Error: rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
File:                     8EAA572CDAB740A56977FFFC602F113E473F2E77.mft (raw, json)
Hash identifier:          tqdmfyYT+14mPZwGzuN7/Yv/kh1pVYenPKl/z5e5dyE=
Subject key identifier:   ED:77:39:C4:51:E4:5F:1C:73:9C:08:E6:82:8C:23:B0:DE:49:6A:61
Authority key identifier: 8E:AA:57:2C:DA:B7:40:A5:69:77:FF:FC:60:2F:11:3E:47:3F:2E:77
Certificate issuer:       /CN=8EAA572CDAB740A56977FFFC602F113E473F2E77
Certificate serial:       41CA0E42464E5F6E9FF1D6151138AC7A60DDB15E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
Manifest number:          04CC
Signing time:             Mon 12 Oct 2026 17:24:03 +0000
Manifest this update:     Mon 12 Oct 2026 17:19:03 +0000
Manifest next update:     Tue 13 Oct 2026 20:21:03 +0000
Files and hashes:         1: 8EAA572CDAB740A56977FFFC602F113E473F2E77.crl (hash: GK0N/dXcGwTo/aodpfd/vk8KKjT+VX376Flyr7bqU5M=)
                          2: 3138362e3230392e3232342e302f32302d3232203d3e203533313534.roa (hash: s5oM/YKgACeZENr2SH18ungMSV8453Z2MUy+KChUs/I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.crl
                          rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 20:21:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:ca:0e:42:46:4e:5f:6e:9f:f1:d6:15:11:38:ac:7a:60:dd:b1:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EAA572CDAB740A56977FFFC602F113E473F2E77
        Validity
            Not Before: Oct 12 17:19:03 2026 GMT
            Not After : Oct 13 20:21:03 2026 GMT
        Subject: CN=ED7739C451E45F1C739C08E6828C23B0DE496A61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:23:c4:8a:d6:35:16:87:60:49:1a:6d:69:f3:
                    68:3b:42:91:21:5d:a8:ed:b1:85:60:5d:29:c0:6c:
                    65:c7:08:55:93:3e:9a:10:a5:86:53:fd:ca:6c:e6:
                    7f:0c:e3:e9:89:a3:23:3c:38:1a:f6:9e:2f:c3:c9:
                    e1:b3:a2:cd:66:77:2d:21:06:1e:67:5c:41:b8:10:
                    99:60:57:b9:af:af:a4:f6:63:29:5c:0c:46:cd:f0:
                    8d:9e:92:a3:dd:5e:b4:a5:c3:0e:82:d5:16:20:09:
                    41:98:f6:73:63:cf:95:9a:fd:a9:31:a2:47:cf:9e:
                    9f:63:9b:22:e6:e3:84:f8:6f:d8:fa:af:59:39:17:
                    2a:9c:c3:c0:84:f3:fc:c4:3a:43:32:b7:c7:20:81:
                    a4:df:6a:3e:6c:be:27:de:c1:e5:a6:0d:88:eb:74:
                    5c:0c:ed:58:55:70:86:85:1b:5d:a2:c4:03:86:15:
                    ca:fd:13:19:aa:23:78:67:47:97:c7:82:9b:c1:df:
                    31:80:1c:a2:f4:39:09:6f:01:0a:6c:42:28:d2:e8:
                    41:f1:dc:38:fd:be:f1:5d:4f:8c:b1:67:34:3c:d2:
                    40:00:30:45:c7:d1:5f:84:07:2e:a5:df:11:0f:14:
                    5e:dc:b7:84:40:94:77:3d:0d:17:13:3a:06:70:51:
                    f9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:77:39:C4:51:E4:5F:1C:73:9C:08:E6:82:8C:23:B0:DE:49:6A:61
            X509v3 Authority Key Identifier:
                keyid:8E:AA:57:2C:DA:B7:40:A5:69:77:FF:FC:60:2F:11:3E:47:3F:2E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:19:a2:6d:54:4b:d5:b9:1b:67:51:58:40:28:26:cb:7f:46:
         ac:d8:1e:65:01:5a:30:90:2a:7f:f7:1b:a2:83:8e:29:ce:27:
         4d:2e:29:ee:9b:70:11:b2:76:3f:7e:ae:94:4b:34:60:b6:ed:
         d9:3b:a1:4d:91:99:8f:d2:e3:36:52:4d:8b:eb:6c:8d:b9:4d:
         da:f4:70:b4:4c:b2:45:fd:c2:0c:4e:eb:8f:c5:13:af:59:40:
         b8:52:56:69:dc:cc:9a:ec:f1:01:4c:a4:dd:17:a6:f8:92:8d:
         68:05:6e:62:50:62:19:83:dc:b1:20:fa:15:44:cb:44:81:4a:
         52:7f:fe:6f:ba:22:45:c2:05:24:f6:e4:9a:2a:a6:e4:b1:38:
         a0:51:3c:e5:01:59:6e:49:6c:be:eb:75:8d:21:b1:88:ef:2b:
         cd:3f:db:2e:bb:e0:86:23:63:62:0f:ee:ee:c1:4d:9e:75:1d:
         fa:1c:eb:4f:bf:bb:25:35:6d:73:91:55:f5:0c:7c:db:02:91:
         a4:c0:45:f3:f6:5f:b1:5d:2c:45:3b:af:1a:cf:ad:c3:73:e7:
         4c:b6:9f:16:e8:a3:bc:af:07:2e:1b:4a:9c:92:03:81:10:7a:
         e8:9f:c2:1a:b0:bb:92:d3:83:69:b1:98:4b:78:3b:a7:3a:96:
         aa:21:4b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 00:06:25 2026 by rpki-client