Error: rpki-repo.registro.br/repo/29iCKGLUTdfswwUDZMzp5bkB8172h611QTGiennrhcvE/0/B3C75D6FEE3335625F5BC4BA98E3565309B660AC.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/29iCKGLUTdfswwUDZMzp5bkB8172h611QTGiennrhcvE/0/B3C75D6FEE3335625F5BC4BA98E3565309B660AC.mft
File:                     B3C75D6FEE3335625F5BC4BA98E3565309B660AC.mft (raw, json)
Hash identifier:          AZA7UJwLZWifl0DAJAqpb7sGi5Jjns1zIydp6AS7rmE=
Subject key identifier:   CB:F4:DC:91:C6:99:B1:9F:70:DB:2B:91:8E:33:11:FD:93:91:90:8A
Authority key identifier: B3:C7:5D:6F:EE:33:35:62:5F:5B:C4:BA:98:E3:56:53:09:B6:60:AC
Certificate issuer:       /CN=B3C75D6FEE3335625F5BC4BA98E3565309B660AC
Certificate serial:       3DDC9DBD25E49BA34951C31D18018FA5D0805A96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C75D6FEE3335625F5BC4BA98E3565309B660AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/29iCKGLUTdfswwUDZMzp5bkB8172h611QTGiennrhcvE/0/B3C75D6FEE3335625F5BC4BA98E3565309B660AC.mft
Manifest number:          F4
Signing time:             Mon 12 Oct 2026 21:10:00 +0000
Manifest this update:     Mon 12 Oct 2026 21:05:00 +0000
Manifest next update:     Tue 13 Oct 2026 21:10:00 +0000
Files and hashes:         1: B3C75D6FEE3335625F5BC4BA98E3565309B660AC.crl (hash: UD45DhtF01U3HIS/6uCk7XFmhBxJckbvZERd8WjU2pk=)
                          2: 323830343a383630303a3a2f33322d3332203d3e20323732363133.roa (hash: J84F4ma9BSm45vsSW4lXGeW/oqlc6BLCftipzcrG8dE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/29iCKGLUTdfswwUDZMzp5bkB8172h611QTGiennrhcvE/0/B3C75D6FEE3335625F5BC4BA98E3565309B660AC.crl
                          rsync://rpki-repo.registro.br/repo/29iCKGLUTdfswwUDZMzp5bkB8172h611QTGiennrhcvE/0/B3C75D6FEE3335625F5BC4BA98E3565309B660AC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C75D6FEE3335625F5BC4BA98E3565309B660AC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 21:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:dc:9d:bd:25:e4:9b:a3:49:51:c3:1d:18:01:8f:a5:d0:80:5a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C75D6FEE3335625F5BC4BA98E3565309B660AC
        Validity
            Not Before: Oct 12 21:05:00 2026 GMT
            Not After : Oct 13 21:10:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1b:24:77:ac:fa:86:af:bd:24:ff:1c:8a:c2:
                    ab:f9:a4:b2:96:de:dc:a3:1e:18:00:70:23:b1:d3:
                    4c:0c:be:62:ba:11:53:db:b3:2c:4b:32:a8:97:cf:
                    e8:0a:71:e2:d2:c6:80:ad:20:6e:f3:9f:64:90:07:
                    59:99:db:78:7f:c9:2e:e6:d4:95:9d:06:7f:3c:4c:
                    0f:6d:ad:3b:23:9f:86:07:df:60:5d:7e:78:d9:72:
                    32:22:56:c9:b0:3f:78:cf:10:c7:13:09:f2:26:2a:
                    34:a4:2d:28:b6:fd:78:db:d4:28:12:08:7e:80:9d:
                    95:82:8d:e9:1e:d3:62:dd:bc:16:d0:64:e3:4f:11:
                    22:e2:2b:29:fd:13:cc:3a:34:2c:8c:c1:1d:be:94:
                    0d:de:0c:d8:fd:67:a9:b0:3e:6a:34:72:57:27:10:
                    27:04:fc:07:f2:a9:34:d4:56:b3:c2:88:4a:0e:1d:
                    0e:61:f9:19:ed:ca:7a:ee:a5:bb:26:e2:ef:89:36:
                    ab:0a:a7:14:28:34:b5:e3:81:9f:e6:cd:02:60:4e:
                    fc:79:60:ae:3e:5a:b9:6c:8d:ae:f7:91:be:55:23:
                    e2:40:2c:0c:ec:cc:bb:d0:04:69:34:35:6d:76:88:
                    d7:d7:82:1d:2a:11:be:a5:4c:00:31:45:72:6d:14:
                    92:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F4:DC:91:C6:99:B1:9F:70:DB:2B:91:8E:33:11:FD:93:91:90:8A
            X509v3 Authority Key Identifier:
                keyid:B3:C7:5D:6F:EE:33:35:62:5F:5B:C4:BA:98:E3:56:53:09:B6:60:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/29iCKGLUTdfswwUDZMzp5bkB8172h611QTGiennrhcvE/0/B3C75D6FEE3335625F5BC4BA98E3565309B660AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C75D6FEE3335625F5BC4BA98E3565309B660AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/29iCKGLUTdfswwUDZMzp5bkB8172h611QTGiennrhcvE/0/B3C75D6FEE3335625F5BC4BA98E3565309B660AC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:51:f9:87:55:3d:29:b0:eb:60:a7:7e:e1:eb:4f:bc:d5:35:
         15:4f:50:99:c5:30:b0:b1:9b:2a:41:83:7c:dd:6a:60:96:59:
         d6:34:ad:c4:62:50:13:b9:52:86:2e:aa:ac:7c:23:1b:7f:94:
         fe:18:a8:c9:48:58:c3:2e:33:26:9f:3f:94:af:e1:a5:1e:9f:
         9e:6c:ae:bf:c2:06:0f:45:18:fc:27:91:28:2e:c2:7b:32:8c:
         18:33:e3:4b:07:a7:b2:e1:12:cf:4f:d3:1a:5a:14:88:65:6c:
         93:75:02:71:3c:57:6b:0a:5e:b3:88:7d:0d:1e:60:90:b1:0c:
         c3:11:5b:52:94:5a:05:57:88:fa:2c:55:09:92:7a:15:86:06:
         c7:b8:9f:9f:c2:18:e8:22:00:87:60:46:d7:6a:63:2b:ac:8b:
         f4:08:29:1c:de:6c:07:6f:3f:e4:80:0c:3e:9b:8e:a5:6c:8d:
         17:f7:a5:07:b6:f6:fe:67:06:8b:a0:1f:ba:be:07:65:a7:a8:
         d2:93:c0:86:24:fa:9d:2e:6d:c8:65:5e:c2:c2:ba:37:48:df:
         44:de:f8:c3:f4:e5:af:5e:34:2a:3d:d3:64:4b:ff:17:80:32:
         69:15:f9:47:ed:27:9d:8e:0f:ba:69:76:b0:dd:82:1e:70:4a:
         52:1b:fc:86
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 13 13:50:22 2026 by rpki-client