Error: rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/1/F204F7A503A8093CC6560627483C5834D61956E8.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/1/F204F7A503A8093CC6560627483C5834D61956E8.mft
File:                     F204F7A503A8093CC6560627483C5834D61956E8.mft (raw, json)
Hash identifier:          p6ML8ufRfKxKGzBm3/BN4v8tjLm9XJh37ez7z1G1OEY=
Subject key identifier:   BD:E3:B8:AD:0E:7D:45:01:9D:72:45:D9:29:25:39:78:CC:EF:3F:0F
Authority key identifier: F2:04:F7:A5:03:A8:09:3C:C6:56:06:27:48:3C:58:34:D6:19:56:E8
Certificate issuer:       /CN=F204F7A503A8093CC6560627483C5834D61956E8
Certificate serial:       5C4326755F02D4FE64BBA2A25F0E1F9B9351090E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F204F7A503A8093CC6560627483C5834D61956E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/1/F204F7A503A8093CC6560627483C5834D61956E8.mft
Manifest number:          03DD
Signing time:             Sat 17 Oct 2026 14:15:38 +0000
Manifest this update:     Sat 17 Oct 2026 14:10:38 +0000
Manifest next update:     Sun 18 Oct 2026 16:00:38 +0000
Files and hashes:         1: 323830343a376362383a3a2f33322d3332203d3e20323731353134.roa (hash: t02YOdmpbJ/gwvjY0C9XmZek2ku53g07yCKvizaOO9E=)
                          2: 3139302e3130322e34342e302f32322d3234203d3e20323731353134.roa (hash: ypfHZxlYifbG9wbuFOfOm0xw6aI/nHEvkPoYXZ0rA+o=)
                          3: F204F7A503A8093CC6560627483C5834D61956E8.crl (hash: vzYoZdJaVJcFVvxa2+XihUDF620c8jqSldfRj65jZ/0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/1/F204F7A503A8093CC6560627483C5834D61956E8.crl
                          rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/1/F204F7A503A8093CC6560627483C5834D61956E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F204F7A503A8093CC6560627483C5834D61956E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 16:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:43:26:75:5f:02:d4:fe:64:bb:a2:a2:5f:0e:1f:9b:93:51:09:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F204F7A503A8093CC6560627483C5834D61956E8
        Validity
            Not Before: Oct 17 14:10:38 2026 GMT
            Not After : Oct 18 16:00:38 2026 GMT
        Subject: CN=BDE3B8AD0E7D45019D7245D929253978CCEF3F0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:82:a9:c6:04:23:dc:cb:c0:c8:32:64:4f:71:
                    ac:5e:9e:d7:d6:3c:ec:97:ed:bd:6c:9d:c6:a4:8d:
                    8e:bf:f1:35:7c:3b:c1:db:7b:12:f9:2a:d4:3f:67:
                    ed:01:28:da:c6:77:bb:55:02:d4:10:b5:f4:62:0b:
                    df:3f:cd:c2:5f:0d:dd:50:f2:1d:d4:58:2e:7b:c9:
                    5e:11:e9:ac:3d:0e:56:fa:92:b4:ac:4a:7b:35:45:
                    25:ac:f9:ca:74:9a:a9:fc:8f:49:77:6e:2a:0b:86:
                    4f:64:47:95:2d:db:ed:cd:a3:03:41:57:93:78:0f:
                    b3:f5:bb:21:dd:92:29:16:75:fe:9d:10:0b:db:f4:
                    90:c0:a4:10:33:a1:4c:81:7a:2e:53:05:6b:5f:38:
                    fe:40:3a:3b:17:9b:b1:41:7f:ad:ef:24:b2:3a:04:
                    6d:03:9a:89:b9:09:38:02:9b:c2:11:f6:56:17:32:
                    d1:3e:3b:ff:6e:c3:62:6a:e0:14:56:9c:66:68:29:
                    e3:ba:2c:15:9c:d8:1c:dc:0c:63:59:d1:87:f1:f9:
                    0c:76:98:22:5a:02:0d:fb:56:b6:a9:86:66:24:6f:
                    b3:9c:9c:4a:39:db:d5:a3:89:24:9e:10:e4:59:29:
                    87:75:da:4f:47:9d:e1:08:2a:98:bb:3a:6c:58:f3:
                    8b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E3:B8:AD:0E:7D:45:01:9D:72:45:D9:29:25:39:78:CC:EF:3F:0F
            X509v3 Authority Key Identifier:
                keyid:F2:04:F7:A5:03:A8:09:3C:C6:56:06:27:48:3C:58:34:D6:19:56:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/1/F204F7A503A8093CC6560627483C5834D61956E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F204F7A503A8093CC6560627483C5834D61956E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/1/F204F7A503A8093CC6560627483C5834D61956E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:9d:9d:6d:a0:cf:3c:58:df:ae:fe:7b:4f:2c:f0:59:8a:1b:
         f7:b0:fe:c8:42:34:76:21:a3:87:5c:7d:4c:71:2f:09:83:a8:
         55:d9:a0:a6:3b:79:46:06:aa:98:90:49:a4:33:02:8c:64:b8:
         bd:d7:da:75:d6:a9:b8:7a:3f:11:c6:42:d4:b7:2f:7a:5f:db:
         6d:59:9c:a2:9f:af:e4:73:57:47:5c:d4:8e:2c:95:47:ba:b3:
         5d:7a:75:95:58:dd:bc:05:1a:ed:0b:d2:4a:01:d8:a9:24:80:
         a5:35:b0:d9:f1:73:b8:13:7e:6c:55:89:00:e7:6d:e3:ce:f0:
         90:dc:35:92:6d:9d:f5:1f:10:42:0c:9f:0d:e7:a8:54:4d:50:
         4c:3b:c4:7f:5d:06:d3:64:9b:72:d5:91:40:c4:9f:08:d0:24:
         3c:52:20:78:e8:98:13:cf:3d:f4:02:24:36:4d:b7:d7:65:08:
         2e:a5:fd:f0:b5:69:33:2a:b0:d1:fe:57:70:4f:f4:f4:6d:5f:
         86:3a:53:7c:9d:75:2d:72:0e:8a:3c:85:d6:7f:46:01:22:f4:
         0e:04:0d:3f:3c:47:c0:41:d8:f4:f1:b2:58:e0:e2:e7:a4:0b:
         c4:5c:50:8d:cb:ea:15:5f:a1:7d:85:7e:d1:3c:f5:f2:ec:50:
         f1:b4:d9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 02:42:12 2026 by rpki-client