Error: rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/1/73E65EE174B429E845F371CDDD00B81BC489A017.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/1/73E65EE174B429E845F371CDDD00B81BC489A017.mft
File:                     73E65EE174B429E845F371CDDD00B81BC489A017.mft (raw, json)
Hash identifier:          kJfwsqr927jUVUJlh3sJBTUCymsUKi62pSh3naJUcMs=
Subject key identifier:   33:A1:30:10:B3:18:1D:16:CE:BF:F7:3E:BD:C8:7F:A9:4B:90:C1:D4
Authority key identifier: 73:E6:5E:E1:74:B4:29:E8:45:F3:71:CD:DD:00:B8:1B:C4:89:A0:17
Certificate issuer:       /CN=73E65EE174B429E845F371CDDD00B81BC489A017
Certificate serial:       7EAD52F44F3E48D51BD6DD49C0847E50E4F194DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73E65EE174B429E845F371CDDD00B81BC489A017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/1/73E65EE174B429E845F371CDDD00B81BC489A017.mft
Manifest number:          056F
Signing time:             Thu 15 Oct 2026 12:30:00 +0000
Manifest this update:     Thu 15 Oct 2026 12:25:00 +0000
Manifest next update:     Fri 16 Oct 2026 12:30:00 +0000
Files and hashes:         1: 73E65EE174B429E845F371CDDD00B81BC489A017.crl (hash: sX9KwBACbyerDiFXqeOx9/s2JemB4HOGb0GGxs4txXo=)
                          2: 3138392e38352e3131322e302f32322d3234203d3e20323730353430.roa (hash: O4Lnv+fUZ2wky7BEiL4gZFmBQzTpz6bX1o5rua7QxnM=)
                          3: 323830343a366438633a3a2f33322d3334203d3e20323730353430.roa (hash: El4BKOcxxKp5xzXSz5ECMqCfif0JjIs3Tn51HD3PxwY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/1/73E65EE174B429E845F371CDDD00B81BC489A017.crl
                          rsync://rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/1/73E65EE174B429E845F371CDDD00B81BC489A017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73E65EE174B429E845F371CDDD00B81BC489A017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 12:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ad:52:f4:4f:3e:48:d5:1b:d6:dd:49:c0:84:7e:50:e4:f1:94:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73E65EE174B429E845F371CDDD00B81BC489A017
        Validity
            Not Before: Oct 15 12:25:00 2026 GMT
            Not After : Oct 16 12:30:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:93:c0:94:09:1f:01:ef:9a:7f:10:99:f9:10:
                    7a:30:36:ed:08:92:a9:59:94:12:26:21:e8:32:f6:
                    16:bb:7a:fb:d0:fd:6f:38:0d:4b:30:bc:4a:bd:ba:
                    ad:00:40:45:58:6d:70:a7:27:f7:35:53:54:35:1c:
                    b9:a6:ce:5e:e4:31:1c:70:04:73:3b:80:ad:9a:f1:
                    cd:80:5e:44:3b:9e:c2:01:45:63:9a:d5:47:1b:10:
                    d5:64:a6:ca:e4:db:a6:c5:aa:78:76:50:c3:ab:b7:
                    5a:96:86:5d:06:b6:05:ef:7d:dc:cf:18:c8:52:5a:
                    1a:6c:ef:5e:6a:49:35:b6:3d:77:2a:2d:16:96:d2:
                    d5:29:bb:ae:cb:db:cb:f6:e4:9c:8b:70:53:02:6e:
                    79:ee:1a:d4:7c:e3:b9:60:dc:40:dc:b8:ae:40:b0:
                    0b:17:96:6a:9e:3d:4e:91:20:02:51:c5:e3:e7:59:
                    be:91:e8:84:68:af:93:bb:bb:51:27:01:69:ea:a2:
                    bc:da:c1:7d:66:52:c0:04:7f:7c:92:a2:7a:45:ee:
                    d6:79:44:dc:b3:ec:f0:fa:18:33:75:c6:83:09:1a:
                    99:c4:84:94:a5:05:df:c2:ed:9f:52:82:32:48:c0:
                    f3:40:90:47:b4:47:5b:3d:e6:2c:21:53:39:93:49:
                    13:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A1:30:10:B3:18:1D:16:CE:BF:F7:3E:BD:C8:7F:A9:4B:90:C1:D4
            X509v3 Authority Key Identifier:
                keyid:73:E6:5E:E1:74:B4:29:E8:45:F3:71:CD:DD:00:B8:1B:C4:89:A0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/1/73E65EE174B429E845F371CDDD00B81BC489A017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73E65EE174B429E845F371CDDD00B81BC489A017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/1/73E65EE174B429E845F371CDDD00B81BC489A017.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:37:c0:2c:e6:73:7f:38:e6:99:7f:b1:db:53:b7:c4:f7:9c:
         ca:e5:7a:72:60:1c:4e:c6:cf:9a:a5:12:3d:a0:98:bc:2e:d6:
         9a:49:91:ad:ab:e4:bb:cf:73:28:23:51:d0:e6:51:d2:f7:d1:
         f6:81:53:f0:e0:f0:02:24:65:ab:77:26:57:5e:53:16:fe:1b:
         93:7f:81:e0:78:cc:ad:c9:20:11:d1:1b:e9:18:1e:7f:1b:18:
         6e:47:6e:32:20:3d:95:68:16:69:00:79:a8:09:de:92:04:5a:
         f9:17:9d:0e:5f:b9:1c:39:18:27:4c:46:d1:b0:da:96:ee:88:
         f7:94:96:34:87:c4:76:90:36:dc:04:1f:43:88:6b:7a:b3:80:
         9f:30:97:77:77:ce:02:27:b7:da:a6:43:51:cb:c8:d5:c6:af:
         b9:91:22:9b:4d:ad:b3:c1:d7:2e:e3:7c:7f:90:d2:2c:6f:54:
         c5:18:a9:4d:84:74:4a:dd:9a:9a:70:18:5e:08:48:32:31:57:
         c9:d2:68:fb:4b:96:f4:94:86:8c:d8:d4:4b:56:15:ca:c2:d4:
         34:8d:dc:7a:69:b1:06:b0:fb:28:fd:8f:30:dd:af:4d:8b:72:
         68:87:3c:d1:76:f1:23:d7:f1:0a:c4:84:64:08:04:ef:d5:2f:
         9b:74:23:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:58:52 2026 by rpki-client