Error: rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.mft
File:                     817F1A503A376C564F65BFB27FD51A3B4D5C92F6.mft (raw, json)
Hash identifier:          yBHLHZ9WAOSNCedeMmrJ9de774Mhj1QD9SGljZAGAS4=
Subject key identifier:   B5:58:B3:03:5A:CF:D0:02:F3:CB:1F:84:CB:63:28:59:66:AC:BA:B5
Authority key identifier: 81:7F:1A:50:3A:37:6C:56:4F:65:BF:B2:7F:D5:1A:3B:4D:5C:92:F6
Certificate issuer:       /CN=817F1A503A376C564F65BFB27FD51A3B4D5C92F6
Certificate serial:       6B43C024406ABD25EC810A2AB4D4DCC491BD31C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.mft
Manifest number:          55
Signing time:             Fri 30 Oct 2026 20:20:43 +0000
Manifest this update:     Fri 30 Oct 2026 20:15:43 +0000
Manifest next update:     Sat 31 Oct 2026 21:30:43 +0000
Files and hashes:         1: 3133382e3132322e34302e302f32322d3234203d3e20323634333136.roa (hash: jczCTAnDptXDN/jTyF5vZHyUTpVOyeiS5qFHV2S2ax0=)
                          2: 3136382e3132312e3231362e302f32322d3234203d3e20323634333136.roa (hash: ifkq/WZnqNxa4KZDKatWhhki5JDZRtHdN91pOIWqUBc=)
                          3: 817F1A503A376C564F65BFB27FD51A3B4D5C92F6.crl (hash: 7N1v6BjofsCXKbETuXfPkZkfp2vNMFjopSyGgL3YwlM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.crl
                          rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 21:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:43:c0:24:40:6a:bd:25:ec:81:0a:2a:b4:d4:dc:c4:91:bd:31:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=817F1A503A376C564F65BFB27FD51A3B4D5C92F6
        Validity
            Not Before: Oct 30 20:15:43 2026 GMT
            Not After : Oct 31 21:30:43 2026 GMT
        Subject: CN=B558B3035ACFD002F3CB1F84CB63285966ACBAB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:49:b0:82:fd:90:39:2a:db:ee:21:37:99:f3:
                    b0:df:a5:75:02:a1:1b:c3:0f:16:a7:13:7c:6d:8f:
                    c2:01:b5:c8:9d:ac:65:6c:46:ec:89:cf:fe:37:ca:
                    47:2e:72:53:67:f1:20:dc:c3:f0:ea:5e:e6:1b:c8:
                    15:c5:ab:ca:4f:fd:39:5a:bc:4e:ad:c9:41:13:ef:
                    64:ca:d4:9e:99:32:57:0a:bb:3a:44:14:fb:1c:0f:
                    b5:26:60:a1:bd:3e:46:64:75:1d:7f:34:34:4f:21:
                    38:17:e2:a2:70:86:c0:04:34:44:7a:7b:cd:33:6b:
                    8a:30:1f:2d:e7:52:40:24:61:90:4c:65:bb:6d:c9:
                    cf:a9:45:5d:ec:53:c3:59:60:e9:0b:75:ee:f2:48:
                    1f:2b:ff:b2:a6:6e:7d:4a:9c:1f:dc:86:a9:c0:a6:
                    23:10:c3:de:2b:43:00:f8:43:68:bb:e8:50:e4:88:
                    6a:a7:cb:dd:1f:b7:39:3f:ce:08:60:e1:fc:df:50:
                    4f:2a:7f:b9:7a:04:11:94:69:d9:c7:87:74:ac:22:
                    42:f4:d6:95:5d:7b:79:0c:73:52:c8:59:18:86:45:
                    cd:f0:10:c5:c0:ac:90:e0:46:3e:41:6f:e7:59:f2:
                    8c:c1:87:41:e5:c8:65:ae:74:28:f9:09:34:d9:be:
                    93:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:58:B3:03:5A:CF:D0:02:F3:CB:1F:84:CB:63:28:59:66:AC:BA:B5
            X509v3 Authority Key Identifier:
                keyid:81:7F:1A:50:3A:37:6C:56:4F:65:BF:B2:7F:D5:1A:3B:4D:5C:92:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:b7:95:8d:10:c2:ab:f5:40:6a:f9:cc:20:dd:20:0c:2a:ef:
         be:bb:38:01:23:63:17:ea:35:c8:d9:85:7d:d6:1b:0c:9e:e4:
         c6:2e:33:50:94:ea:cd:3d:63:93:f1:ca:fe:ed:cf:ed:94:bd:
         5a:49:f9:9e:12:1f:91:bc:d6:3e:3b:fb:10:4c:16:9c:c5:be:
         8d:51:4c:d2:91:fc:af:0b:e8:55:8f:cc:84:98:3b:68:3c:04:
         4f:00:0c:2d:8e:41:89:b1:67:f6:7a:87:cc:ec:e9:09:a6:9e:
         6b:52:db:9c:8b:09:87:52:a8:70:96:20:73:44:e8:26:92:55:
         f2:dd:cd:c8:f0:0e:b0:32:08:38:17:45:f4:e5:5a:31:17:af:
         df:8d:83:94:cd:70:3d:45:f6:ca:df:4b:ad:b2:4b:a7:bc:3a:
         77:9f:05:0c:7d:cc:5a:68:cb:41:de:89:15:f6:40:a4:b1:90:
         7c:23:33:c7:67:8f:bf:cc:bb:1e:d0:03:cd:5a:bd:49:fe:31:
         31:f3:c5:8f:9d:f7:e6:1a:f8:f5:e3:4f:dc:d3:ee:d4:3d:52:
         b8:98:41:84:85:3e:7b:03:c3:18:7b:18:29:bc:b0:c1:35:d4:
         3d:1d:e2:61:aa:e1:71:8b:bd:49:c0:d7:b1:76:68:e9:7c:59:
         ce:dc:e7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:19:51 2026 by rpki-client