Error: rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.mft
File:                     C70EC4383B792424E71BC6853AD1C792781070B3.mft (raw, json)
Hash identifier:          LlyC4RlmyN6YORAdAJCVu//LL1s5I3PMCXhaNuJFaGM=
Subject key identifier:   04:FF:51:54:91:84:2E:5C:0A:47:13:CF:A1:75:1F:42:ED:ED:23:8D
Authority key identifier: C7:0E:C4:38:3B:79:24:24:E7:1B:C6:85:3A:D1:C7:92:78:10:70:B3
Certificate issuer:       /CN=C70EC4383B792424E71BC6853AD1C792781070B3
Certificate serial:       44B47F51AAC6CCC52C46BEAFB3E6921A2C5EB5D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.mft
Manifest number:          04E5
Signing time:             Tue 03 Nov 2026 15:16:11 +0000
Manifest this update:     Tue 03 Nov 2026 15:11:11 +0000
Manifest next update:     Wed 04 Nov 2026 18:02:11 +0000
Files and hashes:         1: 323830343a336561343a663430303a3a2f34322d3432203d3e20323636363131.roa (hash: b7vJSB62UVprijzpvGjXQYyvzoFOFwI/syYKThLvZOw=)
                          2: 3132382e3230312e32382e302f32322d3232203d3e20323636363131.roa (hash: 91XrLEbGAhmX9qmdm4rnlRyZB2Pvx7to/mxn6O92WaQ=)
                          3: 3132382e3230312e32392e302f32342d3234203d3e20323636363131.roa (hash: uC47ptownDpAbMBhy25FKAqLxLXpdcveIJQta5Etc8s=)
                          4: 323830343a336561343a3a2f33322d3332203d3e20323636363131.roa (hash: Pfi9EZ2FpTVV3XGfgK+WESCPSuS/MgJ6SIGRLXgRaW4=)
                          5: 323830343a336561343a383030303a3a2f33332d3333203d3e20323636363131.roa (hash: qNWVhV6jsfXZ3t3fHwZ3u3WP2ushE50iSVI1mw8jG+I=)
                          6: C70EC4383B792424E71BC6853AD1C792781070B3.crl (hash: rS2ciGdn7UI37fnxC5FzIAuRek6GpKYY9gdciudD65A=)
                          7: 3132382e3230312e32382e302f32332d3233203d3e20323636363131.roa (hash: WPOPNIWq7LGr+nxAjnXMgjLrMlVsTQM9ZCUnaYyMpJc=)
                          8: 323830343a336561343a3a2f33332d3333203d3e20323636363131.roa (hash: h/XHV1BXoQHKZwDNIS4eD9cXZU+Y66z9tPmlfa7JaPA=)
                          9: 323830343a336561343a383030303a3a2f33342d3334203d3e20323636363131.roa (hash: z2j9QAYEjfeUbWxxDkZAU/0VwYUh8k8abyl/G2g9UWo=)
                          10: 323830343a336561343a343030303a3a2f33342d3334203d3e20323636363131.roa (hash: l10Zl8k9Hyq+z7omktzu5jlfX4+8KhwrbLidEt0TbOc=)
                          11: 3132382e3230312e32382e302f32342d3234203d3e20323636363131.roa (hash: b0FZsOV4vpVRPOdEl1N2ExcCcc+kvi1mxHfspcITi38=)
                          12: 3132382e3230312e33302e302f32342d3234203d3e20323636363131.roa (hash: QQpuTYK7XwJ23diiddR8Pvq/ua/DgC5caKAyN1etAp4=)
                          13: 3132382e3230312e33312e302f32342d3234203d3e20323636363131.roa (hash: qkNedzRh4SGev11shMSqweqT06iJNY8gyuMJxZg1caA=)
                          14: 3132382e3230312e33302e302f32332d3233203d3e20323636363131.roa (hash: RsHERpqTFKOl/Lto+bEOuiL9YIo/GF5iS4QkYD9glfA=)
                          15: 323830343a336561343a633030303a3a2f33342d3334203d3e20323636363131.roa (hash: OFTkWVRFeqT2VRH0vRziYxaVHs7HhUH48SxSEnd8Ck4=)
