Error: rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/1/4DBCEA414C97E21ED954E22389E65590C555EEBD.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/1/4DBCEA414C97E21ED954E22389E65590C555EEBD.mft
File:                     4DBCEA414C97E21ED954E22389E65590C555EEBD.mft (raw, json)
Hash identifier:          7PoEbbV7C5Da0mRYOukgi5/rBnnwxRyV3pjDKNBJDOE=
Subject key identifier:   97:AE:87:06:38:8E:DB:D2:4C:C2:30:74:CA:38:16:A1:EB:F3:BF:E9
Authority key identifier: 4D:BC:EA:41:4C:97:E2:1E:D9:54:E2:23:89:E6:55:90:C5:55:EE:BD
Certificate issuer:       /CN=4DBCEA414C97E21ED954E22389E65590C555EEBD
Certificate serial:       3DAC4E0F463E94666BFDEF57B11233AAF0DD5BFE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DBCEA414C97E21ED954E22389E65590C555EEBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/1/4DBCEA414C97E21ED954E22389E65590C555EEBD.mft
Manifest number:          0581
Signing time:             Wed 28 Oct 2026 04:50:00 +0000
Manifest this update:     Wed 28 Oct 2026 04:45:00 +0000
Manifest next update:     Thu 29 Oct 2026 04:50:00 +0000
Files and hashes:         1: 3136302e3233382e3130382e302f32322d3234203d3e20323636323130.roa (hash: +A3hPO1vEqmAQBLFaUVedV+qesyZdchHYQYzHxOy/UM=)
                          2: 4DBCEA414C97E21ED954E22389E65590C555EEBD.crl (hash: dqPnjpXgykwAW/fXUS8CUQmz5fbnsqEPoPbOjISekOk=)
                          3: 323830343a336336633a3a2f33322d3335203d3e20323636323130.roa (hash: 0v1wsaiAm6mHikkaQpsCiHjj5SASNzLzE8l+DeIdI9I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/1/4DBCEA414C97E21ED954E22389E65590C555EEBD.crl
                          rsync://rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/1/4DBCEA414C97E21ED954E22389E65590C555EEBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DBCEA414C97E21ED954E22389E65590C555EEBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 04:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ac:4e:0f:46:3e:94:66:6b:fd:ef:57:b1:12:33:aa:f0:dd:5b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DBCEA414C97E21ED954E22389E65590C555EEBD
        Validity
            Not Before: Oct 28 04:45:00 2026 GMT
            Not After : Oct 29 04:50:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1f:06:c7:6d:3f:66:48:f6:32:e7:48:bb:81:
                    03:e5:1a:77:b5:cf:ef:b7:4f:b3:da:86:05:2c:a6:
                    26:06:11:3a:9c:a3:a2:54:cf:23:3d:fb:30:76:c2:
                    87:e3:0f:49:10:58:dc:70:c8:28:32:0f:f6:6e:b5:
                    64:e5:ad:c8:27:8c:50:a8:7b:1f:05:59:76:9d:76:
                    d5:31:f2:a7:88:ed:d4:9e:81:2d:42:70:67:59:56:
                    1e:df:72:4b:f9:35:19:91:1f:fd:f5:61:2b:74:2b:
                    aa:8e:27:87:23:a8:95:43:28:c3:8b:1a:fb:a5:7f:
                    9a:6e:60:9e:c4:4f:b1:c1:8c:16:29:c9:66:f2:b2:
                    da:87:ca:00:c9:59:56:ed:7b:1c:11:5b:b5:33:62:
                    25:16:fa:54:19:a5:4e:71:2a:a7:47:90:b6:36:1c:
                    c4:a5:e5:48:8e:29:67:2d:25:89:f3:f6:0f:89:e8:
                    6d:1f:e6:23:36:e2:3d:fb:fa:b0:64:f6:db:b5:9b:
                    de:b0:f6:3d:e0:72:f1:df:e7:34:98:25:cd:c5:88:
                    ee:2d:f5:4b:5c:e2:a4:96:71:b6:f4:4f:ff:ce:4b:
                    c4:b3:98:3a:15:e8:8a:b2:ed:56:ed:61:93:f2:f7:
                    21:4e:d4:ca:09:f3:e7:d9:58:e4:16:83:f1:ba:c3:
                    cf:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:AE:87:06:38:8E:DB:D2:4C:C2:30:74:CA:38:16:A1:EB:F3:BF:E9
            X509v3 Authority Key Identifier:
                keyid:4D:BC:EA:41:4C:97:E2:1E:D9:54:E2:23:89:E6:55:90:C5:55:EE:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/1/4DBCEA414C97E21ED954E22389E65590C555EEBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DBCEA414C97E21ED954E22389E65590C555EEBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/1/4DBCEA414C97E21ED954E22389E65590C555EEBD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:91:aa:73:6a:65:12:bb:4c:bb:08:ca:36:84:f9:39:15:53:
         27:54:58:df:75:f7:e9:7a:1e:f9:32:6c:13:e9:28:3f:24:dd:
         86:6e:af:b7:54:a9:07:9a:be:56:b0:f1:15:3c:ec:fd:80:ce:
         0b:d1:ef:16:fb:f7:65:6e:d0:92:72:e7:17:55:28:c5:a4:ee:
         45:45:1d:80:ff:11:b2:ca:62:73:fc:62:e0:00:a3:a4:0e:9d:
         ed:22:6b:d3:ac:37:b8:63:6d:66:55:03:c4:b8:1a:ae:0b:9f:
         45:bd:e5:a6:1c:62:eb:32:89:2c:b1:be:1b:75:37:69:cf:56:
         f1:ef:22:9a:be:19:dc:1d:e4:49:7f:66:2d:91:fb:df:68:37:
         b8:41:e9:c0:54:96:e8:39:62:2b:ad:6e:28:36:d3:d0:0d:f6:
         2c:04:36:57:fe:b2:5b:85:5d:ba:9b:e2:8c:87:a3:12:ec:f9:
         d0:70:13:2e:d0:de:72:07:20:0b:5e:86:e7:df:40:6c:a6:71:
         07:26:f9:10:38:9f:18:18:96:57:f0:08:93:e7:ca:0c:28:8c:
         a7:be:47:5c:5a:80:3f:ad:5e:0a:0a:e5:0d:85:6b:5c:f5:f2:
         69:e7:81:79:11:9a:9f:86:16:11:d0:83:4b:a2:a5:19:d8:6b:
         5e:cf:e0:3d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 28 19:45:28 2026 by rpki-client