Error: rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.mft
File:                     18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.mft (raw, json)
Hash identifier:          r4Myp15nJfZG/fQ3Fwnk0UwXIVomLr61jQYAJWyOHhA=
Subject key identifier:   3F:24:54:3B:A7:09:05:2A:A7:28:DD:53:3C:16:A6:68:18:D4:0D:DC
Authority key identifier: 18:FB:DB:75:17:89:A3:D1:CC:FA:7F:42:BC:38:F0:A8:CA:BA:F2:CE
Certificate issuer:       /CN=18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE
Certificate serial:       27EEEA8C2D0AF0BE04054DC0424F2EF37762243C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.mft
Manifest number:          04D2
Signing time:             Tue 13 Oct 2026 12:30:05 +0000
Manifest this update:     Tue 13 Oct 2026 12:25:05 +0000
Manifest next update:     Wed 14 Oct 2026 15:45:05 +0000
Files and hashes:         1: 323830343a316132633a3a2f33322d3332203d3e203631383432.roa (hash: evA4SJLFGY5+g/Oz8s+3Ci9qxUiGCjH+4UCT9q7GEz8=)
                          2: 18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.crl (hash: Hkhk9nqHcghTlfcvbeiMFZ58cd0R84Unlsi4OyYP8uQ=)
                          3: 3230312e3133312e3137322e302f32322d3234203d3e203631383432.roa (hash: SSS9DbB52itqQxi2OwrhVH0PFKSFkyzP/BMDopMK9wQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.crl
                          rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 15:45:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ee:ea:8c:2d:0a:f0:be:04:05:4d:c0:42:4f:2e:f3:77:62:24:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE
        Validity
            Not Before: Oct 13 12:25:05 2026 GMT
            Not After : Oct 14 15:45:05 2026 GMT
        Subject: CN=3F24543BA709052AA728DD533C16A66818D40DDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e9:4f:bf:a1:db:0a:4d:5c:f7:9c:6e:b4:2a:
                    09:f1:89:af:be:5e:07:e2:e9:e7:7a:58:7d:67:3a:
                    7f:c9:3c:07:06:49:5d:55:28:c0:4d:fd:0d:62:af:
                    36:ba:62:c6:30:6a:bc:eb:83:f6:60:e5:32:49:ef:
                    88:ac:df:4e:8c:6f:bf:e1:b0:39:ba:57:d0:36:c5:
                    26:30:c5:be:04:f9:1a:43:94:f1:5d:3e:48:81:50:
                    67:fa:66:40:67:23:dc:f1:1f:dc:93:32:62:90:b3:
                    82:ca:02:3d:b7:54:dc:01:29:f8:5c:d5:ff:cc:2b:
                    68:65:6d:64:f7:f8:eb:ea:29:85:94:30:27:41:98:
                    8f:2d:bb:0c:81:b4:54:91:1c:c0:dd:19:64:57:73:
                    1a:3e:dc:9c:a1:09:39:7a:cd:46:d3:f9:e5:77:b1:
                    f8:b0:ea:21:76:96:a8:12:0e:80:c3:e0:c9:e6:50:
                    70:cb:48:d9:bb:05:54:26:2a:2a:3a:97:fb:20:9b:
                    43:e9:d9:cf:fa:cc:6f:22:00:16:40:ec:64:fb:79:
                    55:36:e7:69:a7:d4:66:65:c5:6d:5d:38:1f:f1:be:
                    6a:5d:26:53:68:71:b7:44:c7:e0:72:a5:76:57:79:
                    c8:33:a5:a3:aa:aa:46:df:a5:8d:00:cd:c8:35:a2:
                    2d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:24:54:3B:A7:09:05:2A:A7:28:DD:53:3C:16:A6:68:18:D4:0D:DC
            X509v3 Authority Key Identifier:
                keyid:18:FB:DB:75:17:89:A3:D1:CC:FA:7F:42:BC:38:F0:A8:CA:BA:F2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:dd:8d:c1:de:52:83:86:5b:10:b0:7f:2e:1f:f0:9e:1b:2b:
         b3:6e:76:e5:9e:1a:c0:31:c1:51:21:1d:d3:72:72:fd:f6:d5:
         1c:2e:b0:1a:2e:1f:82:e4:85:1b:f4:d4:7a:7d:e7:99:89:8a:
         de:71:a0:a1:cf:10:9b:d3:12:16:82:80:0e:49:a2:7d:ec:0c:
         95:57:8e:2f:6c:12:93:96:76:eb:f1:f0:19:f8:23:92:12:18:
         9d:00:6f:cc:86:53:2d:b2:17:ec:fd:c0:7d:96:02:c3:20:b7:
         20:c6:65:b7:e6:b8:75:d8:8f:fc:06:cd:98:5e:bb:d3:ba:6f:
         d4:97:e9:2d:9b:df:58:f8:4b:12:e4:a3:70:4c:93:f5:a9:e7:
         fc:63:30:6e:cf:92:a3:69:a2:45:86:bf:e7:72:ad:b8:5f:6c:
         05:5c:5c:18:b1:f7:e1:29:9b:c5:61:0d:4c:31:2d:b0:6a:c3:
         e1:78:9d:c4:b8:db:9c:b6:17:61:a4:ad:18:29:83:7a:cd:40:
         b7:23:b3:4c:26:8f:b1:f8:9a:af:ef:7e:18:1b:d8:9c:cf:42:
         30:9b:be:de:91:b0:ac:7a:85:ac:73:b6:08:fd:54:3e:41:e0:
         9a:87:d4:12:b8:6b:f4:91:c5:11:e1:6c:70:55:a7:46:53:13:
         2f:ba:a8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:54:50 2026 by rpki-client