Error: rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.mft
File:                     221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.mft (raw, json)
Hash identifier:          6i3EziU5IH2a70TU8M/XVhLWdtd6yPVDeejdCyslZSQ=
Subject key identifier:   BF:7C:A4:C7:9C:27:57:D4:6A:69:F7:B9:67:BA:36:7E:2C:9D:B2:5E
Authority key identifier: 22:13:38:E9:0C:9C:D3:7D:ED:85:B4:40:9F:CA:B7:BF:4F:5F:E3:AA
Certificate issuer:       /CN=221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA
Certificate serial:       375260AF25FDFBB3A4565994B4DDBD444BB62AA9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.mft
Manifest number:          0569
Signing time:             Sat 10 Oct 2026 20:00:00 +0000
Manifest this update:     Sat 10 Oct 2026 19:55:00 +0000
Manifest next update:     Sun 11 Oct 2026 20:00:00 +0000
Files and hashes:         1: 3230302e37312e36342e302f32322d3232203d3e20323636313931.roa (hash: tybpJ3GwjL+dBOO4n5SwJ2vRq30ANOZmP8AKX2EPP0g=)
                          2: 221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.crl (hash: CYbxzysUzfqGz2JL7vGmEx7dGQTCAPY9puz5hmEmpXM=)
                          3: 3230302e37312e36362e302f32332d3233203d3e20323636313931.roa (hash: QMkatyPiNPQKLMszTkR2WUQnFQUs19PpGn9TV366HE0=)
                          4: 323830343a336331633a3a2f33322d3332203d3e20323636313931.roa (hash: 6mXhJtRvjSEIgFUUiLlob2avhD5IklqXkSLqmiqCB8k=)
                          5: 3230302e37312e36342e302f32332d3233203d3e20323636313931.roa (hash: N+F6u0J2yPD+F49eJ/4UhA2mpe7el1327maAKU/Zw44=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.crl
                          rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:52:60:af:25:fd:fb:b3:a4:56:59:94:b4:dd:bd:44:4b:b6:2a:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA
        Validity
            Not Before: Oct 10 19:55:00 2026 GMT
            Not After : Oct 11 20:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:98:6b:eb:cc:c0:43:c8:79:2d:b6:13:ac:a3:
                    5b:fd:95:88:91:3d:e1:1e:26:cd:55:b2:84:2f:73:
                    f4:6c:05:cd:93:c9:17:a4:aa:3c:b0:59:d4:9a:0b:
                    d7:3f:05:de:b4:08:3f:c1:56:35:11:25:85:94:9c:
                    94:0d:2d:53:d5:56:39:53:2d:ca:2f:96:c9:fe:3b:
                    2a:53:3e:d9:8f:41:c7:0a:28:3c:84:95:35:66:d0:
                    7d:76:2b:3d:ac:1a:df:96:f2:ed:1c:ac:dd:ba:37:
                    ff:52:39:5b:62:03:68:42:13:95:17:02:54:23:ba:
                    74:1d:6d:bf:6e:42:a4:d3:de:1e:62:1d:6c:e8:2b:
                    f7:ca:5a:df:41:40:1d:07:27:ef:f7:c2:99:a5:18:
                    b1:5e:5a:ad:0e:10:64:a4:a9:5c:a7:da:a8:3d:a7:
                    b4:a7:53:00:c6:04:13:a9:48:dc:83:bf:ad:0b:fd:
                    4f:c4:f5:c7:5f:fb:39:60:f0:d8:93:9d:2c:29:04:
                    9b:cc:34:84:fa:7a:ac:2e:81:0e:ff:25:43:f3:a9:
                    91:99:ea:64:c4:9d:da:84:4a:38:3f:b3:8b:98:4b:
                    82:3d:e3:03:5d:36:2f:66:36:a3:92:c4:fe:8b:b7:
                    84:77:a1:df:f1:df:09:6b:be:4f:a5:db:9c:a8:da:
                    87:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:7C:A4:C7:9C:27:57:D4:6A:69:F7:B9:67:BA:36:7E:2C:9D:B2:5E
            X509v3 Authority Key Identifier:
                keyid:22:13:38:E9:0C:9C:D3:7D:ED:85:B4:40:9F:CA:B7:BF:4F:5F:E3:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:e3:2b:33:73:e9:75:5b:53:b3:53:8c:94:fe:fa:fd:7e:bd:
         10:44:33:1a:36:9a:7e:2f:cd:ad:e6:92:46:83:b2:02:d5:51:
         33:f7:62:1d:e6:f7:8a:c0:8d:9e:18:b1:62:50:52:99:64:de:
         3c:aa:73:da:a1:bb:b1:f2:9a:c9:39:80:9d:a0:67:da:1b:0d:
         e3:9f:ed:80:41:a6:50:10:1b:9d:b9:56:76:25:2d:c3:39:6c:
         26:e2:33:ba:9f:07:42:0d:fe:b3:d1:55:22:a8:83:5b:61:c3:
         ff:ce:ac:50:eb:46:01:12:ef:a6:f6:73:c0:94:70:79:ab:1f:
         ea:1e:e4:41:b9:87:72:fa:1c:fe:a0:4c:50:94:8a:e2:76:aa:
         54:17:1f:6f:85:6a:8a:7b:67:4e:65:df:95:9b:99:4f:bd:84:
         13:04:c6:5f:d0:6b:b3:20:14:8d:fa:43:eb:82:71:2b:ee:7e:
         c5:2c:62:e7:c0:f1:1b:26:a5:5d:6d:6f:77:f1:04:f6:b0:5f:
         88:29:e2:7a:b7:84:10:6d:7b:9e:95:ad:26:c4:d0:7d:c2:a2:
         c5:6b:0a:af:e0:7c:5c:1b:09:70:bc:8b:ae:81:4d:b7:a4:28:
         e5:49:16:9e:94:67:68:51:83:ce:57:13:1a:eb:1a:fe:76:05:
         22:c9:57:11
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 11 08:45:19 2026 by rpki-client