Error: rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
File:                     CD119443A2689BA4FC616BCD6929E636B5032FC0.mft (raw, json)
Hash identifier:          AJABjf2WMfWaSJkD2sQ1x5lX0wAAoZfHN3Z/rC9ab9M=
Subject key identifier:   47:D4:94:8F:7C:FE:09:C1:DD:63:53:B2:3A:CA:C1:3A:9A:54:C5:1C
Authority key identifier: CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0
Certificate issuer:       /CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
Certificate serial:       3ED0429DEE0DD30EC2EC3A4B6F1BD19B3C6EFCF0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
Manifest number:          04CC
Signing time:             Thu 15 Oct 2026 20:40:09 +0000
Manifest this update:     Thu 15 Oct 2026 20:35:09 +0000
Manifest next update:     Fri 16 Oct 2026 23:37:09 +0000
Files and hashes:         1: 323830343a3632383a3a2f33322d313238203d3e203533303239.roa (hash: wLIsioKqEUKS9TMeNf/n9LEYrLxpZbmg2+NMq5W8NRo=)
                          2: 3137372e3132392e3131362e302f32322d3332203d3e203533303239.roa (hash: 9NaA8Dq04c7j0pLtLEkFvCIZPUGfEE8aa950uY+eEJs=)
                          3: CD119443A2689BA4FC616BCD6929E636B5032FC0.crl (hash: GN5nFEfkOKdTovJAwnX+hwZtW6dgQOl2F4VwvVcRlwY=)
                          4: 3137372e37332e38302e302f32322d3332203d3e203533303239.roa (hash: 2nczleJFPRyvFicJVGQltpFOvvykoBSvwigtbcxyl9Y=)
                          5: 3136382e3138312e34302e302f32322d3332203d3e203533303239.roa (hash: TYkFuf8SjQ3t06IS9rRZ02INSKe8xoCHE1pxNxqTj8E=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl
                          rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 23:37:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d0:42:9d:ee:0d:d3:0e:c2:ec:3a:4b:6f:1b:d1:9b:3c:6e:fc:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
        Validity
            Not Before: Oct 15 20:35:09 2026 GMT
            Not After : Oct 16 23:37:09 2026 GMT
        Subject: CN=47D4948F7CFE09C1DD6353B23ACAC13A9A54C51C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b4:f3:1e:70:cf:d3:46:ab:9a:4c:5d:d4:d1:
                    90:3d:b5:6c:3a:6c:eb:da:39:51:00:4b:94:3e:5f:
                    a6:f6:25:ee:4b:7e:e7:26:3b:48:2d:e9:ca:32:8a:
                    4f:16:e2:63:79:3d:66:1c:88:a8:95:d6:84:d7:d7:
                    ca:a1:04:1a:2b:a9:a8:1c:0c:3b:4a:1b:2a:2b:e7:
                    bd:ca:e2:6a:f1:c2:a0:a4:ca:c5:4a:1a:b1:8a:1f:
                    00:7a:75:b6:6b:9b:fe:69:f1:48:2d:13:b8:76:51:
                    32:c3:b7:f4:7a:3d:1f:3a:ea:69:33:b7:23:93:9b:
                    44:0a:de:a5:b5:45:d3:84:0c:21:2f:2f:f3:5e:3e:
                    57:52:3f:50:4c:55:8e:04:cb:46:b5:49:0f:a4:cf:
                    80:0d:e3:4a:89:67:4c:25:90:a7:5a:4f:5a:44:02:
                    63:87:db:e1:7a:b2:46:bf:fe:2f:d6:a3:23:1f:7d:
                    47:8d:fa:51:49:33:8e:b9:90:80:84:a4:29:09:cf:
                    05:37:9d:06:cc:43:92:a1:f4:0d:37:7c:0c:70:f8:
                    1a:6c:ef:c8:c9:b3:26:c4:5a:fe:c4:fc:8f:5d:75:
                    a3:32:eb:bc:66:4b:d4:67:1f:ec:e7:22:90:f3:48:
                    ea:7e:ff:cd:73:66:23:8d:6e:a6:63:11:3f:17:96:
                    06:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D4:94:8F:7C:FE:09:C1:DD:63:53:B2:3A:CA:C1:3A:9A:54:C5:1C
            X509v3 Authority Key Identifier:
                keyid:CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:94:61:34:ba:50:ff:c8:a4:16:d2:ee:77:df:11:4c:46:a4:
         82:e0:c8:23:e4:39:be:7f:33:0f:5b:dc:d4:bf:ed:eb:64:ff:
         04:22:e5:bd:19:af:24:cb:ef:e7:32:a9:ed:7b:61:ce:dc:de:
         db:53:07:da:5c:75:c6:4d:b7:da:ac:b7:be:09:77:5c:56:81:
         c6:75:b0:c6:4c:96:8b:6b:0a:6d:f8:bf:4e:08:20:c8:68:9a:
         3e:96:58:16:ec:10:96:23:75:78:7e:6b:4f:41:b7:d5:dc:8a:
         34:95:31:d0:3b:58:d3:60:a8:70:80:84:b1:33:c3:7b:57:cf:
         b7:3c:a8:aa:28:2b:ec:14:7a:0b:d3:74:a1:c4:9b:13:27:bc:
         43:d7:63:ea:6a:62:f8:14:97:ce:64:19:cd:6c:33:79:05:54:
         76:1c:ef:87:99:5e:e3:37:6c:4e:97:1e:c7:67:79:a6:8d:5b:
         51:0a:8a:5c:ba:2f:87:96:ec:f7:20:fa:4d:d5:8d:71:75:21:
         cf:c9:98:18:88:29:38:94:ba:b3:a2:be:cb:ac:3f:2d:6d:ec:
         d5:02:34:8e:42:b7:e4:b0:c1:46:ed:d4:fd:57:e1:47:82:61:
         78:9e:7c:36:3f:53:ce:26:87:22:60:23:bd:f0:68:53:25:ae:
         df:fc:a0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 15:52:36 2026 by rpki-client