Error: rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.mft
File:                     511754C54989305CCE22941E6D3C0BF8AF6D7F6C.mft (raw, json)
Hash identifier:          qZe3l1PXDIyLkgonZ/BFdsr7+cDsw3AFwteRPvXSWtY=
Subject key identifier:   13:CE:2A:A5:6A:49:1D:15:BF:7A:24:0C:EB:C2:44:87:9C:D7:2E:78
Authority key identifier: 51:17:54:C5:49:89:30:5C:CE:22:94:1E:6D:3C:0B:F8:AF:6D:7F:6C
Certificate issuer:       /CN=511754C54989305CCE22941E6D3C0BF8AF6D7F6C
Certificate serial:       3C2654BDF23D1B55A9BB567475884CF0077DC050
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.mft
Manifest number:          04CD
Signing time:             Thu 15 Oct 2026 07:57:08 +0000
Manifest this update:     Thu 15 Oct 2026 07:52:08 +0000
Manifest next update:     Fri 16 Oct 2026 08:47:08 +0000
Files and hashes:         1: 3230302e3130372e3232302e302f32322d3234203d3e20323730323539.roa (hash: I8k9lNineL+fGEvlxjqpRKtI3gWOzWc8TsBSfBCOrvU=)
                          2: 511754C54989305CCE22941E6D3C0BF8AF6D7F6C.crl (hash: jAdTYOvL/bjqshZUMD3qNe4SM7QRT2GweA75kUMhZgg=)
                          3: 323830343a363934343a3a2f33322d3438203d3e20323730323539.roa (hash: jlLzwxWLTfsMst6DSIjvNKvp466a7Vvec48Ngs6mVOI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.crl
                          rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 08:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:26:54:bd:f2:3d:1b:55:a9:bb:56:74:75:88:4c:f0:07:7d:c0:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=511754C54989305CCE22941E6D3C0BF8AF6D7F6C
        Validity
            Not Before: Oct 15 07:52:08 2026 GMT
            Not After : Oct 16 08:47:08 2026 GMT
        Subject: CN=13CE2AA56A491D15BF7A240CEBC244879CD72E78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:57:7c:56:5d:70:9c:a4:61:e6:12:37:e9:11:
                    62:02:e8:97:9c:c0:4e:91:40:24:df:10:12:90:09:
                    24:2f:38:d1:49:e5:98:63:a1:ba:4b:c4:23:94:5f:
                    ac:da:d0:3d:3e:eb:f8:a6:7e:09:82:36:6d:63:6f:
                    35:06:45:db:87:09:4a:3a:f6:02:74:3b:e8:24:98:
                    9b:b8:11:20:4c:91:e5:77:49:b1:9d:c5:1d:8b:2a:
                    47:ec:92:e0:51:0f:a1:df:4d:0d:e1:6d:71:9d:79:
                    97:e2:13:a8:55:ef:46:7d:a5:17:8c:79:61:dd:22:
                    c3:fd:b9:88:1b:e2:89:bf:00:15:1f:f3:47:0a:9a:
                    3d:80:70:d4:f7:20:e3:2a:60:51:ef:3b:90:e0:f4:
                    cc:fd:dc:b7:b4:fe:b7:28:8d:12:da:c6:11:f4:d4:
                    82:78:c9:1a:f0:2d:56:41:ea:33:5b:a3:df:51:96:
                    24:5e:6a:ee:6c:c7:ea:00:54:8f:dd:d0:c8:5b:15:
                    01:71:27:c0:c0:41:91:92:f4:6b:4e:13:91:e4:b1:
                    31:e2:8a:d2:1d:dc:f4:53:28:ed:e0:87:57:d2:31:
                    52:b8:40:ef:71:83:b7:62:b1:eb:ba:86:7a:a8:d4:
                    83:04:04:87:30:17:66:ad:03:ea:15:09:6c:65:d7:
                    9e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:CE:2A:A5:6A:49:1D:15:BF:7A:24:0C:EB:C2:44:87:9C:D7:2E:78
            X509v3 Authority Key Identifier:
                keyid:51:17:54:C5:49:89:30:5C:CE:22:94:1E:6D:3C:0B:F8:AF:6D:7F:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:b3:f9:2e:3d:30:ae:21:b7:55:85:84:b1:60:b2:f9:b5:07:
         2d:29:96:b6:3a:04:8b:0d:2b:e8:8e:4f:c5:eb:f4:72:48:77:
         ef:3b:41:f1:72:1d:60:1d:65:cb:84:67:12:57:86:eb:f2:c3:
         4b:56:b9:4d:38:70:39:62:2c:a5:f1:76:34:70:4d:8e:d4:17:
         a2:ba:52:cf:dc:93:d2:1b:c1:7d:38:54:22:f9:ba:48:bb:15:
         d9:9b:c5:45:bd:2e:ee:42:6e:3f:b1:be:07:33:23:75:fb:ad:
         06:57:f1:04:dd:fd:89:3c:05:0e:c6:33:22:73:f5:1f:f5:41:
         dd:af:82:e6:fd:c5:dd:89:b0:5a:38:ac:67:c6:c3:4e:03:d3:
         88:00:ae:42:b3:99:c7:3f:dd:4a:0f:16:e2:24:62:3b:9e:24:
         33:bc:20:2b:90:e6:34:77:32:5c:84:d1:3b:34:4b:bc:24:5a:
         10:eb:0f:5d:37:89:4a:13:b0:74:c1:a1:c6:1d:86:4c:c1:1b:
         b9:7e:09:08:ad:01:3e:3c:5a:5a:40:af:5f:b5:04:88:b9:f6:
         0c:da:83:4f:54:59:ea:2a:95:be:bf:75:ee:d6:cf:43:03:75:
         b2:ab:8c:f8:11:77:3e:04:7d:b0:6d:95:f4:0b:e8:2d:4b:1c:
         8f:3d:e6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:06:34 2026 by rpki-client