Error: rpki-repo.registro.br/repo/F9WxhmiyNpJYvoHzvkVRxnzj6AtX8kJ1VqV1v3LHSfc4/1/BB29FE533F66E557A97787A56585CE14ECA8FCD2.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/F9WxhmiyNpJYvoHzvkVRxnzj6AtX8kJ1VqV1v3LHSfc4/1/BB29FE533F66E557A97787A56585CE14ECA8FCD2.mft
File:                     BB29FE533F66E557A97787A56585CE14ECA8FCD2.mft (raw, json)
Hash identifier:          SNqcGfJUWOdGvYUkKth9M5EBz/sCEKF+gOhXXTJ6OGA=
Subject key identifier:   3A:EF:0D:F4:56:41:CB:C8:CA:CF:00:12:AE:1F:68:DB:50:AB:4B:B6
Authority key identifier: BB:29:FE:53:3F:66:E5:57:A9:77:87:A5:65:85:CE:14:EC:A8:FC:D2
Certificate issuer:       /CN=BB29FE533F66E557A97787A56585CE14ECA8FCD2
Certificate serial:       2285E0B6AEC44CAC4FCD2B81A4090F0392C97913
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB29FE533F66E557A97787A56585CE14ECA8FCD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9WxhmiyNpJYvoHzvkVRxnzj6AtX8kJ1VqV1v3LHSfc4/1/BB29FE533F66E557A97787A56585CE14ECA8FCD2.mft
Manifest number:          056B
Signing time:             Wed 14 Oct 2026 18:40:00 +0000
Manifest this update:     Wed 14 Oct 2026 18:35:00 +0000
Manifest next update:     Thu 15 Oct 2026 18:40:00 +0000
Files and hashes:         1: BB29FE533F66E557A97787A56585CE14ECA8FCD2.crl (hash: mmldLCrtPW9pCVShAxK+aSEvCWRDPPL5tdF2zW/CXO4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F9WxhmiyNpJYvoHzvkVRxnzj6AtX8kJ1VqV1v3LHSfc4/1/BB29FE533F66E557A97787A56585CE14ECA8FCD2.crl
                          rsync://rpki-repo.registro.br/repo/F9WxhmiyNpJYvoHzvkVRxnzj6AtX8kJ1VqV1v3LHSfc4/1/BB29FE533F66E557A97787A56585CE14ECA8FCD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB29FE533F66E557A97787A56585CE14ECA8FCD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:85:e0:b6:ae:c4:4c:ac:4f:cd:2b:81:a4:09:0f:03:92:c9:79:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB29FE533F66E557A97787A56585CE14ECA8FCD2
        Validity
            Not Before: Oct 14 18:35:00 2026 GMT
            Not After : Oct 21 18:40:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b3:ac:46:d9:d6:df:c8:5d:c0:8a:d6:03:f9:
                    34:cb:4a:b3:cf:34:ed:49:ec:85:4e:94:65:d5:37:
                    cc:f7:ec:e7:1e:26:ac:17:cd:c4:a4:97:b5:94:f1:
                    dc:df:34:8a:f0:66:da:82:50:07:c7:58:14:c2:fd:
                    ba:1e:e4:ee:3e:da:1d:7d:5b:fb:3c:71:90:5a:dc:
                    46:8e:b6:c7:c4:ad:8b:97:2f:fe:40:bf:f4:01:e2:
                    5b:44:77:9c:d7:fa:2b:10:3e:cc:00:32:02:0d:93:
                    2c:73:d1:d5:d0:63:eb:9d:ec:7b:87:2b:d8:99:a1:
                    eb:ac:d8:67:4e:84:b3:af:c9:39:ed:8a:c1:8a:b8:
                    23:87:d9:79:86:d7:d6:7c:94:05:bb:8d:06:53:ac:
                    aa:4b:f3:17:b0:b5:3a:fa:27:95:d5:e3:63:75:fb:
                    f8:bb:61:a8:e7:e7:25:71:30:30:95:86:ce:1e:27:
                    38:7e:74:de:f3:89:7e:cd:e8:43:4d:0a:84:d7:61:
                    83:f3:7a:c6:d4:45:61:5d:b2:ac:e9:14:de:d4:f5:
                    51:cf:5c:a6:ad:01:f8:52:82:bf:22:e6:ab:79:ab:
                    22:65:59:25:f8:d6:e0:d7:8f:25:55:ea:9b:fd:1f:
                    62:71:c7:16:e7:2f:71:f4:81:0f:fe:4e:5d:0e:8b:
                    32:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:EF:0D:F4:56:41:CB:C8:CA:CF:00:12:AE:1F:68:DB:50:AB:4B:B6
            X509v3 Authority Key Identifier:
                keyid:BB:29:FE:53:3F:66:E5:57:A9:77:87:A5:65:85:CE:14:EC:A8:FC:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9WxhmiyNpJYvoHzvkVRxnzj6AtX8kJ1VqV1v3LHSfc4/1/BB29FE533F66E557A97787A56585CE14ECA8FCD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB29FE533F66E557A97787A56585CE14ECA8FCD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9WxhmiyNpJYvoHzvkVRxnzj6AtX8kJ1VqV1v3LHSfc4/1/BB29FE533F66E557A97787A56585CE14ECA8FCD2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:ca:78:df:8e:9d:5b:11:ef:0d:db:84:16:4e:d2:64:ad:2e:
         c8:57:62:9d:a3:ed:90:54:9b:57:f2:f7:4e:f2:cd:1e:8b:a5:
         00:f3:35:b2:7f:2c:2c:1d:ee:a7:c3:cb:ae:09:5d:ea:56:ca:
         bc:55:3c:3a:9f:69:70:bc:e0:76:14:ce:a1:36:ef:b6:67:9e:
         10:7a:d8:e2:bc:30:d6:71:2c:76:7d:be:f6:0e:45:35:b0:1a:
         ca:7e:81:d6:7c:34:ca:bf:f3:c8:c6:27:d6:ec:5e:83:3f:eb:
         98:66:08:ef:84:4e:c3:27:0d:ff:51:f5:7e:2e:f2:59:88:3b:
         f3:5c:1c:81:ce:ea:ff:e6:47:31:27:f6:de:a1:72:21:b6:00:
         17:52:b2:e1:df:b5:a1:52:3e:b5:d2:b9:5a:59:20:97:0d:70:
         69:a4:74:49:96:28:2a:4d:c3:4c:6c:3d:48:77:4e:64:5b:50:
         a9:48:65:54:f1:2b:69:2d:a5:d7:f0:e9:e1:33:8d:e9:7a:c0:
         ef:cf:14:91:1c:80:86:f1:69:e1:78:df:c3:e3:08:3f:a3:95:
         16:8c:37:c2:59:8d:53:f9:c3:50:83:75:f2:ab:d6:7d:80:2c:
         11:48:b4:9e:52:cc:21:f8:b0:cb:5c:32:3f:3d:b2:82:1d:79:
         89:8f:84:6e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Oct 15 05:00:14 2026 by rpki-client