Error: rpki-repo.registro.br/repo/GbonDppgvqtXd62AP1CbTTHaBmdUmKFuQHcXkhzNffaj/1/C65C257323D4DA58AFA1A27E0EBBEE1FA4A47563.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/GbonDppgvqtXd62AP1CbTTHaBmdUmKFuQHcXkhzNffaj/1/C65C257323D4DA58AFA1A27E0EBBEE1FA4A47563.mft
File:                     C65C257323D4DA58AFA1A27E0EBBEE1FA4A47563.mft (raw, json)
Hash identifier:          RVVlCeVkyKi8t1VaMhXU92jFMzh+mVi1SYmdOmwIMeA=
Subject key identifier:   D8:AB:4C:A1:C6:BB:5B:2F:91:0F:81:C5:A2:70:DF:9E:31:9E:62:CE
Authority key identifier: C6:5C:25:73:23:D4:DA:58:AF:A1:A2:7E:0E:BB:EE:1F:A4:A4:75:63
Certificate issuer:       /CN=C65C257323D4DA58AFA1A27E0EBBEE1FA4A47563
Certificate serial:       55EDD8C04B985900F7A60D0D6FF0E5454E3E5B8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C65C257323D4DA58AFA1A27E0EBBEE1FA4A47563.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GbonDppgvqtXd62AP1CbTTHaBmdUmKFuQHcXkhzNffaj/1/C65C257323D4DA58AFA1A27E0EBBEE1FA4A47563.mft
Manifest number:          04E4
Signing time:             Sat 31 Oct 2026 16:40:00 +0000
Manifest this update:     Sat 31 Oct 2026 16:35:00 +0000
Manifest next update:     Sun 01 Nov 2026 18:17:00 +0000
Files and hashes:         1: C65C257323D4DA58AFA1A27E0EBBEE1FA4A47563.crl (hash: 8qY3i8F4Jc5TNZus+ep8OqnVrq3kbISvghZ3p3XZbx4=)
                          2: 323830343a373962633a3a2f33322d3438203d3e20323731333234.roa (hash: B/fcE/8a9ieC+wBjuXZIT6CWl58RRkyzxlBTP2rX7nU=)
                          3: 3138362e3230392e3137322e302f32322d3234203d3e20323731333234.roa (hash: JpUhLhJTf7ZXabJicMFMWEZ54Jh+RKyTpR1ank5P1cM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GbonDppgvqtXd62AP1CbTTHaBmdUmKFuQHcXkhzNffaj/1/C65C257323D4DA58AFA1A27E0EBBEE1FA4A47563.crl
                          rsync://rpki-repo.registro.br/repo/GbonDppgvqtXd62AP1CbTTHaBmdUmKFuQHcXkhzNffaj/1/C65C257323D4DA58AFA1A27E0EBBEE1FA4A47563.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C65C257323D4DA58AFA1A27E0EBBEE1FA4A47563.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 18:17:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ed:d8:c0:4b:98:59:00:f7:a6:0d:0d:6f:f0:e5:45:4e:3e:5b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C65C257323D4DA58AFA1A27E0EBBEE1FA4A47563
        Validity
            Not Before: Oct 31 16:35:00 2026 GMT
            Not After : Nov  1 18:17:00 2026 GMT
        Subject: CN=D8AB4CA1C6BB5B2F910F81C5A270DF9E319E62CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:03:f9:9d:83:fb:77:43:83:a4:b3:4b:86:8a:
                    ff:21:ec:98:a2:3b:14:9f:04:5d:ac:c2:4a:d4:e2:
                    b9:ad:df:02:09:5a:39:49:aa:76:71:95:55:44:f3:
                    96:58:09:e2:db:70:29:45:52:dd:fa:de:1e:98:24:
                    24:32:99:46:55:4a:d1:1c:1c:40:cb:a7:b6:12:f9:
                    a8:70:53:fc:f7:ab:73:47:39:08:5f:78:ec:bf:9b:
                    30:64:1a:a9:a5:cc:6b:40:68:db:00:50:c5:99:ca:
                    18:4e:ee:27:1c:d7:f1:8d:83:7b:33:13:98:f8:40:
                    f2:08:4d:3b:9f:3a:e7:af:3c:02:db:2b:ed:d0:4f:
                    d2:e1:e7:91:27:9a:96:e6:c8:d2:04:37:ff:65:15:
                    4e:c1:26:0e:ba:3f:3b:71:9d:15:02:45:d8:a4:1c:
                    3b:1e:ec:fd:f4:98:a8:c5:65:f2:ef:cd:8b:91:1e:
                    cc:67:91:28:f5:38:07:08:dc:52:ea:c3:b7:6c:b2:
                    94:50:be:74:75:0a:0a:13:7b:70:f1:cc:df:0e:c1:
                    97:cc:dc:1f:e9:a3:fd:34:07:7e:97:e5:f6:df:47:
                    cc:f6:46:83:99:5f:b5:ac:ff:e1:a9:6e:93:c7:6c:
                    94:a4:0d:72:94:1d:f3:3c:68:e7:b1:54:95:00:11:
                    3a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AB:4C:A1:C6:BB:5B:2F:91:0F:81:C5:A2:70:DF:9E:31:9E:62:CE
            X509v3 Authority Key Identifier:
                keyid:C6:5C:25:73:23:D4:DA:58:AF:A1:A2:7E:0E:BB:EE:1F:A4:A4:75:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GbonDppgvqtXd62AP1CbTTHaBmdUmKFuQHcXkhzNffaj/1/C65C257323D4DA58AFA1A27E0EBBEE1FA4A47563.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C65C257323D4DA58AFA1A27E0EBBEE1FA4A47563.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GbonDppgvqtXd62AP1CbTTHaBmdUmKFuQHcXkhzNffaj/1/C65C257323D4DA58AFA1A27E0EBBEE1FA4A47563.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:70:dd:6c:f8:ee:da:44:69:d0:42:74:4c:e2:61:83:8b:6b:
         5e:7c:02:6b:51:48:c3:83:ee:b1:d0:de:c4:27:db:52:76:16:
         95:b2:2b:69:ea:a9:74:b2:42:24:29:65:f4:68:b0:be:5e:8c:
         6e:7a:36:14:1f:b0:6b:37:0e:10:1f:c3:32:bf:4f:34:5e:6b:
         92:54:26:e9:2a:dd:cf:9d:2d:8a:8e:6a:5e:28:cb:55:7d:fd:
         e4:5f:20:fd:88:12:82:f9:f8:87:45:b6:ad:49:ff:e7:12:51:
         4e:da:e4:39:95:e5:33:e6:62:44:1e:d5:98:e7:6b:b2:44:fc:
         75:dd:a9:8b:4c:e2:dc:82:6d:ae:8a:13:eb:f5:1c:c5:ba:4b:
         b1:5b:6e:6b:e6:95:46:78:1b:ba:e6:44:ce:f7:8b:72:44:0c:
         f2:f0:ac:85:2b:5c:74:e5:06:24:ea:3f:d0:15:24:c6:d7:18:
         68:09:68:ef:f2:cc:ec:3e:b6:95:6c:0f:ba:c4:9f:c5:c9:74:
         52:d5:df:28:b7:b6:54:c4:e6:2a:5d:b7:d3:3f:8d:11:36:02:
         66:ff:09:8c:bd:16:34:5e:62:9e:74:02:3d:9e:b9:eb:9b:1b:
         c2:31:96:31:75:85:06:c6:3b:f9:10:4f:56:0d:0d:d1:35:19:
         95:db:03:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 09:19:29 2026 by rpki-client