Error: rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/2F9F8427BB2212C28E037F5F38698A3912DB7D20.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/2F9F8427BB2212C28E037F5F38698A3912DB7D20.mft
File:                     2F9F8427BB2212C28E037F5F38698A3912DB7D20.mft (raw, json)
Hash identifier:          /4elwm4P+EYFwBGi7wEHavP2Ci9f3fQ95wvyga9Uf34=
Subject key identifier:   9A:90:B0:E5:38:78:FF:17:4F:E4:71:AF:52:73:C3:B1:D8:25:1B:82
Authority key identifier: 2F:9F:84:27:BB:22:12:C2:8E:03:7F:5F:38:69:8A:39:12:DB:7D:20
Certificate issuer:       /CN=2F9F8427BB2212C28E037F5F38698A3912DB7D20
Certificate serial:       3BEDF6E28C81C8684C92E339E9585A4CD38BEE12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F9F8427BB2212C28E037F5F38698A3912DB7D20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/2F9F8427BB2212C28E037F5F38698A3912DB7D20.mft
Manifest number:          0218
Signing time:             Mon 02 Nov 2026 15:29:33 +0000
Manifest this update:     Mon 02 Nov 2026 15:24:33 +0000
Manifest next update:     Tue 03 Nov 2026 18:00:33 +0000
Files and hashes:         1: 3136382e3233322e3139372e302f32342d3234203d3e20323634393438.roa (hash: PNeFK/MmE850SMcnzGtFHooyz0irdQ/phXNWKGkwHjg=)
                          2: 3136382e3233322e3139362e302f32322d3232203d3e20323634393438.roa (hash: zP7qM26ELXOEk1rOzVkzXRsjy+aqBPN6FOgW46e9X6M=)
                          3: 3136382e3233322e3139362e302f32332d3233203d3e20323634393438.roa (hash: uzxwtdqeiHaOKtcZ1+WryFBkaWc5KzYL8tTZZLBRHq8=)
                          4: 3136382e3233322e3139382e302f32342d3234203d3e20323634393438.roa (hash: vTr0gqxBGi0i5DkT9FhwCTiDcm8XISIajH4de+s+hTw=)
                          5: 323830343a333036343a3a2f33332d3333203d3e20323634393438.roa (hash: nztNzexN+qmXOQh+nIehZySB0FaYTFxnGNb0/1gU06A=)
                          6: 2F9F8427BB2212C28E037F5F38698A3912DB7D20.crl (hash: K1LaLY1/0mXTtt4r0yujDoUiM7uaRA7tmVVm4ZzJKzI=)
                          7: 323830343a333036343a633330303a3a2f34302d3430203d3e20323634393438.roa (hash: M9HzjTidL80MvT+w802JGDS5DikvnBEUk91OuZ6LMVs=)
                          8: 323830343a333036343a3a2f33322d3332203d3e20323634393438.roa (hash: 4bH1vaGdqTEBlfdJ4R6f1uUgT+zyFY3j9vCpF85Prvo=)
                          9: 3136382e3233322e3139392e302f32342d3234203d3e20323634393438.roa (hash: 04CqtLDlIPbQnU6kHqmH0AvROCKgGXUnmjvrtg89AwY=)
                          10: 3136382e3233322e3139382e302f32332d3233203d3e20323634393438.roa (hash: HGtFtF+kPvWSrx2rB2mM7a1gC5KPgd9rQ5s2yjq+nGg=)
                          11: 323830343a333036343a383030303a3a2f33332d3333203d3e20323634393438.roa (hash: U77W4UGIJUmSUSiQEWeHWDPPzNHNtvo0+bCFxzSIsa0=)
                          12: 3136382e3233322e3139362e302f32342d3234203d3e20323634393438.roa (hash: JiPBSb7qAFpbp0/tso3K5fMIajN1Y8sHjvfC6jqngsI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/2F9F8427BB2212C28E037F5F38698A3912DB7D20.crl
                          rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/2F9F8427BB2212C28E037F5F38698A3912DB7D20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F9F8427BB2212C28E037F5F38698A3912DB7D20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 18:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ed:f6:e2:8c:81:c8:68:4c:92:e3:39:e9:58:5a:4c:d3:8b:ee:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F9F8427BB2212C28E037F5F38698A3912DB7D20
