Error: rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.mft
File:                     2E3906019F53CEC4441CD3D21CFF37C136BF24EC.mft (raw, json)
Hash identifier:          Gc0B/XtSLJdBlxkbKT67F4kv6ZIK42aIILyp8pqinbA=
Subject key identifier:   99:D7:1B:6C:C0:CA:D3:30:38:04:1C:C6:D8:33:2C:32:AD:92:21:2C
Authority key identifier: 2E:39:06:01:9F:53:CE:C4:44:1C:D3:D2:1C:FF:37:C1:36:BF:24:EC
Certificate issuer:       /CN=2E3906019F53CEC4441CD3D21CFF37C136BF24EC
Certificate serial:       341E278A9FCBDCBBC8B845F8995A6828E318455B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.mft
Manifest number:          04CF
Signing time:             Thu 15 Oct 2026 12:58:32 +0000
Manifest this update:     Thu 15 Oct 2026 12:53:32 +0000
Manifest next update:     Fri 16 Oct 2026 15:07:32 +0000
Files and hashes:         1: 2E3906019F53CEC4441CD3D21CFF37C136BF24EC.crl (hash: Yk0WpgmSqdIpWCJTmIlEh9XOv4WPbwJkawDFiDOd1UM=)
                          2: 3137372e38342e3133322e302f32322d3332203d3e203532393938.roa (hash: znF6N7PFh1mvbrBMmCOtML4RkXP/iF7dwKow+jMPHdg=)
                          3: 3137372e35332e3230302e302f32332d3332203d3e203532393938.roa (hash: /WaesXsz0Xno7VyqwEauwiLSqzzexkH4LMpPjy2BIiE=)
                          4: 323830313a38303a3231303a3a2f34382d313238203d3e203532393938.roa (hash: KnrrtfTjIFbnDXJMbjVHjGoQz09T6Hk5pzco31G8Wx0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.crl
                          rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 15:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:1e:27:8a:9f:cb:dc:bb:c8:b8:45:f8:99:5a:68:28:e3:18:45:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E3906019F53CEC4441CD3D21CFF37C136BF24EC
        Validity
            Not Before: Oct 15 12:53:32 2026 GMT
            Not After : Oct 16 15:07:32 2026 GMT
        Subject: CN=99D71B6CC0CAD33038041CC6D8332C32AD92212C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fe:3d:62:d0:99:44:32:38:ed:6c:00:1e:a2:
                    d6:4c:4c:0f:6b:d8:93:43:8b:9e:bc:e4:b5:6d:66:
                    c9:ac:02:49:96:78:97:80:6f:e5:7e:21:6f:6f:b6:
                    fa:d4:66:7b:17:75:67:8f:9c:3a:bf:f7:58:4e:9a:
                    84:b7:2f:0c:20:35:73:d0:2d:52:60:98:c6:03:c5:
                    51:3d:70:89:e6:3d:84:1b:8c:37:2f:2e:52:13:dc:
                    2f:b4:d3:cb:a0:8b:8b:0c:16:dd:3c:57:0e:21:50:
                    c9:d8:a0:ca:fc:e9:ac:ba:0d:bb:b4:aa:68:89:74:
                    d2:18:5f:27:d6:34:54:58:52:93:63:f6:77:05:e2:
                    db:45:d2:7b:93:17:c1:d5:85:88:32:82:44:9b:5a:
                    bd:2f:e5:e4:9f:c0:01:ca:11:95:46:a5:a7:d2:8b:
                    f6:53:0d:db:1a:2e:e3:1f:96:fc:6d:c9:e1:b6:aa:
                    6a:19:3c:08:61:23:16:f5:af:e8:ab:35:30:34:32:
                    a8:48:91:79:38:bf:4b:a7:20:26:66:bc:e5:cb:b6:
                    18:67:26:01:c7:77:33:a9:6b:84:64:c0:e6:42:57:
                    36:b0:52:60:6d:69:ca:86:ef:21:5f:2b:75:bd:39:
                    22:5d:e2:da:d2:2b:27:04:66:a2:7a:1f:3d:e0:29:
                    a1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D7:1B:6C:C0:CA:D3:30:38:04:1C:C6:D8:33:2C:32:AD:92:21:2C
            X509v3 Authority Key Identifier:
                keyid:2E:39:06:01:9F:53:CE:C4:44:1C:D3:D2:1C:FF:37:C1:36:BF:24:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:d6:1e:be:51:20:12:50:57:61:4b:a8:64:2c:d1:27:4a:68:
         30:da:50:fe:4e:ae:0c:13:37:48:fb:8c:3d:bf:91:49:a2:b9:
         b8:34:42:45:c0:be:70:b0:29:e2:88:45:7c:5a:0a:79:6d:79:
         8c:22:48:86:08:3c:d0:e1:85:ab:e3:5f:10:7f:3e:a2:25:2a:
         80:29:67:6c:d9:ff:c9:43:32:d3:86:85:d1:54:80:89:f4:74:
         6f:a6:a3:39:e2:15:25:47:d0:f4:ac:02:20:04:da:35:66:2a:
         ad:fc:bf:d5:ae:13:16:ca:54:ad:81:21:e0:ef:65:dd:fe:d9:
         cc:55:9b:f4:b5:35:6a:37:bf:bf:67:fb:2d:65:0d:52:6b:e2:
         3b:97:b2:b7:2d:8f:ec:75:b4:74:dc:c3:f8:dd:f7:fe:2f:e9:
         1e:be:cf:41:b6:3c:81:79:6b:8c:3e:bc:3f:57:de:8b:24:d4:
         49:29:a2:46:20:c5:79:35:f3:49:fb:c9:74:43:02:30:b1:c0:
         b8:e5:01:16:9d:f7:45:f0:83:b4:a5:a8:f1:21:85:47:fb:0d:
         24:05:46:4c:c2:3f:a8:6e:7e:26:1b:fb:0e:c1:8a:d3:f6:93:
         d9:0d:e8:54:94:08:e9:c2:82:26:97:b0:7e:b9:81:66:a1:de:
         55:ff:97:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:26:28 2026 by rpki-client