcSESsHurje5ca5DwoHBF/1/813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5fhfyQuYGKoaC4AuquuLLrGXcSESsHurje5ca5DwoHBF/1/813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:30:41:8a:8c:25:d8:22:80:2f:f5:8a:7f:7c:04:5b:8f:c4:
         f2:f1:08:d0:81:83:c5:aa:9c:75:ca:06:41:20:c3:23:b0:55:
         d2:8b:71:61:07:96:6a:bf:25:68:28:22:4d:b9:a0:7a:a1:16:
         88:71:c6:aa:47:fd:9c:b4:17:47:8e:c8:d5:ce:46:95:36:0a:
         d8:69:af:41:e8:77:ac:f0:65:1d:50:1c:5f:b6:71:ff:9e:20:
         38:9f:81:29:fb:f4:7a:da:ea:9f:2a:7a:c4:d7:02:fe:36:02:
         2d:65:c0:3e:7b:70:3e:9b:91:91:db:0e:60:18:27:b7:42:1f:
         76:84:24:98:29:d0:6d:73:1d:2c:b1:8d:8c:7f:14:8d:00:7c:
         6a:a5:6a:8f:3a:78:a1:a6:d4:8a:71:80:69:a7:43:27:15:24:
         ce:03:53:0d:e6:a9:6a:92:4a:bb:2e:77:2a:5c:62:a8:ae:be:
         ee:e0:f3:3f:10:53:71:77:cf:a1:8f:4d:f7:c1:52:4a:5d:fb:
         b0:db:1d:9e:1d:53:30:e2:b3:26:48:78:fa:55:42:fe:4f:20:
         6f:4b:a0:a2:37:a0:68:5f:7e:45:3c:4f:11:86:8d:df:d3:e3:
         8e:cc:c1:f4:a5:77:53:21:bb:99:05:b5:57:7c:d9:83:ef:77:
         db:92:01:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 00:47:58 2026 by rpki-client