Error: rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft
File:                     C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft (raw, json)
Hash identifier:          ms8GWsL02GtHLHc1ul5aOqN4j95QV6pDbkQriCYvAD8=
Subject key identifier:   ED:79:34:C5:EB:30:11:A4:5A:5B:4A:74:E0:E1:CD:8E:19:DD:7D:57
Authority key identifier: C2:F8:4B:29:34:A2:4F:6C:FD:BE:C3:12:44:B3:FA:0C:7A:85:2B:FB
Certificate issuer:       /CN=C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB
Certificate serial:       0AA38EC5B4B50B3D643F4FEADD004498C6D499B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft
Manifest number:          04C9
Signing time:             Mon 12 Oct 2026 16:02:25 +0000
Manifest this update:     Mon 12 Oct 2026 15:57:25 +0000
Manifest next update:     Tue 13 Oct 2026 17:22:25 +0000
Files and hashes:         1: 323830343a386439343a3a2f33322d313238203d3e20323733333636.roa (hash: FMXM6tkwCOpPm//GFr0xpZdKXbvnih6mt1OxHLNbiTc=)
                          2: C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.crl (hash: dDxwWsuLt6PzSmmxuAc8Yhava3WFV+FXO+12jmUUfts=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.crl
                          rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 17:14:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:a3:8e:c5:b4:b5:0b:3d:64:3f:4f:ea:dd:00:44:98:c6:d4:99:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB
        Validity
            Not Before: Oct 12 15:57:25 2026 GMT
            Not After : Oct 13 17:22:25 2026 GMT
        Subject: CN=ED7934C5EB3011A45A5B4A74E0E1CD8E19DD7D57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6a:4c:ac:27:cf:ec:cc:6a:34:05:84:e0:49:
                    b2:c9:cd:47:98:d1:49:d9:3c:54:a0:e1:ed:c2:32:
                    b1:6e:7b:d5:d3:ff:f0:24:8c:18:3f:ab:90:9b:73:
                    cf:42:84:fb:3d:e4:f8:b7:65:0d:4a:41:fe:30:2b:
                    b3:3d:bf:13:22:67:e3:6a:34:ec:07:01:1f:a2:5e:
                    ca:1f:3e:ea:f4:40:29:57:fa:1c:32:74:f7:82:c8:
                    50:fe:80:5b:2e:d2:e5:dd:64:c5:3c:be:39:9a:b0:
                    d7:71:36:8b:a8:a8:0d:0e:63:69:3a:26:ac:d8:c2:
                    72:42:b7:bf:9f:de:77:5f:83:8a:ff:76:79:59:53:
                    7c:21:a5:ce:df:1a:ac:e9:17:0a:75:10:3a:b4:c0:
                    44:b5:d9:13:95:13:40:3b:14:a3:79:df:20:97:7c:
                    54:69:b2:9a:13:17:a5:2b:2f:2e:1e:67:7d:a5:16:
                    82:fb:79:27:c0:06:39:d4:44:5a:64:52:1f:9b:79:
                    3a:5f:46:32:d7:ff:b7:ee:98:6a:5a:56:f3:74:70:
                    ba:77:ad:df:e8:63:06:4d:05:9d:68:2f:a6:67:21:
                    a3:fe:21:4b:07:7e:19:f1:42:f2:e3:67:6b:b7:e4:
                    87:ed:f0:05:12:a8:ec:f1:cb:91:69:31:87:2d:ab:
                    b8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:79:34:C5:EB:30:11:A4:5A:5B:4A:74:E0:E1:CD:8E:19:DD:7D:57
            X509v3 Authority Key Identifier:
                keyid:C2:F8:4B:29:34:A2:4F:6C:FD:BE:C3:12:44:B3:FA:0C:7A:85:2B:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:08:95:0d:f8:15:90:f9:17:af:5f:b8:44:5e:7e:7d:25:a0:
         a1:9e:df:16:46:f7:85:70:52:6b:33:61:26:db:fa:a7:8f:d7:
         52:00:fd:be:f5:69:07:00:36:64:8b:f3:61:65:43:16:d3:01:
         00:32:f0:df:92:45:be:a2:75:89:d7:69:49:86:a2:22:b6:72:
         ae:43:5d:c1:db:2e:34:23:eb:c3:b4:b4:96:5e:30:0a:17:d7:
         3c:fc:9a:b9:d2:44:fe:08:10:35:a0:6b:ff:62:94:08:11:b7:
         43:d1:c9:cf:0b:fa:57:ed:58:c2:92:4f:5d:be:c9:24:bc:1d:
         94:72:85:bc:ce:3a:1c:2f:c0:8e:dd:d6:3f:b6:ed:f4:1a:42:
         37:1d:a4:99:45:da:12:94:a7:d1:10:05:72:2f:17:90:f1:6e:
         e0:8b:b3:96:7f:a3:00:bc:db:b6:d4:7b:e1:45:94:7c:2b:fa:
         06:9e:23:18:57:7f:84:6e:b0:b7:5a:15:74:b9:fd:29:de:7e:
         14:bc:da:2c:d9:1e:62:ec:9d:13:f9:0f:f6:a4:57:de:46:4e:
         c0:84:04:00:d3:01:71:ae:4e:f7:ff:b2:13:5a:99:77:f4:9e:
         6d:02:d4:54:74:c5:d3:8f:32:91:6f:01:69:fc:e7:26:b0:d3:
         46:f7:91:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:16:17 2026 by rpki-client