Error: rpki-repo.registro.br/repo/AT3ZXcRvgWYrxsQgvJNExBdUjmuJDENdh4Xo5XJs6SFy/1/ABE088E5E13DCF0FED5715CC44730ED6FD52199E.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/AT3ZXcRvgWYrxsQgvJNExBdUjmuJDENdh4Xo5XJs6SFy/1/ABE088E5E13DCF0FED5715CC44730ED6FD52199E.mft
File:                     ABE088E5E13DCF0FED5715CC44730ED6FD52199E.mft (raw, json)
Hash identifier:          N05l2BoijjRaM+b4iFOGG34i+tylb77eXYhCMMbDosY=
Subject key identifier:   7E:8F:F6:64:9E:8A:B1:46:A0:38:DB:0D:0A:A5:75:4E:EB:39:49:85
Authority key identifier: AB:E0:88:E5:E1:3D:CF:0F:ED:57:15:CC:44:73:0E:D6:FD:52:19:9E
Certificate issuer:       /CN=ABE088E5E13DCF0FED5715CC44730ED6FD52199E
Certificate serial:       13B333FE65EAD39848E22D9B8A21D9547798C376
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABE088E5E13DCF0FED5715CC44730ED6FD52199E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AT3ZXcRvgWYrxsQgvJNExBdUjmuJDENdh4Xo5XJs6SFy/1/ABE088E5E13DCF0FED5715CC44730ED6FD52199E.mft
Manifest number:          0569
Signing time:             Sun 11 Oct 2026 12:20:00 +0000
Manifest this update:     Sun 11 Oct 2026 12:15:00 +0000
Manifest next update:     Mon 12 Oct 2026 12:20:00 +0000
Files and hashes:         1: 3137302e38342e3232302e302f32322d3234203d3e20323635303337.roa (hash: QsGNhjOjSMbcuy/AiPHte8Kx7LZQRjlXSaJyLimqt+c=)
                          2: ABE088E5E13DCF0FED5715CC44730ED6FD52199E.crl (hash: m1HuV8iWGbgo5GWbx5saGa/Kt0BOKR5ymxDkgxzg3GU=)
                          3: 323830343a333163383a3a2f33322d3334203d3e20323635303337.roa (hash: Mm13wPStoZoFPdO3EyM3fEcASkFOzebDNIAOTg4Hobs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AT3ZXcRvgWYrxsQgvJNExBdUjmuJDENdh4Xo5XJs6SFy/1/ABE088E5E13DCF0FED5715CC44730ED6FD52199E.crl
                          rsync://rpki-repo.registro.br/repo/AT3ZXcRvgWYrxsQgvJNExBdUjmuJDENdh4Xo5XJs6SFy/1/ABE088E5E13DCF0FED5715CC44730ED6FD52199E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABE088E5E13DCF0FED5715CC44730ED6FD52199E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 12:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b3:33:fe:65:ea:d3:98:48:e2:2d:9b:8a:21:d9:54:77:98:c3:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABE088E5E13DCF0FED5715CC44730ED6FD52199E
        Validity
            Not Before: Oct 11 12:15:00 2026 GMT
            Not After : Oct 12 12:20:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:23:39:69:c8:84:63:9c:b1:60:80:bd:02:ea:
                    4d:1a:19:67:48:fa:42:94:ab:a6:bc:ca:fd:7a:44:
