Error: rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.mft
File:                     7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.mft (raw, json)
Hash identifier:          s3j2iI8iHTQuU6XP8x5BPm1VKVbcZgiCy8ZD1eaOLMM=
Subject key identifier:   01:F7:E1:BA:B2:DD:72:6A:23:78:88:9D:73:0F:CB:FA:C3:A0:1E:0C
Authority key identifier: 7A:BE:3E:FE:65:54:79:E0:79:ED:DC:B6:B0:CA:B5:29:7A:4F:38:E2
Certificate issuer:       /CN=7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2
Certificate serial:       08334B616D16A7D449540DD8CBB093749C97266C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.mft
Manifest number:          04A0
Signing time:             Sat 17 Oct 2026 16:06:37 +0000
Manifest this update:     Sat 17 Oct 2026 16:01:37 +0000
Manifest next update:     Sun 18 Oct 2026 19:58:37 +0000
Files and hashes:         1: 3138392e312e33322e302f32302d3234203d3e203238363633.roa (hash: W/8Z1uJtbPnbJDQOnyNaPZTCLiQ0puOTMdbpWOarnT4=)
                          2: 3138362e3139342e3132382e302f32312d3234203d3e203533313431.roa (hash: OMlRhQtwUw6sJqDiwTrPSwPXTVOutcNG3kqrWgTlzFQ=)
                          3: 7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.crl (hash: zVaD59CzfclFmJMX0bacMP6sJA+SIrKo8fLlP1xriuM=)
                          4: 323830343a376139633a3a2f33322d3438203d3e203533313431.roa (hash: u0RPimMprQ7AHQzCDx9QiJ27HdwZkxxPyYq1ha3yJeE=)
                          5: 3137372e39332e3232342e302f32302d3234203d3e203238363633.roa (hash: dUnxz4uJaIOiRg8cH1OjUwRfQfCjMGfGXHbYRG7DN88=)
                          6: 3138362e3139342e3133362e302f32322d3234203d3e203533313431.roa (hash: 7H7a2MqgLPA+GdFePEcBu4SHlmBs9hGYUTw9FBYJnf8=)
                          7: 323830343a3365383a3a2f33322d3438203d3e203238363633.roa (hash: 2uLFZVG9GtJ8j6pYa17qcdQphjR0P01jjV9bJTohA4Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.crl
                          rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 19:58:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:33:4b:61:6d:16:a7:d4:49:54:0d:d8:cb:b0:93:74:9c:97:26:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2
        Validity
            Not Before: Oct 17 16:01:37 2026 GMT
            Not After : Oct 18 19:58:37 2026 GMT
        Subject: CN=01F7E1BAB2DD726A2378889D730FCBFAC3A01E0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:27:7a:31:76:21:fd:78:1e:ab:6f:51:42:e3:
                    25:65:f7:06:bd:f8:ca:48:b7:da:72:55:41:24:86:
                    55:ca:52:6b:67:e5:fd:bb:dc:de:e6:3a:74:2c:09:
                    dd:a9:4a:3c:36:98:84:b1:6b:55:4b:99:c7:9d:53:
                    40:67:59:d5:ca:84:ea:ec:4c:49:f5:a2:d9:0b:65:
                    df:e6:c8:85:6d:c5:5f:a3:db:b7:a3:39:5f:70:fb:
                    a2:f2:fd:20:70:a4:b3:05:5c:d3:7b:0a:0b:65:ec:
                    03:9f:0d:51:8d:0a:83:69:da:80:29:f2:4b:e9:78:
                    c3:da:3f:ae:27:e7:cc:5d:1b:14:51:84:19:7a:0c:
                    be:a6:48:09:85:95:58:57:18:bd:1c:fa:dc:87:4c:
                    5e:50:81:ca:b5:cb:00:03:8a:6d:f7:2e:09:94:12:
                    a3:bb:96:28:a3:76:57:34:df:ea:f4:42:36:24:47:
                    0b:1f:7b:cb:e5:a8:1b:bf:69:c0:b7:33:39:4b:51:
                    8f:f4:6b:84:bc:9f:a2:dc:3d:a3:d2:07:de:0b:a8:
                    a4:fb:83:51:98:7f:2c:49:8b:a0:54:83:fe:6e:e3:
                    3a:93:24:f8:b0:12:71:9a:83:f2:5f:a9:61:07:6e:
                    aa:2f:39:b5:19:be:94:5b:c9:48:fd:90:4d:ba:d9:
                    76:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F7:E1:BA:B2:DD:72:6A:23:78:88:9D:73:0F:CB:FA:C3:A0:1E:0C
            X509v3 Authority Key Identifier:
                keyid:7A:BE:3E:FE:65:54:79:E0:79:ED:DC:B6:B0:CA:B5:29:7A:4F:38:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:9f:f6:b4:f7:07:cc:c1:af:8c:14:ee:d3:75:5b:f2:06:d2:
         20:10:ca:5f:e5:35:98:c5:87:38:80:3f:9d:7b:c0:97:5f:3d:
         e2:75:14:c7:1f:5a:62:d3:82:f0:63:b4:a6:16:4c:79:75:f3:
         e1:4c:75:c2:16:ad:c0:53:b7:0c:a6:37:02:58:97:62:21:83:
         81:8d:83:2f:b3:1f:3a:0d:6e:71:e5:a4:2d:34:9b:b6:b6:f9:
         83:1f:ce:82:4e:cd:92:49:dd:e5:53:5c:c2:f9:7a:82:70:1c:
         21:f6:f7:02:63:7a:57:ed:35:d7:f7:0d:de:49:00:52:79:8a:
         b4:cb:62:08:50:97:74:4b:c4:11:18:0f:4c:9b:e5:a5:11:4a:
         21:5f:eb:12:c5:5d:e0:22:ee:6f:1d:fe:70:f2:74:db:c9:e7:
         e1:b5:86:16:58:d0:6d:e8:86:71:ec:5c:99:54:e0:cc:a1:3e:
         7f:c8:d0:f1:d6:58:77:69:af:3c:8a:13:4d:58:f1:8d:7b:97:
         5f:31:21:d6:c8:75:d7:b6:46:c4:56:9a:12:eb:c9:a2:2c:5d:
         c8:60:d3:81:c4:1b:fb:e1:27:38:5c:30:7d:31:41:2e:90:48:
         b9:a7:2f:56:9c:cc:29:f8:05:e6:2f:1b:89:5a:03:db:ba:e5:
         4a:58:68:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 12:23:24 2026 by rpki-client