Error: rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/2CEE12D044540710A5876E4246E86C0EF8C37663.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/2CEE12D044540710A5876E4246E86C0EF8C37663.mft
File:                     2CEE12D044540710A5876E4246E86C0EF8C37663.mft (raw, json)
Hash identifier:          rem7JCSc3hrLH9s8rRNKTRXhhr/VAxoYsa4uS7N+FkY=
Subject key identifier:   25:6F:38:74:33:31:D4:A0:DF:E5:90:53:21:37:DA:64:47:86:27:C7
Authority key identifier: 2C:EE:12:D0:44:54:07:10:A5:87:6E:42:46:E8:6C:0E:F8:C3:76:63
Certificate issuer:       /CN=2CEE12D044540710A5876E4246E86C0EF8C37663
Certificate serial:       67002205960A60083F07B9D963476684AE08292C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CEE12D044540710A5876E4246E86C0EF8C37663.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/2CEE12D044540710A5876E4246E86C0EF8C37663.mft
Manifest number:          3E
Signing time:             Sun 11 Oct 2026 16:58:12 +0000
Manifest this update:     Sun 11 Oct 2026 16:53:12 +0000
Manifest next update:     Mon 12 Oct 2026 20:02:12 +0000
Files and hashes:         1: 3133312e3139362e3135322e302f32322d3234203d3e20323635393432.roa (hash: MgAyG2HdW+En7WiKeY9+lzuh7ZwZaY72/OezcRL2ApA=)
                          2: 2CEE12D044540710A5876E4246E86C0EF8C37663.crl (hash: KeHVwHEaAf7q+Flzgsgszcr6JR/zAn91NXwpL4vXKzA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/2CEE12D044540710A5876E4246E86C0EF8C37663.crl
                          rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/2CEE12D044540710A5876E4246E86C0EF8C37663.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CEE12D044540710A5876E4246E86C0EF8C37663.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 19:35:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:00:22:05:96:0a:60:08:3f:07:b9:d9:63:47:66:84:ae:08:29:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CEE12D044540710A5876E4246E86C0EF8C37663
        Validity
            Not Before: Oct 11 16:53:12 2026 GMT
            Not After : Oct 12 20:02:12 2026 GMT
        Subject: CN=256F38743331D4A0DFE590532137DA64478627C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cb:d2:34:d5:51:6c:a2:3f:21:24:07:44:93:
                    bc:3d:bf:d8:53:d8:98:4e:18:3c:df:ac:f5:42:42:
                    d1:f0:d3:1c:0a:d3:a9:88:77:21:a7:b1:29:a7:84:
                    4c:a4:c3:fe:63:4b:f2:94:d3:0d:78:de:ef:99:30:
                    b8:0c:b7:c5:a1:fe:aa:a1:c8:7c:19:f7:d1:a8:2b:
                    bd:b0:ea:0f:43:9c:e3:b5:74:52:55:f0:fa:f8:c5:
                    e0:03:19:4c:fe:00:94:30:17:d2:aa:c2:91:24:3a:
                    ea:1c:0e:4b:ad:95:69:d6:b9:7e:86:b9:fd:32:bf:
                    fd:2c:fc:35:2a:fa:f2:a6:fa:d0:1c:5f:70:06:55:
                    79:25:13:12:e0:57:19:e2:72:0b:82:0d:15:b3:0a:
                    03:bc:77:b3:e1:c9:63:7a:7a:39:cd:31:e5:fa:aa:
                    71:5d:36:aa:90:de:03:81:51:d7:c2:bf:54:ef:86:
                    39:7a:b2:04:f0:6e:eb:6d:4d:8c:a0:34:18:b1:40:
                    04:18:bc:e1:14:24:a9:60:fe:5a:f6:20:ab:f3:8c:
                    f4:63:98:2e:45:dc:a0:b6:78:99:c5:0e:49:96:e9:
                    55:76:d8:4a:08:f9:73:73:56:0e:3b:fa:97:a6:e2:
                    1a:9e:17:fd:69:b6:6d:42:4a:02:05:09:af:93:01:
                    60:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6F:38:74:33:31:D4:A0:DF:E5:90:53:21:37:DA:64:47:86:27:C7
            X509v3 Authority Key Identifier:
                keyid:2C:EE:12:D0:44:54:07:10:A5:87:6E:42:46:E8:6C:0E:F8:C3:76:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/2CEE12D044540710A5876E4246E86C0EF8C37663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CEE12D044540710A5876E4246E86C0EF8C37663.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/2CEE12D044540710A5876E4246E86C0EF8C37663.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:15:c6:2f:0c:a9:dc:7b:8f:56:85:42:4a:35:57:99:4c:56:
         53:99:de:bd:a1:06:f1:20:0c:c6:d1:46:e4:61:95:ea:24:9f:
         5f:0d:71:82:d3:01:ad:94:82:22:00:96:0d:6d:5d:a4:a9:c0:
         43:bb:11:48:a0:9e:dd:3b:90:b3:66:b8:27:ba:a5:3b:99:18:
         38:e1:54:9d:1f:44:82:8f:3d:19:1c:c1:4b:1b:ee:d2:bd:56:
         66:a5:92:2a:01:ee:f1:83:f4:4c:b9:8d:e6:f4:9f:c5:d9:17:
         a5:29:d0:7f:cc:18:7a:4b:b2:89:f1:51:ad:86:80:87:c1:de:
         61:07:83:2c:d6:ab:c4:c0:57:b2:85:f9:a9:6f:03:05:57:d4:
         03:ba:e3:6e:74:07:52:9c:9e:44:57:ec:2e:f2:64:b8:d7:74:
         c2:ec:64:cc:b4:0f:78:25:d4:0c:8e:15:cf:39:e6:fd:a6:c9:
         08:6a:3c:2f:1a:59:e0:92:07:ba:73:8f:b8:cd:47:72:f9:35:
         56:84:d9:35:e0:81:7c:ce:07:d3:77:9b:24:fa:0e:59:ea:ec:
         81:7b:3a:a5:de:7c:74:b2:89:20:07:28:65:00:7a:98:26:9f:
         35:12:d0:42:48:63:42:ae:ce:c0:87:2b:23:f9:fa:b1:84:a8:
         41:0a:6e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:07:40 2026 by rpki-client