Error: rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/89830CB9E3952EBB88DDE1B63707527D62F7AB63.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/89830CB9E3952EBB88DDE1B63707527D62F7AB63.mft
File:                     89830CB9E3952EBB88DDE1B63707527D62F7AB63.mft (raw, json)
Hash identifier:          hrc58fWl1Xu3LaSFj4TToUL+Ec3py2JWRmxHV+UJOpM=
Subject key identifier:   D9:9F:CD:DF:30:6A:1E:BE:AF:DB:8A:09:5E:42:6B:48:A3:8E:B6:A5
Authority key identifier: 89:83:0C:B9:E3:95:2E:BB:88:DD:E1:B6:37:07:52:7D:62:F7:AB:63
Certificate issuer:       /CN=89830CB9E3952EBB88DDE1B63707527D62F7AB63
Certificate serial:       597A59C30519A057E139CD103D2053E0C74F364B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89830CB9E3952EBB88DDE1B63707527D62F7AB63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/89830CB9E3952EBB88DDE1B63707527D62F7AB63.mft
Manifest number:          0206
Signing time:             Mon 19 Oct 2026 10:36:43 +0000
Manifest this update:     Mon 19 Oct 2026 10:31:43 +0000
Manifest next update:     Tue 20 Oct 2026 14:09:43 +0000
Files and hashes:         1: 89830CB9E3952EBB88DDE1B63707527D62F7AB63.crl (hash: 3/OjTNg5a+bc2jDTEsx6DY9pPw6toQVLgJ6/AR3057M=)
                          2: 3137372e36362e3234382e302f32312d3234203d3e203532363630.roa (hash: xN3bu+hrUsdVdbix70SKkWGQ41cVVH+XPWAkjFYhZWM=)
                          3: 323830343a6330343a3a2f33322d3334203d3e203532363630.roa (hash: +G1IAl9Sd7m0R2Z+3JsRr5Gm0I2AW+JC75YFx96I7H0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/89830CB9E3952EBB88DDE1B63707527D62F7AB63.crl
                          rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/89830CB9E3952EBB88DDE1B63707527D62F7AB63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89830CB9E3952EBB88DDE1B63707527D62F7AB63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 14:09:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:7a:59:c3:05:19:a0:57:e1:39:cd:10:3d:20:53:e0:c7:4f:36:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89830CB9E3952EBB88DDE1B63707527D62F7AB63
        Validity
            Not Before: Oct 19 10:31:43 2026 GMT
            Not After : Oct 20 14:09:43 2026 GMT
        Subject: CN=D99FCDDF306A1EBEAFDB8A095E426B48A38EB6A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b3:04:8f:db:a6:20:4b:73:4d:26:fe:6b:d6:
                    c8:86:98:03:36:d0:e3:43:04:e9:70:3a:93:86:37:
                    35:fb:a6:38:7f:a6:15:14:e0:c4:fd:a6:6a:b9:18:
                    6f:4d:d5:d7:e3:46:35:f0:ae:a5:03:e5:7e:7e:c1:
                    da:be:2c:c4:29:ea:3a:1f:19:9f:ab:9c:ca:b4:0e:
                    34:e4:b5:05:fa:0a:d8:6d:20:4e:f3:e7:03:e3:7b:
                    92:bf:65:b2:a4:7e:f4:e4:d8:50:be:26:d1:3d:87:
                    eb:9e:aa:e2:1a:06:82:67:8a:64:41:7f:f3:90:71:
                    05:c7:c7:f2:42:e8:fd:5b:b9:b3:21:c4:ac:af:51:
                    83:db:8f:6c:3b:b5:ad:ae:b7:e8:e6:eb:ad:36:c4:
                    81:f5:a6:d5:71:26:a5:3d:25:50:6d:5c:80:34:0e:
                    88:79:ae:92:d0:dd:a6:a9:7e:64:af:3b:c9:c8:ba:
                    e2:f3:fc:d9:53:3d:6f:5c:25:6a:c5:32:b1:4e:c7:
                    32:1a:a4:72:73:e5:21:83:37:70:42:71:b0:d0:72:
                    db:73:fc:75:4f:8a:b1:43:66:da:4f:67:dc:47:85:
                    35:cf:49:46:11:10:e9:82:ea:70:69:cf:0c:1a:89:
                    48:d0:df:59:9f:e8:8c:05:7c:d6:56:91:a5:3b:3a:
                    65:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:9F:CD:DF:30:6A:1E:BE:AF:DB:8A:09:5E:42:6B:48:A3:8E:B6:A5
            X509v3 Authority Key Identifier:
                keyid:89:83:0C:B9:E3:95:2E:BB:88:DD:E1:B6:37:07:52:7D:62:F7:AB:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/89830CB9E3952EBB88DDE1B63707527D62F7AB63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89830CB9E3952EBB88DDE1B63707527D62F7AB63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/89830CB9E3952EBB88DDE1B63707527D62F7AB63.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:92:c7:b7:98:fc:3a:a2:1d:a6:26:4a:f5:eb:8b:70:d5:e4:
         3d:8e:86:14:96:89:fd:4f:cb:9a:16:3f:06:47:9c:be:c2:58:
         81:3a:b2:b5:f2:28:7a:6d:bb:5a:26:0e:1e:9c:1c:89:fa:e5:
         df:fa:5d:a9:43:e1:88:21:8b:b0:80:93:62:9a:f4:34:88:34:
         b9:1d:9a:5d:12:50:19:c1:63:d4:3c:07:d4:8b:22:6c:75:ff:
         1c:80:20:04:1d:ba:f8:8a:5d:3e:a1:71:e6:ba:ce:6e:70:bf:
         ca:42:67:80:97:c5:dd:4e:2c:79:8e:ab:26:32:fb:22:c1:01:
         6a:71:12:3c:55:b1:39:7f:ae:fc:4a:9e:04:1c:99:87:de:c8:
         64:1f:ae:0f:f1:d8:9f:5d:f7:86:d6:a9:66:07:d0:af:eb:4d:
         34:df:0c:0f:08:3f:fb:ad:da:c2:1c:f2:05:4e:f0:79:c4:45:
         c1:ee:3d:d0:9c:62:1a:68:a4:25:b8:cf:4e:9a:12:50:64:c6:
         a5:b0:0c:1c:1e:c4:fa:10:21:1b:38:8c:9d:db:19:2d:22:a9:
         8d:7f:70:a5:30:f6:44:b3:32:0f:17:95:0f:14:1e:2d:a5:95:
         4c:b9:99:7e:50:c1:c5:a6:d6:28:7b:61:8c:99:4b:f8:cf:29:
         d0:a4:53:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 03:46:06 2026 by rpki-client