Error: rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.mft
File:                     9E4DE6ACE0DBACA81C5367421F71989019428FF0.mft (raw, json)
Hash identifier:          dNAhkMZ8MOw0uUlwOAbZrR5sP0bsI/pIoGowtN8i040=
Subject key identifier:   75:B0:0D:18:13:70:1A:46:A9:FE:8D:63:6B:C7:AC:D4:AD:10:9C:68
Authority key identifier: 9E:4D:E6:AC:E0:DB:AC:A8:1C:53:67:42:1F:71:98:90:19:42:8F:F0
Certificate issuer:       /CN=9E4DE6ACE0DBACA81C5367421F71989019428FF0
Certificate serial:       231115C9BC1C7D49B58F11EE3962697FEEFC6C9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.mft
Manifest number:          04C0
Signing time:             Wed 14 Oct 2026 18:07:16 +0000
Manifest this update:     Wed 14 Oct 2026 18:02:16 +0000
Manifest next update:     Thu 15 Oct 2026 22:06:16 +0000
Files and hashes:         1: 323830343a313334303a3a2f33322d3438203d3e20323633353234.roa (hash: dUeLoznzRyIC83MIcHHfdJV+cHR06wYV/UilJQkHWXY=)
                          2: 9E4DE6ACE0DBACA81C5367421F71989019428FF0.crl (hash: 0PJ0seShuk44xlBfeNZU5Ghip6oju+w+KGgimNZRDSs=)
                          3: 3139312e3235332e32342e302f32312d3234203d3e20323633353234.roa (hash: ZZSxO1ITmI166O5+psgOiMmV3lXEBAvqKox8NAFyIw0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.crl
                          rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 22:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:11:15:c9:bc:1c:7d:49:b5:8f:11:ee:39:62:69:7f:ee:fc:6c:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E4DE6ACE0DBACA81C5367421F71989019428FF0
        Validity
            Not Before: Oct 14 18:02:16 2026 GMT
            Not After : Oct 15 22:06:16 2026 GMT
        Subject: CN=75B00D1813701A46A9FE8D636BC7ACD4AD109C68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:42:75:22:a0:54:bd:2e:08:cf:55:8a:2f:ab:
                    e4:00:bc:e3:04:f1:0b:64:3f:b8:a1:38:a3:d6:f5:
                    5e:d4:bf:3b:ba:a6:e8:57:10:bc:40:81:ba:44:34:
                    4f:ed:9a:05:78:8c:72:bf:b6:9b:6e:d0:dc:c4:3d:
                    6e:16:c6:78:30:f1:5a:ca:df:24:85:9a:2e:31:76:
                    36:7a:62:e0:a5:7e:d8:17:aa:c0:70:64:2f:fb:0b:
                    b2:1a:f2:bf:48:56:46:8c:f8:80:b1:6b:88:0f:0e:
                    df:5a:90:39:df:eb:85:22:06:a5:ac:cc:88:ae:8a:
                    18:16:8c:9a:87:3e:d8:bd:4f:40:c2:ce:14:4e:2e:
                    0e:68:e6:a3:ab:aa:eb:d7:28:b4:fa:48:44:15:5c:
                    dd:f4:6c:78:35:f3:53:50:14:7c:b1:36:0b:ef:10:
                    82:cc:3b:c5:95:26:39:06:a6:b9:c7:32:3c:46:12:
                    4c:32:88:9b:78:a7:d9:d0:b6:97:a0:01:1e:0f:47:
                    5d:75:df:38:33:12:3c:dd:ff:49:56:1a:80:a1:c1:
                    8b:fb:c7:46:5f:5f:af:80:57:82:57:81:2d:55:5d:
                    84:25:10:a5:aa:39:e3:0c:5e:d2:43:d6:42:3d:cf:
                    c2:23:51:2f:7c:e9:d2:aa:8a:3c:86:c0:6b:7b:a9:
                    ec:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B0:0D:18:13:70:1A:46:A9:FE:8D:63:6B:C7:AC:D4:AD:10:9C:68
            X509v3 Authority Key Identifier:
                keyid:9E:4D:E6:AC:E0:DB:AC:A8:1C:53:67:42:1F:71:98:90:19:42:8F:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:7a:bc:3e:ff:d2:d3:c1:d5:c6:e6:4b:71:1a:0b:e6:50:02:
         5b:92:1d:3d:7e:fc:59:43:34:80:81:b3:94:a5:2b:f7:46:a2:
         cb:72:30:96:72:1d:51:95:13:0d:52:35:d8:2b:c0:4d:3d:00:
         90:92:73:25:ed:60:9c:fb:33:ed:fd:e2:83:5e:57:17:7c:52:
         b7:e4:a7:e6:72:cf:16:cb:e8:ac:ad:fb:ee:77:86:ad:6c:c8:
         18:27:c1:01:52:0e:25:e1:a4:27:b6:6f:2b:fe:f2:a2:68:f0:
         2a:7a:52:8d:c4:03:1f:05:37:73:54:77:71:1e:42:17:77:d9:
         aa:92:0c:73:10:77:ac:ac:dd:66:7c:9a:67:0c:54:e3:78:4e:
         a1:38:78:77:d2:81:1d:b9:b3:33:d9:6f:9e:01:6b:2d:0a:be:
         9a:dd:38:ca:57:4b:77:fe:b4:20:66:87:6e:1f:6c:33:a6:ce:
         f0:ad:0d:62:69:e8:ce:a5:5c:f7:f1:2b:8c:1a:3a:bc:8d:30:
         49:77:e3:6e:c3:c8:4f:64:86:d9:bc:76:79:af:dd:65:5a:f9:
         10:ef:cc:16:f4:e0:59:e2:c7:c9:f6:e7:a1:d5:d7:ab:96:8b:
         f8:d1:f5:93:c3:e4:6a:49:9e:c9:ee:18:11:16:52:0d:22:8a:
         69:b7:33:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:46:58 2026 by rpki-client