Error: rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.mft
File:                     834325D3983126D2D723BBC6EC0C6196882A6196.mft (raw, json)
Hash identifier:          1GvHYnF4msJMW8LBcl1danb3Cnh69KeSQHxDjT8aJmU=
Subject key identifier:   1A:33:98:82:75:D4:A3:88:05:6A:5F:A0:59:99:51:32:B3:51:E5:E3
Authority key identifier: 83:43:25:D3:98:31:26:D2:D7:23:BB:C6:EC:0C:61:96:88:2A:61:96
Certificate issuer:       /CN=834325D3983126D2D723BBC6EC0C6196882A6196
Certificate serial:       3CEAD42B32EC1EA5DDC96F2A3988F9B245B0AAAF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/834325D3983126D2D723BBC6EC0C6196882A6196.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.mft
Manifest number:          0425
Signing time:             Sat 31 Oct 2026 14:02:40 +0000
Manifest this update:     Sat 31 Oct 2026 13:57:40 +0000
Manifest next update:     Sun 01 Nov 2026 16:23:40 +0000
Files and hashes:         1: 323830313a38303a333964303a3a2f34382d3438203d3e20323731303437.roa (hash: EOmtlBeeWZknhQW4AE3sw4WJfOLn280GQVnbdfSEE7k=)
                          2: 834325D3983126D2D723BBC6EC0C6196882A6196.crl (hash: Ek5uyM3X3bEV0ENQaUUclvLTir6NBompP+/3trjisc8=)
                          3: 3137392e34382e39362e302f32322d3234203d3e20323731303437.roa (hash: hd1pP278w63N1IRyJlRJVGjbWfpCQLn3VEk8JPrF/eg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.crl
                          rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/834325D3983126D2D723BBC6EC0C6196882A6196.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 16:23:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ea:d4:2b:32:ec:1e:a5:dd:c9:6f:2a:39:88:f9:b2:45:b0:aa:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=834325D3983126D2D723BBC6EC0C6196882A6196
        Validity
            Not Before: Oct 31 13:57:40 2026 GMT
            Not After : Nov  1 16:23:40 2026 GMT
        Subject: CN=1A33988275D4A388056A5FA059995132B351E5E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:be:15:de:0d:86:9c:a5:13:b0:7b:4e:b8:79:
                    9e:ee:56:fa:17:d7:12:de:86:f5:23:fa:5f:1b:12:
                    59:15:83:30:3d:a2:25:cb:cd:48:64:a8:b1:0e:75:
                    f4:53:29:ca:b9:24:06:2d:6c:07:73:87:cf:b2:89:
                    80:eb:d3:e1:60:80:11:82:a7:98:59:af:6a:fa:55:
                    79:5b:be:5a:48:a0:e2:35:8c:e4:1c:8e:75:e1:50:
                    05:fc:89:11:19:f3:00:22:ae:fc:ed:8c:5e:e1:39:
                    0b:50:91:57:ab:fa:0f:9f:ce:85:26:3b:18:bd:5b:
                    4a:ab:cb:90:32:6b:38:86:bc:dc:a0:d9:f5:45:1b:
                    61:6c:9f:6a:90:2f:07:74:4b:31:38:8a:d7:de:4d:
                    f1:5d:17:da:44:a5:bd:6e:fd:cc:73:e8:ce:1a:29:
                    69:4e:82:30:40:22:8a:03:6d:1a:2e:82:fb:2b:a7:
                    e3:de:5e:67:9b:89:95:47:48:65:19:fa:fb:ff:02:
                    09:7e:d9:84:8f:e2:2a:04:bb:41:17:98:92:8a:cf:
                    d8:16:e9:f5:1b:33:cf:4a:01:a1:a3:be:6c:3f:14:
                    8d:5b:bd:78:d0:f2:a1:79:54:59:09:2e:7c:5d:e4:
                    bd:8f:8b:6b:da:d5:6f:31:a7:69:92:ac:6c:08:e7:
                    98:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:33:98:82:75:D4:A3:88:05:6A:5F:A0:59:99:51:32:B3:51:E5:E3
            X509v3 Authority Key Identifier:
                keyid:83:43:25:D3:98:31:26:D2:D7:23:BB:C6:EC:0C:61:96:88:2A:61:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/834325D3983126D2D723BBC6EC0C6196882A6196.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:2f:1e:f4:32:e0:29:0d:f6:54:07:b4:60:58:ec:e4:af:75:
         90:c5:44:2d:42:ec:8e:c4:d3:14:6a:82:b9:71:69:80:89:b8:
         95:2d:a1:39:dd:68:42:ec:bc:8a:c3:54:31:d2:11:1b:42:14:
         cd:bd:ad:9b:79:92:5e:7b:90:55:c1:75:d1:07:00:62:d9:78:
         f2:83:f9:a5:ff:49:ec:d1:49:5e:28:18:28:5e:dc:7a:c2:d8:
         8f:32:7f:11:b3:c3:6e:d8:56:d8:ab:d2:9c:26:18:92:81:fd:
         89:ec:8b:8c:a8:29:27:f9:71:a5:02:ed:87:ca:91:01:f7:29:
         43:f7:aa:23:7b:06:d0:f1:f5:e5:54:6e:06:00:fd:2c:95:2c:
         aa:8b:b7:5c:ad:c4:2a:18:f6:76:a0:ac:c1:67:a8:5b:eb:87:
         3e:4d:18:9d:7c:8b:d0:91:04:fe:a1:dc:b8:a6:56:04:05:80:
         67:e2:1c:28:0c:c8:fb:08:d8:bd:7f:9f:a4:56:48:88:a6:c8:
         df:1d:5f:e4:c0:a2:4d:41:14:e4:45:e8:a0:ac:3e:f9:cb:9d:
         8a:02:f1:a6:bf:d2:e0:1d:13:bb:80:56:75:a1:6c:0d:41:d5:
         fd:a9:cc:f5:4e:32:e4:8b:9d:13:a1:dd:db:23:bb:cc:6f:8a:
         4b:f6:d3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 18:52:53 2026 by rpki-client