Error: rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.mft
File:                     FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.mft (raw, json)
Hash identifier:          ZjoIXhY2lKPDX2bmVA7uCSWzBoCA4u0yzU332Ba1Y18=
Subject key identifier:   62:30:DC:4C:8F:B0:29:A7:D3:40:63:C8:4C:41:D1:B5:EE:FA:FC:BF
Authority key identifier: FE:37:39:3A:C5:C8:D2:83:40:27:EE:7B:AE:80:CB:6B:AA:05:1C:AD
Certificate issuer:       /CN=FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD
Certificate serial:       156C58F03D3A944773A84E35CF4A2B1BA89723FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.mft
Manifest number:          04E5
Signing time:             Sun 01 Nov 2026 02:41:37 +0000
Manifest this update:     Sun 01 Nov 2026 02:36:37 +0000
Manifest next update:     Mon 02 Nov 2026 05:52:37 +0000
Files and hashes:         1: FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.crl (hash: NR77DoLB3Uk58C5TyGzqrBvoR3X0JsqZhj8EMLTDYrA=)
                          2: 323830343a386264383a3a2f33322d313238203d3e20323733373633.roa (hash: LXEaWXWcWiUpACwGRPLQ6lb8i3QatNxytAhakQXdBVk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.crl
                          rsync://rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 05:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:6c:58:f0:3d:3a:94:47:73:a8:4e:35:cf:4a:2b:1b:a8:97:23:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD
        Validity
            Not Before: Nov  1 02:36:37 2026 GMT
            Not After : Nov  2 05:52:37 2026 GMT
        Subject: CN=6230DC4C8FB029A7D34063C84C41D1B5EEFAFCBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1c:ef:94:17:78:d5:5e:01:e4:af:97:47:80:
                    49:13:a4:df:ae:a8:51:2f:2c:28:d1:90:f2:3f:5c:
                    2f:37:93:d1:d8:40:17:bc:80:79:fb:5d:07:bd:ff:
                    43:f4:8c:b8:cf:db:0f:ed:78:d5:12:83:34:96:6b:
                    62:0b:f1:be:e1:bd:b0:b7:0f:76:57:61:70:ad:69:
                    ae:e3:05:ff:3a:f9:ac:65:2e:50:f6:1f:9b:e0:a3:
                    4a:9c:ff:bd:3f:33:8f:6e:54:1e:80:7d:7d:25:55:
                    59:6f:d8:40:95:20:c6:ec:20:ee:ab:fe:ad:ea:3e:
                    bb:5b:83:5c:dd:25:0d:bf:75:c9:b4:cb:67:52:d1:
                    28:4e:c5:4f:60:91:ed:da:3b:97:84:48:c9:72:f5:
                    1a:f8:78:d2:4e:43:ea:4a:29:7c:f5:bf:1a:4a:80:
                    89:b4:10:79:1a:2d:7d:4f:0e:58:bb:af:a9:d8:ca:
                    a1:26:8b:db:83:c0:53:52:de:a0:2c:ee:2b:c3:5b:
                    87:9b:12:07:8f:34:21:75:e1:bc:d4:0b:52:4b:a9:
                    c3:fe:c5:11:0f:5f:75:a7:ce:40:d8:38:07:76:4d:
                    75:70:d7:7e:4b:a2:6a:1d:8c:55:2a:12:5f:a8:70:
                    3f:f2:fc:3e:ca:71:50:ae:2b:02:7a:46:39:93:3b:
                    93:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:30:DC:4C:8F:B0:29:A7:D3:40:63:C8:4C:41:D1:B5:EE:FA:FC:BF
            X509v3 Authority Key Identifier:
                keyid:FE:37:39:3A:C5:C8:D2:83:40:27:EE:7B:AE:80:CB:6B:AA:05:1C:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e5:10:22:e6:a6:ed:1e:3b:d1:d3:55:5a:40:3b:8f:37:7e:28:
         1c:e7:1d:1d:33:ea:43:1f:22:c9:42:e6:38:c1:ce:cb:c9:8d:
         1b:4f:7d:a7:9f:47:db:a8:59:50:d4:d0:2b:51:f8:14:85:e0:
         a5:f4:26:b2:9d:30:8b:01:44:69:0f:4e:a3:15:72:a4:e5:53:
         e0:81:44:6f:e2:c0:8c:e7:91:53:45:f2:8a:42:12:f9:fa:c4:
         61:9a:90:ed:6f:56:b1:83:62:14:89:12:01:34:02:09:3d:74:
         fb:51:ba:d3:07:b1:1c:5f:c7:fc:a4:48:6d:94:a1:1f:68:37:
         98:f9:40:94:0a:1a:a9:f6:de:82:6c:66:ad:f5:98:6f:05:f8:
         32:c2:96:73:4f:77:ff:ec:3f:97:38:98:cb:d2:1e:2a:d6:90:
         ff:ee:e7:7c:6f:3f:ab:67:69:78:72:42:3c:1e:d9:50:e0:f0:
         30:8d:53:6b:db:65:89:21:f2:ab:08:ed:99:b1:ed:22:e8:14:
         79:27:55:06:7a:6d:86:de:ee:cf:3c:49:06:5d:52:e1:c6:e8:
         02:76:c7:b0:14:36:a3:dd:11:f0:54:72:4c:b9:85:77:62:32:
         17:de:89:cb:7f:2d:78:d5:a9:fc:9e:5d:a4:62:0e:38:17:24:
         87:e0:01:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 20:01:15 2026 by rpki-client