Error: rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.mft
File:                     7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.mft (raw, json)
Hash identifier:          Dl+r14B7bDd8exlEh2sntA8gDqjOpV9LtHnYrCQ8bEQ=
Subject key identifier:   57:47:C4:AB:B7:D7:AF:51:CB:C7:82:83:AE:FC:F8:06:3B:32:5D:7C
Authority key identifier: 78:94:11:9F:99:DA:D3:90:51:E9:51:6F:AF:4C:2D:AA:5C:D1:BE:70
Certificate issuer:       /CN=7894119F99DAD39051E9516FAF4C2DAA5CD1BE70
Certificate serial:       1C81625767B8A380AE7C443878D6D7150A92E68D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.mft
Manifest number:          04D4
Signing time:             Wed 14 Oct 2026 18:51:24 +0000
Manifest this update:     Wed 14 Oct 2026 18:46:24 +0000
Manifest next update:     Thu 15 Oct 2026 22:35:24 +0000
Files and hashes:         1: 323830343a346137383a3a2f33322d3438203d3e20323637323432.roa (hash: ayG5Bzmf8E6Tll8mTfbLcyRo/YmraaSm33LWKq5Y+SM=)
                          2: 7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.crl (hash: MDvSb/ULlqmFZxcTztTRnXm2RyOrfL24K0iT6YZjMuY=)
                          3: 34352e3233322e33362e302f32322d3234203d3e20323637323432.roa (hash: wm5LzulkJJ0sx45wNs+CpVo56rygPBNHKlafVhbFUTs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.crl
                          rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 22:35:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:81:62:57:67:b8:a3:80:ae:7c:44:38:78:d6:d7:15:0a:92:e6:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7894119F99DAD39051E9516FAF4C2DAA5CD1BE70
        Validity
            Not Before: Oct 14 18:46:24 2026 GMT
            Not After : Oct 15 22:35:24 2026 GMT
        Subject: CN=5747C4ABB7D7AF51CBC78283AEFCF8063B325D7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:36:fa:4c:95:7f:b1:d6:29:88:e4:0b:8b:e2:
                    af:f2:fc:8f:df:89:cc:08:83:1b:ce:0f:15:25:be:
                    02:5c:ec:aa:e3:48:20:05:8f:0b:14:30:18:cd:ba:
                    11:82:d2:96:85:49:64:f0:d2:68:3a:9f:df:7d:8b:
                    33:c6:dd:7e:7d:38:bc:b6:6f:00:d7:9c:00:d1:c3:
                    da:a8:86:a0:73:0f:a2:2d:53:1a:d2:70:bf:ad:c9:
                    60:4d:f8:5e:6d:85:b9:74:65:64:81:26:06:d9:88:
                    40:82:58:cf:85:df:b3:fe:9d:2b:70:80:1b:a4:53:
                    a0:49:70:f7:e7:3a:f1:37:f3:16:47:9a:d9:9a:70:
                    6b:cf:90:3a:7a:8a:d6:5f:b3:8c:3e:0a:f7:3c:33:
                    42:f5:7f:4f:ca:1a:cc:4b:cd:d8:f1:02:5f:49:f6:
                    bc:90:d9:1d:58:c1:ec:f3:71:22:a6:5f:f8:eb:38:
                    5e:3f:c5:9d:8f:f4:9a:e9:d0:57:1f:d8:6d:85:68:
                    5f:fc:a1:d0:0d:3f:fc:31:48:6e:4a:2c:20:ed:ed:
                    5e:98:87:74:30:4e:74:48:1c:4a:19:b0:e1:85:c6:
                    0a:ee:47:6e:2a:71:9a:5a:ca:c5:e6:8d:07:c7:96:
                    3b:23:b8:80:73:1d:5a:46:d3:bd:3e:15:a0:1a:fc:
                    3c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:47:C4:AB:B7:D7:AF:51:CB:C7:82:83:AE:FC:F8:06:3B:32:5D:7C
            X509v3 Authority Key Identifier:
                keyid:78:94:11:9F:99:DA:D3:90:51:E9:51:6F:AF:4C:2D:AA:5C:D1:BE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:b8:dd:c5:d8:9a:25:5a:5e:19:db:1b:79:78:30:fe:96:98:
         50:87:03:15:fd:67:bc:17:74:8f:32:d5:7e:e0:07:64:51:86:
         e5:6a:af:b7:9b:c3:13:96:3c:82:0d:92:7a:e6:6e:ba:9b:c8:
         e7:55:eb:f9:67:da:bd:5b:a9:3d:0b:3b:5a:90:65:c9:36:7b:
         00:c5:27:a3:ad:4a:c0:5d:97:fe:5f:be:90:77:d2:d9:e0:d6:
         76:29:ac:a5:dd:6f:6d:ff:3a:4d:34:6e:ec:07:71:98:ca:71:
         13:5c:db:6c:0e:05:41:48:fc:f2:c9:e1:ca:43:e4:cd:a8:9a:
         2c:2b:7b:37:82:f5:54:51:7c:0b:e7:d9:0c:2a:7b:d1:1a:6a:
         f4:c7:20:b8:c5:3c:be:74:39:3f:3f:de:ad:fe:7b:1f:79:a2:
         0b:cb:c8:0d:bb:00:97:17:af:a2:81:38:eb:fa:42:d1:1e:05:
         e5:12:e9:55:05:49:5d:10:21:f2:48:ce:81:da:93:39:33:72:
         fe:0a:7a:25:93:79:1e:0e:4b:d5:1d:29:7b:2b:54:a8:47:e9:
         c1:ea:5e:2b:0a:01:6e:f1:da:b9:ae:cd:8f:0c:80:01:83:d6:
         0f:2e:4c:8d:e3:bc:f0:a6:53:7e:e5:28:64:62:a6:aa:47:c8:
         c3:5d:ec:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:29:45 2026 by rpki-client