Error: rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.mft
File:                     B2D046D14FE7B77F62DE896EBF0A815413A589BF.mft (raw, json)
Hash identifier:          2y341BNzDiCcV/ieuDsa+9bJFLQ/9Gdrboiggllu2zU=
Subject key identifier:   4C:AB:D6:31:43:CF:A7:3F:91:1B:68:F7:38:D8:FB:B0:1A:9F:ED:94
Authority key identifier: B2:D0:46:D1:4F:E7:B7:7F:62:DE:89:6E:BF:0A:81:54:13:A5:89:BF
Certificate issuer:       /CN=B2D046D14FE7B77F62DE896EBF0A815413A589BF
Certificate serial:       6FC301ED14D8324E0B08BCD713B088A3CFC18361
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.mft
Manifest number:          0570
Signing time:             Sat 17 Oct 2026 11:10:00 +0000
Manifest this update:     Sat 17 Oct 2026 11:05:00 +0000
Manifest next update:     Sun 18 Oct 2026 11:10:00 +0000
Files and hashes:         1: 323830343a373461343a3a2f33322d3334203d3e20323730393934.roa (hash: LCHT2Y+LBkaAUziO30unFPmixp/5lR6rBeVHq42aqOQ=)
                          2: B2D046D14FE7B77F62DE896EBF0A815413A589BF.crl (hash: zoor8/adzFX5OWRO3mkMCwg5abCUL0rrEIRwJN/hwR4=)
                          3: 3133382e35392e3133362e302f32322d3234203d3e20323730393934.roa (hash: U43h9Hi7u2Cg7va6RSXwjk2rc7JdJyIHoIFXhBbLhKY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.crl
                          rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 11:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c3:01:ed:14:d8:32:4e:0b:08:bc:d7:13:b0:88:a3:cf:c1:83:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2D046D14FE7B77F62DE896EBF0A815413A589BF
        Validity
            Not Before: Oct 17 11:05:00 2026 GMT
            Not After : Oct 18 11:10:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cc:2c:67:1d:89:3a:9e:14:1e:7d:96:4a:21:
                    1e:a6:b4:51:02:f5:c2:73:16:62:70:ef:bd:4d:16:
                    b6:a3:94:db:e4:4d:0e:a0:26:9a:fa:6a:b4:f2:1b:
                    83:91:68:3e:7a:71:75:fd:86:f6:95:a1:45:55:c4:
                    0b:7a:4f:09:84:7b:7e:38:a2:28:91:23:72:7f:90:
                    53:df:45:48:64:4f:df:6f:d1:07:ea:a6:aa:17:94:
                    44:e5:49:50:10:09:06:63:65:28:77:da:25:6b:ba:
                    e6:a9:32:70:6b:5d:40:78:f1:c0:a7:f1:00:6a:b6:
                    20:8a:3c:1c:4b:63:c6:50:4b:bb:e5:b9:1d:ee:76:
                    eb:4f:af:1a:d5:7e:2d:2a:49:4e:e8:ff:55:31:22:
                    83:ea:c0:67:4a:81:18:95:6c:04:54:01:da:ff:b0:
                    34:aa:81:38:48:10:05:e3:d5:9e:ae:92:9f:9c:cf:
                    98:ba:98:b9:c9:0f:ba:7f:69:82:52:32:de:ed:67:
                    62:14:d5:12:d0:84:9e:61:b9:df:c4:36:e5:a0:f4:
                    8a:d1:ee:4d:e3:b4:ab:65:49:2e:05:08:3a:8a:4d:
                    d7:77:82:bf:08:e1:85:87:33:8c:82:08:01:02:36:
                    17:a0:70:35:ac:9b:93:7b:40:2d:45:07:87:5b:85:
                    7d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:AB:D6:31:43:CF:A7:3F:91:1B:68:F7:38:D8:FB:B0:1A:9F:ED:94
            X509v3 Authority Key Identifier:
                keyid:B2:D0:46:D1:4F:E7:B7:7F:62:DE:89:6E:BF:0A:81:54:13:A5:89:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:95:d1:27:24:82:9d:a4:66:a2:a7:43:16:8f:15:00:82:e7:
         21:87:22:f6:0d:06:1d:3c:f9:76:e5:e2:66:35:48:f0:6d:54:
         12:cb:e0:48:78:0e:62:da:6c:d9:2f:d5:8b:cd:89:8f:45:c1:
         a4:42:b6:13:3b:8e:d7:eb:6b:3e:f4:51:0d:98:4a:17:8d:e4:
         b9:6e:3c:8e:ac:10:4f:02:2d:b3:ce:61:8c:67:10:62:af:d0:
         dc:fa:7e:3b:20:61:ad:b3:bf:08:b1:bf:d2:ea:33:b2:d0:64:
         d4:39:04:45:55:12:11:10:c9:67:e7:ce:2f:db:bd:33:0c:5a:
         2b:50:c4:aa:11:5e:d3:48:00:7a:1c:89:8b:c0:75:3c:9f:6d:
         a1:05:50:c6:b2:ab:96:31:f4:de:cb:ea:6a:8b:48:60:e3:c7:
         f3:e2:d6:37:e1:2c:e4:a7:97:cb:f1:0d:0c:41:c1:47:c5:71:
         6d:9c:1f:9d:d2:a8:c4:17:52:96:8e:21:c6:e2:29:3c:f9:ba:
         0f:ec:a1:06:3e:d8:af:ec:31:bf:c9:8f:7c:c1:d8:c5:83:9f:
         6d:4a:33:79:33:08:3f:00:63:b2:8d:f9:94:5a:20:42:cb:32:
         b4:2e:53:b1:91:8b:b7:de:23:40:68:fb:e8:a4:fa:a9:df:a9:
         05:d9:15:9e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 18 03:24:41 2026 by rpki-client