Error: rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.mft
File:                     AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.mft (raw, json)
Hash identifier:          IzdGN5EGB9eMLulCDwSR3oNEiIS8yKNqAurC3h66xOw=
Subject key identifier:   7A:1A:6F:FF:AA:56:DF:3F:D5:0C:5D:65:BE:79:D6:98:88:1C:95:6C
Authority key identifier: AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3
Certificate issuer:       /CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3
Certificate serial:       315FA736B32D587A89F5D9358A34957402E17294
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.mft
Manifest number:          04CF
Signing time:             Tue 13 Oct 2026 12:00:00 +0000
Manifest this update:     Tue 13 Oct 2026 11:55:00 +0000
Manifest next update:     Wed 14 Oct 2026 13:30:00 +0000
Files and hashes:         1: 3139302e3130332e3135322e302f32342d3234203d3e20323730393336.roa (hash: suyVJQxFSSlMNFJz6ep+N6+4RnVzd93YjC+x8+CnOQo=)
                          2: 3136382e3139372e3130352e302f32342d3234203d3e20323635343737.roa (hash: cH5xircoVxX2fIlURwlIduelRHDj4QzfCMlCF+nht/w=)
                          3: 3139302e3130332e3135332e302f32342d3234203d3e20323730393336.roa (hash: Qj4BcZi9WxmzPiYC1JGsVFmMnlRO+pXzl9u3M4xkOzM=)
                          4: AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl (hash: wLw9tL2yvFuWbsfCW1h2kP/MwJ7LRauGHn3aKAtOn5o=)
                          5: 3136382e3139372e3130342e302f32342d3234203d3e20323635343737.roa (hash: CVRAWic0EMJ3pC526p3Q7/WIg3l/by+zZ0ZpByHrrxM=)
                          6: 3136382e3139372e3130372e302f32342d3234203d3e20323635343737.roa (hash: vD4ePhiAPlTsCQKon4eQyb3yE8Su8leuU5XvXEbZXX0=)
                          7: 323830343a333463303a383930303a3a2f34382d3438203d3e20323635343737.roa (hash: y0EFE8dpHe4yxi3q83IOSWYKX/kF394+0wu5IjY4S1Q=)
                          8: 3136382e3139372e3130362e302f32332d3233203d3e20323635343737.roa (hash: 5ltVlS3Kl97Yjf/5Sc5opCe5VhlqUxevy8d9XzNoU58=)
                          9: 323830343a333463303a3a2f33322d3332203d3e20323635343737.roa (hash: 5WnT5qW6x9e/XYQVuQsSZdRUsMbS9SgduNaUds6OpBs=)
                          10: 3139302e3130332e3135342e302f32332d3233203d3e20323730393336.roa (hash: HZLoF4N4vb3MPIztZ/meVhJOaEhrWzYfaiCTVRYrHuU=)
                          11: 323830343a333463303a366530303a3a2f34302d3430203d3e20323635343737.roa (hash: kSkcYmLT3kTrA+/6WC/wGmTeeCwx7H5Lfs+prllOL70=)
                          12: 3139302e3130332e3135322e302f32332d3233203d3e20323730393336.roa (hash: +btokG+zhcSUNkznZNOfe7SFPDzKr67TekppHFk/m+4=)
                          13: 3139302e3130332e3135342e302f32342d3234203d3e20323730393336.roa (hash: CQp32iZLq25kiAzFALDiuQDj5zrp69tj8mN2ys+3uMw=)
                          14: 3139302e3130332e3135322e302f32322d3232203d3e20323730393336.roa (hash: SFRan6wUUl+qAuIJbMy9u85RZ8B4HjWtf5RbEesDQqs=)
                          15: 3139302e3130332e3135352e302f32342d3234203d3e20323730393336.roa (hash: AJwSNUqwibi6aCbSiRlHGoy7GE2RneVrt15fLiVpSHE=)
                          16: 3136382e3139372e3130342e302f32322d3232203d3e20323635343737.roa (hash: NKhhelO6RGKaDs/+G0sIJiQ1J6kRVq9sUC9DrbVdsj4=)
