Error: rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.mft
File:                     B45683C1BB4344BEACD72830DD6175D3188D8B0A.mft (raw, json)
Hash identifier:          14WgeQlGmHmWc/RKqqQ8oVUr/GjiopitPmLlyxlUVHs=
Subject key identifier:   81:EC:1C:9E:D5:1A:1F:97:3C:AB:26:F1:47:D8:6B:84:03:84:C6:BB
Authority key identifier: B4:56:83:C1:BB:43:44:BE:AC:D7:28:30:DD:61:75:D3:18:8D:8B:0A
Certificate issuer:       /CN=B45683C1BB4344BEACD72830DD6175D3188D8B0A
Certificate serial:       63C0761D09A61EB5B1FED212FF35DA187876D08A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.mft
Manifest number:          056E
Signing time:             Wed 14 Oct 2026 20:20:00 +0000
Manifest this update:     Wed 14 Oct 2026 20:15:00 +0000
Manifest next update:     Thu 15 Oct 2026 20:20:00 +0000
Files and hashes:         1: 323830343a316135383a3a2f33322d3335203d3e203631383535.roa (hash: N1TSHRs4e3yyYcCA+FN3Ea1ZRsQUiFJ3yNsDsim5UDI=)
                          2: B45683C1BB4344BEACD72830DD6175D3188D8B0A.crl (hash: IdHPS3NU/JKXsiNTnXMyAKVZqCkv4K1t8Q4dxHOIXvY=)
                          3: 3133312e302e342e302f32322d3234203d3e203631383535.roa (hash: Y5Z0CQaEr/dwqDkaTrRESskpnXsYVXiY/jjRgICP5UQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.crl
                          rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 20:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:c0:76:1d:09:a6:1e:b5:b1:fe:d2:12:ff:35:da:18:78:76:d0:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B45683C1BB4344BEACD72830DD6175D3188D8B0A
        Validity
            Not Before: Oct 14 20:15:00 2026 GMT
            Not After : Oct 15 20:20:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cd:5e:6e:e9:6b:88:c6:5c:13:09:b1:44:f7:
                    32:8b:5e:ee:ad:b9:b5:00:5a:9d:75:bd:7e:54:53:
                    e4:d0:e8:a9:7b:ad:97:b3:46:0a:5e:7a:49:63:1b:
                    fb:cc:a6:43:44:0b:89:82:0a:72:87:e2:4b:67:a1:
                    8c:75:2d:98:d2:4e:b6:27:55:0e:8a:cf:3a:eb:dc:
                    da:b6:4b:ba:eb:2b:c9:96:9b:33:48:25:93:db:f3:
                    aa:7d:36:c5:99:a7:8d:08:fe:d1:82:bb:9d:4d:75:
                    ad:4b:8d:55:37:89:3d:21:6a:4a:6a:f6:77:d8:82:
                    5d:03:ef:ff:a3:80:fd:8f:08:c2:8a:b0:f3:7d:a2:
                    2e:8b:b5:c4:67:6d:16:0a:0a:12:d9:e3:90:c3:df:
                    be:49:c3:44:10:48:49:49:9e:47:17:a5:99:cd:79:
                    cd:09:41:3e:d6:ff:b8:d7:f0:56:f2:d2:1d:a1:d8:
                    85:9c:78:ab:9d:f6:54:e5:9f:16:9c:e6:3c:c7:92:
                    de:ff:e5:85:3c:a7:94:f4:d6:51:12:0e:de:9a:d0:
                    09:9b:06:e9:aa:75:ce:0d:7d:13:f8:4f:6c:8b:b5:
                    7f:6d:8b:6e:55:87:09:4d:22:31:3c:85:1b:46:2d:
                    5a:63:31:30:92:4a:c5:b1:d5:40:da:3b:34:6b:b1:
                    4a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:EC:1C:9E:D5:1A:1F:97:3C:AB:26:F1:47:D8:6B:84:03:84:C6:BB
            X509v3 Authority Key Identifier:
                keyid:B4:56:83:C1:BB:43:44:BE:AC:D7:28:30:DD:61:75:D3:18:8D:8B:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:79:83:ab:8e:92:d3:97:27:45:85:cc:c6:d8:6d:f6:af:21:
         f5:be:1e:a4:83:bf:ce:42:7a:8b:0b:d5:d2:5b:7c:e8:bb:f8:
         bf:55:6a:a8:b1:1c:23:63:bf:28:a9:1d:48:85:e8:a0:c1:58:
         96:98:b7:70:9b:a9:8e:cb:02:0f:c7:22:8c:20:08:0b:a0:d7:
         43:34:71:d7:70:96:e7:09:e7:71:aa:6c:ef:61:78:fe:f9:69:
         b0:50:b1:2f:f9:ec:ac:ec:33:44:d0:3d:b8:69:d7:92:e3:e6:
         1a:6e:40:84:18:c0:08:67:89:cf:b8:4a:ae:55:65:60:46:d9:
         68:d3:b8:c4:06:d0:dd:bf:6d:a6:20:da:fa:ea:2e:81:af:3c:
         4b:81:fd:57:ba:ef:59:f1:3f:27:2a:38:6d:d9:ca:6f:71:10:
         bd:82:3b:6a:89:08:24:93:e0:de:44:ca:b6:64:8a:92:9f:43:
         88:a1:8e:90:04:d6:10:f8:29:0b:e8:3e:56:ee:30:b8:5c:e7:
         89:ab:7f:1a:23:a8:d3:82:c7:d2:56:ac:8f:60:13:64:80:e1:
         29:20:82:4d:c9:a1:d6:b3:a0:80:07:77:17:b8:f7:58:33:96:
         54:e3:f7:fd:74:24:dc:9a:78:32:23:29:5b:58:43:4d:97:78:
         85:23:30:7e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Oct 15 06:49:36 2026 by rpki-client