Error: rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.mft
File:                     9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.mft (raw, json)
Hash identifier:          I+KPg7UxdhyzKkww0i5v4tBhqUCeLGkOY/FdsfWCGz0=
Subject key identifier:   D9:D5:A4:EC:85:35:FF:D5:CD:98:17:6E:B4:08:2F:BA:1D:38:F5:4B
Authority key identifier: 93:39:F7:20:CF:D0:D8:F9:1A:9A:8F:91:6D:79:32:CE:BE:30:10:CD
Certificate issuer:       /CN=9339F720CFD0D8F91A9A8F916D7932CEBE3010CD
Certificate serial:       28FC98F2A689B553BCFEBA0CC248D74343A49182
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.mft
Manifest number:          04CD
Signing time:             Thu 15 Oct 2026 07:36:19 +0000
Manifest this update:     Thu 15 Oct 2026 07:31:19 +0000
Manifest next update:     Fri 16 Oct 2026 08:05:19 +0000
Files and hashes:         1: 34352e362e3131322e302f32322d3234203d3e20323636313331.roa (hash: G+u+yeQhMm1Rf3dbF8tccfibTp4Y4YlBPa2x50GOIPI=)
                          2: 323830343a336232303a3a2f33322d3438203d3e20323636313331.roa (hash: RFZszXUiPzGQQda3rbF2BmQC5UIx2brRnxbtZwvJ4zs=)
                          3: 9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.crl (hash: qVicXq2WUGYraVKPO6xNv+7WatqjtvIBVPjXHTVYFPA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.crl
                          rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 08:05:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:fc:98:f2:a6:89:b5:53:bc:fe:ba:0c:c2:48:d7:43:43:a4:91:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9339F720CFD0D8F91A9A8F916D7932CEBE3010CD
        Validity
            Not Before: Oct 15 07:31:19 2026 GMT
            Not After : Oct 16 08:05:19 2026 GMT
        Subject: CN=D9D5A4EC8535FFD5CD98176EB4082FBA1D38F54B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3b:89:7a:3e:12:6a:cb:23:ea:86:c8:4e:0f:
                    12:d3:b1:d2:d9:ac:5c:d1:ac:73:3a:c1:93:c8:ba:
                    6f:3e:de:3b:d4:26:2c:00:38:ae:2e:c7:0e:b7:44:
                    17:6b:f6:0d:bb:3d:0e:4b:d9:d7:18:42:8f:07:b3:
                    f2:17:a1:24:51:3a:4f:5d:d0:93:b9:d2:d9:e6:42:
                    ac:09:12:ab:61:5f:89:92:ad:5a:01:36:0b:18:07:
                    1d:68:3c:3f:10:76:06:30:1c:6d:68:90:73:91:2c:
                    27:a3:66:d5:f5:7c:69:c4:0f:a3:30:b9:fa:4c:48:
                    de:6f:dd:77:87:7f:1d:b6:8e:fd:f9:8c:ce:67:dc:
                    24:25:89:b2:70:3f:37:28:b0:e7:6f:ee:a6:e9:f0:
                    3e:8f:6b:5d:19:db:4b:2d:06:86:cc:20:6f:8d:2b:
                    64:e1:99:8f:5c:f4:76:c5:73:f2:71:cd:ec:32:85:
                    6f:9c:31:9f:b2:ed:6e:af:99:08:63:7d:96:b5:72:
                    14:5a:49:3f:d0:9f:7c:2d:20:2f:31:80:3b:32:27:
                    9d:94:d5:12:a6:70:f0:dd:78:dd:c4:fa:78:97:79:
                    2c:61:53:4d:1c:4c:91:54:77:e8:b5:25:08:e4:7d:
                    be:e8:6c:fd:43:61:a5:4d:07:22:97:8f:08:85:20:
                    9b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D5:A4:EC:85:35:FF:D5:CD:98:17:6E:B4:08:2F:BA:1D:38:F5:4B
            X509v3 Authority Key Identifier:
                keyid:93:39:F7:20:CF:D0:D8:F9:1A:9A:8F:91:6D:79:32:CE:BE:30:10:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:82:35:35:71:57:5a:79:bf:e3:bb:eb:b2:be:bc:2f:3c:2b:
         69:2c:c7:3a:cd:d4:9d:71:ab:1a:7a:c7:7c:1c:93:23:67:26:
         d7:49:6b:13:ea:e9:2f:06:77:84:b5:9e:e7:a6:ea:97:2c:ae:
         68:8c:45:8d:15:12:01:7a:46:95:1e:e3:c8:6d:92:f2:ad:0e:
         99:f0:5a:90:74:3b:84:3e:94:de:98:f5:c3:98:d3:91:3a:b2:
         fa:62:0f:38:98:ba:4c:1d:11:8b:70:a8:ae:1c:b1:4f:a8:8e:
         82:a0:88:44:4d:d2:32:08:78:05:89:f4:3d:f3:59:e9:64:1f:
         13:17:06:e4:6a:81:f7:bb:d3:9d:91:63:b3:f8:ee:79:55:f7:
         4b:bf:bc:b3:73:bb:6f:3b:dd:10:05:06:73:fe:75:6f:b5:3d:
         db:1f:59:77:b0:79:52:1a:c6:20:df:78:71:3e:e3:42:09:23:
         04:5b:8f:a0:43:83:a1:c7:f5:97:35:ca:8e:b0:d6:23:99:a1:
         ec:28:2b:91:9d:f5:24:df:ce:9a:6c:30:0d:37:fc:66:a3:74:
         6a:f4:67:cb:59:db:4c:73:e1:6e:7e:4b:b2:ed:58:d8:ee:4c:
         21:18:2e:e0:4b:2c:dd:7f:d4:c1:b9:9c:2e:7b:e8:fa:bc:58:
         4e:11:a8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:49:08 2026 by rpki-client