Error: rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.mft
File:                     FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.mft (raw, json)
Hash identifier:          3FqNh1zxBcvFBKyK76lSi8QUstTaKTg7n2FZUL1Vf5A=
Subject key identifier:   42:EE:6D:DF:4B:2A:1B:5E:F5:C8:09:33:9E:1F:4C:6E:5B:07:FD:B4
Authority key identifier: FB:44:51:EF:F9:D1:A7:4F:2B:A6:C3:7C:E6:09:E7:16:2C:C4:76:E1
Certificate issuer:       /CN=FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1
Certificate serial:       75526BAC5E9E25725EE059D0A67B71812F733A1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.mft
Manifest number:          04CB
Signing time:             Sun 11 Oct 2026 20:50:00 +0000
Manifest this update:     Sun 11 Oct 2026 20:45:00 +0000
Manifest next update:     Mon 12 Oct 2026 22:52:00 +0000
Files and hashes:         1: 3138362e3139342e36342e302f32302d3234203d3e203238333334.roa (hash: GeJwwH524xmuouS1CboFWIKYfCk+7V5Z/kQBN1NO3bw=)
                          2: 3138392e35302e3232342e302f31392d3234203d3e203238333334.roa (hash: qL7TWvq1Uf6ddqk8uOjbAq6qa+Qe1LiTSUh+Bgai3+M=)
                          3: 3136382e3232372e3234302e302f32322d3234203d3e203238333334.roa (hash: 8X6t0HCZeXx+/qkN1CK81Zr21HIR4vEh9RbdyEmiUuk=)
                          4: FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.crl (hash: MSeybKJn+PiSPRqwfq6/9Kbkvhcg6rpYohpk0iHElPk=)
                          5: 323830343a316235633a3a2f33322d3438203d3e203238333334.roa (hash: 0Kb2/3m9XI6Ql0FDHX+ujKzkb9Gp2UVl3tYLSq7GdCc=)
                          6: 3137372e38372e38382e302f32322d3234203d3e203238333334.roa (hash: 0XQ2Cj7FWo9GP15BnD93tP8q6gA6othRkhwDyzwO/B8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.crl
                          rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 22:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:52:6b:ac:5e:9e:25:72:5e:e0:59:d0:a6:7b:71:81:2f:73:3a:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1
        Validity
            Not Before: Oct 11 20:45:00 2026 GMT
            Not After : Oct 12 22:52:00 2026 GMT
        Subject: CN=42EE6DDF4B2A1B5EF5C809339E1F4C6E5B07FDB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e3:72:f6:a3:95:f7:84:59:34:ef:3b:98:02:
                    34:b0:15:af:b8:e7:04:42:01:7c:e8:6b:36:ce:00:
                    95:9c:2e:37:9a:89:87:71:2a:70:ec:ba:84:8a:5e:
                    fd:55:ce:a6:c9:cc:c8:36:85:27:bb:52:59:bb:5a:
                    bb:1c:d3:46:d8:93:6e:46:0b:ee:a1:22:ee:63:c9:
                    8d:45:f6:e2:a6:94:78:7c:fb:97:e5:58:1e:63:a3:
                    84:ca:78:c6:cb:8e:57:b7:b8:18:21:53:be:1c:15:
                    46:ee:32:64:a9:21:e5:3e:b5:6c:49:8f:bd:6c:e5:
                    7e:79:40:37:22:75:76:04:d0:e7:69:a6:66:24:d3:
                    c8:9e:f8:ce:c3:99:0f:b4:9f:49:25:35:a1:aa:4c:
                    4e:29:88:db:de:4e:50:db:2c:8b:ea:e7:16:e0:fa:
                    3e:e4:5d:55:e0:c4:c2:cd:0a:5f:65:b2:56:23:f0:
                    ea:2a:3d:69:42:1c:ff:f3:8c:e5:dd:58:26:5d:80:
                    55:93:23:47:6f:2d:6b:89:0b:d2:09:4f:8d:14:c5:
                    cb:9d:76:f4:c1:e9:70:4f:7e:bb:6a:d5:fc:4f:c3:
                    c0:ed:e7:6b:54:6c:65:57:8a:30:ee:02:83:16:a5:
                    6e:c0:e4:4e:a1:9f:b4:fa:fe:2c:64:ff:65:4b:bf:
                    a1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:EE:6D:DF:4B:2A:1B:5E:F5:C8:09:33:9E:1F:4C:6E:5B:07:FD:B4
            X509v3 Authority Key Identifier:
                keyid:FB:44:51:EF:F9:D1:A7:4F:2B:A6:C3:7C:E6:09:E7:16:2C:C4:76:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:38:d1:74:48:8e:3d:5c:46:3f:ec:a6:48:cd:67:a9:a2:36:
         c6:33:82:9b:a7:5d:29:8a:51:86:32:08:38:b7:c8:ea:b5:76:
         1f:b5:2b:df:b6:d3:21:0f:50:30:9f:c1:de:73:ed:4c:b1:f3:
         2c:89:2f:45:86:6d:0c:80:92:a8:0c:33:38:09:9b:53:90:99:
         5a:0f:45:4a:f5:37:f8:ae:e2:94:9a:b7:7f:62:ff:f1:50:db:
         ad:ab:9d:53:b4:3b:4f:da:fa:42:79:11:ad:95:9d:85:ab:80:
         ec:3b:68:87:7f:4a:22:b7:e5:13:f6:10:65:c9:38:1c:a5:ea:
         db:94:6c:dd:cb:1b:b6:e0:a6:bd:de:e3:e3:4f:cf:af:96:0c:
         0a:e4:78:10:3c:2b:a6:a5:8c:be:a9:9a:1a:7f:28:25:b5:ef:
         1e:de:91:8b:62:e2:54:57:ce:66:28:76:a5:fe:ab:cc:cb:7f:
         35:33:75:e0:04:a5:91:6c:ba:06:4f:bf:f2:05:72:4c:bf:65:
         af:bb:c4:1c:14:61:f5:84:da:b5:ca:f0:96:ea:60:fd:82:11:
         ce:11:70:98:b5:13:61:f3:ec:03:29:72:dd:e3:e9:0f:20:ad:
         96:c1:f9:3e:f1:51:c6:53:ed:40:56:4d:94:d4:8b:83:6f:67:
         90:23:e8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:22:07 2026 by rpki-client