Error: rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.mft
File:                     C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.mft (raw, json)
Hash identifier:          DuQyUp/0aJM06OtbffDl5YLT5ltvd9De4Q7NhEGAt+k=
Subject key identifier:   46:09:EC:A1:ED:7F:8F:AD:68:99:14:EB:A6:01:37:65:A1:EA:E5:29
Authority key identifier: C2:CB:7C:1A:52:E7:5C:0D:4B:39:4E:09:FC:63:EA:CF:FD:69:2D:88
Certificate issuer:       /CN=C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88
Certificate serial:       3BE0C0E69A0C6F56CDFC6D8F15051DE8F76A0F6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.mft
Manifest number:          047A
Signing time:             Mon 12 Oct 2026 06:09:18 +0000
Manifest this update:     Mon 12 Oct 2026 06:04:18 +0000
Manifest next update:     Tue 13 Oct 2026 09:38:18 +0000
Files and hashes:         1: C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.crl (hash: pHeDqtys0oxqOH/UxQN/VTDkaMsbzRMeaM0COUEXtHU=)
                          2: 34352e3136312e3133362e302f32322d3234203d3e20323638353433.roa (hash: G1q3aDXg2LtQnvumA1dOUF1K4leeKhWExsaU+z9Zmvk=)
                          3: 323830343a353264303a3a2f33322d3438203d3e20323638353433.roa (hash: IcZwwhQ2J8hWITHTr4hQGS/84f220KK3tuW6qpaJC6o=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.crl
                          rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 09:38:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e0:c0:e6:9a:0c:6f:56:cd:fc:6d:8f:15:05:1d:e8:f7:6a:0f:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88
        Validity
            Not Before: Oct 12 06:04:18 2026 GMT
            Not After : Oct 13 09:38:18 2026 GMT
        Subject: CN=4609ECA1ED7F8FAD689914EBA6013765A1EAE529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ee:1a:b0:df:fb:c5:f6:cd:f4:d0:76:d1:03:
                    4d:ae:96:25:19:d7:c9:ab:3a:0c:9e:b3:f3:34:14:
                    dd:6c:1b:bf:c8:88:08:23:10:ff:48:0d:e0:ee:51:
                    28:48:8a:c7:08:50:2a:01:05:79:85:2e:8f:69:d3:
                    d3:0d:8e:7c:5f:34:bf:94:9d:47:ce:69:4a:92:1a:
                    1c:e0:ae:68:5b:49:cc:ef:cb:62:12:12:3d:94:d5:
                    42:a4:ad:fd:2e:bb:7e:5f:e3:22:ba:12:6e:e1:54:
                    05:aa:bc:2e:1c:4a:e0:6d:99:32:40:fb:36:4f:d8:
                    7c:63:f9:4f:ef:c4:ea:4f:4a:84:8d:bb:46:95:de:
                    00:53:9f:17:47:44:63:26:31:41:ba:eb:10:57:53:
                    8f:67:92:34:8e:bf:25:67:df:ae:84:81:9c:b8:9a:
                    ff:18:7b:22:af:cd:9f:5e:41:1e:44:67:8f:3b:a4:
                    40:51:76:7a:ab:de:a7:e5:35:0e:fd:e1:66:b9:ad:
                    4b:48:2a:ad:37:27:58:c4:a3:5c:36:39:39:ee:61:
                    50:e7:ad:b9:70:7d:c9:96:9a:1f:ab:4e:0b:25:58:
                    ed:50:71:45:4f:fd:76:96:98:3a:6a:40:bd:f4:e9:
                    3a:07:8b:de:85:46:9b:90:15:17:ac:0f:d2:55:9a:
                    59:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:09:EC:A1:ED:7F:8F:AD:68:99:14:EB:A6:01:37:65:A1:EA:E5:29
            X509v3 Authority Key Identifier:
                keyid:C2:CB:7C:1A:52:E7:5C:0D:4B:39:4E:09:FC:63:EA:CF:FD:69:2D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:87:47:20:ed:ae:60:e3:05:ae:da:25:6e:cd:e6:a4:a4:f4:
         fa:47:00:44:6e:5f:a2:68:a9:9b:42:95:41:64:c0:87:b0:da:
         7a:00:8b:f2:8c:2b:88:a5:09:e9:76:94:87:fe:66:8b:9c:ec:
         de:75:3d:48:b3:58:71:01:db:c1:5b:53:5b:a3:5c:e6:ea:14:
         50:27:46:9b:0e:02:bb:8c:40:10:bc:e4:c6:d2:da:10:a9:96:
         5e:ff:c1:49:14:1a:3e:67:03:44:e5:c7:a1:6a:50:21:62:03:
         24:80:fd:61:92:91:57:1c:bb:9a:ce:bf:a6:79:99:e6:04:61:
         22:45:54:7a:24:6f:08:1b:86:59:2e:51:17:fc:ec:00:9c:5e:
         1c:39:71:bf:98:a9:78:4b:3c:81:e7:a1:95:91:ba:6f:ca:63:
         b7:b8:05:a8:fa:de:e3:46:e6:56:0c:09:8e:77:81:02:40:27:
         56:3d:6b:37:f0:9f:a7:04:4b:dc:3a:5d:39:c0:6b:33:94:db:
         74:96:f0:5d:40:65:fd:51:4c:dd:91:6c:44:3c:75:77:79:6f:
         2a:76:d4:14:89:77:d3:1a:b2:45:6a:29:d5:a3:6e:de:f1:af:
         73:88:28:35:96:61:a9:6f:73:3f:f9:2b:0a:f4:65:76:33:ca:
         17:74:a1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 17:08:37 2026 by rpki-client