Error: rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft
File:                     CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft (raw, json)
Hash identifier:          xw/qZxu2q148VmZkzzU6TFSJpvwZSmtSQcKIHmHCo4w=
Subject key identifier:   E8:90:21:29:0A:DE:E5:97:14:30:F0:76:93:A0:B4:6A:4C:09:DA:B8
Authority key identifier: CF:B7:58:2F:28:69:9F:35:10:69:C8:C7:6C:C9:71:67:BF:7B:B2:EE
Certificate issuer:       /CN=CFB7582F28699F351069C8C76CC97167BF7BB2EE
Certificate serial:       744406885903F25E7EA5D4C628E1185E8202E699
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft
Manifest number:          04CD
Signing time:             Sun 11 Oct 2026 00:58:29 +0000
Manifest this update:     Sun 11 Oct 2026 00:53:29 +0000
Manifest next update:     Mon 12 Oct 2026 01:53:29 +0000
Files and hashes:         1: CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl (hash: w0drTKKtPWQBhg9CehCooVFF0gjJySOdLk3eF5gzED8=)
                          2: 3137372e3133302e31362e302f32302d3234203d3e203532373432.roa (hash: rJari9HForGWIAVn++KHhqqJxayzpXRfuI70oICH5Ek=)
                          3: 3133382e3131382e3235322e302f32322d3234203d3e203532373432.roa (hash: 0+L4aZDGVE+xOx58Nqs5OwAMrEmJylvDxU3iV/y2d0A=)
                          4: 323830343a6362303a3a2f33322d3438203d3e203532373432.roa (hash: OhngJLTjITTfBnt+qyHLrtVqgrZC2VpFlDFytpAhzhI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl
                          rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 01:53:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:44:06:88:59:03:f2:5e:7e:a5:d4:c6:28:e1:18:5e:82:02:e6:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFB7582F28699F351069C8C76CC97167BF7BB2EE
        Validity
            Not Before: Oct 11 00:53:29 2026 GMT
            Not After : Oct 12 01:53:29 2026 GMT
        Subject: CN=E89021290ADEE5971430F07693A0B46A4C09DAB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d6:4d:e4:b1:18:95:a0:73:c7:0f:f7:0b:e0:
                    e4:fc:06:0c:4a:23:ae:d3:69:d1:15:03:05:40:9f:
                    a7:a4:52:d3:87:4d:b7:97:ee:b3:9e:e7:8f:ac:3a:
                    5d:bc:a1:9a:4a:66:12:35:bf:7d:71:a8:7c:d1:82:
                    75:e9:8d:26:49:7d:7b:b9:f4:66:63:d2:ba:a7:44:
                    f4:cc:6a:10:22:01:0f:62:8e:ef:df:fd:84:ed:04:
                    f2:8c:dc:71:c9:fa:40:0c:76:a4:e8:5f:3d:29:f8:
                    2b:c7:56:1d:ca:81:d2:ca:f4:f2:4d:0d:64:32:d8:
                    73:70:01:07:8f:bf:2f:1b:26:67:e2:e3:37:53:a8:
                    87:22:93:49:55:c4:5f:c0:29:d1:d6:44:a6:bc:9a:
                    21:05:0c:1e:b5:b1:9a:e3:41:b2:82:04:00:10:a1:
                    46:3d:9a:b8:7c:60:f5:f7:11:bb:c4:3c:89:f7:c6:
                    74:e6:36:48:c4:c1:24:41:03:01:2a:07:4e:15:75:
                    e8:c6:b5:ed:dd:5b:50:2e:76:68:75:30:bc:43:67:
                    2f:43:a9:94:40:cb:67:ce:81:3c:9b:35:b7:8c:c5:
                    b0:30:a8:15:fd:dd:66:1f:83:fc:d9:2a:78:02:83:
                    d1:cc:78:cb:90:ba:b0:22:4e:36:b3:75:c0:09:cf:
                    39:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:90:21:29:0A:DE:E5:97:14:30:F0:76:93:A0:B4:6A:4C:09:DA:B8
            X509v3 Authority Key Identifier:
                keyid:CF:B7:58:2F:28:69:9F:35:10:69:C8:C7:6C:C9:71:67:BF:7B:B2:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:f1:26:40:89:2e:05:91:24:99:79:fa:a6:dc:5e:b1:95:4a:
         12:fb:2f:34:52:a4:4d:2c:ba:89:86:d8:1b:d6:62:96:1e:a4:
         54:b7:3c:fe:d4:57:99:14:b1:81:ff:58:6e:a0:8a:61:70:b3:
         69:fc:02:30:cf:02:b7:5b:62:9f:fe:48:60:88:eb:45:48:c5:
         92:78:af:ac:d5:d1:62:c0:91:f1:2c:04:29:de:9e:ef:43:18:
         67:cf:3b:0d:c7:0b:ee:ff:12:92:41:4b:05:e2:e8:d3:0b:dc:
         c9:58:50:89:a5:d7:9d:31:46:d1:bf:a0:e5:ca:1b:37:1d:bd:
         94:60:0d:c0:35:2c:b7:51:dc:ed:88:b2:98:47:a4:9b:18:ea:
         6f:20:b8:cd:55:5c:20:01:55:c3:b5:50:bc:b5:7e:39:fb:24:
         e4:f5:bf:57:62:12:51:ea:f7:be:38:80:5d:cf:65:08:ea:c7:
         9f:62:32:ab:66:78:ae:4d:61:3a:a2:58:ed:13:58:2c:5f:4d:
         92:15:f6:62:93:bd:2a:86:45:d1:42:da:66:16:c5:4a:06:71:
         f9:b1:4a:b9:fe:85:1c:f7:75:eb:cc:ad:10:87:83:a0:cf:89:
         65:6c:c9:22:7c:e5:5b:15:ed:74:70:3e:0d:d2:1b:28:3f:a7:
         ce:35:38:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:53:03 2026 by rpki-client