Error: rpki-repo.registro.br/repo/CXoSu43S8xEntnvx4F9WM491jmJxromwAz81wL2P8q8V/0/78C7DF59C456359AE9A7E7507012D1F6F01DE7B8.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/CXoSu43S8xEntnvx4F9WM491jmJxromwAz81wL2P8q8V/0/78C7DF59C456359AE9A7E7507012D1F6F01DE7B8.mft
File:                     78C7DF59C456359AE9A7E7507012D1F6F01DE7B8.mft (raw, json)
Hash identifier:          m4EYbtNfYXSDM9FsDqZkfV3YJYpM+9wn427SzQS4F/4=
Subject key identifier:   EB:DC:AB:EB:9B:D7:14:B3:AD:90:0A:75:8C:55:FE:14:87:22:49:D1
Authority key identifier: 78:C7:DF:59:C4:56:35:9A:E9:A7:E7:50:70:12:D1:F6:F0:1D:E7:B8
Certificate issuer:       /CN=78C7DF59C456359AE9A7E7507012D1F6F01DE7B8
Certificate serial:       7094BDB0D8DD0E86CE529AA1149668E8931B114E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78C7DF59C456359AE9A7E7507012D1F6F01DE7B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CXoSu43S8xEntnvx4F9WM491jmJxromwAz81wL2P8q8V/0/78C7DF59C456359AE9A7E7507012D1F6F01DE7B8.mft
Manifest number:          40
Signing time:             Sat 10 Oct 2026 09:26:23 +0000
Manifest this update:     Sat 10 Oct 2026 09:21:23 +0000
Manifest next update:     Sun 11 Oct 2026 10:20:23 +0000
Files and hashes:         1: 78C7DF59C456359AE9A7E7507012D1F6F01DE7B8.crl (hash: xK+4NEaLq373QFwJ5q8T9FztSGLVpxadDntN+KyKis4=)
                          2: 34352e3233332e3131322e302f32322d3234203d3e20323637333237.roa (hash: f5VsLaNIRqBqM3QKPbLsVkj9KDmjeuD1bzcSx09i/+c=)
                          3: 323830343a346263303a3a2f33322d3332203d3e20323637333237.roa (hash: f69CC6u64lijR5dskW9ijRzb6Apo4oWLjlAojW4sQiw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CXoSu43S8xEntnvx4F9WM491jmJxromwAz81wL2P8q8V/0/78C7DF59C456359AE9A7E7507012D1F6F01DE7B8.crl
                          rsync://rpki-repo.registro.br/repo/CXoSu43S8xEntnvx4F9WM491jmJxromwAz81wL2P8q8V/0/78C7DF59C456359AE9A7E7507012D1F6F01DE7B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78C7DF59C456359AE9A7E7507012D1F6F01DE7B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 10:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:94:bd:b0:d8:dd:0e:86:ce:52:9a:a1:14:96:68:e8:93:1b:11:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78C7DF59C456359AE9A7E7507012D1F6F01DE7B8
        Validity
            Not Before: Oct 10 09:21:23 2026 GMT
            Not After : Oct 11 10:20:23 2026 GMT
        Subject: CN=EBDCABEB9BD714B3AD900A758C55FE14872249D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ba:58:b9:55:84:02:4b:b8:31:ae:7f:f9:cb:
                    26:47:5a:91:62:8f:19:3e:95:93:41:fa:b6:d0:4a:
                    66:8d:63:18:27:b1:5f:9c:0b:6c:bb:99:fb:e4:46:
                    6d:dc:73:98:c3:a0:43:b7:3e:f6:92:2e:38:7a:da:
                    ca:25:11:39:b6:9a:08:f2:86:e6:3b:83:93:63:ce:
                    7c:f7:f3:0f:3f:4f:aa:bb:14:c5:18:21:72:e9:59:
                    97:6a:3c:7d:91:0f:5d:9e:c2:a6:9b:e2:27:52:22:
                    1a:ee:53:d0:df:c8:d4:b8:15:9f:03:10:83:0c:a7:
                    ce:b1:32:1d:d1:81:e3:e9:6b:1b:b3:62:fa:8a:65:
                    11:ce:59:6d:74:27:89:74:18:62:6d:47:0e:04:6e:
                    f6:a4:29:9a:0f:bf:53:92:ac:66:a3:37:48:01:88:
                    98:7f:99:2f:22:6d:8a:f1:16:c3:ec:d9:99:33:32:
                    e3:d9:51:11:82:26:e2:f7:a2:40:92:e3:8d:3e:9b:
                    6b:76:94:da:7c:74:59:d0:a8:16:1b:ae:f9:de:a5:
                    db:e3:11:c2:b0:29:68:da:fb:57:a2:f8:18:9f:98:
                    6e:b5:f2:29:a4:5f:19:7c:58:e1:c7:33:5d:a5:ca:
                    94:43:eb:ac:39:11:8e:ce:02:65:fa:38:60:32:31:
                    3b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DC:AB:EB:9B:D7:14:B3:AD:90:0A:75:8C:55:FE:14:87:22:49:D1
            X509v3 Authority Key Identifier:
                keyid:78:C7:DF:59:C4:56:35:9A:E9:A7:E7:50:70:12:D1:F6:F0:1D:E7:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CXoSu43S8xEntnvx4F9WM491jmJxromwAz81wL2P8q8V/0/78C7DF59C456359AE9A7E7507012D1F6F01DE7B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78C7DF59C456359AE9A7E7507012D1F6F01DE7B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CXoSu43S8xEntnvx4F9WM491jmJxromwAz81wL2P8q8V/0/78C7DF59C456359AE9A7E7507012D1F6F01DE7B8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:e8:51:52:23:4c:e6:4a:c6:fc:5f:ea:3f:ef:5e:75:56:a0:
         c3:1e:6c:7f:eb:86:9c:08:58:df:5d:80:41:d2:30:1b:cf:8a:
         5d:c8:80:aa:18:2a:1a:2e:7a:ec:7c:0c:75:e3:6a:74:93:95:
         42:94:39:96:b8:69:9d:20:53:b7:46:7b:ec:12:8e:b7:33:39:
         71:9f:eb:c8:46:6d:82:e9:d8:64:6c:a0:88:39:d0:d8:75:00:
         f3:ba:3e:e6:e2:40:2c:47:1b:ab:60:92:d1:13:eb:47:0a:6e:
         df:c1:87:ff:ac:c4:73:57:82:ff:03:8c:d0:20:69:06:52:d1:
         8d:1d:91:a3:59:22:32:ba:e0:87:99:06:dd:2b:33:6a:82:a8:
         47:57:d0:1e:93:bd:26:aa:a1:4c:99:24:08:91:d6:5e:39:72:
         4e:cb:3d:6a:e3:af:a8:2d:67:b5:6e:fe:d0:2c:6b:14:99:c6:
         33:57:de:c4:98:62:b7:75:ad:df:3e:f5:c6:06:d2:8c:15:68:
         2b:2a:17:55:14:f4:f2:c3:b3:04:34:58:90:5c:d7:2a:a9:15:
         3f:7e:4f:9d:a9:d2:a7:33:0a:6d:65:bc:40:69:cc:b5:5d:4d:
         22:22:75:ff:79:7c:92:58:8b:af:10:89:2b:bb:5f:87:67:7b:
         9c:7d:b2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:02:46 2026 by rpki-client