Error: rpki-repo.registro.br/repo/GoATXLY3Mftv1uPFeEHsYi9zo17fUc9pEM9EUNyhTFHL/1/E9559354384683BF395C07B365A088C5F97E64BB.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/GoATXLY3Mftv1uPFeEHsYi9zo17fUc9pEM9EUNyhTFHL/1/E9559354384683BF395C07B365A088C5F97E64BB.mft
File:                     E9559354384683BF395C07B365A088C5F97E64BB.mft (raw, json)
Hash identifier:          A3vNq1cP+VNeB6BiFtA/N+m3E3+sVJJ4kz/NE+TcZ9Y=
Subject key identifier:   3A:65:D6:1B:FC:2D:30:A3:CF:F8:71:00:27:DD:89:DB:9D:E7:A8:A9
Authority key identifier: E9:55:93:54:38:46:83:BF:39:5C:07:B3:65:A0:88:C5:F9:7E:64:BB
Certificate issuer:       /CN=E9559354384683BF395C07B365A088C5F97E64BB
Certificate serial:       6903C0E3D25BB689CCF1469FDBF96F5A96498866
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9559354384683BF395C07B365A088C5F97E64BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoATXLY3Mftv1uPFeEHsYi9zo17fUc9pEM9EUNyhTFHL/1/E9559354384683BF395C07B365A088C5F97E64BB.mft
Manifest number:          04E5
Signing time:             Tue 27 Oct 2026 18:20:58 +0000
Manifest this update:     Tue 27 Oct 2026 18:15:58 +0000
Manifest next update:     Wed 28 Oct 2026 21:23:58 +0000
Files and hashes:         1: 323830343a363237383a3a2f33322d3438203d3e20323639323939.roa (hash: JnYzV3i7iGJHAFzEU2a4Xr0c6AGpN378Zqb4QD2s0zM=)
                          2: E9559354384683BF395C07B365A088C5F97E64BB.crl (hash: iMvPD9KryY3RjQT5nVtqOwIN07jDjESBhLIww068cno=)
                          3: 34352e3138332e3234302e302f32322d3234203d3e20323639323939.roa (hash: zksJ8QHmbOEOSrRtIRdJDcllqsw1PIHU3hMpHoRW8VY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GoATXLY3Mftv1uPFeEHsYi9zo17fUc9pEM9EUNyhTFHL/1/E9559354384683BF395C07B365A088C5F97E64BB.crl
                          rsync://rpki-repo.registro.br/repo/GoATXLY3Mftv1uPFeEHsYi9zo17fUc9pEM9EUNyhTFHL/1/E9559354384683BF395C07B365A088C5F97E64BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9559354384683BF395C07B365A088C5F97E64BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 21:23:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:03:c0:e3:d2:5b:b6:89:cc:f1:46:9f:db:f9:6f:5a:96:49:88:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9559354384683BF395C07B365A088C5F97E64BB
        Validity
            Not Before: Oct 27 18:15:58 2026 GMT
            Not After : Oct 28 21:23:58 2026 GMT
        Subject: CN=3A65D61BFC2D30A3CFF8710027DD89DB9DE7A8A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bd:82:8a:f6:df:3f:54:1f:eb:8e:c5:cf:53:
                    e4:e0:5a:6a:72:04:16:d6:72:6d:22:11:ff:22:94:
                    96:c0:46:bf:28:24:53:f8:17:2e:2a:f6:f0:30:60:
                    99:42:c8:ee:a2:9e:ba:46:e3:58:c0:e0:fc:0a:aa:
                    1f:07:b4:da:de:76:5b:2a:2e:e7:2a:de:f5:d4:33:
                    f1:2a:51:9b:eb:51:87:13:39:83:97:e3:4f:e9:e3:
                    31:fd:3d:88:f9:31:f6:05:d1:0f:6d:82:20:43:35:
                    a6:06:cc:15:74:e7:98:99:08:51:29:23:a9:53:fb:
                    59:68:9f:2d:4f:52:53:e3:26:cc:c8:ef:d0:7e:7f:
                    61:6b:3b:c9:62:24:46:d7:2b:36:8b:a6:9b:a4:03:
                    16:c8:66:15:bc:f3:02:b2:c9:7a:47:ae:4a:61:8a:
                    95:71:07:f1:5e:b0:2a:c0:7f:18:db:45:2f:70:5d:
                    96:2c:d7:fe:2f:54:dd:83:6a:e1:9c:e4:ca:f5:ee:
                    5d:9f:84:ae:f9:e8:3b:78:09:a6:38:e4:15:8e:37:
                    d0:9d:4c:bf:5f:51:f1:d8:c9:de:ab:33:d7:21:52:
                    20:17:5e:d6:39:b5:f0:06:f8:0f:9e:d3:03:8c:64:
                    80:be:55:ce:f7:a7:78:7b:69:bc:69:06:db:75:87:
                    45:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:65:D6:1B:FC:2D:30:A3:CF:F8:71:00:27:DD:89:DB:9D:E7:A8:A9
            X509v3 Authority Key Identifier:
                keyid:E9:55:93:54:38:46:83:BF:39:5C:07:B3:65:A0:88:C5:F9:7E:64:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoATXLY3Mftv1uPFeEHsYi9zo17fUc9pEM9EUNyhTFHL/1/E9559354384683BF395C07B365A088C5F97E64BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9559354384683BF395C07B365A088C5F97E64BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoATXLY3Mftv1uPFeEHsYi9zo17fUc9pEM9EUNyhTFHL/1/E9559354384683BF395C07B365A088C5F97E64BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:05:11:59:e6:57:f2:cc:d3:fd:ae:ad:b6:52:24:c5:a8:83:
         df:cf:c3:6b:5d:ca:1e:9b:f0:64:f1:cc:56:c5:ae:31:6e:88:
         f0:5e:21:81:5c:ff:99:b6:9f:9d:e6:5d:9a:ef:69:b7:a4:58:
         0a:fc:95:2d:ca:4f:83:3e:2b:a9:b7:1e:68:3a:79:96:d7:37:
         1a:c8:cd:be:02:4d:9f:29:cf:7d:e7:11:8f:ff:54:08:d9:fb:
         30:bc:7b:42:00:4d:f1:91:ec:31:0c:8b:7e:b1:64:87:e9:e4:
         88:14:88:12:1f:f0:82:c3:2b:e1:dc:11:c6:4b:3b:69:b5:08:
         bb:20:a0:d0:e7:72:70:95:fe:7c:20:ea:1f:bb:c3:6d:e0:5f:
         25:31:ec:5d:79:fa:ec:c9:61:02:cd:ec:80:e9:fd:5c:4b:6f:
         b3:2f:a9:9a:73:a9:ad:eb:97:df:09:be:3a:c3:dc:8d:94:ce:
         62:dd:0a:fe:c0:a9:f3:74:8e:fd:6b:aa:da:e0:a0:ab:33:56:
         05:c1:cb:98:30:16:d2:7a:fb:55:d3:95:08:8b:b0:4d:2e:af:
         37:35:11:cf:6a:a9:ed:29:a7:0d:12:0b:1f:5b:af:e6:23:33:
         21:6a:b1:bf:de:c4:ae:ad:b4:51:b8:40:27:5e:97:b0:69:40:
         0e:5f:41:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 12:00:09 2026 by rpki-client