Error: rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.mft
File:                     BA066049D6F61C15788B2FC5F30C89377048CC1E.mft (raw, json)
Hash identifier:          YZ8P6/l53DAYMNIou5XghZ9j6pbBPCmmJNC0tzmwJJs=
Subject key identifier:   B4:7A:4D:B1:DA:6F:4E:46:DA:B3:69:93:F3:BF:55:F8:2E:E5:06:DA
Authority key identifier: BA:06:60:49:D6:F6:1C:15:78:8B:2F:C5:F3:0C:89:37:70:48:CC:1E
Certificate issuer:       /CN=BA066049D6F61C15788B2FC5F30C89377048CC1E
Certificate serial:       05C0E3BC7C4C57348E09BF22FEC5C172F301F66C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.mft
Manifest number:          0571
Signing time:             Sat 17 Oct 2026 07:10:00 +0000
Manifest this update:     Sat 17 Oct 2026 07:05:00 +0000
Manifest next update:     Sun 18 Oct 2026 07:10:00 +0000
Files and hashes:         1: BA066049D6F61C15788B2FC5F30C89377048CC1E.crl (hash: Iv0qGjdryfsCxpBjhhYZcLtSPxsNnxW2CDNkVrNvDmw=)
                          2: 323830343a353465303a3a2f33322d3336203d3e20323638363735.roa (hash: 0JxL9/zEdcf7OUet1WrDOcI5v0ZM284F9ayvZ1DE/IQ=)
                          3: 323830343a353465303a386130313a3a2f34382d3438203d3e20323638363735.roa (hash: JPkCk6648v0xhbSbtBIPbfa7Qyk12+QqcxIKcUjR6IU=)
                          4: 323830343a353465303a386230313a3a2f34382d3438203d3e20323638363735.roa (hash: arQ1SAmeTrwVXTw4vqHIwIwg88iP4k4qAw+0Pcz3YzY=)
                          5: 34352e3136352e3130302e302f32322d3234203d3e20323638363735.roa (hash: wGeL97DxQsA7RFe8ZQBanF81wONvkFT7SJ1KdKZlIuU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.crl
                          rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 07:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:c0:e3:bc:7c:4c:57:34:8e:09:bf:22:fe:c5:c1:72:f3:01:f6:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA066049D6F61C15788B2FC5F30C89377048CC1E
        Validity
            Not Before: Oct 17 07:05:00 2026 GMT
            Not After : Oct 24 07:10:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f6:6f:ba:db:17:f2:6a:c8:e1:ae:13:ee:d9:
                    e5:da:e9:05:35:f2:ee:e4:43:24:05:c5:76:9b:e8:
                    c0:99:52:d1:47:a5:3b:aa:45:74:b5:ef:b9:21:4c:
                    9c:90:81:cd:e2:6c:41:af:90:60:d0:d0:e5:81:35:
                    5c:3f:7f:66:43:b1:55:67:45:a8:98:d9:92:c7:7b:
                    53:ce:ca:c9:e3:9e:0c:11:7e:b6:57:7e:ca:25:78:
                    79:c5:84:82:78:5b:a1:46:27:d1:40:7d:eb:80:2e:
                    25:2e:c5:22:4b:ca:14:bf:0b:d0:2d:6a:23:54:b7:
                    63:77:e7:70:24:4a:b4:28:08:29:a6:5c:79:96:09:
                    48:59:d7:44:8b:f5:58:10:18:fc:67:d8:77:81:78:
                    84:8b:ed:a7:f7:05:ab:dc:31:91:29:71:fd:b8:44:
                    86:0f:d1:19:0a:a3:06:45:ae:98:04:bd:cf:53:53:
                    e4:57:f9:f7:9f:e7:78:53:40:b0:f5:ef:97:ea:db:
                    98:d1:2f:ae:e8:9f:6a:a9:dd:21:7e:40:1d:6f:47:
                    e6:f7:39:af:86:2d:67:6d:0e:a8:c9:13:5b:3a:b7:
                    63:f3:34:89:79:bc:ad:fe:14:b2:64:5c:c4:f1:e0:
                    ba:ac:48:7b:ad:28:fa:73:4f:16:67:ab:4f:54:34:
                    69:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:7A:4D:B1:DA:6F:4E:46:DA:B3:69:93:F3:BF:55:F8:2E:E5:06:DA
            X509v3 Authority Key Identifier:
                keyid:BA:06:60:49:D6:F6:1C:15:78:8B:2F:C5:F3:0C:89:37:70:48:CC:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:0b:1b:6c:e4:92:4c:b0:78:bc:a4:90:24:61:01:e2:f7:59:
         d6:3e:2c:e6:71:7a:9f:3a:5e:d7:a9:8d:fd:72:6b:7a:d6:50:
         d6:a5:ea:f6:c2:ea:fe:e5:43:03:12:d5:c0:af:c7:09:88:3a:
         79:4a:17:a1:d1:f1:af:10:c8:28:97:4c:37:5f:be:3f:8f:f7:
         78:89:fc:f5:5d:1e:34:61:5e:21:62:7d:5a:ce:19:3c:ec:87:
         d9:f4:87:32:54:82:71:23:24:ce:c3:4f:1f:2f:30:fb:63:3a:
         75:d9:ea:6a:3e:8b:15:b1:f9:bc:74:b8:0c:08:19:38:f4:e8:
         eb:b1:ee:ed:19:29:01:d0:ea:f7:b9:a0:29:a0:78:bc:dd:37:
         c4:97:6b:97:ec:e6:e9:df:6f:a8:73:6f:62:e4:14:c6:f5:77:
         2e:ed:b1:26:62:26:29:1c:e7:ed:58:1d:e4:dc:bd:d4:11:de:
         d8:db:fd:ca:4d:57:9d:8b:94:92:72:c8:dc:c9:39:3c:4c:65:
         e3:9e:d4:6f:a0:ee:c4:22:7e:10:50:58:b6:69:f3:38:14:48:
         96:13:a2:cd:f0:7e:b3:65:78:92:c4:b7:9f:d4:c3:17:31:ee:
         83:b5:55:b2:13:f4:9c:10:2d:45:a6:31:5f:e3:3f:8b:c8:11:
         25:09:f1:3d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 17 15:17:05 2026 by rpki-client