Error: rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
File:                     CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft (raw, json)
Hash identifier:          AH5lPqq+PXsx9NWSUlxXLnWnTofQKczrh2pWGfOFMvM=
Subject key identifier:   7D:6A:73:81:05:20:24:F3:70:6A:0D:FE:DA:26:20:0C:57:9C:4D:55
Authority key identifier: CB:92:60:C7:AB:CD:7C:89:11:9B:0F:61:C6:09:E3:13:89:DE:B1:DE
Certificate issuer:       /CN=CB9260C7ABCD7C89119B0F61C609E31389DEB1DE
Certificate serial:       19796033EE8593F1ECB4A0B5B35B0F92FB31A597
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
Manifest number:          02DE
Signing time:             Sun 18 Oct 2026 18:04:48 +0000
Manifest this update:     Sun 18 Oct 2026 17:59:48 +0000
Manifest next update:     Mon 19 Oct 2026 18:07:48 +0000
Files and hashes:         1: 3137372e3132342e34382e302f32322d3234203d3e20323632333136.roa (hash: rwsjpt3v/cKN6ybsz3/VWV2Cp5xllHQ1w4JsPmiji1A=)
                          2: 3136372e3235302e3135322e302f32322d3234203d3e20323632333136.roa (hash: kpXbj/VFh2puGbD2VjTYD77oB6crDJaCbIFxZqmqgFA=)
                          3: 323830343a3763303a3a2f33322d3438203d3e20323632333136.roa (hash: dig3xRrHhM4M8UKI/4BtOWiD1x9xi/FcK98aLvq0eA0=)
                          4: CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl (hash: VkUQ6dLLRI9YbaaUNsE8r6ByS1V0OporQ99AexxvJks=)
                          5: 3133312e3232312e3230302e302f32322d3234203d3e20323632333136.roa (hash: b9QIUgJtUhc1DnIcA/Gdx2o7O0dNKcyCNg/LY9BZbiU=)
                          6: 3137372e37342e36342e302f32302d3235203d3e20323632333136.roa (hash: tljc+I0lzZxmfXT/GTTIbeFDEF0AbDPvxxOtTLrWDAo=)
                          7: 3133382e3131372e3139322e302f32322d3234203d3e20323632333136.roa (hash: Qajh9SgmhOLwen8Do03xNwlcQDXX+9U0uvI6DViyQAE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl
                          rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 18:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:79:60:33:ee:85:93:f1:ec:b4:a0:b5:b3:5b:0f:92:fb:31:a5:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB9260C7ABCD7C89119B0F61C609E31389DEB1DE
        Validity
            Not Before: Oct 18 17:59:48 2026 GMT
            Not After : Oct 19 18:07:48 2026 GMT
        Subject: CN=7D6A7381052024F3706A0DFEDA26200C579C4D55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4b:7b:ff:82:e9:f9:52:3d:33:4d:f6:e1:11:
                    c9:2f:ef:ae:46:e6:62:5b:1a:f2:a9:22:65:24:b8:
                    11:0b:3e:a5:9f:f3:c6:56:f0:b9:1a:71:d8:ba:a2:
                    14:b7:42:b8:02:e5:70:8f:7a:0e:b9:f4:82:02:c6:
                    c2:0d:68:12:f2:e6:0b:1c:95:b6:9d:2c:ac:26:2f:
                    f2:11:4f:48:14:65:73:8a:91:9e:ad:64:df:4b:f6:
                    e9:19:b7:55:94:5d:f4:0f:d8:ff:5c:28:9f:6e:b2:
                    13:3e:48:9c:e1:87:2b:d9:3f:74:01:21:0e:68:7a:
                    5a:c9:64:bf:09:34:8a:b4:54:56:58:1a:c0:09:29:
                    d5:05:5e:45:42:3b:73:ba:e2:8e:4f:79:09:00:51:
                    ea:ae:46:d8:c7:f6:2a:e4:0f:14:4d:b6:ef:cc:cc:
                    b9:5c:63:f1:ed:5b:98:14:61:b2:f2:1f:c0:94:62:
                    5c:7c:ce:26:0d:b9:ef:b2:9e:ee:0e:e5:d8:bd:58:
                    c5:27:86:aa:48:18:01:93:33:d8:6e:82:4c:05:3a:
                    3a:f1:15:ff:a3:ae:ac:a9:db:07:f0:f3:30:a9:13:
                    65:8f:f8:9b:4f:84:c0:e7:0f:7c:fe:d1:d9:d8:f3:
                    62:04:53:8e:bd:2a:bd:af:7f:b4:96:ea:d2:4f:a6:
                    f5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:6A:73:81:05:20:24:F3:70:6A:0D:FE:DA:26:20:0C:57:9C:4D:55
            X509v3 Authority Key Identifier:
                keyid:CB:92:60:C7:AB:CD:7C:89:11:9B:0F:61:C6:09:E3:13:89:DE:B1:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:42:04:d2:e8:b2:46:a6:c1:34:46:a5:75:3e:fb:7d:6a:ca:
         79:69:7f:73:1f:7c:84:31:ca:24:5e:23:b1:03:ae:4b:10:94:
         52:b9:7d:3d:63:5f:23:fc:73:f1:f7:4b:4c:2e:4b:92:76:73:
         34:f7:a1:67:93:c1:a8:12:23:84:06:b0:f7:b3:55:83:f7:ce:
         b9:ab:8e:b0:13:9b:cd:09:d2:18:5f:42:ae:19:a1:9f:26:d7:
         e7:3e:f1:a3:45:c3:34:40:db:ad:2b:6e:aa:c8:09:95:8e:1e:
         13:9c:f5:38:a9:8a:6c:5f:2b:77:02:63:0f:f7:eb:94:ee:61:
         27:d9:ec:f9:2a:c4:cd:15:7e:78:d8:a4:65:5b:4d:8a:42:7e:
         9c:ea:c3:3a:bc:fd:78:ee:25:30:4f:de:37:c3:27:a3:d9:83:
         52:27:61:f8:df:84:54:21:05:65:31:8d:f8:ba:c7:b1:66:6f:
         cb:62:74:e7:0a:8b:0c:f9:78:b0:ee:0d:e3:1f:2e:98:4b:e0:
         d3:10:31:6d:ff:a8:3a:5f:ee:1c:e7:3b:6a:f4:49:5c:6a:1b:
         20:36:11:af:d8:cc:78:2a:61:a5:bd:57:c4:9c:04:cf:b4:9e:
         8c:25:9b:1d:1a:f2:9d:2b:04:a7:71:7f:7b:9b:a8:09:00:a4:
         5f:d8:28:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:38:14 2026 by rpki-client