Error: rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0/0AA75444C92119507239668F559768FBF95AE208.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0/0AA75444C92119507239668F559768FBF95AE208.mft
File:                     0AA75444C92119507239668F559768FBF95AE208.mft (raw, json)
Hash identifier:          e1mx9OHy+B/dsQ6jD+qx750UPkTfZxPTvCFQOfLZ8e0=
Subject key identifier:   7D:79:8A:83:AA:BA:74:94:EB:20:24:08:C2:26:EF:9C:EE:81:7A:13
Authority key identifier: 0A:A7:54:44:C9:21:19:50:72:39:66:8F:55:97:68:FB:F9:5A:E2:08
Certificate issuer:       /CN=0AA75444C92119507239668F559768FBF95AE208
Certificate serial:       6A674EBB64B3995E2DAD7FB1E8A03F7D84E3166D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AA75444C92119507239668F559768FBF95AE208.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0/0AA75444C92119507239668F559768FBF95AE208.mft
Manifest number:          018B
Signing time:             Fri 16 Oct 2026 22:29:27 +0000
Manifest this update:     Fri 16 Oct 2026 22:24:27 +0000
Manifest next update:     Sun 18 Oct 2026 01:58:27 +0000
Files and hashes:         1: 0AA75444C92119507239668F559768FBF95AE208.crl (hash: gxGBzoX5BJlKJtbiIhYtSY0RwW8gOyImAsF5yMN7GLs=)
                          2: 323830343a336462383a3a2f33322d3430203d3e20323636353439.roa (hash: GG2ekqsPEzHUv1xeSak7VDUr/9ftvbnKdFDUaWHbG9w=)
                          3: 3136302e3233382e3139322e302f32322d3234203d3e20323636353439.roa (hash: aStRY72YhDwxpWcM3Y70FSS4L9NNhnx2xbpwyjzHwco=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0/0AA75444C92119507239668F559768FBF95AE208.crl
                          rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0/0AA75444C92119507239668F559768FBF95AE208.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AA75444C92119507239668F559768FBF95AE208.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:67:4e:bb:64:b3:99:5e:2d:ad:7f:b1:e8:a0:3f:7d:84:e3:16:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AA75444C92119507239668F559768FBF95AE208
        Validity
            Not Before: Oct 16 22:24:27 2026 GMT
            Not After : Oct 18 01:58:27 2026 GMT
        Subject: CN=7D798A83AABA7494EB202408C226EF9CEE817A13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0c:a3:e6:b2:12:cb:48:d6:42:3b:17:2c:b3:
                    9a:7a:dd:58:c8:81:73:25:35:d3:f4:2d:ab:a7:d6:
                    3b:91:f7:9b:92:82:05:8b:ed:67:9a:21:ab:72:c3:
                    28:9c:d2:b8:5e:a1:44:70:50:06:a6:44:e5:14:c9:
                    e1:e6:2a:c8:39:74:da:12:aa:f1:f2:ad:7f:92:e0:
                    60:ac:c0:d6:00:70:eb:c8:a3:2d:81:5f:54:f0:f9:
                    fa:0f:2e:3a:5b:bb:e0:a1:6e:5b:de:62:20:8f:42:
                    c4:ac:3d:ca:ae:c7:65:8a:d2:d4:ce:89:4c:19:ef:
                    3f:f9:65:01:a2:de:97:c9:86:1d:a8:a3:64:93:82:
                    da:81:02:6e:8d:a3:bc:e8:77:6c:36:0f:68:7d:23:
                    9f:b0:b9:63:e9:40:f6:c0:2a:a0:73:17:a7:88:4c:
                    22:10:93:ec:d8:53:bd:0f:b6:af:df:1a:a8:61:bd:
                    ab:ef:34:06:f6:3c:03:ad:60:7d:25:6b:0c:be:dc:
                    a6:94:d0:91:b3:d9:eb:73:05:d9:6b:fd:1a:2b:96:
                    1a:52:2b:c1:78:41:7b:89:2a:26:65:8c:61:4f:24:
                    a8:ea:f6:c1:41:8c:34:44:7a:c0:6a:3b:0a:d3:96:
                    f6:c6:95:ee:58:a9:e2:f2:9f:8e:25:53:70:b9:4d:
