Error: rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.mft
File:                     725BCF70C08F4B2744E301141EF06513A96F28D6.mft (raw, json)
Hash identifier:          7Tz9CW0aj9GALlnBbvWuNfKj88fA7kHPkydlImDrDeI=
Subject key identifier:   DF:B3:D0:59:61:FD:8A:D6:FE:C8:CF:9F:78:DF:E5:8C:73:F0:31:D4
Authority key identifier: 72:5B:CF:70:C0:8F:4B:27:44:E3:01:14:1E:F0:65:13:A9:6F:28:D6
Certificate issuer:       /CN=725BCF70C08F4B2744E301141EF06513A96F28D6
Certificate serial:       4D16331EBA0892BBAC3C01EE6D8BC728CBAB0B19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725BCF70C08F4B2744E301141EF06513A96F28D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.mft
Manifest number:          04E4
Signing time:             Sun 01 Nov 2026 16:00:00 +0000
Manifest this update:     Sun 01 Nov 2026 15:55:00 +0000
Manifest next update:     Mon 02 Nov 2026 19:50:00 +0000
Files and hashes:         1: 3138362e3231372e302e302f31362d3234203d3e203533313636.roa (hash: tLQ+jjBXbnnOAUhKF6Pdi8La3tCgx4qREeElrBO0j1Q=)
                          2: 323830313a38383a3a2f33322d3438203d3e203533313636.roa (hash: aZyYZb5PjIBgrmYnOqXu9UbfqsxT6gqu2UJDBubWo9s=)
                          3: 725BCF70C08F4B2744E301141EF06513A96F28D6.crl (hash: aKuILJnFLjklvFFbRVRKHrW9qL6p0RPnNzEaCxfT6cs=)
                          4: 3230302e3134352e302e302f31362d3234203d3e203533313636.roa (hash: st0BtMhTI+w8nR37hrlnw7s4sAKaj7wFWHq/UbBnruQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.crl
                          rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725BCF70C08F4B2744E301141EF06513A96F28D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 19:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:16:33:1e:ba:08:92:bb:ac:3c:01:ee:6d:8b:c7:28:cb:ab:0b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725BCF70C08F4B2744E301141EF06513A96F28D6
        Validity
            Not Before: Nov  1 15:55:00 2026 GMT
            Not After : Nov  2 19:50:00 2026 GMT
        Subject: CN=DFB3D05961FD8AD6FEC8CF9F78DFE58C73F031D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fb:56:e2:55:cb:b6:23:8f:75:c3:4b:09:62:
                    1c:7d:ac:83:ff:ee:ef:ae:63:c7:5e:eb:8a:f1:64:
                    84:3b:aa:17:17:c8:32:ee:2a:ad:73:b0:c0:76:cd:
                    ad:dd:a6:81:57:a4:6e:ac:ca:b6:48:ee:bf:dc:23:
                    a3:29:9e:04:1f:3e:27:6b:cb:c0:d9:74:dd:6c:47:
                    f7:70:0e:7b:b0:cf:57:23:ab:a6:8a:36:1a:6e:c4:
                    61:0a:a3:a2:aa:b1:bb:5b:93:e3:2b:61:3f:1a:06:
                    91:f6:89:17:6a:60:a3:25:ec:72:c6:83:c3:f3:16:
                    af:02:d8:1c:1d:e8:e1:d1:e4:fd:f5:27:11:02:fd:
                    ec:57:19:39:b9:9f:21:e1:9c:e5:79:d6:6a:88:07:
                    4b:b6:0b:20:9e:e9:e9:ca:8f:b4:d6:6a:75:1f:e1:
                    69:0e:f4:36:e5:39:66:03:ba:6a:57:4f:3d:59:af:
                    30:d1:ab:fd:84:22:6a:ea:b1:22:bb:f4:25:0f:b1:
                    9c:00:8d:04:81:ff:32:a6:a7:90:cc:46:bd:cc:4e:
                    b6:0c:58:85:2f:52:18:53:de:76:73:76:2c:be:6b:
                    37:09:b3:35:98:fd:83:1e:64:0a:87:51:09:75:4b:
                    9d:9c:f9:53:28:56:fe:d1:c8:d9:bf:36:47:83:49:
                    b1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B3:D0:59:61:FD:8A:D6:FE:C8:CF:9F:78:DF:E5:8C:73:F0:31:D4
            X509v3 Authority Key Identifier:
                keyid:72:5B:CF:70:C0:8F:4B:27:44:E3:01:14:1E:F0:65:13:A9:6F:28:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725BCF70C08F4B2744E301141EF06513A96F28D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:c4:47:e2:82:07:cf:09:7a:12:3a:96:c4:4c:2c:ac:51:77:
         b6:06:2b:d3:9b:b3:31:21:9c:01:de:5e:b4:8a:76:c4:9e:bd:
         ff:a1:02:a8:4d:7f:bb:04:f1:46:07:a0:a1:85:30:da:cd:05:
         d9:f7:b6:a7:c5:25:8b:45:80:5e:47:02:f8:92:7e:6a:67:69:
         9f:63:f7:a2:75:64:16:e9:3d:ea:03:f9:42:9d:bf:ed:fc:37:
         01:c1:c4:fc:00:9d:45:17:00:90:5a:ef:d6:73:61:f0:54:6c:
         5c:db:98:2d:15:35:8f:cb:5b:17:8b:8b:f9:4e:22:21:b4:31:
         23:6e:7b:a3:be:3e:55:2b:eb:81:ce:5d:8c:b9:7d:d9:8f:7e:
         1a:df:ce:77:2f:27:39:41:b9:54:d2:b8:d8:19:6e:a6:86:f3:
         ae:ba:3d:0a:d2:66:b9:be:51:b2:ca:9d:46:89:50:4e:bc:5a:
         95:77:b1:fe:d6:20:e8:d0:70:31:07:71:f4:4b:b0:31:23:27:
         54:f8:75:1f:a0:2f:8e:13:d8:a4:31:6f:7f:0d:74:fc:02:e4:
         3a:a2:83:fe:f7:2d:5d:b7:f6:e2:df:6d:b5:da:44:1a:04:a8:
         22:a3:5a:50:07:61:1c:35:67:47:31:3b:d8:b8:f9:9f:91:e5:
         74:f1:d1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 18:40:18 2026 by rpki-client