Error: rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.mft
File:                     221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.mft (raw, json)
Hash identifier:          42kFPBZgydQkDcMvqMxp3MBcQk3zHHnm2vAmpFFpKQ8=
Subject key identifier:   66:7E:3E:E4:8B:C4:8F:DD:06:D9:A3:08:F3:7C:80:1F:30:8E:1B:D1
Authority key identifier: 22:13:38:E9:0C:9C:D3:7D:ED:85:B4:40:9F:CA:B7:BF:4F:5F:E3:AA
Certificate issuer:       /CN=221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA
Certificate serial:       7DD4F182D3E21CB5E59E9AB41685C79D4140825E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.mft
Manifest number:          0575
Signing time:             Sun 18 Oct 2026 20:00:00 +0000
Manifest this update:     Sun 18 Oct 2026 19:55:00 +0000
Manifest next update:     Mon 19 Oct 2026 20:00:00 +0000
Files and hashes:         1: 3230302e37312e36362e302f32332d3233203d3e20323636313931.roa (hash: QMkatyPiNPQKLMszTkR2WUQnFQUs19PpGn9TV366HE0=)
                          2: 3230302e37312e36342e302f32322d3232203d3e20323636313931.roa (hash: tybpJ3GwjL+dBOO4n5SwJ2vRq30ANOZmP8AKX2EPP0g=)
                          3: 3230302e37312e36342e302f32332d3233203d3e20323636313931.roa (hash: N+F6u0J2yPD+F49eJ/4UhA2mpe7el1327maAKU/Zw44=)
                          4: 221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.crl (hash: 1TQcsWQhbPYMqjhP75m5yeT8rjLPFhOwKdsGgw1DQq4=)
                          5: 323830343a336331633a3a2f33322d3332203d3e20323636313931.roa (hash: 6mXhJtRvjSEIgFUUiLlob2avhD5IklqXkSLqmiqCB8k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.crl
                          rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d4:f1:82:d3:e2:1c:b5:e5:9e:9a:b4:16:85:c7:9d:41:40:82:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA
        Validity
            Not Before: Oct 18 19:55:00 2026 GMT
            Not After : Oct 19 20:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8d:0e:1d:49:b3:a4:8d:85:f6:3e:3c:1d:ec:
                    e8:db:76:fb:60:9a:78:8d:3b:7f:14:1f:04:01:fb:
                    49:66:3b:5e:72:ba:85:18:56:f8:df:de:45:9e:fc:
                    9b:8b:01:03:ff:a3:9d:77:68:02:bf:3f:bc:6c:aa:
                    cd:44:f1:84:10:aa:1b:aa:60:3a:84:d6:f1:cb:72:
                    6a:26:52:d2:31:00:6a:01:8a:d4:ac:aa:a6:5d:9b:
                    cb:98:2a:f4:ff:8e:69:51:12:45:04:68:ed:c5:50:
                    96:f2:22:98:09:56:b2:89:65:96:0d:a8:b2:73:4a:
                    57:a6:07:00:53:1b:23:b1:b2:72:1f:24:4d:2e:2b:
                    23:95:bf:a5:a6:ce:4e:5e:ce:da:0e:3c:9a:08:3a:
                    61:76:61:62:81:a4:0a:5b:fe:17:be:49:69:4f:2d:
                    61:bb:a7:bd:57:91:45:e7:b2:83:c8:1c:bc:46:4c:
                    33:f7:91:a6:79:a2:a2:55:cb:1c:30:03:df:07:8f:
                    95:c1:82:ac:68:ef:52:80:ce:38:2e:b1:48:67:7c:
                    a7:6b:fd:82:15:0e:2a:ff:55:eb:66:f3:26:4a:19:
                    b2:07:30:b8:e3:64:9a:ea:0e:a7:5b:f7:03:d7:3d:
                    4e:2d:db:8b:86:b2:af:d6:13:ea:59:10:59:31:77:
                    c0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7E:3E:E4:8B:C4:8F:DD:06:D9:A3:08:F3:7C:80:1F:30:8E:1B:D1
            X509v3 Authority Key Identifier:
                keyid:22:13:38:E9:0C:9C:D3:7D:ED:85:B4:40:9F:CA:B7:BF:4F:5F:E3:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:30:eb:a9:5f:fe:90:9c:bb:4d:4a:68:61:96:c6:b5:6f:8f:
         8a:f5:ff:1f:36:87:b1:8c:3a:7b:f6:4e:37:d8:93:1d:06:74:
         99:4a:a2:bc:71:53:e5:4e:d0:f8:72:9e:24:3d:03:a9:97:51:
         08:a5:a3:bd:02:ba:97:98:b3:bc:02:8c:b1:c8:5c:d4:c6:4c:
         a9:47:ba:89:7d:6b:53:53:d3:94:9f:12:aa:0d:38:b4:fe:c9:
         d1:e1:a7:f0:df:3e:5a:43:0b:7e:13:3c:c0:a3:0f:73:ac:ac:
         fc:f1:53:9f:10:6f:4e:db:7f:e9:35:ef:29:ce:0d:1b:ea:81:
         7e:e5:44:03:26:9d:4d:f8:aa:1a:d1:2c:52:5e:7e:a9:87:3f:
         07:12:87:29:34:2e:15:5c:47:3e:1a:c1:98:a7:3d:75:c2:0d:
         73:30:09:fc:a6:7e:cd:0e:1f:88:db:da:a1:4d:af:b5:35:62:
         24:dc:ea:81:e7:63:b9:ba:d1:33:b1:0a:ac:e2:78:2e:73:54:
         2a:63:ea:ac:7c:05:b5:92:e9:bd:37:b0:c3:31:03:9c:fc:ec:
         cf:7d:54:63:72:af:b5:d4:57:02:0d:66:0f:12:2c:38:31:72:
         41:a6:94:3f:04:d7:8b:06:30:f8:ad:33:87:e1:69:97:7f:36:
         0b:9f:3a:c9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 19 00:47:07 2026 by rpki-client