                    4b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:79:8A:83:AA:BA:74:94:EB:20:24:08:C2:26:EF:9C:EE:81:7A:13
            X509v3 Authority Key Identifier:
                keyid:0A:A7:54:44:C9:21:19:50:72:39:66:8F:55:97:68:FB:F9:5A:E2:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0/0AA75444C92119507239668F559768FBF95AE208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AA75444C92119507239668F559768FBF95AE208.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0/0AA75444C92119507239668F559768FBF95AE208.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:a0:f8:39:fd:20:4d:58:a8:dc:1e:f5:40:4c:5c:35:cf:1a:
         6d:f4:5c:90:d9:f1:e1:c8:8f:1c:db:d8:34:03:a7:5d:52:00:
         46:be:bd:39:00:e9:ae:05:cc:1d:98:13:11:16:6c:01:71:1d:
         d5:93:99:a7:df:d3:68:ca:9f:a4:f6:fe:2c:7d:3a:84:d1:9d:
         34:79:85:23:3d:e2:ea:cd:5e:5f:4c:0a:85:a8:c3:37:b1:28:
         f6:b0:65:63:8b:83:07:c4:5d:8d:1e:a3:9a:bf:85:0d:9d:3c:
         56:04:a6:bd:cc:73:8c:d9:5a:4b:94:77:7a:5b:d3:ce:11:43:
         01:a1:1b:80:48:89:aa:2e:84:3b:77:f0:6e:db:fd:42:82:30:
         4f:17:37:e7:69:f6:4a:ac:a5:5e:7e:75:b4:08:8d:61:05:d3:
         8b:b7:f4:50:af:d4:5e:4f:53:0a:c8:d5:a0:84:04:2f:18:8c:
         f3:db:cc:f7:64:be:13:6f:f5:b9:50:84:81:71:ee:06:93:26:
         7d:52:75:8e:37:88:eb:21:e6:d3:b8:79:88:8d:6c:74:5f:2b:
         3d:74:23:d3:5a:4c:40:4f:05:98:79:78:8c:ef:71:ce:9c:e9:
         0f:9d:11:3e:e6:b9:ab:f1:fd:70:cc:b4:8a:d6:61:e0:02:43:
         5e:f3:86:f6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUamdOu2SzmV4trX+x6KA/fYTjFm0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFBNzU0NDRDOTIxMTk1MDcyMzk2NjhGNTU5NzY4RkJG
OTVBRTIwODAeFw0yNjEwMTYyMjI0MjdaFw0yNjEwMTgwMTU4MjdaMDMxMTAvBgNV
BAMTKDdENzk4QTgzQUFCQTc0OTRFQjIwMjQwOEMyMjZFRjlDRUU4MTdBMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmDKPmshLLSNZCOxcss5p63VjI
gXMlNdP0Laun1juR95uSggWL7WeaIatywyic0rheoURwUAamROUUyeHmKsg5dNoS
qvHyrX+S4GCswNYAcOvIoy2BX1Tw+foPLjpbu+ChblveYiCPQsSsPcqux2WK0tTO
iUwZ7z/5ZQGi3pfJhh2oo2STgtqBAm6No7zod2w2D2h9I5+wuWPpQPbAKqBzF6eI
TCIQk+zYU70Ptq/fGqhhvavvNAb2PAOtYH0lawy+3KaU0JGz2etzBdlr/RorlhpS
K8F4QXuJKiZljGFPJKjq9sFBjDREesBqOwrTlvbGle5YqeLyn44lU3C5TUu5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUfXmKg6q6dJTrICQIwibvnO6BehMwHwYDVR0j
BBgwFoAUCqdURMkhGVByOWaPVZdo+/la4ggwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQW9taG9RWnVuZUJDcUp0Vk1Od1Y2bUNYQmJjejVkN1lkQTVQYm5ib3ZK
RkMvMC8wQUE3NTQ0NEM5MjExOTUwNzIzOTY2OEY1NTk3NjhGQkY5NUFFMjA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBQTc1NDQ0QzkyMTE5NTA3
MjM5NjY4RjU1OTc2OEZCRjk1QUUyMDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QW9taG9RWnVuZUJDcUp0Vk1Od1Y2bUNYQmJjejVkN1lkQTVQYm5ib3ZKRkMvMC8w
QUE3NTQ0NEM5MjExOTUwNzIzOTY2OEY1NTk3NjhGQkY5NUFFMjA4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhKD4Of0gTVio3B71QExcNc8abfRckNnx4ciPHNvYNAOnXVIARr69OQDprgXM
HZgTERZsAXEd1ZOZp9/TaMqfpPb+LH06hNGdNHmFIz3i6s1eX0wKhajDN7Eo9rBl
Y4uDB8RdjR6jmr+FDZ08VgSmvcxzjNlaS5R3elvTzhFDAaEbgEiJqi6EO3fwbtv9
QoIwTxc352n2SqylXn51tAiNYQXTi7f0UK/UXk9TCsjVoIQELxiM89vM92S+E2/1
uVCEgXHuBpMmfVJ1jjeI6yHm07h5iI1sdF8rPXQj01pMQE8FmHl4jO9xzpzpD50R
Pua5q/H9cMy0itZh4AJDXvOG9g==
-----END CERTIFICATE-----
Generated at Sat Oct 17 19:31:42 2026 by rpki-client