Error: rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft
File:                     AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft (raw, json)
Hash identifier:          EvulJeZpSVMeCAHS3Cl/TpfYmoYaQs+6JYgBjJyS6Fk=
Subject key identifier:   F5:A0:BF:2B:DA:A4:39:44:38:C8:8D:9C:25:6B:AF:46:BB:6B:81:7F
Authority key identifier: AA:07:8E:8F:5E:A4:EF:EF:8E:70:03:E0:A9:B2:11:65:B5:AB:81:D4
Certificate issuer:       /CN=AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4
Certificate serial:       27497C963F899A0AB47495CA5FA3EE370E20454C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft
Manifest number:          044C
Signing time:             Wed 14 Oct 2026 06:59:03 +0000
Manifest this update:     Wed 14 Oct 2026 06:54:03 +0000
Manifest next update:     Thu 15 Oct 2026 07:17:03 +0000
Files and hashes:         1: 323830343a343131383a3a2f33322d3634203d3e20323636303033.roa (hash: PwEE2yFzWkd/RQGOKXJbPG6Y0N/z1Yd/al3n0qj/auM=)
                          2: AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl (hash: 9LVOlkLALZhAwjGJs2kqBwQJExijod2PZ0qPXcHTm7Y=)
                          3: 3138312e3139312e39362e302f32322d3332203d3e20323636303033.roa (hash: rpzTvujFf5WqwOlcgDZSFzIkdHepRTqi1III3eflS2U=)
                          4: 34352e3137332e36342e302f32322d3330203d3e20323636303033.roa (hash: P6G6AZFRp5kqOosNoCryglvvtcBc6hA5DOR0IbYdZVw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl
                          rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 07:17:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:49:7c:96:3f:89:9a:0a:b4:74:95:ca:5f:a3:ee:37:0e:20:45:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4
        Validity
            Not Before: Oct 14 06:54:03 2026 GMT
            Not After : Oct 15 07:17:03 2026 GMT
        Subject: CN=F5A0BF2BDAA4394438C88D9C256BAF46BB6B817F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c9:60:52:72:ce:ff:96:60:49:e9:f9:2e:ac:
                    26:54:d0:6a:5c:24:6b:a5:90:09:c9:b2:8c:3a:4b:
                    e1:44:be:cc:ff:81:de:05:06:a1:91:75:10:05:7f:
                    5d:6a:31:4d:26:b6:66:51:06:2e:81:72:2a:5f:1e:
                    20:cf:8c:12:1f:91:7f:ed:60:29:cf:6e:d1:13:b8:
                    37:01:d8:9f:e7:32:69:2a:74:ab:6f:c5:10:bf:71:
                    88:50:a8:f8:5b:37:ab:5b:69:8e:d7:5b:a1:d7:9a:
                    cd:19:5f:35:2b:f4:c2:e9:c6:67:0c:42:20:bf:2d:
                    fc:29:70:d6:a3:5b:31:53:2e:03:f4:71:d3:77:1e:
                    f2:26:4a:6f:41:27:12:96:0c:c8:cb:13:c2:c8:3c:
                    97:dd:c5:24:c0:fd:a5:e1:8a:93:48:6c:a7:45:97:
                    c5:95:af:ad:56:d8:55:59:e1:af:f2:da:c2:27:2f:
                    9c:7e:0f:d1:bc:33:f3:8c:ec:13:c1:5e:4b:20:d3:
                    46:f9:f8:80:cc:bb:ca:83:4e:63:f1:39:bb:87:49:
                    25:2c:45:00:1e:d5:4e:c4:3c:7c:f4:43:fa:78:a5:
                    8b:4f:3b:85:9f:48:c8:55:fd:e8:94:74:6c:ae:a8:
                    df:c0:a4:6e:4b:6c:1c:6b:9f:f8:61:b3:12:7d:6d:
                    9c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A0:BF:2B:DA:A4:39:44:38:C8:8D:9C:25:6B:AF:46:BB:6B:81:7F
            X509v3 Authority Key Identifier:
                keyid:AA:07:8E:8F:5E:A4:EF:EF:8E:70:03:E0:A9:B2:11:65:B5:AB:81:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:f2:70:61:72:56:ca:6a:53:12:9b:28:49:15:8e:29:f4:a5:
         15:44:c7:b8:6a:1f:2a:58:fd:6b:d4:29:c0:39:76:f5:da:1a:
         4c:12:38:16:76:bd:26:94:f7:71:f3:11:cd:d3:bf:b7:ce:18:
         d2:9a:dc:78:11:b4:c9:a7:47:72:98:2e:f1:28:fa:85:f9:50:
         d0:99:7e:1b:ee:92:69:04:31:0e:d3:87:5a:ba:d6:ce:9a:3a:
         d5:65:01:65:1e:cb:46:11:a2:06:0b:1e:73:1d:69:a5:83:ac:
         47:1b:ef:6e:d4:5b:f7:5c:ff:3e:3d:91:49:8b:e7:61:52:b8:
         f5:76:d5:6c:c5:21:09:4a:21:1e:d3:d3:21:47:76:49:22:e4:
         f4:6f:0a:9e:6a:c2:65:2f:fb:cc:ee:f3:40:ce:47:c4:a1:0f:
         96:f1:d3:4f:4d:c7:fe:5a:43:51:f4:66:37:bf:87:f8:75:32:
         04:f2:b1:e6:ad:47:7f:74:68:05:cc:61:f8:be:a0:81:19:89:
         ae:7a:b1:74:36:9f:58:a6:af:1e:c0:cc:a2:ac:20:25:b9:23:
         05:88:d5:70:6d:96:d2:40:0e:6f:69:67:5f:6f:cd:b1:26:74:
         7d:02:69:a3:bc:09:4d:88:45:38:aa:8b:22:ed:ab:27:0f:58:
         8c:bb:b0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 00:16:18 2026 by rpki-client