Error: rpki-repo.registro.br/repo/7Hvc3XtLTETGYkfNUXzTPFhPzLAJ8uF7bJq4ocLbJCu/0/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/7Hvc3XtLTETGYkfNUXzTPFhPzLAJ8uF7bJq4ocLbJCu/0/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.mft
File:                     13CD05239CCE57F514CF78D14C0E06AAAC9E9292.mft (raw, json)
Hash identifier:          DuNPKwjdyn6E8NqKtJvkY2J1IuLja+/CdBaG7/g1Sjw=
Subject key identifier:   EB:60:3C:C8:D3:8C:CB:89:02:06:DC:68:2E:F2:4B:34:D8:43:A9:28
Authority key identifier: 13:CD:05:23:9C:CE:57:F5:14:CF:78:D1:4C:0E:06:AA:AC:9E:92:92
Certificate issuer:       /CN=13CD05239CCE57F514CF78D14C0E06AAAC9E9292
Certificate serial:       656F2610B3E3C0D5670E50C8606DED0AEDDE0E53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Hvc3XtLTETGYkfNUXzTPFhPzLAJ8uF7bJq4ocLbJCu/0/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.mft
Manifest number:          02EF
Signing time:             Wed 14 Oct 2026 08:31:50 +0000
Manifest this update:     Wed 14 Oct 2026 08:26:50 +0000
Manifest next update:     Thu 15 Oct 2026 11:30:50 +0000
Files and hashes:         1: 13CD05239CCE57F514CF78D14C0E06AAAC9E9292.crl (hash: OqyOQJf0NIsHUrlzQ0GH5s33jgEkOWuB5dNrmPBwKzc=)
                          2: 3133382e302e3136342e302f32322d3332203d3e20323634353537.roa (hash: Zu4CbibibHuiR6HArJ04hoy05s8Y2LXooWHOzkB9aGg=)
                          3: 323830343a323137633a3a2f33322d313238203d3e20323634353537.roa (hash: OOTZpKI8FQtbfmgU7oV9DJryt1kSiKrkgtA/SU0iGHk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Hvc3XtLTETGYkfNUXzTPFhPzLAJ8uF7bJq4ocLbJCu/0/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.crl
                          rsync://rpki-repo.registro.br/repo/7Hvc3XtLTETGYkfNUXzTPFhPzLAJ8uF7bJq4ocLbJCu/0/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 11:30:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:6f:26:10:b3:e3:c0:d5:67:0e:50:c8:60:6d:ed:0a:ed:de:0e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13CD05239CCE57F514CF78D14C0E06AAAC9E9292
        Validity
            Not Before: Oct 14 08:26:50 2026 GMT
            Not After : Oct 15 11:30:50 2026 GMT
        Subject: CN=EB603CC8D38CCB890206DC682EF24B34D843A928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b9:99:c8:5c:5c:83:7e:df:fb:ad:8f:23:fd:
                    a1:b1:4c:d4:92:41:3e:86:50:d6:c6:f7:4f:0a:26:
                    4d:87:d5:bb:c3:df:c4:7d:da:f7:84:c7:02:c1:e7:
                    f4:9e:b9:68:5b:e9:ed:04:84:94:c4:95:1d:e7:a8:
                    3b:ff:09:ec:b2:2b:4c:77:32:dc:0a:f4:1c:4e:c2:
                    07:c8:5a:a9:b6:4c:c0:31:85:a8:69:74:ad:ca:0f:
                    a4:2f:37:3b:e2:1b:39:d4:28:cc:11:20:fb:df:37:
                    ce:7b:c8:8d:45:17:90:0a:78:85:79:cd:67:ac:25:
                    28:4e:68:e3:2b:8d:55:9d:12:fd:ac:1b:62:8e:85:
                    82:0e:7b:b9:d2:c6:ba:11:93:cc:d8:2b:b4:e0:9e:
                    3f:1d:e3:fa:2b:f9:ec:f7:ba:4e:97:8e:b1:75:96:
                    73:49:78:5c:77:77:2c:4b:f3:84:05:9a:06:33:cb:
                    46:31:69:08:1e:60:8f:96:21:c7:f5:1c:03:68:3c:
                    d4:93:a7:97:89:b4:fa:82:46:17:90:53:5c:1b:af:
                    30:17:dc:8c:5a:43:3b:88:b0:06:f0:dc:b1:5f:19:
                    01:2c:0f:a7:0e:4e:9c:9f:fc:ae:3e:8e:c4:59:c5:
                    06:06:05:fe:85:08:16:2e:45:d0:f5:61:74:90:b1:
                    98:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:60:3C:C8:D3:8C:CB:89:02:06:DC:68:2E:F2:4B:34:D8:43:A9:28
            X509v3 Authority Key Identifier:
                keyid:13:CD:05:23:9C:CE:57:F5:14:CF:78:D1:4C:0E:06:AA:AC:9E:92:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Hvc3XtLTETGYkfNUXzTPFhPzLAJ8uF7bJq4ocLbJCu/0/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Hvc3XtLTETGYkfNUXzTPFhPzLAJ8uF7bJq4ocLbJCu/0/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:da:83:b9:15:00:d1:07:65:f0:b4:18:38:68:f9:d0:ed:2b:
         aa:48:06:ad:83:28:f4:49:f4:32:da:6b:41:2d:cc:f3:b6:fb:
         60:1b:48:33:29:18:b6:1e:e6:41:f0:e0:4d:f0:8b:c3:5c:41:
         9e:27:9e:bc:38:d9:3b:d7:c2:62:16:b2:d6:e4:3b:04:6f:71:
         84:12:2e:53:0f:19:96:7e:bc:32:91:d3:eb:6f:47:62:f7:69:
         33:26:af:ff:0e:ac:ab:89:c5:fe:da:b1:0c:8e:df:67:7f:00:
         94:3d:ce:f1:96:05:ab:ca:c4:06:c0:f7:7f:02:d0:f3:80:6d:
         cd:e3:36:ec:a0:50:8d:9a:2e:a6:bc:f7:d9:fa:cb:74:a0:1c:
         64:6d:e9:db:a3:db:5c:10:2d:41:20:00:bc:e5:20:e5:c6:16:
         7c:e1:65:d7:e3:e8:d8:b8:09:56:04:51:22:32:2a:46:ca:6a:
         f9:80:6a:bd:71:25:ea:a8:42:f4:ae:b8:4a:2c:14:dd:24:f1:
         54:59:cb:7a:fc:42:92:e4:7f:4b:64:4c:ac:05:55:5e:4a:41:
         a5:3e:ac:22:fa:29:92:8f:bb:c1:32:5d:b8:c8:72:8d:98:7a:
         6b:d2:b2:d1:41:55:95:a0:36:8b:70:a5:8f:00:4d:bc:4f:67:
         b9:5a:26:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:59:06 2026 by rpki-client