Error: rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft
File:                     AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft (raw, json)
Hash identifier:          0ICU4WIloRMgKw5bRhTMNqlnTszGN2EASHFHrVX6I90=
Subject key identifier:   BD:2B:B2:24:17:FF:50:66:AB:34:55:28:B3:70:AE:8C:D5:CC:6A:CD
Authority key identifier: AA:6F:86:A0:5F:D9:F7:D9:AB:E9:E8:E9:5B:24:6A:4C:FE:2C:9E:1A
Certificate issuer:       /CN=AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A
Certificate serial:       7A237479B10B2B6FC016254EB0FB912AE8CB7C2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft
Manifest number:          04D4
Signing time:             Sat 17 Oct 2026 15:15:02 +0000
Manifest this update:     Sat 17 Oct 2026 15:10:02 +0000
Manifest next update:     Sun 18 Oct 2026 17:41:02 +0000
Files and hashes:         1: 323830343a346563343a3a2f33322d3438203d3e20323638323831.roa (hash: 801y3lfhDTZ8xivM8mU35dnl9g1g/QxpCrvzHpFsImc=)
                          2: 34352e3233372e3134302e302f32322d3234203d3e20323638323831.roa (hash: wZ3FKrk16KxWrlfyyvwprkQ3rDHWEeBjvNQpTwjKSvg=)
                          3: AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl (hash: MKAZ5A0MCWDsrAqkN4VOcIfLVeUFa+LCKn5Rc2tLzWM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl
                          rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 17:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:23:74:79:b1:0b:2b:6f:c0:16:25:4e:b0:fb:91:2a:e8:cb:7c:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A
        Validity
            Not Before: Oct 17 15:10:02 2026 GMT
            Not After : Oct 18 17:41:02 2026 GMT
        Subject: CN=BD2BB22417FF5066AB345528B370AE8CD5CC6ACD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:99:86:ff:d0:ed:8e:16:b4:0e:b9:57:d3:ed:
                    9f:59:b8:c9:4c:cc:2f:45:d7:38:7a:b3:40:4c:a3:
                    ad:5c:5c:53:7c:4a:fd:ab:25:98:11:4a:0a:c8:27:
                    99:d0:8c:4e:bd:4f:9b:55:8d:d4:39:3b:f6:8b:38:
                    e2:95:e7:42:0b:2e:28:20:5a:20:45:2f:b6:4d:af:
                    68:31:8f:6c:d1:37:78:b5:0b:33:6c:be:4d:79:93:
                    68:54:60:68:97:74:b5:98:f3:ef:ce:b4:b4:77:f5:
                    56:ba:54:d3:97:4c:bf:5e:59:59:73:fa:8d:8e:93:
                    cd:12:bd:8c:a5:cd:b0:d2:2b:f2:c6:29:25:20:11:
                    7e:db:d8:da:4d:72:ef:99:fb:12:af:59:28:6e:46:
                    84:b1:2a:f0:d0:96:2c:db:68:04:f5:39:35:48:07:
                    e4:26:70:05:7e:39:ee:13:21:78:24:97:08:a8:86:
                    cd:49:61:e4:f9:37:ff:e4:7d:c4:bb:0c:1a:c1:27:
                    99:07:e4:27:b3:75:c4:ba:df:70:3e:de:cc:a1:e1:
                    05:fa:04:56:a5:1f:65:79:07:3e:ca:b3:90:d3:27:
                    58:2b:84:84:39:ff:93:ba:69:26:17:12:e1:91:94:
                    83:a9:a3:e4:dc:35:45:d2:0e:27:af:38:9b:7b:f4:
                    3c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:2B:B2:24:17:FF:50:66:AB:34:55:28:B3:70:AE:8C:D5:CC:6A:CD
            X509v3 Authority Key Identifier:
                keyid:AA:6F:86:A0:5F:D9:F7:D9:AB:E9:E8:E9:5B:24:6A:4C:FE:2C:9E:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:de:fe:93:01:3b:89:a7:d3:ad:25:eb:75:c5:bd:08:f3:ca:
         9c:55:92:1f:88:e2:89:73:af:67:25:5d:92:f7:05:43:a4:bb:
         07:3c:ee:82:dd:6e:da:d2:35:e9:6a:f3:6e:35:8f:f1:0c:31:
         ce:74:9e:d7:21:f1:60:a9:b0:c5:50:a5:36:e6:eb:dc:b5:45:
         27:bf:76:aa:28:4d:dc:06:cf:23:67:3f:7a:0e:c8:1b:12:23:
         94:99:9b:00:06:ef:73:6d:ff:fc:43:8b:46:10:57:34:97:0a:
         f3:41:56:1d:7f:56:0f:27:12:1c:62:2c:38:c1:f2:11:a3:f9:
         e1:ff:34:e7:0a:57:23:a7:51:25:7b:88:72:e4:30:0a:67:23:
         90:0b:30:54:bf:29:3b:9f:f5:92:be:c2:bf:83:d0:7d:43:6f:
         dc:1a:f1:54:af:c1:70:16:8d:77:9b:94:c3:34:7a:01:be:b5:
         c3:57:79:8b:b3:38:6c:22:1f:b3:1c:4f:13:ee:b9:bb:97:37:
         75:b1:66:2d:46:dc:e1:e5:72:4f:49:20:29:16:d9:84:67:c3:
         b6:f8:46:a3:46:41:b4:94:4b:39:d1:ba:a6:b6:aa:9e:ac:de:
         c2:c0:e0:1b:72:32:b3:1e:5c:a1:d6:87:37:7f:51:c9:8b:31:
         c2:24:7d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:02:40 2026 by rpki-client