Error: rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.mft
File:                     37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.mft (raw, json)
Hash identifier:          ILIG7FQ4gN/WdtbJjUIENlmwaMFSQi9RZehrNsZTrWE=
Subject key identifier:   27:C5:AF:16:13:47:CF:84:54:34:EC:51:C5:40:29:31:F0:31:CF:01
Authority key identifier: 37:F5:5E:91:32:B6:5D:F9:3A:C7:E8:F5:42:B2:A3:11:5C:FE:1A:79
Certificate issuer:       /CN=37F55E9132B65DF93AC7E8F542B2A3115CFE1A79
Certificate serial:       4CE8B129D79D01199EC88F90845561472C3810ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.mft
Manifest number:          04EA
Signing time:             Fri 30 Oct 2026 12:24:25 +0000
Manifest this update:     Fri 30 Oct 2026 12:19:25 +0000
Manifest next update:     Sat 31 Oct 2026 14:15:25 +0000
Files and hashes:         1: 3137302e3234342e3130302e302f32322d3234203d3e20323635313839.roa (hash: WEANhVMN0FEEGQBH8SIdobfXyU0uk68mBo1xV757N2k=)
                          2: 323830343a326330383a3a2f3332203d3e20323635313839.roa (hash: 14DVZX6+lrWsUnFwcaIY2YQwsSYL4SGq5WA45/ugDFg=)
                          3: 323830343a326330383a3a2f33322d3438203d3e20323635313839.roa (hash: Iegqjvpt7xD+5+IM0EUE5suoELW/Irgw5yY5ioACdFA=)
                          4: 37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.crl (hash: oNcIh3W8MfeNTrkAfO17usgJ+S1RP9UDU8XKvEWPKck=)
                          5: 3136372e3235302e34342e302f32322d3234203d3e20323635313839.roa (hash: an5Qs1cRubZBVqVzqQB2Xa+oY52qYd0b7fndSzp2AhQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.crl
                          rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 14:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e8:b1:29:d7:9d:01:19:9e:c8:8f:90:84:55:61:47:2c:38:10:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37F55E9132B65DF93AC7E8F542B2A3115CFE1A79
        Validity
            Not Before: Oct 30 12:19:25 2026 GMT
            Not After : Oct 31 14:15:25 2026 GMT
        Subject: CN=27C5AF161347CF845434EC51C5402931F031CF01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:53:3e:ca:1e:e3:60:f7:31:71:cd:c7:50:9f:
                    71:ac:ed:cf:2e:67:59:07:c6:58:be:e0:0d:a2:86:
                    b7:34:aa:82:93:19:37:42:0c:a7:86:c4:c4:6b:b3:
                    6f:8b:5c:b9:c1:65:74:60:f4:3c:f0:9c:5e:a3:ef:
                    b8:43:12:21:1c:e6:c3:b5:03:40:2a:e9:91:ed:23:
                    d8:c3:f0:d7:73:b9:99:a9:6d:2f:01:1d:36:4b:c4:
                    7e:cf:85:f1:65:41:10:27:f9:9e:81:5c:19:6b:ab:
                    dc:4d:af:e2:c6:a1:ec:4d:d2:e0:d6:43:fa:c3:cb:
                    58:3c:4a:27:22:fa:e1:cc:54:16:88:f4:04:76:17:
                    de:9c:a1:dd:a0:68:c3:02:bc:c4:46:8f:ac:18:0f:
                    1a:a1:8a:df:d1:2c:c7:eb:8e:b3:9f:26:e2:4e:4f:
                    18:13:d0:a3:b2:f0:33:f5:f4:ed:60:d1:a8:11:72:
                    b4:ee:20:68:16:1f:95:c6:15:da:20:5c:e3:e8:2a:
                    e8:c4:c9:eb:4a:13:a1:be:dc:97:22:f3:84:be:ff:
                    ea:4b:02:8e:0b:6e:77:4e:1d:9e:eb:6b:56:17:19:
                    9b:b8:79:ab:a4:dc:61:ad:4f:94:81:5e:48:2a:1f:
                    5e:c5:88:fd:67:d4:af:72:a8:87:2b:ab:74:22:5b:
                    eb:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C5:AF:16:13:47:CF:84:54:34:EC:51:C5:40:29:31:F0:31:CF:01
            X509v3 Authority Key Identifier:
                keyid:37:F5:5E:91:32:B6:5D:F9:3A:C7:E8:F5:42:B2:A3:11:5C:FE:1A:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:b7:54:dc:bd:78:9e:8a:e8:7a:fa:3f:3b:50:b1:f2:6a:d8:
         c9:8e:e8:63:50:7f:05:23:37:98:72:05:df:c5:72:6e:2a:1a:
         cd:82:7f:78:b1:10:55:40:dc:85:09:fe:d5:77:c1:86:f3:bc:
         81:a9:70:fd:38:ea:f3:b4:7b:39:2c:c9:3c:04:98:a8:24:e9:
         2e:aa:c4:c8:f4:67:c2:45:de:fb:98:e7:49:e0:4e:9a:3c:ba:
         36:35:01:46:46:14:87:9c:2c:93:6a:5c:19:e3:90:68:be:89:
         3f:d0:b5:7d:21:c0:14:02:b7:64:05:0e:c3:a8:ba:14:7a:22:
         d3:54:1e:c3:34:85:40:52:f1:21:78:a8:4f:4c:51:ce:ae:bb:
         67:14:d7:79:53:37:39:7b:36:bc:fa:00:6b:31:cb:e7:bf:cd:
         b2:04:57:3c:cd:55:e7:1f:9a:b7:dc:46:89:39:d3:e4:ee:80:
         37:a1:d8:32:56:d8:94:69:ec:7c:c1:a1:b5:4a:c7:25:4e:10:
         f4:01:d2:52:54:91:ef:20:81:73:a4:bd:b0:5b:e1:46:65:f5:
         25:6c:69:fc:86:2d:67:ed:9d:f1:ca:7c:66:08:33:c2:f2:2d:
         ec:d1:55:f8:7f:e4:49:1c:a8:81:22:ea:18:02:44:82:5d:4a:
         0d:7d:44:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 00:29:38 2026 by rpki-client