Error: rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/1/39E9C8F360117C7F207DEE7951C1AD935707A727.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/1/39E9C8F360117C7F207DEE7951C1AD935707A727.mft
File:                     39E9C8F360117C7F207DEE7951C1AD935707A727.mft (raw, json)
Hash identifier:          331R9udzqdo39+v1wq8K/zbFdcUSKJ0QSIyUaonhsG4=
Subject key identifier:   94:9D:16:3C:F9:70:76:40:12:7B:56:3B:1F:6F:65:B8:E8:E2:EA:F6
Authority key identifier: 39:E9:C8:F3:60:11:7C:7F:20:7D:EE:79:51:C1:AD:93:57:07:A7:27
Certificate issuer:       /CN=39E9C8F360117C7F207DEE7951C1AD935707A727
Certificate serial:       2677B4DB479A12DD67AA5B5D62E9705A708A5042
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E9C8F360117C7F207DEE7951C1AD935707A727.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/1/39E9C8F360117C7F207DEE7951C1AD935707A727.mft
Manifest number:          056D
Signing time:             Wed 14 Oct 2026 04:10:00 +0000
Manifest this update:     Wed 14 Oct 2026 04:05:00 +0000
Manifest next update:     Thu 15 Oct 2026 04:10:00 +0000
Files and hashes:         1: 3137372e38362e3132382e302f32322d3234203d3e20323632363330.roa (hash: tX6hzm8Y8+025gxrx5F/gMNIdSivmBvQ9DvXNi4RsS8=)
                          2: 39E9C8F360117C7F207DEE7951C1AD935707A727.crl (hash: 1rhMalSwR44GMbbXCN/RUT0P7itr0aiuyrlbm5fLpBU=)
                          3: 3133312e3130302e3139322e302f32322d3234203d3e20323632363330.roa (hash: PI++vmQS7p1miOoGJAg7YPaGgKyS/QAmIFAV0GvxdIc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/1/39E9C8F360117C7F207DEE7951C1AD935707A727.crl
                          rsync://rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/1/39E9C8F360117C7F207DEE7951C1AD935707A727.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E9C8F360117C7F207DEE7951C1AD935707A727.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 04:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:77:b4:db:47:9a:12:dd:67:aa:5b:5d:62:e9:70:5a:70:8a:50:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39E9C8F360117C7F207DEE7951C1AD935707A727
        Validity
            Not Before: Oct 14 04:05:00 2026 GMT
            Not After : Oct 15 04:10:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0c:8b:d1:dc:36:89:f2:c5:1f:13:c3:80:09:
                    2d:1e:08:a7:ff:30:82:5a:68:2b:f9:22:1c:21:84:
                    4d:c3:b2:56:8e:1c:3d:7a:68:b8:e9:06:e4:c3:3b:
                    c3:f3:8d:0e:1e:4a:4c:ac:cb:2d:2c:09:88:9a:26:
                    8a:27:ad:4f:13:1d:47:e6:db:32:a8:1f:b3:06:7c:
                    71:8a:d6:86:6a:8e:c3:b7:85:64:43:fa:dd:fd:4e:
                    21:41:36:a5:05:8a:b0:00:ec:62:9f:1a:a2:a4:6a:
                    31:20:26:03:0c:eb:05:0e:85:fa:bb:65:f3:fc:95:
                    6d:b2:c8:a8:b6:eb:f4:56:e6:b9:2b:35:2b:0d:a2:
                    99:8c:f2:61:39:e7:29:77:89:eb:8d:e7:dc:a3:40:
                    b6:7e:3e:35:bb:81:28:37:ed:e0:5e:30:af:85:d9:
                    d1:d8:ab:a6:99:52:38:69:91:4c:10:21:40:74:17:
                    e4:64:9e:38:b9:dd:69:90:98:d1:0a:5b:53:0e:0c:
                    11:7a:10:f0:e2:79:c7:0e:b9:0e:1c:e0:4f:44:33:
                    f4:86:86:d3:0f:56:e5:fd:2b:97:f0:5d:76:38:ed:
                    9d:25:71:3c:5a:40:92:ff:b9:2c:5d:4d:c6:de:bd:
                    1e:f6:39:2c:1b:fd:52:c4:23:1b:fc:76:46:9e:94:
                    f2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:9D:16:3C:F9:70:76:40:12:7B:56:3B:1F:6F:65:B8:E8:E2:EA:F6
            X509v3 Authority Key Identifier:
                keyid:39:E9:C8:F3:60:11:7C:7F:20:7D:EE:79:51:C1:AD:93:57:07:A7:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/1/39E9C8F360117C7F207DEE7951C1AD935707A727.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E9C8F360117C7F207DEE7951C1AD935707A727.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/1/39E9C8F360117C7F207DEE7951C1AD935707A727.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:a3:cf:41:b1:21:b7:4c:72:c5:a2:0e:9d:1b:4b:42:2b:27:
         b1:ed:55:3f:e4:e2:4a:da:1c:15:15:0f:59:97:fc:fa:14:8c:
         55:ae:92:23:d1:d0:f9:c9:70:3c:20:4b:a7:39:42:3d:3f:86:
         d4:2f:03:fc:1a:ce:24:33:c4:4d:fe:2e:8b:0f:b7:91:e3:f9:
         52:59:f5:2a:27:f9:de:c4:08:2d:f6:03:8d:1b:e9:9e:e1:cd:
         a1:a7:f9:3e:48:d2:bc:04:25:7c:a2:5f:dc:c5:05:c3:e5:de:
         a5:54:3c:07:68:de:34:ee:de:d0:05:cc:dc:a5:c0:b8:5a:6d:
         99:83:f1:9d:ad:55:38:76:2a:7a:b0:ba:8d:28:fa:6b:83:3c:
         9c:c3:43:0d:1f:73:9e:83:57:b1:ec:fa:d4:30:ee:a4:cf:e4:
         b0:d0:7e:89:3f:6a:d5:60:d4:f6:14:4d:5b:67:40:f3:cb:54:
         3c:79:92:92:03:70:04:f3:c7:6a:fd:46:b1:bc:1a:c3:1a:c0:
         3a:fa:39:ec:84:51:f9:c5:4f:2f:4f:98:2a:c0:aa:d9:53:8a:
         7a:ae:2d:be:f6:f4:8c:f0:ba:94:b4:cb:e0:7f:99:d8:5f:5e:
         49:b9:98:e7:ee:1f:e8:5d:74:04:69:e5:b1:6a:d6:c0:cf:41:
         be:d8:04:b1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 14 22:04:43 2026 by rpki-client