        Validity
            Not Before: Nov  2 15:24:33 2026 GMT
            Not After : Nov  3 18:00:33 2026 GMT
        Subject: CN=9A90B0E53878FF174FE471AF5273C3B1D8251B82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ff:bd:93:8d:c7:16:ec:77:17:d4:d7:95:5c:
                    33:78:a4:4c:37:f8:19:6d:9d:d4:0e:74:eb:e1:99:
                    1c:cd:34:e6:48:ac:48:d1:e2:69:6f:40:24:3d:97:
                    96:89:8e:84:4f:da:c2:c0:6f:bb:02:de:f8:6c:c9:
                    be:0e:2f:50:d2:c6:a7:8c:45:04:01:a1:b8:5d:de:
                    87:fe:96:10:d5:0d:ea:c4:2a:57:51:12:3c:c6:31:
                    c7:0b:1e:7f:5c:28:4c:e0:8f:f7:ff:07:13:a5:94:
                    0c:b1:70:9e:0b:59:47:d0:03:42:50:a4:f0:c4:d7:
                    f8:c7:dc:7b:d9:a3:ce:e7:71:59:16:2b:94:1a:45:
                    6a:19:b5:e5:15:93:d0:92:81:75:db:fb:f0:68:58:
                    f5:42:99:29:d1:50:83:9e:6f:30:7e:6c:ca:15:94:
                    1e:27:9e:de:dc:3f:bd:54:c1:e3:38:50:9d:b6:3d:
                    fb:6c:70:77:cb:78:28:83:7b:3f:98:65:04:b3:37:
                    2c:3c:73:e6:f2:7c:0f:98:d2:98:cd:0a:4e:ca:db:
                    a8:04:3c:cd:91:bf:d9:1f:45:ae:be:34:f2:87:7b:
                    2b:8c:0d:56:4b:6b:a7:76:d9:5b:66:6b:fd:0b:84:
                    dc:45:f8:f8:3e:2b:e7:09:66:83:8e:97:cd:1c:16:
                    c9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:90:B0:E5:38:78:FF:17:4F:E4:71:AF:52:73:C3:B1:D8:25:1B:82
            X509v3 Authority Key Identifier:
                keyid:2F:9F:84:27:BB:22:12:C2:8E:03:7F:5F:38:69:8A:39:12:DB:7D:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/2F9F8427BB2212C28E037F5F38698A3912DB7D20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F9F8427BB2212C28E037F5F38698A3912DB7D20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/2F9F8427BB2212C28E037F5F38698A3912DB7D20.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:c4:0f:d5:69:bc:75:66:34:4e:8f:5d:25:29:fc:07:57:3a:
         cf:4c:ee:1e:ee:c1:33:c0:68:0d:a8:32:ab:ed:30:e9:05:bc:
         cf:ce:5c:d9:5b:35:a6:a1:4d:da:50:8b:ac:d8:8e:b3:f9:71:
         49:66:8f:10:89:68:14:c2:e3:c2:49:09:81:84:34:00:66:cd:
         a2:89:3a:37:d0:a6:37:0a:f7:67:f5:3c:13:0b:70:e3:06:fc:
         20:e1:e6:46:b2:9a:54:74:56:6c:b0:e0:4b:96:3b:d0:a9:b4:
         75:76:55:03:24:9f:33:d8:52:6a:62:12:af:46:d4:b7:46:7e:
         d1:20:83:d6:7d:75:ad:b4:fb:08:c9:de:64:a1:54:4a:49:7f:
         16:f2:59:4b:7f:26:5c:fa:42:cb:f4:c8:9c:02:97:23:a1:4e:
         dd:18:ec:23:4f:d1:56:7a:47:a4:60:eb:7d:4d:6e:92:1c:b2:
         cc:d1:e2:66:ec:7e:d3:4e:1e:f3:a3:ee:fd:55:20:2b:09:00:
         c0:e2:a0:90:78:15:e2:21:10:75:08:2c:3d:04:5d:ae:bd:da:
         c4:ca:be:50:30:09:7c:82:e3:bf:dc:6e:61:e8:54:88:ab:97:
         ad:27:af:18:ed:ad:0c:ae:cc:89:6b:ee:7d:64:05:d3:ab:47:
         84:bd:4a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 06:12:58 2026 by rpki-client