Error: rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/072772F63E62DC06EAED9A555C2C793CEFF59262.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/072772F63E62DC06EAED9A555C2C793CEFF59262.mft
File:                     072772F63E62DC06EAED9A555C2C793CEFF59262.mft (raw, json)
Hash identifier:          9oiSNaTsRIRAm73YYnBKIB5/uQXATt9rNUGk7IJbqRE=
Subject key identifier:   EB:4F:9C:FA:C5:70:01:88:55:33:D2:E1:1F:AC:8C:8F:03:EC:BE:75
Authority key identifier: 07:27:72:F6:3E:62:DC:06:EA:ED:9A:55:5C:2C:79:3C:EF:F5:92:62
Certificate issuer:       /CN=072772F63E62DC06EAED9A555C2C793CEFF59262
Certificate serial:       10459BDDE282E3E73D451BFB2AD190D5F7CC1B2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/072772F63E62DC06EAED9A555C2C793CEFF59262.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/072772F63E62DC06EAED9A555C2C793CEFF59262.mft
Manifest number:          029E
Signing time:             Wed 14 Oct 2026 08:30:00 +0000
Manifest this update:     Wed 14 Oct 2026 08:25:00 +0000
Manifest next update:     Thu 15 Oct 2026 10:46:00 +0000
Files and hashes:         1: 34352e3233362e36302e302f32342d3332203d3e20323731323034.roa (hash: tkxBdhmmrIiPacFA+zr4TDJ+Q8UjFK9N6hFvmYHgsyQ=)
                          2: 072772F63E62DC06EAED9A555C2C793CEFF59262.crl (hash: KT0AdyaZu5yAR8TnSNsmI1Wlvndc2BneATwhvUsAADk=)
                          3: 3137392e34392e3139302e302f32332d3332203d3e20323731323034.roa (hash: mOjjEPcviTZ+qCmYX6z5szjAD9RD9p34iWcHM8xiwZY=)
                          4: 3137392e34392e3138382e302f32332d3332203d3e20323731323034.roa (hash: 9YIbsc02CJRJnEUTXNcVcC3dwpP00GO1wKqEWWc8oqc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/072772F63E62DC06EAED9A555C2C793CEFF59262.crl
                          rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/072772F63E62DC06EAED9A555C2C793CEFF59262.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/072772F63E62DC06EAED9A555C2C793CEFF59262.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 10:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:45:9b:dd:e2:82:e3:e7:3d:45:1b:fb:2a:d1:90:d5:f7:cc:1b:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072772F63E62DC06EAED9A555C2C793CEFF59262
        Validity
            Not Before: Oct 14 08:25:00 2026 GMT
            Not After : Oct 15 10:46:00 2026 GMT
        Subject: CN=EB4F9CFAC57001885533D2E11FAC8C8F03ECBE75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:88:4e:58:82:2a:ed:23:ad:39:98:47:85:c7:
                    79:ff:3c:95:0b:3d:d1:a6:c1:fb:3c:b7:50:fc:31:
                    dc:76:8f:72:e1:d3:a8:be:b4:e1:c4:21:53:97:41:
                    c0:ad:c6:d6:f7:9c:6a:02:ab:26:a3:17:a1:aa:da:
                    ff:7a:79:4e:47:14:32:65:ed:38:11:5d:95:eb:e2:
                    d0:61:80:19:c6:ce:48:08:bd:2f:81:63:82:e9:da:
                    77:31:79:86:bb:c6:0d:37:d2:8c:0a:08:51:47:14:
                    5c:21:8e:34:50:cb:5a:82:12:c8:a5:42:88:f0:7d:
                    87:78:9b:d5:4a:be:cf:91:dc:de:ad:11:57:97:e3:
                    b0:83:4d:c8:fd:a5:76:05:04:7a:56:fa:31:c8:d5:
                    71:2e:87:f4:36:f8:1d:e9:44:73:4f:d4:55:d0:a6:
                    c4:7d:1f:95:09:c8:e9:c8:15:23:be:26:37:64:79:
                    0d:3a:a1:ba:a3:af:b4:f8:35:71:cd:9c:ca:ba:f8:
                    ad:73:23:4e:ed:15:18:d4:ce:6c:53:b7:d6:07:45:
                    25:ad:5c:0f:32:87:9b:90:cf:b6:07:42:9f:20:ef:
                    72:16:0d:0f:3c:85:84:8e:e6:83:6b:39:6b:b7:6c:
                    53:1c:9f:dc:a6:81:05:5a:6e:a8:21:fe:ca:f7:0d:
                    a8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:4F:9C:FA:C5:70:01:88:55:33:D2:E1:1F:AC:8C:8F:03:EC:BE:75
            X509v3 Authority Key Identifier:
                keyid:07:27:72:F6:3E:62:DC:06:EA:ED:9A:55:5C:2C:79:3C:EF:F5:92:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/072772F63E62DC06EAED9A555C2C793CEFF59262.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/072772F63E62DC06EAED9A555C2C793CEFF59262.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/072772F63E62DC06EAED9A555C2C793CEFF59262.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:27:60:13:d6:46:2e:b9:5f:4d:4b:60:11:98:3b:3b:36:32:
         e1:7d:f0:cb:24:1c:0d:63:9b:71:d8:84:6e:84:73:d8:6e:0e:
         2d:48:67:92:53:11:57:5a:43:88:f2:01:41:b7:c9:5c:06:ba:
         84:d3:5c:54:e2:a3:24:4e:a5:bb:d5:8d:fe:6c:c4:75:2b:13:
         94:d7:8e:da:12:61:4f:79:ff:aa:70:56:33:6d:ec:8c:36:de:
         63:90:13:6f:d4:57:f9:58:bd:c6:12:12:7f:0f:4d:3e:1d:fd:
         66:4e:78:99:ef:22:50:69:07:50:d3:83:9b:39:19:50:95:ec:
         9c:d1:94:bc:be:63:52:59:10:f2:0b:73:61:55:fe:31:e5:4e:
         fb:7c:7d:cd:e9:eb:b7:8f:6c:66:80:99:50:44:23:7c:c3:c3:
         30:86:72:89:62:3b:5e:7a:a1:39:ab:fc:ed:06:dd:cf:53:66:
         9a:df:b7:d6:42:c6:3a:3b:c6:03:51:ec:ff:73:83:4e:59:b3:
         89:da:08:bc:b5:75:61:c7:a7:d1:65:fb:b7:7b:59:0e:f5:f4:
         b9:50:03:24:69:bb:4b:b6:3f:2e:89:b8:72:07:a6:e0:c8:fd:
         0e:4d:df:bf:d6:16:cc:97:80:5e:4e:3b:2c:36:7e:1e:1e:ca:
         94:64:ab:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:50:50 2026 by rpki-client