Error: rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/1/62764A7C7BACD36BADF866D6C8571C58A651B15B.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/1/62764A7C7BACD36BADF866D6C8571C58A651B15B.mft
File:                     62764A7C7BACD36BADF866D6C8571C58A651B15B.mft (raw, json)
Hash identifier:          BCpzd21N0quARsT+9SwF2K1HCsd648d4/dat3Pw4g+Q=
Subject key identifier:   95:2E:81:C7:CA:40:7C:7F:26:64:81:2F:38:83:B0:13:96:C2:98:45
Authority key identifier: 62:76:4A:7C:7B:AC:D3:6B:AD:F8:66:D6:C8:57:1C:58:A6:51:B1:5B
Certificate issuer:       /CN=62764A7C7BACD36BADF866D6C8571C58A651B15B
Certificate serial:       4A0C954ABEE713A8DB73BCBF052476F83405C609
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62764A7C7BACD36BADF866D6C8571C58A651B15B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/1/62764A7C7BACD36BADF866D6C8571C58A651B15B.mft
Manifest number:          056E
Signing time:             Fri 16 Oct 2026 18:40:00 +0000
Manifest this update:     Fri 16 Oct 2026 18:35:00 +0000
Manifest next update:     Sat 17 Oct 2026 18:40:00 +0000
Files and hashes:         1: 62764A7C7BACD36BADF866D6C8571C58A651B15B.crl (hash: v6dInrPuZle1tvLCWakNHsBaZW55bkPAuanAJiOMygA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/1/62764A7C7BACD36BADF866D6C8571C58A651B15B.crl
                          rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/1/62764A7C7BACD36BADF866D6C8571C58A651B15B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62764A7C7BACD36BADF866D6C8571C58A651B15B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:0c:95:4a:be:e7:13:a8:db:73:bc:bf:05:24:76:f8:34:05:c6:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62764A7C7BACD36BADF866D6C8571C58A651B15B
        Validity
            Not Before: Oct 16 18:35:00 2026 GMT
            Not After : Oct 23 18:40:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:03:77:70:31:ee:28:7e:94:21:ce:e4:c6:79:
                    7e:8f:9b:62:53:75:3b:66:d0:78:ba:30:b8:d2:e4:
                    e5:0b:90:53:f9:cd:24:0c:ef:d6:15:4f:fc:93:70:
                    48:5b:ff:37:c9:38:d4:04:f5:ed:b3:5a:f2:9f:80:
                    c9:7d:33:46:bd:ab:13:e7:2a:d3:71:29:b2:9c:ec:
                    5f:b1:3c:38:02:78:54:61:d4:86:ab:c8:fa:2c:d0:
                    b3:c4:3d:09:5c:bc:e8:16:23:9f:e3:0e:59:68:17:
                    83:e7:bb:06:0c:94:9e:90:0d:b8:0e:b0:31:16:df:
                    fb:bb:92:d7:d0:d9:9d:c7:72:52:f5:46:15:5b:0d:
                    51:f9:a0:12:b0:36:61:e0:e6:96:00:84:2a:95:f2:
                    3e:0c:79:10:f3:1a:12:8a:45:c3:d9:f7:bf:c4:eb:
                    fc:10:31:00:e5:5b:9e:1e:61:04:35:da:32:0b:c4:
                    d9:a9:b9:74:1d:77:76:a3:71:d2:71:2d:79:68:f3:
                    79:78:ae:02:f5:88:dc:0c:85:ac:83:23:fa:ac:ff:
                    58:bd:22:ae:2e:0a:5c:71:38:63:3c:75:aa:1b:9e:
                    60:2a:b0:9d:06:24:7c:c6:13:2b:7c:e9:90:05:69:
                    40:70:98:41:d1:eb:ca:9b:65:cf:46:89:29:84:f2:
                    b7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:2E:81:C7:CA:40:7C:7F:26:64:81:2F:38:83:B0:13:96:C2:98:45
            X509v3 Authority Key Identifier:
                keyid:62:76:4A:7C:7B:AC:D3:6B:AD:F8:66:D6:C8:57:1C:58:A6:51:B1:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/1/62764A7C7BACD36BADF866D6C8571C58A651B15B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62764A7C7BACD36BADF866D6C8571C58A651B15B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/1/62764A7C7BACD36BADF866D6C8571C58A651B15B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:56:29:da:56:09:98:ce:75:98:8d:39:3d:75:41:74:fa:cc:
         3f:12:e6:d5:8a:81:d1:3c:d9:e2:a8:ee:11:ca:04:fc:5f:00:
         3c:cd:f8:96:5c:6e:8f:f3:cb:7a:b8:9e:d3:36:ff:27:0d:6c:
         43:cb:d9:b2:f9:e3:dd:a0:c1:34:37:6a:21:04:c5:ef:6e:ed:
         59:de:cc:8b:ca:79:fb:97:08:43:52:7e:94:6e:85:ef:42:d2:
         bb:06:ef:be:13:62:fe:23:de:51:ff:db:4a:15:0e:f5:2b:00:
         77:3f:eb:08:49:67:4b:75:05:3a:b4:27:67:1e:3b:9f:8b:de:
         75:6c:25:2a:49:e9:21:77:92:65:af:25:17:98:9c:1e:c7:53:
         c6:7a:52:4d:4b:f9:6d:19:ca:f2:b3:a1:1f:a4:3d:e2:87:eb:
         01:b4:c6:a4:89:c4:dd:1e:a8:9e:1b:f3:6c:f2:68:e5:dc:48:
         25:02:2c:56:96:87:17:8f:60:b1:55:ba:83:95:b2:65:5e:ce:
         40:d1:b5:a9:f6:d3:0a:97:c4:0d:2c:2c:c3:99:19:68:01:7c:
         ea:3f:c3:ba:78:e5:34:c7:cb:a2:2c:f6:e4:c5:48:ba:17:14:
         07:1e:2d:6a:e6:62:ff:9b:5a:12:9b:a1:e1:d3:b6:86:78:bd:
         e8:c0:a4:37
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 17 09:00:36 2026 by rpki-client