Error: rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/02841926F957B15864E9B2B024AD350B3F57EC78.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/02841926F957B15864E9B2B024AD350B3F57EC78.mft
File:                     02841926F957B15864E9B2B024AD350B3F57EC78.mft (raw, json)
Hash identifier:          BMucQIHeyXQOc42gM+DZ+Z7qgIu8mMbcRWPtuuApByc=
Subject key identifier:   A9:45:46:05:FC:8F:B9:25:C7:BB:B5:52:C0:4C:9B:3E:80:E8:68:57
Authority key identifier: 02:84:19:26:F9:57:B1:58:64:E9:B2:B0:24:AD:35:0B:3F:57:EC:78
Certificate issuer:       /CN=02841926F957B15864E9B2B024AD350B3F57EC78
Certificate serial:       4FD876802D78660C425B5BCB73219DCF68410642
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02841926F957B15864E9B2B024AD350B3F57EC78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/02841926F957B15864E9B2B024AD350B3F57EC78.mft
Manifest number:          3F
Signing time:             Sat 10 Oct 2026 20:56:44 +0000
Manifest this update:     Sat 10 Oct 2026 20:51:44 +0000
Manifest next update:     Mon 12 Oct 2026 00:21:44 +0000
Files and hashes:         1: 3136382e3232372e3232302e302f32322d3332203d3e20323634383839.roa (hash: B+/3G+PhdEhiOUG1MnlSsGZ+YLMB49aZNWJkioNfOFg=)
                          2: 323830343a326636383a3a2f33322d313238203d3e20323634383839.roa (hash: SelNCK+n7byE6x3SkITTF46op56QPsSXAXJb+Wg0J/I=)
                          3: 02841926F957B15864E9B2B024AD350B3F57EC78.crl (hash: GHbc219lgmESImtREUZlRtC7hpwHvQPcGwNMMTVge84=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/02841926F957B15864E9B2B024AD350B3F57EC78.crl
                          rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/02841926F957B15864E9B2B024AD350B3F57EC78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02841926F957B15864E9B2B024AD350B3F57EC78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 00:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:d8:76:80:2d:78:66:0c:42:5b:5b:cb:73:21:9d:cf:68:41:06:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02841926F957B15864E9B2B024AD350B3F57EC78
        Validity
            Not Before: Oct 10 20:51:44 2026 GMT
            Not After : Oct 12 00:21:44 2026 GMT
        Subject: CN=A9454605FC8FB925C7BBB552C04C9B3E80E86857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:54:18:ca:86:66:22:01:9f:08:eb:bb:14:86:
                    a9:4e:39:6a:2f:1c:38:22:88:0e:88:c0:cf:cd:92:
                    d6:9b:2f:b6:e3:83:5e:b1:b2:25:3e:b0:24:24:8b:
                    48:94:53:9a:f7:ab:be:91:b0:0d:b9:6a:fb:a1:2a:
                    72:c3:3b:c8:31:ae:43:a4:4a:45:bf:fe:2e:35:47:
                    5d:b1:1c:34:14:6e:1b:2f:95:d7:02:07:b6:b5:62:
                    e6:65:63:d2:6b:73:5a:66:ca:9e:ab:bd:e8:18:ad:
                    e7:7e:9f:ae:f2:3b:1f:d5:93:e4:16:73:4b:dc:71:
                    30:1e:25:dd:45:8d:46:67:6d:b5:27:8d:df:ca:eb:
                    bd:38:70:4f:d8:e2:3f:7d:1a:bf:72:7d:d8:07:70:
                    d3:ad:4a:5b:8f:33:02:43:37:b4:51:b0:dc:c3:b0:
                    e1:cb:38:7f:30:0d:aa:9c:21:f2:b8:7b:17:8b:cb:
                    8c:7e:cf:e6:7e:07:ed:e4:63:90:2a:6c:23:aa:38:
                    24:be:0c:f7:95:95:9d:0f:ac:e9:93:8c:61:5e:be:
                    ff:8d:8f:6e:97:7f:a0:de:0d:72:c5:01:07:66:64:
                    a4:8f:45:51:5d:37:fe:35:f9:50:0d:0a:8f:cf:2f:
                    42:52:ae:63:dd:3d:a0:e9:56:64:1a:06:6b:05:e8:
                    5d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:45:46:05:FC:8F:B9:25:C7:BB:B5:52:C0:4C:9B:3E:80:E8:68:57
            X509v3 Authority Key Identifier:
                keyid:02:84:19:26:F9:57:B1:58:64:E9:B2:B0:24:AD:35:0B:3F:57:EC:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/02841926F957B15864E9B2B024AD350B3F57EC78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02841926F957B15864E9B2B024AD350B3F57EC78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/02841926F957B15864E9B2B024AD350B3F57EC78.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:3b:1b:95:61:65:b8:83:b3:e8:cc:de:5d:a4:39:16:f5:37:
         e1:4d:81:82:e2:a4:27:b1:b9:e4:bb:63:56:f2:20:7a:34:36:
         bd:ae:4f:d0:e3:26:fd:19:68:07:93:10:ef:e1:15:26:3e:3b:
         47:59:53:67:63:7b:4a:40:42:58:2c:90:10:6f:3b:24:b0:6c:
         78:8c:5c:2e:c6:68:eb:74:7f:ca:ab:8a:33:ff:59:47:dc:d8:
         4e:f9:3d:ef:ae:ac:5d:03:47:20:c1:15:a6:75:89:26:38:e7:
         84:41:cf:75:cb:13:2f:a9:08:fc:96:3d:4d:21:9d:eb:e5:21:
         18:c2:a0:9e:63:a9:b9:7b:a5:8e:38:84:64:74:dc:bb:3f:c6:
         88:6a:da:70:e0:f1:99:9c:31:3f:cb:b7:cb:5b:06:8e:e8:7f:
         e7:3a:98:e5:c5:3b:41:15:4d:a5:50:26:9d:b4:08:7f:54:33:
         d1:30:da:45:12:6d:d7:80:f8:38:ef:8f:0d:80:21:c3:76:21:
         12:0a:18:d3:b0:20:22:10:ae:b1:e6:80:7e:d4:a7:86:5b:e5:
         59:12:ea:c3:23:57:05:27:38:ef:ba:a2:e8:c9:45:c5:50:c3:
         87:b0:5b:11:c8:2e:e4:5e:cd:a7:74:a1:53:69:6a:95:90:ff:
         fa:23:b6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:17:59 2026 by rpki-client