Error: rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.mft
File:                     E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.mft (raw, json)
Hash identifier:          QdGTYrqb84XdIIhJ37/J4oVDvH8aiPnr7/vmBhpmuTY=
Subject key identifier:   8B:9A:FF:7D:43:D4:DC:D5:80:AF:42:E1:40:92:55:B5:A0:D3:E5:B2
Authority key identifier: E6:9E:BB:EF:4F:3E:B2:DE:9A:36:8F:10:8A:81:94:F2:D4:12:59:79
Certificate issuer:       /CN=E69EBBEF4F3EB2DE9A368F108A8194F2D4125979
Certificate serial:       735AE7207007EAD185C0425E3C008CA5D8634693
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.mft
Manifest number:          0453
Signing time:             Wed 14 Oct 2026 22:59:26 +0000
Manifest this update:     Wed 14 Oct 2026 22:54:26 +0000
Manifest next update:     Thu 15 Oct 2026 23:59:26 +0000
Files and hashes:         1: 3136382e3138312e35362e302f32322d3332203d3e203532393536.roa (hash: ut6fa60POg9cfSGFJ8xm0smMZs+QqAsU7VO8vpZEmPo=)
                          2: 3137372e32322e39362e302f32302d3332203d3e203532393536.roa (hash: ARjfuGGELdFIBoenHLLQIdkFrcB99eduVbGkOMwAYas=)
                          3: 3137302e37392e35362e302f32322d3332203d3e203532393536.roa (hash: 98rLAjiX7Kh8lKDqXBdgqSTm+YzQRJ6389rme41d9ns=)
                          4: 3137372e36372e34302e302f32312d3332203d3e203532393536.roa (hash: hUguMml//JHW59W37rRMCABgZ1NFopZex2An3eobsGE=)
                          5: 323830343a3339303a3a2f33322d313238203d3e203532393536.roa (hash: 3Wiw/qk3MQZNib9D+1280kNLAuMHYPnBfjXHVc9RLKE=)
                          6: E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.crl (hash: qr93A/OKahKGPuqMZnOJJEdUxpbhefNNiv5ARWfF+T8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.crl
                          rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 23:59:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:5a:e7:20:70:07:ea:d1:85:c0:42:5e:3c:00:8c:a5:d8:63:46:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E69EBBEF4F3EB2DE9A368F108A8194F2D4125979
        Validity
            Not Before: Oct 14 22:54:26 2026 GMT
            Not After : Oct 15 23:59:26 2026 GMT
        Subject: CN=8B9AFF7D43D4DCD580AF42E1409255B5A0D3E5B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:55:38:7e:ef:14:5f:e4:0a:23:06:77:4a:c5:
                    c0:9d:b2:8c:c3:1c:6d:55:71:25:41:c7:32:a6:0f:
                    7a:99:18:4a:1f:f7:fa:3f:d6:3f:1e:e2:48:e1:06:
                    70:2e:2e:09:e4:0d:3b:c5:08:9d:be:08:01:75:9b:
                    9b:b0:e4:6f:73:1b:9f:48:5d:46:ab:c5:4f:35:45:
                    0f:cf:29:ac:56:ad:41:58:e2:76:c5:e6:9b:59:44:
                    7f:16:fe:e1:5f:63:83:bb:f6:21:23:38:ce:c3:36:
                    33:b2:e0:52:d6:16:cf:55:cf:ad:19:3e:ab:78:d2:
                    71:a8:a0:9d:b4:7f:69:16:ba:1c:5b:0a:12:53:52:
                    2c:80:b8:7a:df:b5:50:50:1e:1a:34:ae:5a:db:35:
                    aa:31:0f:fe:99:dc:8a:87:f2:27:88:a8:7b:37:46:
                    37:b6:68:9b:19:f4:bd:cf:63:64:29:28:c6:02:83:
                    16:99:c0:c4:f0:36:d5:28:a3:ff:6d:27:70:81:d4:
                    2e:fe:d7:32:03:92:33:0d:91:4e:61:64:08:e0:57:
                    47:2b:cb:6f:61:d1:16:24:3c:60:e1:3b:cf:68:26:
                    eb:33:0e:96:dd:9b:27:21:18:97:ff:a9:21:e9:c7:
                    58:85:9a:43:a2:e8:28:f2:f3:8e:e1:51:b4:c7:cc:
                    70:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:9A:FF:7D:43:D4:DC:D5:80:AF:42:E1:40:92:55:B5:A0:D3:E5:B2
            X509v3 Authority Key Identifier:
                keyid:E6:9E:BB:EF:4F:3E:B2:DE:9A:36:8F:10:8A:81:94:F2:D4:12:59:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:15:28:21:82:9b:25:4b:98:43:6c:ac:e9:da:25:ff:25:22:
         0b:1a:6e:42:9c:c8:1d:36:ff:6d:9d:94:29:a5:24:8b:b3:2e:
         39:5c:cf:f3:78:08:b5:d4:74:a7:b6:3f:ef:13:ba:8a:81:ca:
         2d:01:80:35:32:e3:da:24:e3:17:c6:dd:59:a6:ed:a3:6c:04:
         a7:c5:1c:e6:f5:b2:92:86:06:a8:ea:e4:a3:92:c6:bb:bc:8a:
         91:5e:2f:e8:0a:52:e2:91:da:ea:8b:bf:44:49:20:22:85:cd:
         dc:8b:5b:76:64:de:ef:05:dd:11:a2:c4:49:0e:6a:1a:f7:40:
         c2:57:ff:8a:46:84:a6:cf:35:f4:3c:83:92:da:16:b5:c4:d4:
         a9:94:b7:83:04:1f:c7:95:fd:cb:a6:08:4b:2f:8c:55:4d:b3:
         34:02:21:1b:f7:de:1c:d6:0e:e5:15:2c:6c:e3:87:f0:15:cb:
         9b:97:86:a5:83:58:44:92:01:ab:c0:c8:62:98:54:dd:bd:46:
         d8:60:2a:74:8c:72:f5:39:46:e6:be:c5:93:fc:30:1f:26:03:
         f2:1b:63:15:83:96:8a:09:9d:84:8b:66:ad:42:c5:72:6d:e6:
         96:94:d6:1f:dd:28:ee:0b:61:47:ff:2c:aa:e2:ed:dc:84:4e:
         55:a3:d6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:03:58 2026 by rpki-client