                          16: 323830343a336561343a3a2f33342d3334203d3e20323636363131.roa (hash: 9YN/XX1yMYKmJxe2585WXc0M7LgF0T2EROFMS2lwaVI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.crl
                          rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 18:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b4:7f:51:aa:c6:cc:c5:2c:46:be:af:b3:e6:92:1a:2c:5e:b5:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C70EC4383B792424E71BC6853AD1C792781070B3
        Validity
            Not Before: Nov  3 15:11:11 2026 GMT
            Not After : Nov  4 18:02:11 2026 GMT
        Subject: CN=04FF515491842E5C0A4713CFA1751F42EDED238D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:7b:1e:ea:5d:0b:75:b0:4f:96:9a:11:03:0b:
                    7b:9c:eb:7b:c7:bf:9f:06:73:3d:1a:1d:88:4b:97:
                    f6:58:a6:3c:df:ce:cc:6e:61:de:b5:23:f3:ff:98:
                    65:dc:78:8c:da:9b:99:b5:4b:90:bb:2c:a4:3c:d5:
                    e5:21:75:2a:af:dc:d4:95:89:1a:e0:0e:50:0b:39:
                    48:9f:43:ad:33:a7:87:84:fc:31:03:62:24:7d:c9:
                    67:d8:38:dd:80:ec:93:20:bf:70:5a:e1:d9:19:4e:
                    b4:d5:eb:01:2a:19:96:65:04:48:11:5e:96:d2:fa:
                    2b:f8:43:a7:c2:b7:7a:02:8a:d6:fb:15:a6:a2:39:
                    ad:ed:29:3a:b7:66:f4:e9:25:38:88:96:b8:ec:26:
                    fe:dc:de:fe:00:1b:e5:e1:b9:f5:f8:03:c4:00:44:
                    59:1b:9c:57:56:e3:3d:29:f1:fb:d7:e8:26:4d:e5:
                    a8:07:be:6f:fa:49:a5:ef:7b:ba:23:21:ae:55:d4:
                    9f:79:0a:c9:1d:1d:9a:3d:4d:05:23:e3:05:d3:94:
                    ba:c4:00:18:ca:db:b5:45:74:c6:59:66:21:58:76:
                    56:c0:5b:59:be:a8:dc:06:96:b5:17:14:c4:81:eb:
                    03:1b:45:fc:32:d8:7a:cc:9d:a0:3c:50:7d:10:7e:
                    8d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FF:51:54:91:84:2E:5C:0A:47:13:CF:A1:75:1F:42:ED:ED:23:8D
            X509v3 Authority Key Identifier:
                keyid:C7:0E:C4:38:3B:79:24:24:E7:1B:C6:85:3A:D1:C7:92:78:10:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:93:e3:8c:a3:bc:3b:08:2a:e7:8a:fc:95:c9:d6:12:48:1c:
         0f:46:62:4e:af:0b:ac:29:87:48:75:9b:b3:98:80:a1:4f:40:
         52:b0:82:7b:87:8f:8d:8c:d7:58:21:b0:40:e8:2a:ff:6c:52:
         b1:95:15:bb:84:fa:1f:5c:57:4f:19:d8:2e:53:29:66:aa:92:
         52:f6:89:7f:8c:84:9b:31:1a:15:e8:6a:ab:84:62:50:8f:45:
         9e:60:f5:02:1e:da:ff:e7:25:3d:f7:6c:7f:c2:96:7d:a9:c6:
         8f:6a:e7:53:6e:55:1e:5e:fa:2a:7c:0d:50:be:15:51:8a:1b:
         fa:b2:7c:de:d7:45:8c:56:24:6d:bb:09:d9:c1:e7:8a:fc:87:
         d2:f3:ae:66:44:4e:23:f6:6f:a9:fa:07:5a:c3:e8:61:f3:3a:
         a3:15:e4:68:16:80:ee:21:14:05:b4:ef:f0:dc:cf:da:45:76:
         5d:bd:0f:b1:14:0a:77:79:8e:ea:e9:3e:50:b4:dd:ab:e7:90:
         54:37:27:1b:3d:4a:54:5f:ed:e0:d0:e0:ec:44:00:e4:5b:d4:
         84:d8:9c:0b:a8:b3:80:c6:25:5f:0d:9e:db:cb:50:53:cc:1b:
         02:04:38:9e:2f:1a:04:07:4f:d6:ec:3a:12:75:5f:ca:84:7a:
         96:93:53:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 22:57:47 2026 by rpki-client