Error: rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft
File:                     DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft (raw, json)
Hash identifier:          aNNt/RmVI/ZLoFu1L4bRiJdxsogI2Sxck7CaE4hivl8=
Subject key identifier:   8C:9C:37:2A:FA:A5:C1:F3:05:6E:29:1E:56:02:01:07:8D:DA:33:F3
Authority key identifier: DD:0E:EA:2C:C8:09:C7:ED:52:CD:2A:24:D1:44:54:39:0A:C2:46:4C
Certificate issuer:       /CN=DD0EEA2CC809C7ED52CD2A24D14454390AC2464C
Certificate serial:       2B9EA0D7E79F8376D629EC70DC868E4F9FB4048D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft
Manifest number:          0564
Signing time:             Sat 10 Oct 2026 02:50:00 +0000
Manifest this update:     Sat 10 Oct 2026 02:45:00 +0000
Manifest next update:     Sun 11 Oct 2026 02:50:00 +0000
Files and hashes:         1: DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.crl (hash: K/svO+3uX4PaR3yrKa7+2sCyE86DPSUjQ+9UG9jQzcw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.crl
                          rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 02:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:9e:a0:d7:e7:9f:83:76:d6:29:ec:70:dc:86:8e:4f:9f:b4:04:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD0EEA2CC809C7ED52CD2A24D14454390AC2464C
        Validity
            Not Before: Oct 10 02:45:00 2026 GMT
            Not After : Oct 17 02:50:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b6:f8:27:ba:73:0b:76:28:3c:8e:9e:99:5f:
                    1d:66:5d:62:27:78:e5:59:8a:0f:b0:d8:39:2d:6b:
                    79:c0:c9:d8:5c:22:d7:19:ab:c4:42:6d:f6:ce:e4:
                    9e:df:38:d5:3c:f7:5e:4e:8a:e8:c5:eb:b8:37:dc:
                    86:a6:8e:2b:fe:97:66:f4:0b:bf:eb:d7:72:e1:0f:
                    93:4c:16:e3:9e:5f:14:e6:1c:2e:b8:60:6d:51:f3:
                    76:35:a7:ae:43:d1:b7:c2:ea:0a:61:23:a6:39:55:
                    17:cb:84:fd:0f:4b:6f:54:ef:65:0c:3f:fb:42:20:
                    29:cc:b0:36:94:7d:33:b8:97:d1:0d:4a:3a:09:31:
                    00:e5:eb:7d:2d:92:48:aa:37:40:07:61:e4:7c:05:
                    1e:4e:59:ae:28:7d:f6:fd:06:61:eb:90:ec:9a:a3:
                    5c:ad:67:a2:c9:9e:03:0b:7b:c4:ed:f7:81:54:b1:
                    d0:82:30:d5:3c:9b:de:2b:94:d3:7e:d5:fd:6d:b5:
                    ed:b2:3e:0e:ea:97:95:71:a0:21:52:7e:5b:8f:45:
                    81:1f:c1:fc:41:5e:33:a2:d3:3a:2b:84:64:06:a6:
                    85:ff:24:93:f1:ba:39:6e:35:bd:b1:23:f0:d7:9c:
                    ec:07:4b:41:3b:96:af:04:39:c2:fa:e7:60:5a:b4:
                    dc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:9C:37:2A:FA:A5:C1:F3:05:6E:29:1E:56:02:01:07:8D:DA:33:F3
            X509v3 Authority Key Identifier:
                keyid:DD:0E:EA:2C:C8:09:C7:ED:52:CD:2A:24:D1:44:54:39:0A:C2:46:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:67:ec:f5:93:e5:0e:a5:5a:8f:6d:01:1a:bd:2c:42:b7:81:
         23:78:0c:22:98:f7:a0:8e:2c:c5:1a:cd:c3:80:b5:19:fb:b1:
         73:ba:15:3c:c4:0a:b1:89:0e:cf:94:6a:9e:e1:87:70:31:28:
         5e:11:1e:09:60:e2:0d:ca:8d:83:eb:41:fc:41:ca:9b:0f:1a:
