Error: rpki-repo.registro.br/repo/E1EeHiNzW5SY9UPKcLqebstJD2RZU8NeN4ZGUyYrsvKc/0/EB8181693A9CCB6DED5E600379193536AEE60C32.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/E1EeHiNzW5SY9UPKcLqebstJD2RZU8NeN4ZGUyYrsvKc/0/EB8181693A9CCB6DED5E600379193536AEE60C32.mft
File:                     EB8181693A9CCB6DED5E600379193536AEE60C32.mft (raw, json)
Hash identifier:          DNJ1RQo77S0gr6XK0dFAsO3Be3fql81XjEzgJiYuDBc=
Subject key identifier:   69:B8:A3:54:85:50:0B:4A:DC:48:0E:CC:D1:9D:14:06:1E:25:46:BF
Authority key identifier: EB:81:81:69:3A:9C:CB:6D:ED:5E:60:03:79:19:35:36:AE:E6:0C:32
Certificate issuer:       /CN=EB8181693A9CCB6DED5E600379193536AEE60C32
Certificate serial:       491D5DCD2937417F4B7153B58F672AF8A5B2E62D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB8181693A9CCB6DED5E600379193536AEE60C32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1EeHiNzW5SY9UPKcLqebstJD2RZU8NeN4ZGUyYrsvKc/0/EB8181693A9CCB6DED5E600379193536AEE60C32.mft
Manifest number:          0482
Signing time:             Wed 14 Oct 2026 12:43:46 +0000
Manifest this update:     Wed 14 Oct 2026 12:38:46 +0000
Manifest next update:     Thu 15 Oct 2026 13:44:46 +0000
Files and hashes:         1: 3138362e3235302e3233322e302f32322d3332203d3e20323632383231.roa (hash: 6B8Mzwt3TOUVPtGcTKcCMboo1Ufo2LPC7VTidEC47Bo=)
                          2: EB8181693A9CCB6DED5E600379193536AEE60C32.crl (hash: zdrfjZ8cXXlc1z8QL/bWs0EeOKTjuUwaipuEdSG177U=)
                          3: 3138362e3235302e3233362e302f32322d3332203d3e20323632383231.roa (hash: sOhaZgD0aumMqyyRi8hTXOlN5BFW5X6lp+9dR1SBziw=)
                          4: 3138362e3235312e3130342e302f32322d3332203d3e20323632383231.roa (hash: poJDnyjej5e3iXkEgbtlXOBvDJR69BXQkq9xyDfB+WY=)
                          5: 323830343a353462343a3a2f33322d313238203d3e20323632383231.roa (hash: FRVRON+mK/mWjEchufxjKB8NyJemGovDgo3M0yZxpfw=)
                          6: 3133382e39342e3130302e302f32322d3332203d3e20323632383231.roa (hash: 9BLTKqkknCOt9w47F3H4MUblFNOe8hrPZdpzHwR/6Yg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1EeHiNzW5SY9UPKcLqebstJD2RZU8NeN4ZGUyYrsvKc/0/EB8181693A9CCB6DED5E600379193536AEE60C32.crl
                          rsync://rpki-repo.registro.br/repo/E1EeHiNzW5SY9UPKcLqebstJD2RZU8NeN4ZGUyYrsvKc/0/EB8181693A9CCB6DED5E600379193536AEE60C32.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB8181693A9CCB6DED5E600379193536AEE60C32.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 13:44:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:1d:5d:cd:29:37:41:7f:4b:71:53:b5:8f:67:2a:f8:a5:b2:e6:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB8181693A9CCB6DED5E600379193536AEE60C32
        Validity
            Not Before: Oct 14 12:38:46 2026 GMT
            Not After : Oct 15 13:44:46 2026 GMT