                    a2:24:c0:62:a5:e0:09:a0:a5:e6:8a:69:c6:c8:e2:
                    92:f7:42:49:f3:76:fa:dd:76:8c:54:85:81:c8:e9:
                    e4:0f:05:0d:95:a6:82:73:70:a3:e7:75:92:60:17:
                    c7:6d:0d:4a:62:6d:59:2e:07:05:8e:43:cd:70:7b:
                    40:48:aa:c1:ef:78:fb:d7:ba:20:cb:c7:0d:9b:f6:
                    aa:ef:f3:41:62:95:37:b7:ae:31:e7:1c:de:12:5a:
                    4f:b7:6a:ec:f1:74:f8:7f:a2:fd:18:83:e0:64:3c:
                    4e:e7:bf:84:95:66:a9:4d:3e:77:af:f1:b5:43:39:
                    61:1d:63:c3:6e:9d:d4:f3:da:a8:d4:32:c2:63:7e:
                    75:de:09:0c:ec:be:bc:a5:a5:e7:93:75:ab:0c:ef:
                    47:94:0c:d7:ba:6e:18:38:bc:45:85:cf:b2:70:2c:
                    f6:43:fb:3a:c6:b9:c4:d9:07:7e:19:26:12:7b:b9:
                    39:31:83:b9:bc:4a:97:e4:5a:50:e6:22:b3:a6:fd:
                    41:da:14:cd:17:19:6c:9b:04:5c:21:20:73:35:37:
                    2f:2f:64:d1:dd:54:99:6e:8b:d8:bf:b0:ec:5a:11:
                    39:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:8F:F6:64:9E:8A:B1:46:A0:38:DB:0D:0A:A5:75:4E:EB:39:49:85
            X509v3 Authority Key Identifier:
                keyid:AB:E0:88:E5:E1:3D:CF:0F:ED:57:15:CC:44:73:0E:D6:FD:52:19:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AT3ZXcRvgWYrxsQgvJNExBdUjmuJDENdh4Xo5XJs6SFy/1/ABE088E5E13DCF0FED5715CC44730ED6FD52199E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABE088E5E13DCF0FED5715CC44730ED6FD52199E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AT3ZXcRvgWYrxsQgvJNExBdUjmuJDENdh4Xo5XJs6SFy/1/ABE088E5E13DCF0FED5715CC44730ED6FD52199E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:e0:c1:13:98:74:3c:56:a6:c1:82:58:c3:23:89:d3:69:f0:
         29:1f:d2:06:9e:df:8b:33:a0:a8:c9:e7:44:ac:11:cd:78:dc:
         74:4c:bb:d7:6d:be:39:b9:88:ee:06:a5:45:17:3a:a7:bb:e5:
         42:d2:42:b9:01:34:b8:86:a8:5b:e1:18:d8:7f:f1:3b:79:c5:
         7f:48:b1:cd:a2:0d:00:95:91:90:a0:d1:a0:c2:2c:0f:72:b8:
         70:25:69:81:7f:ae:49:3d:4f:79:bf:9d:55:28:cb:55:d3:9b:
         51:1b:06:c1:3e:cd:0f:ea:65:e5:34:7a:d5:3b:29:37:18:f2:
         e1:0f:04:af:cd:6f:f6:8d:25:39:c9:84:b6:1b:0b:1f:d2:28:
         2c:19:d5:53:cc:63:48:37:69:0b:14:ee:e7:cc:eb:7b:6d:84:
         62:dd:4d:a3:a9:f4:a0:3f:d8:75:50:1f:e6:e9:5f:23:e6:94:
         6b:ef:57:a0:29:14:70:2f:40:95:40:bb:e3:a4:e0:9f:b6:38:
         b1:53:c3:a5:14:61:86:74:a1:92:78:6a:d8:b3:b9:0b:ac:11:
         a0:f1:72:78:ef:3b:64:06:29:19:b4:f2:48:06:8b:7e:04:94:
