Error: rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.mft
File:                     9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.mft (raw, json)
Hash identifier:          F4LsvL3Qkq1070FtWbIbSnIwXew2UsXJg+6Nnz9xzqI=
Subject key identifier:   36:1A:24:A7:16:C3:AD:D0:3A:D3:7E:69:32:4E:9E:CF:69:30:6E:97
Authority key identifier: 9F:B2:CE:2B:97:CE:82:E0:FA:2F:A5:67:4E:36:9E:4C:F2:E6:E1:C7
Certificate issuer:       /CN=9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7
Certificate serial:       3F9E6D0EF4158E72BD231C1176CE15C66BE00F73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.mft
Manifest number:          0289
Signing time:             Wed 14 Oct 2026 12:50:00 +0000
Manifest this update:     Wed 14 Oct 2026 12:45:00 +0000
Manifest next update:     Thu 15 Oct 2026 14:34:00 +0000
Files and hashes:         1: 9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.crl (hash: W+2JAl9LkWxeKWwRrxjXq5Brpn8CGPbT9opy0xgnlUo=)
                          2: 34352e3233332e3138382e302f32322d3332203d3e20323637333438.roa (hash: yJhSqR6sY+RWX328V/4SPjt/m5uViEEbVyuoi+3Bc/Y=)
                          3: 323830343a346331343a3a2f33322d313238203d3e20323637333438.roa (hash: QaUBZvIRzlgLNe+cCcSysvwHxqcjlDsVHI7LHkgqSRc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.crl
                          rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 14:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:9e:6d:0e:f4:15:8e:72:bd:23:1c:11:76:ce:15:c6:6b:e0:0f:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7
        Validity
            Not Before: Oct 14 12:45:00 2026 GMT
            Not After : Oct 15 14:34:00 2026 GMT
        Subject: CN=361A24A716C3ADD03AD37E69324E9ECF69306E97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0e:f5:83:58:6a:98:a6:81:ad:1e:da:ba:a4:
                    ca:94:0d:35:53:ca:20:87:ae:1b:4d:35:1b:f3:5e:
                    9e:c0:0e:05:2b:7e:08:f7:e2:89:77:77:02:d3:de:
                    3e:79:44:51:61:e9:bd:4f:58:4b:bb:e1:1d:51:d0:
                    fa:04:1c:57:f1:cf:15:5a:da:a6:2a:b7:50:a3:e5:
                    4b:5c:16:df:0c:2a:86:55:69:6d:5b:86:84:41:2a:
                    fc:11:64:26:ae:d5:23:24:cb:98:ce:5f:ca:e7:85:
                    f8:ea:db:4a:68:ff:7c:cb:f0:92:1f:69:25:51:e7:
                    85:40:35:83:1c:d8:fd:b7:24:e9:31:25:91:9e:e8:
                    03:1b:3d:5f:ad:0d:65:7f:2a:21:5a:b0:e1:0d:94:
                    7d:63:66:04:41:e5:4a:cc:98:5c:1b:fe:6b:81:e5:
                    f1:84:d3:c6:3e:09:69:4f:23:3d:0b:5f:1b:ca:67:
                    db:27:8d:bf:35:37:38:45:bd:ce:b7:84:83:05:cd:
                    a5:3b:68:51:de:cb:cd:cb:1c:cb:60:11:44:ef:06:
                    d7:00:4f:84:8a:37:87:e8:ce:4b:f8:87:78:58:27:
                    a5:6b:ef:6f:16:4a:27:9b:70:e3:97:61:65:e6:34:
                    d2:37:25:72:ef:86:3d:ce:d0:d1:a4:ab:b5:5b:dc:
                    33:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:1A:24:A7:16:C3:AD:D0:3A:D3:7E:69:32:4E:9E:CF:69:30:6E:97
            X509v3 Authority Key Identifier:
                keyid:9F:B2:CE:2B:97:CE:82:E0:FA:2F:A5:67:4E:36:9E:4C:F2:E6:E1:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:ca:dd:25:1a:77:3d:cd:cc:ed:11:ad:93:23:6e:4b:08:5b:
         77:4f:ae:8e:1f:9b:45:5c:14:4a:4f:f7:3d:b0:dc:6d:a0:83:
         45:f5:34:fd:3c:a9:6a:81:4a:6f:62:50:f9:65:70:bc:99:41:
         e2:58:94:6e:91:5d:41:26:4f:3b:15:de:d1:c6:2e:eb:06:43:
         9c:45:62:63:50:26:bb:0b:33:cd:1e:f8:61:db:b4:64:1c:77:
         13:e4:e7:49:76:20:bd:86:93:6c:2d:cc:63:f0:df:8c:52:38:
         e0:13:b7:70:e9:11:85:c7:89:e6:f6:80:de:80:b1:40:aa:02:
         a9:7f:3b:4e:33:49:34:87:d8:9d:ac:15:db:11:af:84:64:4f:
         9a:6c:25:b5:c3:dc:6d:fa:b0:5e:5c:b4:cb:b2:d6:c6:2a:0c:
         67:03:22:58:4b:18:97:35:18:d1:65:91:e8:4b:61:b0:2b:2f:
         5d:3f:2f:d1:b9:b9:13:19:64:29:29:13:ea:a4:65:f2:1e:8f:
         43:36:36:25:2e:87:8e:59:2f:20:d2:8d:aa:f4:87:68:57:32:
         22:4b:42:57:3f:09:9c:3c:60:84:a3:0e:0a:59:ab:3d:30:e1:
         cb:4d:e8:16:97:c1:e8:4c:5b:ab:9c:0c:47:d5:68:0c:1e:3d:
         04:6c:15:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 04:07:11 2026 by rpki-client