Error: rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.mft
File:                     37E90523C827A57C11E0B97A03E6AD0AF350D7BB.mft (raw, json)
Hash identifier:          bMJOA1oCNlodHecnSzBZpndixxwDWoZ0cMi5M2yNISU=
Subject key identifier:   47:8A:75:2F:2B:EB:1B:40:F8:77:20:51:87:F5:28:46:48:59:B7:EB
Authority key identifier: 37:E9:05:23:C8:27:A5:7C:11:E0:B9:7A:03:E6:AD:0A:F3:50:D7:BB
Certificate issuer:       /CN=37E90523C827A57C11E0B97A03E6AD0AF350D7BB
Certificate serial:       356E4ECC4328B2BA475C85E62BA9495DE623FE55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.mft
Manifest number:          0487
Signing time:             Sun 23 Aug 2026 09:02:07 +0000
Manifest this update:     Sun 23 Aug 2026 08:57:07 +0000
Manifest next update:     Mon 24 Aug 2026 12:36:07 +0000
Files and hashes:         1: 3137302e37392e3232382e302f32322d3234203d3e20323636333131.roa (hash: fHRfS193flZcS1B7B5x5xiYj+VQSAP4sO3PsDXX1OWk=)
                          2: 37E90523C827A57C11E0B97A03E6AD0AF350D7BB.crl (hash: zIjE9IICeyMJnnjKs0VmJiqtfUoH2YM8R9UF5ULmc1o=)
                          3: 323830343a333564633a3a2f33322d3334203d3e20323636333131.roa (hash: Wwv27NrG9oG3KG5xq0FG1FAsJ3N3owdOpSNiT7baHTM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.crl
                          rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 12:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:6e:4e:cc:43:28:b2:ba:47:5c:85:e6:2b:a9:49:5d:e6:23:fe:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37E90523C827A57C11E0B97A03E6AD0AF350D7BB
        Validity
            Not Before: Aug 23 08:57:07 2026 GMT
            Not After : Aug 24 12:36:07 2026 GMT
        Subject: CN=478A752F2BEB1B40F877205187F528464859B7EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:84:68:a7:0e:f0:f1:88:53:aa:8a:a2:99:cc:
                    23:b3:fc:cb:c5:bc:f7:a5:12:c8:49:db:43:ed:87:
                    10:e5:f5:3d:24:48:35:bc:1a:e2:c3:22:ae:ef:11:
                    d7:1f:32:b8:5f:51:9f:d8:e5:b8:ff:fb:b7:fc:ae:
                    3b:53:50:26:27:47:5d:4d:a6:74:5a:e6:a1:84:7a:
                    53:c8:16:8b:db:b1:cf:13:aa:e1:c8:ff:5a:d9:ad:
                    2e:c5:01:fe:3e:f0:08:b9:69:70:a7:8b:c9:06:6c:
                    cb:20:fc:33:14:e6:db:8f:a2:40:80:9b:88:6e:4b:
                    a4:dc:7a:fd:f8:0c:f2:04:7e:7a:f2:17:c7:76:cb:
                    43:b1:aa:44:65:45:fb:d9:0d:b0:ee:49:60:d2:38:
                    ef:14:7a:0b:cf:74:88:a9:c5:2d:49:55:af:e6:99:
                    ed:60:5b:ff:53:13:76:d8:58:a3:6a:26:0f:bd:45:
                    c1:ac:ec:20:af:76:17:e4:4e:f2:42:ea:e4:fb:3a:
                    5a:8d:59:37:b7:00:68:76:e4:c3:73:ab:bb:23:06:
                    8b:38:a3:fc:09:f7:c4:43:c5:8e:b2:7e:1a:44:7c:
                    ab:fa:16:82:4e:93:6f:65:2d:c8:04:ec:a3:fd:a2:
                    ad:d0:f8:48:98:7e:72:b0:ce:c4:10:46:11:40:10:
                    0e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8A:75:2F:2B:EB:1B:40:F8:77:20:51:87:F5:28:46:48:59:B7:EB
            X509v3 Authority Key Identifier:
                keyid:37:E9:05:23:C8:27:A5:7C:11:E0:B9:7A:03:E6:AD:0A:F3:50:D7:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:e6:36:bd:eb:d2:30:58:b0:02:b5:2b:45:1c:6d:66:be:6e:
         90:3c:97:83:bc:03:09:b7:f0:29:50:0c:16:fd:ec:86:e7:9a:
         c3:44:64:62:a9:3c:be:bc:ae:f7:47:7b:20:64:77:15:b0:79:
         93:75:7b:92:93:39:7f:f2:a3:20:b4:9f:69:7f:58:2b:b7:09:
         ef:f0:60:83:b8:41:4d:7c:9e:01:68:4a:00:05:dc:79:6e:71:
         39:82:e5:98:44:77:39:99:c9:0f:7d:44:2b:cf:a0:cc:11:21:
         10:fa:78:26:01:7a:08:9d:af:c1:6a:09:4d:fc:55:21:2e:ff:
         37:bb:b5:df:89:ac:98:13:f4:01:ef:fd:61:ef:52:3c:b4:99:
         c2:a2:7d:8f:ee:0f:70:55:85:2c:ec:68:85:4e:33:0c:30:db:
         c2:01:51:35:2f:bc:75:c2:11:73:5a:7f:e3:ea:41:a7:16:b3:
         cf:01:d0:a9:df:ee:45:23:5e:21:34:ce:c1:8e:e2:22:46:fd:
         57:c3:e0:ab:8f:b1:3c:95:b6:cd:08:e3:ec:c9:4c:07:a5:57:
         be:62:3b:1f:fe:a2:90:f9:59:b8:c4:ab:74:ad:37:d3:7f:9f:
         b8:65:8d:9a:6f:06:47:5e:5a:4d:f8:36:9f:c1:86:dc:f9:18:
         5c:e3:da:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 22:05:30 2026 by rpki-client