         ff:00:60:1d:10:df:c6:b0:77:4f:0e:c2:67:99:e9:63:c2:60:
         f0:d2:77:09
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUE7Mz/mXq05hI4i2biiHZVHeYw3YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUJFMDg4RTVFMTNEQ0YwRkVENTcxNUNDNDQ3MzBFRDZG
RDUyMTk5RTAeFw0yNjEwMTExMjE1MDBaFw0yNjEwMTIxMjIwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkIyMzM5NjlDODg0NjM5Q0Ix
NjA4MEJEMDJFQTREMUExOTY3NDhGQTQyOTRBQkE2QkNDQUZEN0E0NEEyMjRDMDYy
QTVFMDA5QTBBNUU2OEE2OUM2QzhFMjkyRjc0MjQ5RjM3NkZBREQ3NjhDNTQ4NTgx
QzhFOUU0MEYwNTBEOTVBNjgyNzM3MEEzRTc3NTkyNjAxN0M3NkQwRDRBNjI2RDU5
MkUwNzA1OEU0M0NENzA3QjQwNDhBQUMxRUY3OEZCRDdCQTIwQ0JDNzBEOUJGNkFB
RUZGMzQxNjI5NTM3QjdBRTMxRTcxQ0RFMTI1QTRGQjc2QUVDRjE3NEY4N0ZBMkZE
MTg4M0UwNjQzQzRFRTdCRjg0OTU2NkE5NEQzRTc3QUZGMUI1NDMzOTYxMUQ2M0Mz
NkU5REQ0RjNEQUE4RDQzMkMyNjM3RTc1REUwOTBDRUNCRUJDQTVBNUU3OTM3NUFC
MENFRjQ3OTQwQ0Q3QkE2RTE4MzhCQzQ1ODVDRkIyNzAyQ0Y2NDNGQjNBQzZCOUM0
RDkwNzdFMTkyNjEyN0JCOTM5MzE4M0I5QkM0QTk3RTQ1QTUwRTYyMkIzQTZGRDQx
REExNENEMTcxOTZDOUIwNDVDMjEyMDczMzUzNzJGMkY2NEQxREQ1NDk5NkU4QkQ4
QkZCMEVDNUExMTM5Q0YwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuyM5aciEY5yxYIC9AupNGhlnSPpClKumvMr9ekSiJMBipeAJoKXm
imnGyOKS90JJ83b63XaMVIWByOnkDwUNlaaCc3Cj53WSYBfHbQ1KYm1ZLgcFjkPN
cHtASKrB73j717ogy8cNm/aq7/NBYpU3t64x5xzeElpPt2rs8XT4f6L9GIPgZDxO
57+ElWapTT53r/G1QzlhHWPDbp3U89qo1DLCY3513gkM7L68paXnk3WrDO9HlAzX
um4YOLxFhc+ycCz2Q/s6xrnE2Qd+GSYSe7k5MYO5vEqX5FpQ5iKzpv1B2hTNFxls
mwRcISBzNTcvL2TR3VSZbovYv7DsWhE5zwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FH6P9mSeirFGoDjbDQqldU7rOUmFMB8GA1UdIwQYMBaAFKvgiOXhPc8P7VcVzERz
Dtb9UhmeMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FUM1pYY1J2Z1dZcnhz
UWd2Sk5FeEJkVWptdUpERU5kaDRYbzVYSnM2U0Z5LzEvQUJFMDg4RTVFMTNEQ0Yw
RkVENTcxNUNDNDQ3MzBFRDZGRDUyMTk5RS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BQkUwODhFNUUxM0RDRjBGRUQ1NzE1Q0M0NDczMEVENkZENTIx
OTlFLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FUM1pYY1J2Z1dZcnhzUWd2Sk5F
eEJkVWptdUpERU5kaDRYbzVYSnM2U0Z5LzEvQUJFMDg4RTVFMTNEQ0YwRkVENTcx
NUNDNDQ3MzBFRDZGRDUyMTk5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEbgwROYdDxWpsGCWMMjidNp
8Ckf0gae34szoKjJ50SsEc143HRMu9dtvjm5iO4GpUUXOqe75ULSQrkBNLiGqFvh
GNh/8Tt5xX9Isc2iDQCVkZCg0aDCLA9yuHAlaYF/rkk9T3m/nVUoy1XTm1EbBsE+
zQ/qZeU0etU7KTcY8uEPBK/Nb/aNJTnJhLYbCx/SKCwZ1VPMY0g3aQsU7ufM63tt
hGLdTaOp9KA/2HVQH+bpXyPmlGvvV6ApFHAvQJVAu+Ok4J+2OLFTw6UUYYZ0oZJ4
atizuQusEaDxcnjvO2QGKRm08kgGi34ElP8AYB0Q38awd08OwmeZ6WPCYPDSdwk=
-----END CERTIFICATE-----
Generated at Sun Oct 11 21:10:49 2026 by rpki-client