Error: rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.mft
File:                     817F1A503A376C564F65BFB27FD51A3B4D5C92F6.mft (raw, json)
Hash identifier:          bxzo9ZxBcko/spnWdjtsQtu+xP44o4x4M+is+gmQbEk=
Subject key identifier:   47:C7:A6:DB:5A:4A:CA:3B:B5:B2:1C:E7:54:BB:F5:4A:9B:1F:09:D7
Authority key identifier: 81:7F:1A:50:3A:37:6C:56:4F:65:BF:B2:7F:D5:1A:3B:4D:5C:92:F6
Certificate issuer:       /CN=817F1A503A376C564F65BFB27FD51A3B4D5C92F6
Certificate serial:       0504C04A5A3233E35C7BFD853F15293C7DA376DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.mft
Manifest number:          42
Signing time:             Wed 14 Oct 2026 03:18:17 +0000
Manifest this update:     Wed 14 Oct 2026 03:13:17 +0000
Manifest next update:     Thu 15 Oct 2026 05:46:17 +0000
Files and hashes:         1: 3133382e3132322e34302e302f32322d3234203d3e20323634333136.roa (hash: jczCTAnDptXDN/jTyF5vZHyUTpVOyeiS5qFHV2S2ax0=)
                          2: 3136382e3132312e3231362e302f32322d3234203d3e20323634333136.roa (hash: ifkq/WZnqNxa4KZDKatWhhki5JDZRtHdN91pOIWqUBc=)
                          3: 817F1A503A376C564F65BFB27FD51A3B4D5C92F6.crl (hash: iDZxKseoFd5W2/oOnKzFKkJV3zD4/0nvCeWo26AbHcs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.crl
                          rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 05:46:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:04:c0:4a:5a:32:33:e3:5c:7b:fd:85:3f:15:29:3c:7d:a3:76:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=817F1A503A376C564F65BFB27FD51A3B4D5C92F6
        Validity
            Not Before: Oct 14 03:13:17 2026 GMT
            Not After : Oct 15 05:46:17 2026 GMT
        Subject: CN=47C7A6DB5A4ACA3BB5B21CE754BBF54A9B1F09D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d0:aa:8b:dd:c1:3c:c8:78:20:21:2d:ac:ed:
                    cc:a2:37:56:69:c1:fb:7b:b5:a8:49:44:5f:f6:ca:
                    b8:38:30:91:22:22:f5:74:e3:fb:74:ff:61:9e:96:
                    b7:56:62:4f:52:d2:ed:ca:2b:7f:84:a0:00:61:81:
                    bd:e7:2c:ed:5d:99:99:32:1e:a0:bb:f2:14:4f:05:
                    90:f8:32:e1:2d:56:fc:20:de:40:b0:d9:23:5e:cf:
                    67:cc:1a:70:bf:0e:c0:8f:25:1f:0d:54:60:e3:b5:
                    ca:c6:a2:f0:ae:e2:1e:a4:67:6d:98:26:43:bf:aa:
                    12:41:30:6a:6f:06:03:65:c9:31:96:10:9d:fa:18:
                    9e:3d:d7:05:06:f4:e9:3d:b6:6c:ba:0a:c3:09:c1:
                    6e:5c:64:9e:5d:6e:fb:d9:44:62:85:e1:24:48:c0:
                    e2:d9:5f:25:fb:ff:6f:49:99:07:98:a3:7c:13:ab:
                    95:c1:81:05:da:0a:85:c5:eb:4d:b9:1a:1e:34:08:
                    de:7a:56:8a:13:34:13:15:ac:88:49:e9:70:19:ef:
                    1e:f2:d7:b6:09:49:c0:44:83:4f:31:8e:24:b8:19:
                    a0:f2:42:0b:d1:e4:d9:97:94:1e:5e:d4:67:85:aa:
                    4d:d7:32:79:4e:00:a6:12:2a:9e:68:73:51:a1:be:
                    e3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C7:A6:DB:5A:4A:CA:3B:B5:B2:1C:E7:54:BB:F5:4A:9B:1F:09:D7
            X509v3 Authority Key Identifier:
                keyid:81:7F:1A:50:3A:37:6C:56:4F:65:BF:B2:7F:D5:1A:3B:4D:5C:92:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:9b:90:e2:cf:3a:70:aa:d2:4a:18:5f:5a:c8:33:10:52:fa:
         15:57:0d:db:b3:0a:9e:92:d5:74:63:58:91:55:e9:5f:05:3f:
         b2:f2:30:bd:f5:d1:d8:c7:72:ff:e2:fc:f6:04:be:c2:a3:7d:
         57:40:29:52:a6:27:1b:eb:fc:b5:de:73:1f:b2:60:c9:ef:c7:
         bb:f7:bc:f2:08:1a:4e:c6:13:25:60:ec:2b:e2:53:df:88:c7:
         d3:da:ee:a5:02:5e:58:3b:93:f6:ee:19:66:d0:73:19:35:d7:
         1b:b1:65:7a:0d:33:f7:34:52:e3:dd:90:1f:06:2d:97:ac:82:
         07:31:74:fc:26:e9:4c:42:c7:de:61:fa:27:cd:b7:99:c7:d8:
         a0:83:f2:29:e7:46:4e:94:9e:bd:35:a2:29:17:87:59:dd:1e:
         f1:cf:e5:9b:c9:34:af:c3:d7:9e:4d:27:22:d2:6e:8b:2c:db:
         c0:ec:43:85:60:6f:63:0a:9c:17:07:ef:be:3e:84:9c:00:35:
         3f:ef:35:2f:ff:11:99:89:0e:5d:be:8e:52:7b:48:aa:fa:85:
         36:62:1e:1f:13:26:ab:93:1d:fe:97:ed:c7:88:c5:eb:9c:37:
         bc:ed:5d:94:ce:1e:42:35:0b:61:4a:cd:5c:5e:bb:b6:f2:b7:
         d2:13:41:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:34:20 2026 by rpki-client