Error: rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.mft
File:                     650CDA051146F7753756149BDB6B92197765D95E.mft (raw, json)
Hash identifier:          qoF0tuVuYm7/ZBCN3AAVJF5JalDiSMLpgAkRNaCxIMM=
Subject key identifier:   DA:53:2B:CF:D2:3A:1B:C5:B2:47:1A:BE:F2:BD:A4:03:17:4B:20:B6
Authority key identifier: 65:0C:DA:05:11:46:F7:75:37:56:14:9B:DB:6B:92:19:77:65:D9:5E
Certificate issuer:       /CN=650CDA051146F7753756149BDB6B92197765D95E
Certificate serial:       6B95C7A45CFC39D9B5BA9E5BF6538AC3F16292A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/650CDA051146F7753756149BDB6B92197765D95E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.mft
Manifest number:          04E2
Signing time:             Fri 30 Oct 2026 04:10:00 +0000
Manifest this update:     Fri 30 Oct 2026 04:05:00 +0000
Manifest next update:     Sat 31 Oct 2026 06:08:00 +0000
Files and hashes:         1: 323830343a363937383a3a2f33322d3438203d3e20323730323732.roa (hash: AN25yo3eXMHV1W8PhjsweFfiym7xl37gbOtqoXKPI/o=)
                          2: 650CDA051146F7753756149BDB6B92197765D95E.crl (hash: 7gij8AOpwKWN/UGJvOMydWEjda9+2wqBJbjeSBchtII=)
                          3: 3230302e3131352e3132342e302f32322d3234203d3e20323730323732.roa (hash: I/xnq0bsZM2KCqDQuEwyR/TUNXt4kaaRIw7Q1uq0nSQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.crl
                          rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/650CDA051146F7753756149BDB6B92197765D95E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 06:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:95:c7:a4:5c:fc:39:d9:b5:ba:9e:5b:f6:53:8a:c3:f1:62:92:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=650CDA051146F7753756149BDB6B92197765D95E
        Validity
            Not Before: Oct 30 04:05:00 2026 GMT
            Not After : Oct 31 06:08:00 2026 GMT
        Subject: CN=DA532BCFD23A1BC5B2471ABEF2BDA403174B20B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fb:3b:62:78:2a:29:b5:e1:46:93:4d:bc:bc:
                    9e:04:e9:08:ac:6e:e4:da:af:a0:e8:2c:be:b3:bb:
                    fc:37:11:d1:66:be:19:a0:ac:64:61:11:17:29:a4:
                    82:0f:4a:e6:a0:20:31:49:27:76:e1:35:ca:e6:ee:
                    5c:07:db:e5:b1:50:87:49:8a:dc:3a:46:ff:f5:67:
                    71:41:58:71:d0:e6:04:47:fc:61:5a:b2:a8:8f:7f:
                    d9:7f:d4:95:18:77:61:e4:64:81:17:1f:26:da:4e:
                    d6:82:ad:16:16:c2:df:49:45:8c:ea:5f:ee:c0:b5:
                    f0:a7:06:cf:a4:ff:1e:2d:84:d3:32:3b:a3:a8:ab:
                    f3:1f:fb:3f:fa:ce:15:5f:62:d7:11:ad:39:d5:62:
                    e3:be:ab:88:df:50:a8:27:ef:a2:de:62:c0:87:8a:
                    51:35:6b:3b:de:65:55:c0:20:b1:a3:c9:30:c1:5a:
                    f2:cb:d1:0b:1b:f2:bb:2f:fc:c6:62:a7:dd:c9:d3:
                    6b:9c:1b:10:d2:d9:1d:82:77:c4:89:0d:3a:56:7f:
                    0b:60:81:a0:3b:0d:dc:a7:40:8d:1f:d4:3d:4e:93:
                    91:cb:39:15:af:f0:a3:24:a4:32:34:12:a4:19:8b:
                    6c:9f:95:ef:e4:8c:36:0c:53:18:fa:3a:59:26:f9:
                    99:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:53:2B:CF:D2:3A:1B:C5:B2:47:1A:BE:F2:BD:A4:03:17:4B:20:B6
            X509v3 Authority Key Identifier:
                keyid:65:0C:DA:05:11:46:F7:75:37:56:14:9B:DB:6B:92:19:77:65:D9:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/650CDA051146F7753756149BDB6B92197765D95E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:83:52:bb:7a:5d:87:9a:81:aa:56:89:60:b7:b1:c8:53:a1:
         e3:87:d3:28:6b:c7:2e:1d:9b:78:67:32:22:7b:51:66:b2:2d:
         ac:9a:1c:58:a0:14:03:96:86:b5:45:09:80:59:8a:e3:a1:27:
         27:ae:dc:44:ef:ee:ca:f8:7f:1d:55:ad:e9:1d:ac:07:0a:bd:
         60:c7:13:6c:53:ee:47:af:56:6a:3f:87:39:29:a9:8a:59:96:
         f7:2b:e6:b4:5a:cc:ad:c7:fd:77:a7:94:8e:1a:ac:9f:4e:30:
         7c:58:93:c7:b2:91:9a:98:dd:6f:d5:d2:18:49:03:a0:8e:27:
         43:88:21:0a:a2:49:1b:c6:27:d4:41:1c:a3:ba:a7:7f:ea:d8:
         4a:a8:d5:a3:cd:c6:84:e2:f8:53:d0:d3:56:c7:85:74:22:c4:
         1f:8f:29:df:ba:3e:de:64:88:f2:1b:b0:ce:da:8a:55:f5:39:
         6c:49:1d:93:0f:1b:fc:16:01:a1:21:0e:cc:62:1e:66:f9:4a:
         c6:b0:6e:dd:48:37:51:08:cf:4c:6d:1a:de:c6:c0:81:06:d9:
         af:f0:27:ab:f7:60:b3:b6:07:a1:c4:23:ac:37:13:c3:3d:fa:
         d5:52:17:5f:f3:71:27:98:9f:38:8d:00:da:0e:fe:17:77:d7:
         59:2c:cd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 11:34:18 2026 by rpki-client