Error: rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.mft
File:                     D477F47EB674BB270E21D1DF467090789AFE23F1.mft (raw, json)
Hash identifier:          Y2ZzdL9VefcqBub9vr/SoeCjBs31jNhSKQzBthPoarQ=
Subject key identifier:   64:62:20:75:F4:12:94:7F:02:96:4E:F8:2F:E7:93:38:BB:3F:40:1C
Authority key identifier: D4:77:F4:7E:B6:74:BB:27:0E:21:D1:DF:46:70:90:78:9A:FE:23:F1
Certificate issuer:       /CN=D477F47EB674BB270E21D1DF467090789AFE23F1
Certificate serial:       7F8F4230424BB06CFC310B11BFC05537CBCF8030
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D477F47EB674BB270E21D1DF467090789AFE23F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.mft
Manifest number:          058B
Signing time:             Tue 03 Nov 2026 20:00:00 +0000
Manifest this update:     Tue 03 Nov 2026 19:55:00 +0000
Manifest next update:     Wed 04 Nov 2026 20:00:00 +0000
Files and hashes:         1: 323830343a373931633a3a2f33322d3334203d3e20323731323835.roa (hash: pRLO03E/pKtp6Fgxs8x8CbPOUhPrdIrrVnmcqJGIwKc=)
                          2: D477F47EB674BB270E21D1DF467090789AFE23F1.crl (hash: 7ArIfQgXVrm9yIMAvbTnpuJsNT8UVTLtgw49ftzBabE=)
                          3: 3230302e38302e3130342e302f32322d3234203d3e20323731323835.roa (hash: FzCGLrNvevqPx8mrdMdwtN3D84F7sXonIqpUijTk29g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.crl
                          rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D477F47EB674BB270E21D1DF467090789AFE23F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:8f:42:30:42:4b:b0:6c:fc:31:0b:11:bf:c0:55:37:cb:cf:80:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D477F47EB674BB270E21D1DF467090789AFE23F1
        Validity
            Not Before: Nov  3 19:55:00 2026 GMT
            Not After : Nov  4 20:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:40:29:5b:cd:3a:b0:4a:fd:c5:6e:63:87:23:
                    e1:d5:4c:23:87:ce:09:a2:a9:25:bb:21:1a:15:ff:
                    ae:67:f3:e2:de:cb:23:c9:2e:03:8d:53:96:0e:20:
                    7f:13:b6:80:57:10:6a:8d:87:f3:f5:c6:5e:3c:ea:
                    14:d6:40:ee:2b:fb:af:f9:39:90:3e:c5:53:80:3f:
                    d6:51:9b:c2:f1:63:1d:a5:41:54:67:2a:1c:90:9e:
                    c6:ad:3e:3c:ab:b6:46:60:09:24:cb:7e:ec:63:84:
                    a9:72:1f:bc:3d:25:8f:04:70:2e:a9:d7:2e:06:bf:
                    1e:88:08:0a:27:cc:79:82:69:80:72:0e:3a:89:6f:
                    f1:fe:4c:dc:ba:92:87:ee:fa:85:35:9e:5f:e3:0e:
                    78:e1:3c:28:05:4f:63:89:d9:85:0c:2a:83:a4:2b:
                    6a:22:0f:ab:b4:e1:fb:4d:e7:c7:b7:d7:fb:fc:f8:
                    82:6f:8c:9c:31:3e:be:ac:6e:49:ab:fb:12:0c:f4:
                    70:f0:30:60:0a:66:a7:e7:1f:d1:53:21:74:00:8b:
                    de:7c:96:fa:54:c0:eb:61:d7:e7:a6:fd:a5:bd:3e:
                    15:6b:f0:a4:1e:df:68:41:09:6b:c5:6c:93:02:ab:
                    4b:1f:79:22:5a:de:af:75:15:29:34:32:92:27:1c:
                    7c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:62:20:75:F4:12:94:7F:02:96:4E:F8:2F:E7:93:38:BB:3F:40:1C
            X509v3 Authority Key Identifier:
                keyid:D4:77:F4:7E:B6:74:BB:27:0E:21:D1:DF:46:70:90:78:9A:FE:23:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D477F47EB674BB270E21D1DF467090789AFE23F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:f4:ec:b4:72:4a:7a:7b:68:bc:22:10:08:4d:7d:31:24:5e:
         45:7f:73:49:ba:a2:1a:82:a5:de:b1:68:c1:78:68:75:b9:04:
         44:ff:d9:84:41:92:3b:97:00:05:ea:bf:2a:fe:ab:f8:95:77:
         6a:d7:94:ca:74:f8:d7:57:79:3a:99:16:a3:46:b3:fe:66:ff:
         11:2c:c8:25:4c:2d:19:3e:07:16:3d:f1:eb:b1:23:45:0b:5c:
         ef:99:75:c8:d2:31:e9:51:d6:b9:8c:72:c4:71:11:78:55:3a:
         4a:3b:3c:ce:f7:c0:63:90:9b:56:9e:d3:6f:72:aa:b3:a3:aa:
         93:77:20:08:48:78:98:4d:fc:92:92:aa:a6:3d:51:ce:82:b9:
         97:cb:d7:f5:48:f3:c8:a6:a7:4d:92:bb:4f:5f:5f:c1:ab:08:
         15:03:15:73:d1:ae:c5:8a:b4:2f:d4:88:ee:7d:bc:7d:a4:ba:
         f4:5d:69:eb:ab:27:61:69:e8:2e:76:66:1d:ee:87:f5:08:69:
         32:37:3b:77:34:cb:6a:bf:ae:f2:ac:df:7a:7e:b6:d3:0c:a5:
         c8:d1:ae:1b:b9:d6:2b:9d:0b:cb:37:11:8e:a7:6e:10:ae:20:
         5e:b4:4e:54:54:6a:de:7d:e9:21:81:c5:43:89:40:c2:4b:66:
         e2:bc:83:2e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 4 06:33:00 2026 by rpki-client