Error: rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.mft
File:                     F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.mft (raw, json)
Hash identifier:          JzdDZCSDMSns5oGDd14gnaxT5Bq1stcdW7/jnDhBhEE=
Subject key identifier:   1F:06:75:14:1C:64:50:F5:1D:D2:87:F4:70:DC:A4:2A:61:C5:CF:4E
Authority key identifier: F4:50:62:DE:52:8E:3F:9E:B3:E8:78:F8:DE:D6:EB:8B:8D:7E:35:87
Certificate issuer:       /CN=F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587
Certificate serial:       0751E5853AFBE1757F2BF5FFFD3FE61F50B74A52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.mft
Manifest number:          0568
Signing time:             Mon 12 Oct 2026 07:30:00 +0000
Manifest this update:     Mon 12 Oct 2026 07:25:00 +0000
Manifest next update:     Tue 13 Oct 2026 07:30:00 +0000
Files and hashes:         1: 323830343a366662343a3a2f33322d3335203d3e20323730363738.roa (hash: rc85CFl6sgDZ5h/dq3oIdbo8WefnMOtaFYgA98s2Wz4=)
                          2: F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.crl (hash: K9f3ln2Bx1KAbLGtordI27J9+rs1B76SyK5dKIhxt9E=)
                          3: 3137372e3232312e3138382e302f32322d3234203d3e20323730363738.roa (hash: DS3KCq/HmM/Ew0vugtZALaaOxAduHDC1H5b07+jpLaY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.crl
                          rsync://rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 07:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:51:e5:85:3a:fb:e1:75:7f:2b:f5:ff:fd:3f:e6:1f:50:b7:4a:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587
        Validity
            Not Before: Oct 12 07:25:00 2026 GMT
            Not After : Oct 13 07:30:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:88:ae:ce:3e:28:7f:29:aa:e1:37:61:70:26:
                    e3:93:3c:ca:f9:59:c4:0e:44:c5:65:53:12:9d:72:
                    f5:3e:c4:91:fc:27:05:88:8b:91:23:85:31:49:6d:
                    c3:5a:73:44:49:56:b8:ca:1c:66:96:30:8c:aa:8b:
                    6b:0c:ea:e8:e0:b9:ea:58:83:cd:7f:67:90:75:70:
                    55:f4:4a:77:9f:f9:7b:e4:14:7c:7b:37:c8:b9:24:
                    07:b5:3e:e0:45:dc:f1:8d:93:65:97:d3:56:7d:41:
                    c5:95:50:be:fe:9b:05:36:d7:4d:f7:a9:99:ff:1f:
                    6b:c4:24:15:a2:6f:ff:6b:45:63:1f:6a:19:2c:27:
                    6b:83:6a:93:c4:52:14:24:3d:33:19:17:44:cb:e2:
                    01:b5:3f:4b:15:1a:8e:17:7d:f3:b5:41:4f:29:ae:
                    5e:94:f8:57:89:96:33:68:a1:f3:5b:de:d8:3c:3f:
                    db:be:d9:6c:f7:b6:39:49:86:eb:e1:86:69:35:0d:
                    15:ce:e0:a3:1e:cf:f5:66:3e:c5:34:59:4c:3a:31:
                    0d:94:5a:80:69:6d:d0:51:a4:67:c9:ec:2f:a4:d2:
                    ec:2d:ea:81:bd:82:f6:ce:d8:aa:c3:49:44:9d:2a:
                    1a:2d:28:2e:90:5f:a5:8e:60:87:c6:0d:64:9b:6f:
                    0e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:06:75:14:1C:64:50:F5:1D:D2:87:F4:70:DC:A4:2A:61:C5:CF:4E
            X509v3 Authority Key Identifier:
                keyid:F4:50:62:DE:52:8E:3F:9E:B3:E8:78:F8:DE:D6:EB:8B:8D:7E:35:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:0e:54:d1:ca:ad:8e:4a:cd:c8:2d:70:ee:e7:9f:33:8e:c8:
         b5:05:88:44:8f:83:bf:32:e3:ce:9c:6c:bb:9c:be:cb:18:00:
         37:97:82:ed:22:1f:0e:93:36:5d:d0:de:16:c1:3d:79:37:a4:
         8d:75:28:cf:00:6c:c6:05:0f:e1:12:61:c7:c4:9a:ec:16:8a:
         99:8c:99:a8:0d:c6:88:b1:f7:ba:07:e5:53:7b:b7:96:6a:b4:
         64:98:78:66:05:41:97:6b:0a:a8:6b:34:1b:6c:a0:4f:9b:47:
         b0:32:3d:3e:47:e2:f8:fa:c5:e7:f9:bb:3b:01:df:c5:a4:5e:
         48:82:38:e8:13:6c:1e:e5:14:55:94:ec:5a:f0:c4:fe:a2:91:
         16:d1:c6:bb:5f:87:c6:d1:0e:76:fe:21:e6:99:2c:88:bd:57:
         c8:88:7c:4f:a6:6e:b6:e8:16:41:74:f9:d0:7e:be:f8:bb:fc:
         2a:2f:da:36:cc:aa:e7:f0:6d:25:ad:67:ff:9f:65:60:20:41:
         29:0e:e6:66:55:4d:92:55:0b:a0:be:85:46:aa:83:3e:5e:61:
         9e:d0:b2:06:f8:a0:38:40:90:c5:2b:b1:9a:7f:2b:69:6d:07:
         ae:fa:49:cc:a6:c9:e1:2c:b9:4a:05:61:ea:ab:dd:05:3c:1b:
         40:fd:30:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 18:59:39 2026 by rpki-client