        Subject: CN=69B8A35485500B4ADC480ECCD19D14061E2546BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8f:69:3a:9e:d4:f4:e1:3f:68:5b:df:ea:a4:
                    11:fb:87:f5:1d:36:72:57:c9:f9:8f:7e:03:d3:0f:
                    e3:93:cb:77:cc:cd:fb:98:f1:6b:b9:18:d3:96:4c:
                    cb:f3:78:bd:51:26:84:f0:b3:b4:66:de:0f:c0:51:
                    ac:cb:bd:62:ae:f8:23:e4:45:30:5d:5e:55:b7:45:
                    23:06:94:e9:b0:44:70:8e:23:2a:ed:7b:62:de:d8:
                    85:ae:e0:6f:f6:b1:1b:a3:c6:2f:b1:d2:0c:c5:d1:
                    0e:7e:bb:22:d7:a3:be:3e:77:45:ec:ae:49:b5:3f:
                    71:0b:ff:7a:ec:14:cc:bc:83:bb:68:a3:bb:c9:ae:
                    e5:84:c6:e9:37:12:a9:54:cc:5a:1e:61:f7:06:42:
                    6a:f4:a2:4a:6c:1f:62:3d:bf:dd:58:74:92:16:4c:
                    c5:46:06:07:c4:5c:86:49:34:34:31:2f:29:08:6e:
                    cd:2b:0f:24:5a:a8:e9:51:b6:93:46:f0:90:ae:69:
                    ea:7f:d4:1b:7c:fe:56:03:b8:5a:2f:6b:e7:9b:73:
                    bf:c7:b5:71:2f:f1:8f:7b:c8:ca:a1:48:7f:35:ee:
                    87:56:ae:c3:11:bb:38:36:12:b6:86:cc:ea:f0:7b:
                    56:b7:21:38:8e:29:06:62:e2:50:08:93:29:00:f4:
                    2f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B8:A3:54:85:50:0B:4A:DC:48:0E:CC:D1:9D:14:06:1E:25:46:BF
            X509v3 Authority Key Identifier:
                keyid:EB:81:81:69:3A:9C:CB:6D:ED:5E:60:03:79:19:35:36:AE:E6:0C:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1EeHiNzW5SY9UPKcLqebstJD2RZU8NeN4ZGUyYrsvKc/0/EB8181693A9CCB6DED5E600379193536AEE60C32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB8181693A9CCB6DED5E600379193536AEE60C32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1EeHiNzW5SY9UPKcLqebstJD2RZU8NeN4ZGUyYrsvKc/0/EB8181693A9CCB6DED5E600379193536AEE60C32.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:44:29:14:b2:76:99:b6:57:b7:93:a7:4d:e5:96:5e:b2:47:
         10:06:51:33:0e:fe:6b:ed:05:98:b6:8b:36:ec:95:45:9d:86:
         7d:b8:11:3c:0d:5b:9c:5a:ac:ce:c3:13:9c:59:87:b7:b8:ab:
         9f:f0:74:57:2d:da:b4:8e:23:d1:fc:41:0b:e1:a1:3a:93:5b:
         78:90:b7:5f:c8:78:8e:cb:ac:67:b2:6c:59:df:4f:71:5d:c0:
         60:9d:f2:bb:9b:c6:a3:e3:b2:ac:e3:70:18:2a:17:fb:32:95:
         07:c6:8a:02:ee:7e:6d:57:8e:49:1a:68:06:3c:6d:4e:f9:ba:
         95:0d:00:98:44:c3:14:34:18:92:80:70:0c:6c:46:5a:b5:4f:
         9a:c4:5a:9d:0e:38:9d:4e:ab:97:f6:d8:94:5e:7e:7c:30:f9:
         ad:78:13:7b:fa:c7:12:30:eb:fd:46:12:41:c6:53:2b:25:aa:
         a2:c8:26:69:56:72:44:f8:3e:ea:35:12:5c:c9:8d:54:b9:f5:
         54:45:25:9a:bd:ab:71:d0:6a:a2:c6:ce:1d:96:be:e5:77:ae:
         e0:30:85:93:3a:cb:a4:b8:41:81:ed:dd:53:5f:3c:98:e5:b3:
         96:cd:ec:51:e9:c2:ab:eb:3e:f1:8e:0c:ee:a1:32:da:9f:53:
         fd:44:5b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:44:48 2026 by rpki-client