Error: rpki-repo.registro.br/repo/Eu2CEGAWLbHEC6wuTncqgjMVuQetsbAz45GypmwirttR/0/AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Eu2CEGAWLbHEC6wuTncqgjMVuQetsbAz45GypmwirttR/0/AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.mft
File:                     AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.mft (raw, json)
Hash identifier:          K2flII1sAZ19FrFlYRVY54CXLqUeHTGuKmT/9uXdahs=
Subject key identifier:   49:88:35:9C:85:5F:46:15:24:86:41:EC:63:95:0A:EE:1F:90:52:43
Authority key identifier: AB:14:C8:86:4A:01:BE:3A:A6:1E:37:DC:A3:3A:5F:66:EF:83:14:3B
Certificate issuer:       /CN=AB14C8864A01BE3AA61E37DCA33A5F66EF83143B
Certificate serial:       3834ADFAFE8683F927F1C9386315A56471319118
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eu2CEGAWLbHEC6wuTncqgjMVuQetsbAz45GypmwirttR/0/AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.mft
Manifest number:          049D
Signing time:             Fri 16 Oct 2026 04:25:44 +0000
Manifest this update:     Fri 16 Oct 2026 04:20:44 +0000
Manifest next update:     Sat 17 Oct 2026 05:45:44 +0000
Files and hashes:         1: 323830343a343231633a3a2f33322d313238203d3e20323637343738.roa (hash: /0QT0wI7+eYcajSYhgsdXO6q1FxmDqkusXthKyF7MTU=)
                          2: AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.crl (hash: Ap/Wf0hXrvpwuDc+RoiEom40HTgC5QNptRJHkXjR31s=)
                          3: 3138312e3139312e3136342e302f32322d3332203d3e20323637343738.roa (hash: skY15WlSI4tcTncVtazqeblRHAT80w5RYqUax/oiGkQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eu2CEGAWLbHEC6wuTncqgjMVuQetsbAz45GypmwirttR/0/AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.crl
                          rsync://rpki-repo.registro.br/repo/Eu2CEGAWLbHEC6wuTncqgjMVuQetsbAz45GypmwirttR/0/AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 05:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:34:ad:fa:fe:86:83:f9:27:f1:c9:38:63:15:a5:64:71:31:91:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB14C8864A01BE3AA61E37DCA33A5F66EF83143B
        Validity
            Not Before: Oct 16 04:20:44 2026 GMT
            Not After : Oct 17 05:45:44 2026 GMT
        Subject: CN=4988359C855F4615248641EC63950AEE1F905243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f9:51:9a:f1:14:cb:99:8c:58:62:90:b1:77:
                    6c:1a:a5:b0:95:90:59:e7:d8:6c:1d:48:97:80:0f:
                    d2:64:d6:dc:1b:9e:09:68:a3:e5:98:ca:34:92:4e:
                    b8:b2:27:40:ad:82:fb:6e:03:a5:c6:74:f6:18:e2:
                    b0:13:84:a5:a8:b2:2d:0a:45:bd:3d:13:23:87:65:
                    04:c9:97:c5:1f:6a:ed:b9:89:f8:4a:27:e8:de:8f:
                    97:91:b9:77:14:05:f0:2b:be:f4:91:cb:8a:c1:ae:
                    95:0e:6e:2f:56:c8:23:72:99:6d:17:57:02:37:ff:
                    6d:70:55:b8:6f:29:a4:8f:cd:4b:7a:03:9b:b4:07:
                    e0:62:51:1e:a9:49:1c:95:52:89:6e:3f:99:b4:3c:
                    f2:cb:94:15:57:d4:c7:28:fd:5e:17:9e:c4:2e:ed:
                    15:63:c7:e5:56:73:28:16:6b:63:fd:68:b0:7b:fa:
                    03:a7:32:0e:e9:4f:79:99:fb:f8:5d:58:fd:c3:c9:
                    f8:68:25:e2:8f:1d:0b:07:a1:fb:40:de:51:e4:a0:
                    71:28:40:ab:b6:9e:0c:62:67:a7:e9:46:21:4d:9c:
                    69:9b:21:61:29:a1:49:4f:2a:4b:3e:1e:6f:be:5c:
                    98:ea:54:66:df:04:e2:df:ee:45:3d:09:fb:0f:2f:
                    b1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:88:35:9C:85:5F:46:15:24:86:41:EC:63:95:0A:EE:1F:90:52:43
            X509v3 Authority Key Identifier:
                keyid:AB:14:C8:86:4A:01:BE:3A:A6:1E:37:DC:A3:3A:5F:66:EF:83:14:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eu2CEGAWLbHEC6wuTncqgjMVuQetsbAz45GypmwirttR/0/AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eu2CEGAWLbHEC6wuTncqgjMVuQetsbAz45GypmwirttR/0/AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:9d:98:b0:d9:bf:ee:19:cb:d0:a1:40:4b:11:a5:fd:50:e1:
         f9:d6:31:e7:74:d4:9a:3b:7e:f7:ea:a0:0f:53:bb:47:2c:bb:
         d1:c1:55:4a:c9:06:1a:7e:56:5b:29:68:74:7c:e4:10:73:0f:
         ed:d6:9e:3e:6c:79:a5:ee:25:1a:17:25:e5:f1:a8:81:db:c5:
         bf:3e:e1:1a:86:4c:b7:af:04:ba:12:17:11:e1:9b:cc:d1:46:
         ea:6b:dc:fa:fc:c6:ee:1b:ec:52:a8:ec:9e:85:63:db:26:31:
         1d:c0:9f:92:55:05:d8:f5:6b:1d:ca:a8:11:89:e1:68:c0:e0:
         94:27:0a:68:2d:b4:63:c9:2d:99:91:5a:17:b2:bb:60:a1:ad:
         2a:b8:4a:47:45:b1:cc:e5:bb:e4:8f:85:9b:63:c3:85:7b:aa:
         0f:ea:7f:3c:34:e0:c8:fd:14:b6:c4:12:84:c3:47:83:a8:35:
         3c:9c:ad:43:08:57:4d:88:83:1c:87:cf:76:37:78:9b:59:95:
         6b:bc:af:ad:b4:cb:e3:ef:8c:ae:d1:d1:61:90:0f:da:36:96:
         34:85:0c:47:42:c3:2f:b6:da:d0:c3:f7:19:d9:4d:91:3b:04:
         7c:a0:d1:6f:13:8a:72:a1:89:fe:84:ae:be:c5:f2:4f:b4:55:
         1d:9b:0a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 15:58:25 2026 by rpki-client