Error: rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.mft
File:                     B45683C1BB4344BEACD72830DD6175D3188D8B0A.mft (raw, json)
Hash identifier:          LUpMo3h3MDFGFVwh42ecAg8PZ//0xMCl2eNvhk8ofwE=
Subject key identifier:   71:AA:22:5E:64:FA:30:C5:01:85:0D:03:30:7F:57:9B:FE:E8:94:E1
Authority key identifier: B4:56:83:C1:BB:43:44:BE:AC:D7:28:30:DD:61:75:D3:18:8D:8B:0A
Certificate issuer:       /CN=B45683C1BB4344BEACD72830DD6175D3188D8B0A
Certificate serial:       6E0B9F78CE0A637010A6481AE61EC1A2505A0F25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.mft
Manifest number:          0588
Signing time:             Sun 01 Nov 2026 04:20:00 +0000
Manifest this update:     Sun 01 Nov 2026 04:15:00 +0000
Manifest next update:     Mon 02 Nov 2026 04:20:00 +0000
Files and hashes:         1: 323830343a316135383a3a2f33322d3335203d3e203631383535.roa (hash: N1TSHRs4e3yyYcCA+FN3Ea1ZRsQUiFJ3yNsDsim5UDI=)
                          2: B45683C1BB4344BEACD72830DD6175D3188D8B0A.crl (hash: W1eIDLcKPzEsKWui9VzbpmfFkDCV+Z+w/0pR5rb05kU=)
                          3: 3133312e302e342e302f32322d3234203d3e203631383535.roa (hash: Y5Z0CQaEr/dwqDkaTrRESskpnXsYVXiY/jjRgICP5UQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.crl
                          rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 04:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:0b:9f:78:ce:0a:63:70:10:a6:48:1a:e6:1e:c1:a2:50:5a:0f:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B45683C1BB4344BEACD72830DD6175D3188D8B0A
        Validity
            Not Before: Nov  1 04:15:00 2026 GMT
            Not After : Nov  2 04:20:00 2026 GMT
        Subject: CN=3082010A0282010100B297E667B9C35406558398C6EB85A37039EDA09EC5B72C033BCB6B79EFAA702E454F97C2500140EC1B0F266E3C012F0C161FF8D7EA3A8D886526532382C94FD010B83D6559DB3C7B115F6A1455C41D42A4E70BCBC5DF87107EDBFCBA1B39FDC13087F197B2C18ACA5FC2E5992971603F42B581B09AFD5FE564684050D15BCA2D9EB13CB277C29FEA09ECED9BDF4F00E859ABDBDF5EB43153FDFF5016AC6809BF04BC281EE030DC401D062282AACAC231361793DFBFC3C2E379BBE2F5A09A542D65B4C04D0F6AC4948E314B95BDCEB7DE0E182E3DC5D4C75AF0434194D3A4476E823F180780F0FC36AAE15A3D74EF4185AF9A680026294555118186BCAD62FEED0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:97:e6:67:b9:c3:54:06:55:83:98:c6:eb:85:
                    a3:70:39:ed:a0:9e:c5:b7:2c:03:3b:cb:6b:79:ef:
                    aa:70:2e:45:4f:97:c2:50:01:40:ec:1b:0f:26:6e:
                    3c:01:2f:0c:16:1f:f8:d7:ea:3a:8d:88:65:26:53:
                    23:82:c9:4f:d0:10:b8:3d:65:59:db:3c:7b:11:5f:
                    6a:14:55:c4:1d:42:a4:e7:0b:cb:c5:df:87:10:7e:
                    db:fc:ba:1b:39:fd:c1:30:87:f1:97:b2:c1:8a:ca:
                    5f:c2:e5:99:29:71:60:3f:42:b5:81:b0:9a:fd:5f:
                    e5:64:68:40:50:d1:5b:ca:2d:9e:b1:3c:b2:77:c2:
                    9f:ea:09:ec:ed:9b:df:4f:00:e8:59:ab:db:df:5e:
                    b4:31:53:fd:ff:50:16:ac:68:09:bf:04:bc:28:1e:
                    e0:30:dc:40:1d:06:22:82:aa:ca:c2:31:36:17:93:
                    df:bf:c3:c2:e3:79:bb:e2:f5:a0:9a:54:2d:65:b4:
                    c0:4d:0f:6a:c4:94:8e:31:4b:95:bd:ce:b7:de:0e:
                    18:2e:3d:c5:d4:c7:5a:f0:43:41:94:d3:a4:47:6e:
                    82:3f:18:07:80:f0:fc:36:aa:e1:5a:3d:74:ef:41:
                    85:af:9a:68:00:26:29:45:55:11:81:86:bc:ad:62:
                    fe:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AA:22:5E:64:FA:30:C5:01:85:0D:03:30:7F:57:9B:FE:E8:94:E1
            X509v3 Authority Key Identifier:
                keyid:B4:56:83:C1:BB:43:44:BE:AC:D7:28:30:DD:61:75:D3:18:8D:8B:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:7e:1b:7f:f6:5b:2e:0e:9f:0d:16:3a:f3:ee:fe:ce:c9:22:
         60:af:8e:52:3b:3e:53:cd:0f:93:ee:c3:71:b6:44:54:f9:d8:
         68:5b:3f:5e:d6:81:b4:81:7a:81:db:fc:20:3f:7f:b0:c8:63:
         3c:8a:a1:ab:fe:c9:9b:b5:a4:57:47:67:c0:0c:2e:a0:a6:6e:
         32:32:3c:82:1f:ca:16:b1:df:e3:74:fd:f5:32:1e:b9:22:03:
         d0:ca:9e:5e:28:08:44:bb:91:02:e1:21:a3:11:34:ea:a4:e6:
         79:b4:6a:65:91:7b:2f:7c:67:dd:bc:64:f4:79:20:20:5b:dc:
         d7:bc:30:08:a6:92:cc:fc:fb:8c:03:9b:2c:ad:46:12:7a:73:
         ef:93:67:7b:75:a4:0f:a8:11:3f:d5:a8:03:7e:bc:8d:e5:d8:
         39:a2:1a:c4:9e:b0:3b:a8:ac:92:9c:7d:1c:e0:f9:a4:8b:53:
         54:2b:50:75:73:a9:f4:eb:65:cb:a5:40:0e:cc:36:91:29:e9:
         25:0a:7f:e5:af:a7:63:4a:25:88:7d:ae:d9:eb:35:7f:c6:2c:
         40:eb:10:84:c8:65:a7:cc:30:8c:1a:ab:95:0a:9c:c0:90:92:
         35:75:ec:d8:4a:5a:64:e0:97:13:f3:60:28:24:3c:f1:dd:84:
         3d:c1:fd:c5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 1 19:44:35 2026 by rpki-client