Error: rpki-repo.registro.br/repo/Dj4xP4JG7S5qTtXG5gGeSJG4Xx56qZjrmuM9SoATxjAP/1/26B7D5260C62C15C63A0B39E27C08F865C46DA6B.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Dj4xP4JG7S5qTtXG5gGeSJG4Xx56qZjrmuM9SoATxjAP/1/26B7D5260C62C15C63A0B39E27C08F865C46DA6B.mft
File:                     26B7D5260C62C15C63A0B39E27C08F865C46DA6B.mft (raw, json)
Hash identifier:          cdkcrJ3pD56Svuu/bEUOzGxR9gjHrodW6W8Y6R+Vgo4=
Subject key identifier:   0C:87:6C:1D:32:F3:5D:21:72:A1:B3:15:07:71:6E:05:50:A4:E4:AC
Authority key identifier: 26:B7:D5:26:0C:62:C1:5C:63:A0:B3:9E:27:C0:8F:86:5C:46:DA:6B
Certificate issuer:       /CN=26B7D5260C62C15C63A0B39E27C08F865C46DA6B
Certificate serial:       1E8A078B0D7A7D9B4B909382741B35A4403D646B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26B7D5260C62C15C63A0B39E27C08F865C46DA6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dj4xP4JG7S5qTtXG5gGeSJG4Xx56qZjrmuM9SoATxjAP/1/26B7D5260C62C15C63A0B39E27C08F865C46DA6B.mft
Manifest number:          04E8
Signing time:             Sun 01 Nov 2026 01:27:02 +0000
Manifest this update:     Sun 01 Nov 2026 01:22:02 +0000
Manifest next update:     Mon 02 Nov 2026 02:56:02 +0000
Files and hashes:         1: 3139312e372e3138382e302f32322d3234203d3e20323633333239.roa (hash: sqKWxWnC02WpR3TiQw+pQYYq76Tuu/ytNImrgtQCkJU=)
                          2: 26B7D5260C62C15C63A0B39E27C08F865C46DA6B.crl (hash: qGwkzwrmrpmbg2MxvSfWN/GCNpaW6SKtE0JjQ4SHwOg=)
                          3: 323830343a313436633a3a2f33322d3438203d3e20323633333239.roa (hash: pAb8Bc7hBehgoHQsvq7eSLVRAv8oCMMItUZFizCoHBs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dj4xP4JG7S5qTtXG5gGeSJG4Xx56qZjrmuM9SoATxjAP/1/26B7D5260C62C15C63A0B39E27C08F865C46DA6B.crl
                          rsync://rpki-repo.registro.br/repo/Dj4xP4JG7S5qTtXG5gGeSJG4Xx56qZjrmuM9SoATxjAP/1/26B7D5260C62C15C63A0B39E27C08F865C46DA6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26B7D5260C62C15C63A0B39E27C08F865C46DA6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 02:56:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:8a:07:8b:0d:7a:7d:9b:4b:90:93:82:74:1b:35:a4:40:3d:64:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26B7D5260C62C15C63A0B39E27C08F865C46DA6B
        Validity
            Not Before: Nov  1 01:22:02 2026 GMT
            Not After : Nov  2 02:56:02 2026 GMT
        Subject: CN=0C876C1D32F35D2172A1B31507716E0550A4E4AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:99:5f:f0:3c:52:32:43:a8:5a:1a:53:f0:d6:
                    ae:cd:b4:6e:63:78:1e:67:0a:d9:2e:b7:0e:6a:67:
                    5e:30:b6:2d:8a:9d:79:70:ef:2c:63:42:dc:e6:ad:
                    28:39:86:46:48:0f:16:c9:25:71:5b:a6:4b:16:19:
                    1b:c3:6e:c5:c9:56:ed:d2:ba:62:28:fe:12:64:3b:
                    7c:c0:0b:c0:c2:65:e6:3b:39:36:fc:22:8f:fc:5d:
                    8f:0b:f1:bd:7c:27:2c:99:98:50:9a:98:4a:32:aa:
                    62:fb:18:5a:85:78:6b:00:ee:19:92:30:7b:da:2f:
                    75:5f:9d:74:e1:25:82:09:2c:93:e7:ed:3a:66:fb:
                    2e:49:8d:78:14:73:c8:32:d6:53:63:44:e8:35:3e:
                    6f:9b:e6:fe:eb:6e:4b:eb:fa:9a:a5:ce:bb:2c:1f:
                    24:d0:6e:13:85:d7:40:eb:da:0e:e6:6f:80:35:e0:
                    e4:32:da:68:2d:00:df:d2:96:b1:50:56:d1:b6:3a:
                    0b:15:55:4f:06:9f:37:01:b8:f9:79:ad:fd:05:13:
                    d8:05:24:73:6a:26:40:4d:b8:dc:85:ef:8b:a7:95:
                    57:8b:7f:ab:ae:2f:66:d7:d6:f5:0b:2c:8b:26:52:
                    c5:8a:55:8d:7d:78:67:65:7b:37:86:08:36:8d:a4:
                    79:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:87:6C:1D:32:F3:5D:21:72:A1:B3:15:07:71:6E:05:50:A4:E4:AC
            X509v3 Authority Key Identifier:
                keyid:26:B7:D5:26:0C:62:C1:5C:63:A0:B3:9E:27:C0:8F:86:5C:46:DA:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dj4xP4JG7S5qTtXG5gGeSJG4Xx56qZjrmuM9SoATxjAP/1/26B7D5260C62C15C63A0B39E27C08F865C46DA6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26B7D5260C62C15C63A0B39E27C08F865C46DA6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dj4xP4JG7S5qTtXG5gGeSJG4Xx56qZjrmuM9SoATxjAP/1/26B7D5260C62C15C63A0B39E27C08F865C46DA6B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:7f:6d:11:a3:e6:f2:65:e8:77:71:9f:8a:07:a1:a0:af:a3:
         88:c4:d1:b6:06:3c:e7:4f:73:d8:41:2c:b5:f3:05:be:ff:01:
         13:5f:da:f8:0e:2b:08:f1:b6:f0:c9:42:c6:78:47:00:82:49:
         8a:0c:0e:14:d7:bd:7b:a5:ce:43:64:92:8e:f2:67:9d:7b:52:
         30:1e:a7:6c:41:1b:fd:1c:f1:f5:67:af:a2:f8:d4:25:79:ed:
         2f:03:77:5c:41:bb:82:3e:60:0f:82:36:ea:85:9c:4a:67:9b:
         e8:a0:89:fc:50:92:e0:d7:6f:c5:a3:d4:e8:ab:db:30:c3:54:
         01:40:a4:56:79:e1:99:fd:d4:a1:bd:7f:f2:f4:a8:af:c1:c5:
         ef:11:34:d8:72:99:5f:32:2d:ae:b4:c0:fa:ac:8d:b8:9c:57:
         41:79:d1:8b:0e:e6:1c:af:c9:37:ca:0c:a9:19:d7:ae:7e:99:
         16:50:92:10:11:3a:ff:c2:38:f1:aa:56:a3:d6:92:29:94:77:
         62:6c:08:98:35:49:39:6e:60:68:8c:bc:9f:f8:3c:d3:6c:ea:
         23:01:40:96:57:9a:e5:27:00:c3:48:34:b8:8a:91:35:4f:5e:
         d7:87:a9:21:1d:f0:3c:ac:97:6a:cf:3c:fd:e5:e4:1c:f0:0c:
         8d:23:ac:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 12:46:42 2026 by rpki-client