Error: rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/1/A75ED3D3A27119AD362E745F2E0EC17950532980.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/1/A75ED3D3A27119AD362E745F2E0EC17950532980.mft
File:                     A75ED3D3A27119AD362E745F2E0EC17950532980.mft (raw, json)
Hash identifier:          2c4YMxY8d2AfY9UMnTcGnNVKNl5BlsMf0sd1MAVZp2E=
Subject key identifier:   6B:49:A9:EE:B2:A3:E1:9F:74:6F:11:4C:65:76:A6:98:9C:00:FF:32
Authority key identifier: A7:5E:D3:D3:A2:71:19:AD:36:2E:74:5F:2E:0E:C1:79:50:53:29:80
Certificate issuer:       /CN=A75ED3D3A27119AD362E745F2E0EC17950532980
Certificate serial:       6E63B3C5296B15526597D24C555E38085C7E5275
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A75ED3D3A27119AD362E745F2E0EC17950532980.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/1/A75ED3D3A27119AD362E745F2E0EC17950532980.mft
Manifest number:          69
Signing time:             Tue 13 Oct 2026 05:44:22 +0000
Manifest this update:     Tue 13 Oct 2026 05:39:22 +0000
Manifest next update:     Wed 14 Oct 2026 07:27:22 +0000
Files and hashes:         1: 34352e342e33362e302f32342d3234203d3e20323636303435.roa (hash: Uz8pGyGz0Ff0oLd5gx8TTj1gPnEmr4i4+Y8fKHHnnCc=)
                          2: 34352e342e33382e302f32342d3234203d3e20323636303435.roa (hash: sOrw1CZhS4VRmhxohlfBNawc4cL9A2M1+tePKqoJF10=)
                          3: 34352e342e33362e302f32322d3232203d3e20323636303435.roa (hash: YGIMXPFoUkA4C0rG6lc26A7h9PJQMjZhOLbl8PdiQCA=)
                          4: A75ED3D3A27119AD362E745F2E0EC17950532980.crl (hash: 0UtAW+0ai35Vv8gkZoFUwc8t2sZ98rnqjIVMhC4Ryn0=)
                          5: 323830343a333962343a3a2f33322d3332203d3e20323636303435.roa (hash: zlAEffIfx0TfRoJOzRPLPdG34m8P4RuwDaIFQk2Tnb4=)
                          6: 34352e342e33392e302f32342d3234203d3e20323636303435.roa (hash: nfa7aOdCcNtUp9rFeyh5+xPgmPpTDzjaISCBYJAt1G8=)
                          7: 34352e342e33372e302f32342d3234203d3e20323636303435.roa (hash: qlo3hpBooM7LEVwExCFZhQjZyqP/78XzgsJpBzIQQLc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/1/A75ED3D3A27119AD362E745F2E0EC17950532980.crl
                          rsync://rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/1/A75ED3D3A27119AD362E745F2E0EC17950532980.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A75ED3D3A27119AD362E745F2E0EC17950532980.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 07:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:63:b3:c5:29:6b:15:52:65:97:d2:4c:55:5e:38:08:5c:7e:52:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A75ED3D3A27119AD362E745F2E0EC17950532980
        Validity
            Not Before: Oct 13 05:39:22 2026 GMT
            Not After : Oct 14 07:27:22 2026 GMT
        Subject: CN=6B49A9EEB2A3E19F746F114C6576A6989C00FF32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7e:6d:01:07:7b:9d:f7:87:6a:ac:68:c6:0d:
                    40:b3:3b:5d:ee:86:8b:66:b3:8f:06:9d:3d:36:78:
                    8d:67:c7:de:52:12:f7:96:c0:b4:cf:c4:49:7c:24:
                    94:98:57:84:49:2f:5b:85:a9:e7:96:38:d3:95:7d:
                    b7:13:c7:d2:c7:a7:85:3b:ae:b9:25:66:82:62:9d:
                    6b:63:10:03:05:5f:9b:02:ed:80:dd:d9:81:c0:ff:
                    d1:ca:b4:63:98:de:7c:54:7c:12:88:d5:49:11:67:
                    52:e3:65:4a:12:04:47:43:34:cc:b4:ed:1e:b9:cf:
                    5c:44:f0:86:2e:83:10:7b:1c:62:08:08:79:ce:56:
                    10:6e:35:7e:59:82:06:2d:13:4f:49:35:fc:84:88:
                    8a:72:ca:7b:fb:e9:33:c4:b7:8f:92:4c:d0:fa:df:
                    d2:f0:91:35:16:15:5c:e5:45:05:d7:1d:8c:1e:ac:
                    09:a4:d8:cc:08:3a:59:2b:31:0c:44:59:9b:84:f8:
                    94:b4:55:1d:e3:c3:1e:e1:1c:e6:17:49:3d:08:e3:
                    7e:7b:2e:7d:39:ac:82:88:46:80:72:b4:ee:85:91:
                    12:85:48:78:ca:db:32:f9:53:20:e4:01:58:b9:e6:
                    bf:73:52:e9:9c:1d:cb:16:7d:20:3d:28:e8:d4:3c:
                    81:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:49:A9:EE:B2:A3:E1:9F:74:6F:11:4C:65:76:A6:98:9C:00:FF:32
            X509v3 Authority Key Identifier:
                keyid:A7:5E:D3:D3:A2:71:19:AD:36:2E:74:5F:2E:0E:C1:79:50:53:29:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/1/A75ED3D3A27119AD362E745F2E0EC17950532980.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A75ED3D3A27119AD362E745F2E0EC17950532980.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/1/A75ED3D3A27119AD362E745F2E0EC17950532980.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:0d:e5:13:5d:53:13:48:79:a6:9f:62:be:1d:8b:76:0a:7b:
         0a:bb:bc:60:cb:d4:6a:27:ff:a4:80:e4:11:d2:23:c9:cb:b7:
         0d:8c:c7:e1:67:6b:6c:7e:15:40:49:99:6c:cd:37:21:7d:86:
         bd:7f:18:1b:f3:49:bc:e3:f1:b3:5c:c7:f8:c7:b9:41:6c:0f:
         94:a2:b9:85:2c:41:aa:e8:0c:7f:c5:2a:99:70:78:b0:44:41:
         fa:03:f8:74:4c:df:1b:e0:cb:f9:44:38:27:48:41:d8:64:50:
         24:a2:d7:15:b7:a0:ec:a6:96:62:9c:c2:35:d5:41:c6:33:a2:
         74:f8:24:b8:e0:9d:d9:d2:d6:0a:68:a7:28:0f:3e:9a:c0:42:
         c1:4a:1a:cb:d7:fd:15:4d:3e:c2:99:93:ed:53:1f:35:2b:f1:
         8e:6e:19:94:ee:1f:0f:93:ad:1d:3c:cd:91:68:99:04:ff:6b:
         c0:5e:8c:32:19:34:05:70:21:f2:81:6f:7b:60:14:b8:3f:43:
         01:4c:bb:2b:cc:6e:93:32:20:37:eb:ce:cf:44:f0:ab:36:67:
         0a:bf:75:ae:1e:a4:56:94:06:c8:b1:4c:a0:57:2f:88:80:5a:
         68:b8:de:cf:53:33:73:5e:ae:d4:d7:13:ea:bc:70:b1:62:a9:
         68:db:8a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:54:12 2026 by rpki-client