Error: rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.mft
File:                     725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.mft (raw, json)
Hash identifier:          CUJ2m04VmXZcMrZmkbmKac3z6oBOHUGN2ZHmrfmFtI4=
Subject key identifier:   8B:68:6A:8D:79:AF:C5:F4:17:77:17:5F:BA:D2:63:4C:3B:74:F4:2D
Authority key identifier: 72:5C:FB:34:4D:3B:C8:D4:D1:28:A6:DE:8A:52:7D:9D:1E:3C:70:A5
Certificate issuer:       /CN=725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5
Certificate serial:       32774927463465355F88BDFEE6A68A07464642F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.mft
Manifest number:          048E
Signing time:             Wed 28 Oct 2026 12:59:52 +0000
Manifest this update:     Wed 28 Oct 2026 12:54:52 +0000
Manifest next update:     Thu 29 Oct 2026 16:45:52 +0000
Files and hashes:         1: 725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.crl (hash: YLxUilnhSCKAgWVyJmw9y71PfzdrHOWJZ5LEdBNYtlg=)
                          2: 323830343a3162383a3a2f33322d313238203d3e20323632373634.roa (hash: GZCnjP+GoVilL0lQ65Cp5FD7Y1VzAbORhyux/0ttbvs=)
                          3: 3138362e3232362e3139322e302f32312d3332203d3e20323632373634.roa (hash: bDpx6gWVIB0u25kwWBtt5FnJxc51NN7PTRd1jgOA6dU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.crl
                          rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 16:45:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:77:49:27:46:34:65:35:5f:88:bd:fe:e6:a6:8a:07:46:46:42:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5
        Validity
            Not Before: Oct 28 12:54:52 2026 GMT
            Not After : Oct 29 16:45:52 2026 GMT
        Subject: CN=8B686A8D79AFC5F41777175FBAD2634C3B74F42D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:01:b3:22:32:f2:e5:b1:b0:03:d4:a1:de:df:
                    02:b7:3d:0f:b4:76:cb:5d:ae:63:d5:db:9b:8d:6e:
                    8b:66:bc:ac:f3:85:b6:17:38:2b:43:2d:a0:74:b0:
                    d4:6f:a4:18:06:13:ab:f0:58:3a:1a:87:00:19:45:
                    b7:b1:ff:d7:4b:b8:5e:e5:f9:75:a3:19:f8:ee:8f:
                    9e:19:2f:67:8c:8a:a3:8b:d5:67:56:ec:73:6a:49:
                    45:a6:b4:6a:83:40:07:84:80:86:b2:05:c6:c9:3d:
                    89:15:d1:5e:35:c6:44:49:fb:d4:2c:16:ce:b2:3f:
                    fc:02:c4:b7:bc:3c:64:50:9f:e7:0d:07:16:38:09:
                    0d:21:71:03:8c:c2:44:c9:54:8d:ab:e4:94:29:96:
                    91:18:42:c2:aa:92:7b:33:b5:7d:ae:9b:88:a1:22:
                    50:7f:0c:9c:45:19:15:16:da:9a:e2:de:c3:1b:b4:
                    bf:a9:2c:79:d7:4f:b0:64:6d:49:98:b4:4c:3e:91:
                    61:3d:58:05:79:74:a2:08:36:30:f5:71:7d:a6:52:
                    19:00:e3:c2:63:fb:c5:8b:6a:d7:fa:f1:aa:b0:d2:
                    e9:4b:a0:18:7f:6d:ed:51:d0:22:20:9c:5f:ef:d4:
                    48:84:36:16:f6:2e:05:82:52:1c:eb:a7:0f:b8:ca:
                    74:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:68:6A:8D:79:AF:C5:F4:17:77:17:5F:BA:D2:63:4C:3B:74:F4:2D
            X509v3 Authority Key Identifier:
                keyid:72:5C:FB:34:4D:3B:C8:D4:D1:28:A6:DE:8A:52:7D:9D:1E:3C:70:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:bd:a4:8f:c7:9a:59:1e:c5:07:ef:4c:64:04:8d:66:3e:f7:
         c1:cb:45:22:16:75:ec:19:9f:38:db:f0:92:9e:48:6a:37:67:
         9d:a2:7c:82:75:d5:22:f1:04:a7:ca:f8:37:34:24:03:f5:39:
         c9:04:fc:28:8d:2e:32:c6:ee:79:aa:93:f8:66:a3:d4:b3:e0:
         ae:b8:34:7e:fc:3d:46:ef:69:5d:6a:09:de:3e:c7:e4:a3:7e:
         90:49:dc:7b:14:be:25:a3:a6:68:47:de:12:7c:8c:fe:11:7d:
         f8:1d:b8:0f:35:e6:42:7b:71:19:1b:72:d6:ec:78:7f:d5:68:
         6e:d5:cb:8b:d9:38:6e:cf:6f:76:65:08:76:f4:2b:69:49:28:
         e9:ea:32:6b:15:94:3d:43:56:1f:9a:55:7f:08:a9:66:ec:48:
         89:7f:d8:70:0b:32:71:23:43:40:c4:75:99:db:8d:4e:f4:ac:
         c8:f9:4d:5e:35:e3:f2:ca:3e:df:ec:64:23:b1:81:55:db:8a:
         74:b9:6a:6f:e2:5b:8b:b0:2f:ca:8a:8b:6b:1d:54:d4:33:44:
         19:1e:a3:05:2b:20:04:6d:a7:1a:9a:dc:9d:0c:1f:38:26:1f:
         ab:27:18:f1:f9:2b:bd:2f:c1:80:99:51:05:69:43:81:22:a3:
         5e:fd:4c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:47:20 2026 by rpki-client