         87:96:e2:d9:9d:5d:b6:40:90:fc:62:74:f2:3d:f1:57:82:a4:
         ef:6b:84:b8:8a:1a:22:d2:09:0f:9e:86:69:c5:4b:b2:4a:f1:
         da:db:93:6e:2c:85:13:4f:26:85:d3:b3:dc:a3:18:49:0f:81:
         a7:8c:c8:96:24:e1:0b:0b:29:69:ac:48:c6:4e:83:1d:32:a4:
         9f:9b:e2:d6:9c:91:3f:54:01:96:ab:11:ba:fd:7b:ac:19:b1:
         8c:07:04:54:01:b3:bd:a4:a1:a7:88:5b:ca:a6:a7:58:e6:5e:
         2b:89:7d:8b:52:11:16:a2:f0:c0:f9:2e:ce:3a:6f:1f:97:cf:
         c6:f3:50:6e:48:54:6c:8c:d2:54:8c:d2:cf:32:86:2e:28:c5:
         05:13:41:b7:63:44:15:7d:30:59:27:27:71:ef:ec:50:e7:05:
         4b:91:23:99:9e:f3:e0:fa:82:b9:86:3e:be:24:5c:f2:38:61:
         04:1b:83:ce
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUK56g1+efg3bWKexw3IaOT5+0BI0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQwRUVBMkNDODA5QzdFRDUyQ0QyQTI0RDE0NDU0Mzkw
QUMyNDY0QzAeFw0yNjEwMTAwMjQ1MDBaFw0yNjEwMTcwMjUwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTdCNkY4MjdCQTczMEI3NjI4
M0M4RTlFOTk1RjFENjY1RDYyMjc3OEU1NTk4QTBGQjBEODM5MkQ2Qjc5QzBDOUQ4
NUMyMkQ3MTlBQkM0NDI2REY2Q0VFNDlFREYzOEQ1M0NGNzVFNEU4QUU4QzVFQkI4
MzdEQzg2QTY4RTJCRkU5NzY2RjQwQkJGRUJENzcyRTEwRjkzNEMxNkUzOUU1RjE0
RTYxQzJFQjg2MDZENTFGMzc2MzVBN0FFNDNEMUI3QzJFQTBBNjEyM0E2Mzk1NTE3
Q0I4NEZEMEY0QjZGNTRFRjY1MEMzRkZCNDIyMDI5Q0NCMDM2OTQ3RDMzQjg5N0Qx
MEQ0QTNBMDkzMTAwRTVFQjdEMkQ5MjQ4QUEzNzQwMDc2MUU0N0MwNTFFNEU1OUFF
Mjg3REY2RkQwNjYxRUI5MEVDOUFBMzVDQUQ2N0EyQzk5RTAzMEI3QkM0RURGNzgx
NTRCMUQwODIzMEQ1M0M5QkRFMkI5NEQzN0VENUZENkRCNUVEQjIzRTBFRUE5Nzk1
NzFBMDIxNTI3RTVCOEY0NTgxMUZDMUZDNDE1RTMzQTJEMzNBMkI4NDY0MDZBNjg1
RkYyNDkzRjFCQTM5NkUzNUJEQjEyM0YwRDc5Q0VDMDc0QjQxM0I5NkFGMDQzOUMy
RkFFNzYwNUFCNERDMDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAp7b4J7pzC3YoPI6emV8dZl1iJ3jlWYoPsNg5LWt5wMnYXCLXGavE
Qm32zuSe3zjVPPdeToroxeu4N9yGpo4r/pdm9Au/69dy4Q+TTBbjnl8U5hwuuGBt
UfN2NaeuQ9G3wuoKYSOmOVUXy4T9D0tvVO9lDD/7QiApzLA2lH0zuJfRDUo6CTEA
5et9LZJIqjdAB2HkfAUeTlmuKH32/QZh65DsmqNcrWeiyZ4DC3vE7feBVLHQgjDV
PJveK5TTftX9bbXtsj4O6peVcaAhUn5bj0WBH8H8QV4zotM6K4RkBqaF/yST8bo5
bjW9sSPw15zsB0tBO5avBDnC+udgWrTcAQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FIycNyr6pcHzBW4pHlYCAQeN2jPzMB8GA1UdIwQYMBaAFN0O6izICcftUs0qJNFE
VDkKwkZMMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Q3eG5STXhMTWVFTENl
ajNpemRGYVNUREhNTXBiaVVueVdzbU1USHNBQnV2LzEvREQwRUVBMkNDODA5QzdF
RDUyQ0QyQTI0RDE0NDU0MzkwQUMyNDY0Qy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9ERDBFRUEyQ0M4MDlDN0VENTJDRDJBMjREMTQ0NTQzOTBBQzI0
NjRDLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Q3eG5STXhMTWVFTENlajNpemRG
YVNUREhNTXBiaVVueVdzbU1USHNBQnV2LzEvREQwRUVBMkNDODA5QzdFRDUyQ0Qy
QTI0RDE0NDU0MzkwQUMyNDY0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAF1n7PWT5Q6lWo9tARq9LEK3
gSN4DCKY96COLMUazcOAtRn7sXO6FTzECrGJDs+Uap7hh3AxKF4RHglg4g3KjYPr
QfxBypsPGoeW4tmdXbZAkPxidPI98VeCpO9rhLiKGiLSCQ+ehmnFS7JK8drbk24s
hRNPJoXTs9yjGEkPgaeMyJYk4QsLKWmsSMZOgx0ypJ+b4tackT9UAZarEbr9e6wZ
sYwHBFQBs72koaeIW8qmp1jmXiuJfYtSERai8MD5Ls46bx+Xz8bzUG5IVGyM0lSM
0s8yhi4oxQUTQbdjRBV9MFknJ3Hv7FDnBUuRI5me8+D6grmGPr4kXPI4YQQbg84=
-----END CERTIFICATE-----
Generated at Sat Oct 10 19:55:12 2026 by rpki-client