Error: rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/6837437B682D69085C3574DE4EE122A490D3C359.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/6837437B682D69085C3574DE4EE122A490D3C359.mft
File:                     6837437B682D69085C3574DE4EE122A490D3C359.mft (raw, json)
Hash identifier:          WiGKeToDHh9xlMFrKspVD4yMw7qk/IeJGdKD1wdthrM=
Subject key identifier:   3F:EF:14:DA:80:AE:76:B4:80:61:36:7A:C3:AE:27:3B:DF:1F:C1:80
Authority key identifier: 68:37:43:7B:68:2D:69:08:5C:35:74:DE:4E:E1:22:A4:90:D3:C3:59
Certificate issuer:       /CN=6837437B682D69085C3574DE4EE122A490D3C359
Certificate serial:       05FB7C7FE0305590F558BA8C185C7061D9524B92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6837437B682D69085C3574DE4EE122A490D3C359.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/6837437B682D69085C3574DE4EE122A490D3C359.mft
Manifest number:          0588
Signing time:             Sat 31 Oct 2026 00:00:00 +0000
Manifest this update:     Fri 30 Oct 2026 23:55:00 +0000
Manifest next update:     Sun 01 Nov 2026 00:00:00 +0000
Files and hashes:         1: 3136382e3138312e3232302e302f32322d3234203d3e20323633393138.roa (hash: S5Qk3UmH8CD1wHojOwhuPzerv5qN9tNIEyNepf/5D+4=)
                          2: 3137372e35332e36382e302f32322d3234203d3e20323633393138.roa (hash: YiTeKR3tr4poLevYoONudWDuLA+rdwpA8rhncZn8MQU=)
                          3: 323830343a323762383a3a2f33322d3335203d3e20323633393138.roa (hash: aKpjvI4JQVBSX6jRRoRuJloYl9KpvVO6lj0YjZLhzxc=)
                          4: 6837437B682D69085C3574DE4EE122A490D3C359.crl (hash: y+gG81yNd66ni2EgXEl/LZqjI/WPgVMDJn7BAs+Trek=)
                          5: 3133382e3230342e3138382e302f32322d3234203d3e20323633393138.roa (hash: 9i+WRFs4Z39t6CbqCm0KFmdbS4RZqrz8qFhCqkKvfWA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/6837437B682D69085C3574DE4EE122A490D3C359.crl
                          rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/6837437B682D69085C3574DE4EE122A490D3C359.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6837437B682D69085C3574DE4EE122A490D3C359.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:fb:7c:7f:e0:30:55:90:f5:58:ba:8c:18:5c:70:61:d9:52:4b:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6837437B682D69085C3574DE4EE122A490D3C359
        Validity
            Not Before: Oct 30 23:55:00 2026 GMT
            Not After : Nov  1 00:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:01:59:b7:ed:5a:b3:b7:9e:4a:fd:14:17:45:
                    84:86:f9:68:d2:a2:eb:87:5a:43:f7:ad:b5:82:09:
                    f0:b4:da:9d:89:ac:65:de:7e:96:b7:52:ec:ed:52:
                    11:c2:23:20:63:d0:17:93:04:ef:9b:6b:bf:48:92:
                    c8:c9:70:7a:c1:2f:1a:da:b9:d3:da:c3:a6:f3:a8:
                    8a:62:95:ce:24:72:15:51:87:be:9f:f7:d6:fd:fd:
                    02:de:2d:c2:f0:a4:ae:bb:a1:92:14:f4:45:03:d4:
                    17:ea:35:20:65:18:7f:1d:c5:b0:d8:2c:67:10:78:
                    dc:e4:6d:01:c7:a0:e9:98:59:83:82:32:e9:7b:b9:
                    41:a9:fe:f5:d6:35:e6:51:4c:00:fc:a4:12:e7:54:
                    ca:a0:51:eb:0e:ab:64:ef:f0:4f:a5:e8:dc:0b:2d:
                    da:61:0e:e5:f3:e9:28:f1:e2:07:b3:d8:bc:0b:b1:
                    9e:f1:0c:5e:47:40:ec:26:1d:63:63:0f:17:25:0a:
                    14:29:6c:fc:44:a5:8b:b2:34:49:b9:5f:93:ae:4e:
                    b7:28:a2:1b:1f:00:e1:cf:cd:aa:b2:b3:ea:ab:f6:
                    dc:47:d3:b4:df:db:19:70:59:cf:47:bf:8d:1e:21:
                    9d:b3:b3:f6:60:67:d0:d5:9c:4a:5e:b0:9f:68:51:
                    e0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:EF:14:DA:80:AE:76:B4:80:61:36:7A:C3:AE:27:3B:DF:1F:C1:80
            X509v3 Authority Key Identifier:
                keyid:68:37:43:7B:68:2D:69:08:5C:35:74:DE:4E:E1:22:A4:90:D3:C3:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/6837437B682D69085C3574DE4EE122A490D3C359.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6837437B682D69085C3574DE4EE122A490D3C359.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/6837437B682D69085C3574DE4EE122A490D3C359.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:a5:01:75:63:90:27:76:83:c3:e2:24:9c:30:bc:73:2f:6e:
         93:09:47:94:4f:32:30:cb:49:c1:c8:4c:9e:c1:1f:8d:32:6d:
         08:01:24:03:6c:7a:a6:61:18:e7:6c:19:c5:dc:4e:c6:e3:df:
         d3:2f:92:cf:39:51:65:72:b4:cf:59:da:8a:35:fb:a1:d9:88:
         58:0c:71:48:17:20:b4:22:48:0b:a0:96:69:be:4e:0d:84:bf:
         26:14:20:9e:8d:dc:51:1f:d5:29:43:46:f6:d2:46:88:36:01:
         bc:53:5c:53:08:3b:ba:b9:c2:6f:92:64:2a:7b:d7:95:6b:26:
         c3:8c:2a:b5:b1:e9:1d:a5:39:ae:b0:04:18:bc:90:d1:71:87:
         f6:21:1b:c3:fa:e8:95:95:b5:55:82:59:ae:83:48:87:eb:b9:
         e6:ce:05:98:aa:f5:a1:02:22:0e:35:ba:6c:d8:a3:57:fa:2f:
         b9:27:a6:2d:4f:a9:11:39:81:fd:37:e3:99:55:32:f7:b0:5c:
         6d:47:cd:0a:d0:cb:c0:7e:c0:04:2f:ad:75:cc:29:34:02:31:
         5c:5b:90:1f:61:97:c5:be:79:9e:11:bb:ec:e6:94:7d:90:ab:
         c4:5d:c7:fc:5a:69:25:cb:36:8a:91:56:b6:c9:16:de:8a:97:
         59:ea:2d:4b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 31 09:33:33 2026 by rpki-client