Error: rpki-repo.registro.br/repo/GQT5S9bX8eGBQUzJLen886rLgJSSpjrtryGzQzRTAPyL/1/E2034216C3D33DC4B66BDC1F9C8CCF14BAAE19E5.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/GQT5S9bX8eGBQUzJLen886rLgJSSpjrtryGzQzRTAPyL/1/E2034216C3D33DC4B66BDC1F9C8CCF14BAAE19E5.mft
File:                     E2034216C3D33DC4B66BDC1F9C8CCF14BAAE19E5.mft (raw, json)
Hash identifier:          +ds5y/1BGpMSIPrGN9uTYDHteD7LGNmDIIJbNlYWbgQ=
Subject key identifier:   94:55:8A:2B:11:FF:2B:1A:DF:E6:CD:DC:A7:53:FE:E6:C4:7B:50:0E
Authority key identifier: E2:03:42:16:C3:D3:3D:C4:B6:6B:DC:1F:9C:8C:CF:14:BA:AE:19:E5
Certificate issuer:       /CN=E2034216C3D33DC4B66BDC1F9C8CCF14BAAE19E5
Certificate serial:       2A5A45A8C0006F18B1EE150C6F56B4DF3C1CCEE4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2034216C3D33DC4B66BDC1F9C8CCF14BAAE19E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GQT5S9bX8eGBQUzJLen886rLgJSSpjrtryGzQzRTAPyL/1/E2034216C3D33DC4B66BDC1F9C8CCF14BAAE19E5.mft
Manifest number:          055E
Signing time:             Thu 15 Oct 2026 03:40:00 +0000
Manifest this update:     Thu 15 Oct 2026 03:35:00 +0000
Manifest next update:     Fri 16 Oct 2026 03:40:00 +0000
Files and hashes:         1: E2034216C3D33DC4B66BDC1F9C8CCF14BAAE19E5.crl (hash: jtHZwCIJZspwI4EdeY88ZgVgwXyM2wZeqIC7oJGiflY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GQT5S9bX8eGBQUzJLen886rLgJSSpjrtryGzQzRTAPyL/1/E2034216C3D33DC4B66BDC1F9C8CCF14BAAE19E5.crl
                          rsync://rpki-repo.registro.br/repo/GQT5S9bX8eGBQUzJLen886rLgJSSpjrtryGzQzRTAPyL/1/E2034216C3D33DC4B66BDC1F9C8CCF14BAAE19E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2034216C3D33DC4B66BDC1F9C8CCF14BAAE19E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 03:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:5a:45:a8:c0:00:6f:18:b1:ee:15:0c:6f:56:b4:df:3c:1c:ce:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2034216C3D33DC4B66BDC1F9C8CCF14BAAE19E5
        Validity
            Not Before: Oct 15 03:35:00 2026 GMT
            Not After : Oct 22 03:40:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c8:be:6e:b8:de:04:ab:86:4d:31:5f:04:13:
                    37:b6:e1:d8:23:84:d0:d9:e4:7e:0d:53:a9:91:57:
                    4d:da:e4:18:c7:74:5c:f2:a0:ae:40:5f:3a:6e:37:
                    88:b4:41:93:88:7c:37:0e:bd:78:7b:ea:19:b6:96:
                    13:2f:bb:9a:11:1d:e5:7f:52:5a:a4:87:9b:a2:c4:
                    c7:db:40:00:7c:c5:c0:93:dd:48:fb:ef:64:3c:71:
                    50:65:4a:37:5f:e4:88:cb:22:5a:44:43:f1:5b:a2:
                    cf:a4:ea:bc:5a:84:ed:c9:d4:62:f7:d9:68:e2:2d:
                    af:1e:f8:e0:1c:ca:0d:0a:2c:c5:f9:8a:6a:7a:ec:
                    bd:af:5b:5a:8a:c0:b5:f6:ca:dc:08:54:5b:14:81:
                    5d:3a:c3:af:d3:57:93:44:a5:e2:6c:30:dd:69:91:
                    98:3d:b6:d8:49:a2:86:19:a8:48:d4:21:bc:a9:79:
                    4d:61:bb:fc:56:05:4f:ae:92:75:87:00:4d:d8:b2:
                    ec:47:51:7b:97:c9:39:bd:f8:a2:7f:52:30:33:61:
                    51:d8:24:2d:82:38:82:dc:c4:f4:98:12:09:ff:48:
                    6a:39:ba:97:34:1c:bc:13:0d:11:af:e2:e6:6c:48:
                    a1:51:ab:ca:77:e8:a0:44:1f:d2:22:5a:6e:e8:b8:
                    d0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:55:8A:2B:11:FF:2B:1A:DF:E6:CD:DC:A7:53:FE:E6:C4:7B:50:0E
            X509v3 Authority Key Identifier:
                keyid:E2:03:42:16:C3:D3:3D:C4:B6:6B:DC:1F:9C:8C:CF:14:BA:AE:19:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GQT5S9bX8eGBQUzJLen886rLgJSSpjrtryGzQzRTAPyL/1/E2034216C3D33DC4B66BDC1F9C8CCF14BAAE19E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2034216C3D33DC4B66BDC1F9C8CCF14BAAE19E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GQT5S9bX8eGBQUzJLen886rLgJSSpjrtryGzQzRTAPyL/1/E2034216C3D33DC4B66BDC1F9C8CCF14BAAE19E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:48:8a:01:4d:34:5f:a4:40:a6:17:4a:d4:13:3d:9b:15:cb:
         e6:56:12:4f:2a:ef:47:a7:87:0f:04:d3:9c:02:84:f8:e9:e0:
         85:0e:2c:10:97:93:64:d7:f7:16:8a:c7:b4:27:8c:75:06:eb:
         93:d6:ae:6f:da:c9:9c:70:e5:35:e1:ab:78:34:5f:a8:45:67:
         be:72:04:52:78:47:4d:42:08:87:22:81:c7:f2:02:02:0e:ac:
         50:bb:aa:d0:b9:44:e6:70:5b:63:d6:20:69:01:08:b9:d2:cd:
         ac:c9:12:f9:07:8c:6e:f0:97:1a:0b:37:1a:61:ab:e4:6d:f6:
         7e:5c:92:41:29:64:d1:ed:99:88:8b:5a:ce:10:d2:dd:04:59:
         23:12:a9:fb:59:8f:97:ab:dd:82:a7:05:44:dc:84:6c:bb:f3:
         cd:8d:e2:4e:1b:ff:66:03:5a:0a:7a:23:e9:dd:e6:43:2a:a6:
         03:cc:d7:b8:5b:9d:f3:c6:9f:c8:8a:f5:11:92:5d:c5:e5:c8:
         b1:da:67:69:a2:49:ed:51:be:df:80:de:03:e3:94:9f:e7:dc:
         f9:54:31:c6:80:90:25:39:97:af:ed:4c:4f:9c:b4:32:c1:ac:
         76:01:3c:aa:36:64:e1:41:f3:d5:06:9c:03:93:f2:f0:38:ae:
         2e:e5:77:87
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Oct 15 19:14:55 2026 by rpki-client