Error: rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.mft
File:                     F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.mft (raw, json)
Hash identifier:          c5h3qX5piXBflBNczXMP2J0mofny8uMZekJwrJNygdQ=
Subject key identifier:   F9:8D:F8:3B:1F:47:CA:DE:9C:E7:38:0D:14:AD:10:F3:8F:88:F4:F1
Authority key identifier: F4:50:62:DE:52:8E:3F:9E:B3:E8:78:F8:DE:D6:EB:8B:8D:7E:35:87
Certificate issuer:       /CN=F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587
Certificate serial:       150AD510A817A068123BBBA6A92905C3C7BE6F3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.mft
Manifest number:          0584
Signing time:             Fri 30 Oct 2026 23:50:00 +0000
Manifest this update:     Fri 30 Oct 2026 23:45:00 +0000
Manifest next update:     Sat 31 Oct 2026 23:50:00 +0000
Files and hashes:         1: 3137372e3232312e3138382e302f32322d3234203d3e20323730363738.roa (hash: DS3KCq/HmM/Ew0vugtZALaaOxAduHDC1H5b07+jpLaY=)
                          2: 323830343a366662343a3a2f33322d3335203d3e20323730363738.roa (hash: rc85CFl6sgDZ5h/dq3oIdbo8WefnMOtaFYgA98s2Wz4=)
                          3: F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.crl (hash: 8/pxZzRYWx4Z667q5Gd3NbJ9k30FNsalG+TXT9djmwE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.crl
                          rsync://rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 23:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:0a:d5:10:a8:17:a0:68:12:3b:bb:a6:a9:29:05:c3:c7:be:6f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587
        Validity
            Not Before: Oct 30 23:45:00 2026 GMT
            Not After : Oct 31 23:50:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0e:32:93:a2:bd:0e:d9:8c:3f:e7:b4:2c:4d:
                    de:4b:45:e0:a9:f9:8b:1b:c2:8e:db:d6:30:64:52:
                    56:26:13:82:64:90:da:0d:63:e1:1b:6b:9f:d0:80:
                    d0:9b:6a:63:6e:8b:50:02:11:b0:1d:aa:47:e0:27:
                    3d:74:91:2c:97:53:94:d3:c6:ad:c9:29:4e:60:0b:
                    c4:fa:95:00:0b:06:05:7a:34:d5:2a:86:8f:42:75:
                    c6:96:9d:05:05:52:6c:14:e5:a9:4d:eb:90:a3:ae:
                    1d:5a:ab:5e:6d:79:a1:ed:82:35:0c:d7:08:07:c3:
                    9f:6d:59:1f:d0:69:b2:f1:ed:58:fa:1a:90:f7:75:
                    7b:73:4e:c6:64:d4:ba:10:c1:08:d7:3e:6d:dd:71:
                    01:63:0d:69:7e:f4:ca:5c:6b:2e:52:15:14:5a:ef:
                    d7:98:62:93:c8:de:0b:1c:cc:70:91:b8:cd:87:89:
                    12:e1:cf:5d:c6:16:c6:d9:bb:77:0e:31:a5:d4:fd:
                    69:87:bf:74:29:fe:53:83:1e:ba:ee:5a:03:91:17:
                    23:24:de:88:01:2e:7e:3d:ee:be:e3:f4:b3:ff:11:
                    88:bc:0a:3e:8d:b3:ba:d5:3d:84:d6:5a:0a:ff:9f:
                    8f:ba:d6:38:00:37:1d:70:4d:c7:1c:a0:a3:37:ba:
                    6e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8D:F8:3B:1F:47:CA:DE:9C:E7:38:0D:14:AD:10:F3:8F:88:F4:F1
            X509v3 Authority Key Identifier:
                keyid:F4:50:62:DE:52:8E:3F:9E:B3:E8:78:F8:DE:D6:EB:8B:8D:7E:35:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:a5:60:3d:25:20:87:f7:9e:01:69:00:d1:20:fc:79:2b:67:
         f5:3f:13:76:5a:92:17:a1:80:37:ae:e1:e1:1f:53:4e:dc:f5:
         e8:87:15:90:f0:67:b3:0f:13:c1:c2:ec:ff:df:22:85:9d:18:
         f6:0a:4c:45:da:01:82:f5:74:fd:74:2b:75:c6:8c:11:25:fc:
         47:aa:ac:cd:84:d5:7e:c0:1c:87:ac:f7:67:87:44:33:ab:74:
         22:98:0c:d0:61:fc:e3:de:02:ae:23:63:5e:f9:08:fc:13:52:
         24:51:cb:8a:df:de:be:de:ff:5b:98:52:64:d4:5f:39:8b:7e:
         ac:e5:08:d1:d8:28:d8:f3:ad:40:c9:07:f0:a1:3d:df:4d:ab:
         eb:3b:41:cc:ca:d7:ff:2d:ff:e8:94:65:c6:c3:1a:d0:fb:80:
         69:00:17:ef:dd:dc:86:cf:7d:6b:e8:66:1a:5d:6f:14:de:1b:
         ab:80:3c:7c:3b:57:20:52:94:ae:84:01:05:3f:ce:d3:42:4b:
         b2:0d:85:7c:02:46:27:27:23:50:94:b9:e8:13:d1:e6:9b:65:
         00:f0:0a:26:e9:d6:ec:d0:95:a4:65:12:36:42:a2:54:ca:10:
         77:a0:0d:78:4f:91:93:38:93:37:3a:79:43:ff:49:87:8e:25:
         27:93:8a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 06:55:49 2026 by rpki-client