                          17: 3136382e3139372e3130342e302f32332d3233203d3e20323635343737.roa (hash: SzYdQ81OdRxS3LcFk0Y+PxdUupzvm7wDE50N6UqaWFc=)
                          18: 3136382e3139372e3130362e302f32342d3234203d3e20323635343737.roa (hash: 6CA4Mq/PYj8AnA4oMt7greKQTeFDPBWkxHXxynUWkps=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl
                          rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 13:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:5f:a7:36:b3:2d:58:7a:89:f5:d9:35:8a:34:95:74:02:e1:72:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3
        Validity
            Not Before: Oct 13 11:55:00 2026 GMT
            Not After : Oct 14 13:30:00 2026 GMT
        Subject: CN=7A1A6FFFAA56DF3FD50C5D65BE79D698881C956C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:24:bb:8b:49:86:25:50:89:fa:c9:0f:ce:e1:
                    47:a1:1d:b2:69:2a:11:e4:20:91:c3:6b:0e:1b:84:
                    51:8e:b1:a6:9b:6f:f3:59:fb:03:20:69:de:86:21:
                    48:63:fc:dc:96:3e:1e:86:46:40:ba:2d:38:a0:9d:
                    23:1b:5a:65:54:ae:f0:8e:ab:49:ca:a7:57:94:f7:
                    7f:87:6c:85:76:a6:1f:75:13:73:0c:c7:bc:54:7b:
                    21:ea:06:93:06:ac:97:55:ff:9e:6d:65:a3:10:3a:
                    92:46:36:62:b8:45:17:a1:61:c5:69:35:bd:62:a7:
                    f4:17:38:60:5e:41:8f:dc:c0:dd:9f:58:0d:a8:e0:
                    88:f0:68:88:78:4f:27:7b:1d:17:13:4c:04:6b:02:
                    59:a8:a5:cb:73:d5:66:0e:3d:aa:d7:9a:17:00:5d:
                    29:e5:04:21:02:08:d3:ec:26:bd:88:24:63:80:05:
                    82:28:b6:3c:d4:98:53:7c:cb:4d:7b:8b:8f:29:65:
                    53:21:ef:c5:5f:3c:1c:20:1c:3b:6e:a0:d4:b5:f3:
                    6b:d2:c5:65:57:5d:ff:0b:4c:84:12:09:18:e0:91:
                    75:7d:14:0c:72:54:85:b0:7c:65:87:bb:1e:06:21:
                    88:32:09:af:bf:03:0b:59:c5:25:82:51:f4:7a:37:
                    de:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:1A:6F:FF:AA:56:DF:3F:D5:0C:5D:65:BE:79:D6:98:88:1C:95:6C
            X509v3 Authority Key Identifier:
                keyid:AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:c9:1e:74:a3:dd:a8:02:01:14:0e:75:6e:9a:21:42:5c:d9:
         08:52:30:c2:55:ff:7d:b3:12:5d:de:4f:0f:be:57:2e:7d:50:
         64:7d:eb:b5:f5:c8:9f:fd:eb:14:1b:62:b5:24:46:41:fd:ff:
         ef:13:b6:65:17:9f:56:bd:12:2d:f2:db:d5:44:42:e4:3b:77:
         cb:38:7e:c0:a5:80:bf:fb:bb:96:86:94:3a:56:3c:5b:de:2a:
         94:34:19:34:43:c9:81:7b:01:42:44:d0:fb:23:ba:e7:58:28:
         d4:23:ab:21:d1:e2:26:9e:0f:2e:53:6f:76:6b:2b:ec:ce:af:
         28:ba:68:36:d1:26:c4:67:36:6d:da:a7:87:91:ff:51:df:19:
         da:35:37:41:d8:e2:a2:ff:a4:db:2f:6f:8b:b1:95:32:14:cf:
         47:7a:9f:db:f3:83:61:fc:24:d3:e1:62:1c:0b:6e:ca:19:f4:
         9f:7c:0f:a1:82:cd:84:ef:e1:05:71:16:84:bf:0f:c9:57:e5:
         33:32:08:7e:6d:6d:0c:9f:2c:38:9f:22:cd:f6:39:f3:62:78:
         d6:28:2f:3e:da:fd:32:47:d3:6a:9e:0b:44:40:ed:e1:7d:93:
         93:12:3b:74:c1:41:0b:df:4e:4a:6b:47:d4:6d:ea:82:9c:b3:
         54:e5:31:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:41:03 2026 by rpki-client