Error: rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft
File:                     8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft (raw, json)
Hash identifier:          IzlSGoNPbhMkDnMnYH+q6dmiW+jBrSwYYXbv21069J4=
Subject key identifier:   CD:59:BE:AF:85:74:D9:6B:BA:E5:72:B0:93:F7:8D:85:07:3A:DE:CE
Authority key identifier: 8C:CB:AD:4C:CA:17:0E:31:C6:A6:E2:2B:17:2F:88:4B:22:4E:3C:49
Certificate issuer:       /CN=8CCBAD4CCA170E31C6A6E22B172F884B224E3C49
Certificate serial:       018A8DAA77760BF1FCB7BADEB8672BCCF345943F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft
Manifest number:          043E
Signing time:             Sun 20 Sep 2026 07:55:59 +0000
Manifest this update:     Sun 20 Sep 2026 07:50:59 +0000
Manifest next update:     Mon 21 Sep 2026 09:43:59 +0000
Files and hashes:         1: 3137392e34392e3133322e302f32322d3332203d3e20323731313936.roa (hash: NZujrVTIXEbJ/ah47MK1vGl3GMmJWho+DffI2Yz4cU4=)
                          2: 323830343a373762633a3a2f33322d313238203d3e20323731313936.roa (hash: +TjYpdAsXU+fnV67ojc5JHJAQKNZnNONC8l1uYJW+M8=)
                          3: 8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.crl (hash: SJq1yfdARBF2lj+PZ0GYe3qQuvLJ3kbRqw3E5C2nKEA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.crl
                          rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Sep 2026 09:43:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:8d:aa:77:76:0b:f1:fc:b7:ba:de:b8:67:2b:cc:f3:45:94:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CCBAD4CCA170E31C6A6E22B172F884B224E3C49
        Validity
            Not Before: Sep 20 07:50:59 2026 GMT
            Not After : Sep 21 09:43:59 2026 GMT
        Subject: CN=CD59BEAF8574D96BBAE572B093F78D85073ADECE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:92:a8:7c:7e:56:b7:90:7a:f6:9e:53:38:86:
                    d1:b7:f3:ea:dc:14:ed:e7:04:6e:d5:c2:77:2c:e1:
                    56:3c:3f:26:1b:c7:ea:37:5f:e8:bb:62:c8:4a:2f:
                    73:ab:e7:cd:fe:9b:82:94:6f:26:2a:88:a8:c8:e6:
                    3e:1e:a2:81:97:c3:a7:a5:5f:8f:68:94:12:d5:b5:
                    20:44:53:66:2e:32:48:fe:a6:23:93:9d:93:c6:a4:
                    3d:79:73:72:45:f7:9e:44:9d:78:b8:f8:60:d6:1c:
                    86:e9:0c:d1:a4:bd:b2:a5:51:43:e0:bd:a5:24:3f:
                    c9:cc:df:07:a9:62:b2:c7:36:15:d2:47:9f:84:9b:
                    1c:3a:81:a0:a3:6d:e6:7e:93:9f:39:39:a3:86:1e:
                    84:c9:4b:3c:ea:38:9b:81:60:2b:5f:90:f6:4b:e1:
                    96:9a:27:3c:78:10:84:90:02:28:83:fb:be:c4:cd:
                    05:2d:34:3a:37:d5:9c:5f:2e:a7:c3:62:ab:df:f7:
                    20:08:04:10:5c:e3:7a:34:4f:bf:e8:02:14:ea:de:
                    bd:b6:52:16:38:13:68:a8:6e:1a:96:d1:c3:c9:bf:
                    64:bc:74:c8:82:ce:09:cb:3f:09:8e:c0:5f:ee:f6:
                    8f:1e:76:da:71:7c:c2:ac:f4:68:d4:1c:e5:1f:4f:
                    85:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:59:BE:AF:85:74:D9:6B:BA:E5:72:B0:93:F7:8D:85:07:3A:DE:CE
            X509v3 Authority Key Identifier:
                keyid:8C:CB:AD:4C:CA:17:0E:31:C6:A6:E2:2B:17:2F:88:4B:22:4E:3C:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:79:66:a6:2a:9a:21:dd:ca:f3:1c:bc:6f:e3:11:16:c9:93:
         b1:96:5a:82:2d:e6:c9:7c:3b:86:8f:e9:6c:ad:13:57:73:c8:
         69:cd:8f:a8:0f:f0:2a:83:3e:5c:dd:86:75:e9:2d:4e:0d:27:
         8f:94:38:8b:cb:e8:49:38:fb:a7:bc:21:85:ad:12:a5:0b:53:
         33:7f:03:b6:c7:e3:1d:3c:9b:03:41:fd:b4:82:16:e5:65:ca:
         aa:39:b1:47:4b:56:e2:67:05:83:fa:2e:c3:60:40:4b:b6:d3:
         24:da:73:25:35:ab:0c:e8:3d:fe:4d:f2:f7:a6:73:67:81:ad:
         16:a8:29:7f:80:6a:8e:ff:21:92:a1:d7:db:6c:c0:c5:bc:f7:
         e4:02:f7:32:aa:19:a6:85:0f:29:11:1f:0b:ab:25:17:d5:65:
         1e:ee:e0:cd:a7:c5:93:c4:1b:bf:4d:61:9d:2e:85:36:b9:87:
         35:27:66:26:68:95:b8:36:44:ab:8f:9a:c6:f1:4b:17:6f:ae:
         a6:ce:f6:b1:6b:ca:b6:6b:91:1e:6a:1c:b1:9a:e7:04:98:e7:
         35:2c:63:a3:43:44:59:61:e6:90:06:a1:2c:c6:54:53:05:fd:
         e3:8d:88:b4:2a:de:c0:2f:00:39:3a:1f:76:eb:e8:01:72:0a:
         bd:cb:c7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:18:59 2026 by rpki-client