Error: rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/1/2462400704F6961586259385F73DD3F78898EBF4.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/1/2462400704F6961586259385F73DD3F78898EBF4.mft
File:                     2462400704F6961586259385F73DD3F78898EBF4.mft (raw, json)
Hash identifier:          QBTNcs0AAWhx64PDUmWVmj3ZTB16n8JT/Moq/lJwzA4=
Subject key identifier:   C9:09:A2:74:A7:54:18:87:AE:75:66:61:3F:A3:D3:88:53:AB:13:AE
Authority key identifier: 24:62:40:07:04:F6:96:15:86:25:93:85:F7:3D:D3:F7:88:98:EB:F4
Certificate issuer:       /CN=2462400704F6961586259385F73DD3F78898EBF4
Certificate serial:       683D6EBF5A86B77A974734FC3A81A2BB8652D9B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2462400704F6961586259385F73DD3F78898EBF4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/1/2462400704F6961586259385F73DD3F78898EBF4.mft
Manifest number:          0568
Signing time:             Mon 12 Oct 2026 19:10:00 +0000
Manifest this update:     Mon 12 Oct 2026 19:05:00 +0000
Manifest next update:     Tue 13 Oct 2026 19:10:00 +0000
Files and hashes:         1: 2462400704F6961586259385F73DD3F78898EBF4.crl (hash: m+7XwIDOOVkIODVrhD8Q5XwVPqgxqiIlxqF1KGO8sXM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/1/2462400704F6961586259385F73DD3F78898EBF4.crl
                          rsync://rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/1/2462400704F6961586259385F73DD3F78898EBF4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2462400704F6961586259385F73DD3F78898EBF4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:3d:6e:bf:5a:86:b7:7a:97:47:34:fc:3a:81:a2:bb:86:52:d9:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2462400704F6961586259385F73DD3F78898EBF4
        Validity
            Not Before: Oct 12 19:05:00 2026 GMT
            Not After : Oct 19 19:10:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b7:94:f1:af:b4:10:1c:01:d5:a1:23:db:bf:
                    ac:7e:a1:cb:8a:37:59:1b:84:ba:c7:d7:e6:a8:58:
                    a2:21:79:f3:46:be:24:12:a0:00:4c:54:34:a2:d4:
                    bc:a1:6f:65:d7:1d:c8:43:3c:ef:02:c1:fd:d0:7e:
                    63:0f:21:e0:16:b0:fa:32:fb:6a:70:85:24:06:eb:
                    45:fa:c4:ff:95:83:05:22:9e:95:df:d5:d7:cb:42:
                    83:b7:61:03:37:66:78:38:e4:71:8d:05:98:a8:9c:
                    df:30:15:3c:3a:72:4f:08:b8:80:a7:8c:cd:7a:14:
                    6b:e0:54:e1:02:34:a3:c1:bf:d5:6b:87:38:dc:eb:
                    96:3c:4d:e6:b6:5c:7c:c2:e9:bc:c4:2e:bd:c2:f0:
                    15:a7:11:6e:0e:ab:57:1f:73:4f:c6:53:69:af:cc:
                    11:dc:a6:f1:e7:41:28:b9:9c:1e:06:c3:42:2d:a6:
                    77:75:26:f0:11:e0:17:78:df:41:a6:53:0d:9d:1d:
                    11:e1:4c:32:38:bb:0d:00:0f:3c:d1:56:b1:27:15:
                    c0:a5:c9:3d:ba:86:ed:f4:d0:dd:a4:d2:3d:b7:04:
                    5d:80:86:0e:0e:26:bd:5c:29:24:ab:06:7f:74:e6:
                    cc:28:f2:ca:56:0d:07:7d:4f:2d:d4:84:f5:a6:1b:
                    35:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:09:A2:74:A7:54:18:87:AE:75:66:61:3F:A3:D3:88:53:AB:13:AE
            X509v3 Authority Key Identifier:
                keyid:24:62:40:07:04:F6:96:15:86:25:93:85:F7:3D:D3:F7:88:98:EB:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/1/2462400704F6961586259385F73DD3F78898EBF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2462400704F6961586259385F73DD3F78898EBF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/1/2462400704F6961586259385F73DD3F78898EBF4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:70:df:6a:73:51:d1:ce:cf:a7:cb:0d:76:88:fb:6a:e9:3e:
         c9:1a:10:23:eb:dd:f9:d5:38:66:57:e7:10:e9:a5:ac:6f:28:
         64:f4:86:60:9d:54:09:ec:da:08:bf:66:e1:09:df:27:e1:78:
         f8:18:5f:b3:a0:5e:29:31:23:dc:ae:b5:c3:d0:d9:be:65:b0:
         53:07:46:12:86:b2:7d:88:3c:a2:a6:e0:ae:09:18:fd:26:e7:
         bb:f4:ac:bf:47:d4:60:50:3f:9a:6d:4d:d4:16:4b:5e:db:cc:
         73:c1:70:b9:8d:36:7e:1e:55:71:ae:11:c5:33:44:50:8c:1f:
         56:80:95:83:5a:21:cd:08:a8:04:03:66:49:dc:76:a1:6b:4b:
         97:ac:a5:af:7d:f2:ef:f7:d5:8a:e4:4c:39:6a:8d:e3:76:bb:
         ba:c6:12:1a:47:68:74:5f:70:27:e2:d6:8d:ee:6b:07:c2:6a:
         20:84:bf:0b:5d:7b:40:e5:a3:75:3c:6b:df:ee:bb:a3:bc:57:
         24:78:ad:a5:25:07:eb:6c:8c:35:5d:76:2c:8e:c8:3a:36:52:
         ae:22:fd:75:f6:48:75:e4:7a:79:53:6f:42:d5:eb:ac:d2:e6:
         3b:e3:65:bd:06:c8:03:40:f8:e1:fe:ab:34:b9:d6:29:e0:7c:
         79:7b:f4:9a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 12 23:06:50 2026 by rpki-client