Error: rpki-repo.registro.br/repo/HdoeVcXTsCC3pCJAs5kjHC4euAu5ek26USiLR7N8eq1U/1/AB2A97FB18AC96C06177343B1FB982A8506F104A.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/HdoeVcXTsCC3pCJAs5kjHC4euAu5ek26USiLR7N8eq1U/1/AB2A97FB18AC96C06177343B1FB982A8506F104A.mft
File:                     AB2A97FB18AC96C06177343B1FB982A8506F104A.mft (raw, json)
Hash identifier:          FxAQEq7NtGc3X02obXiVZYnBlhFmfir3kCLOP7lvqVA=
Subject key identifier:   2A:10:F0:8D:EB:88:87:88:86:7D:BF:FA:08:D1:0D:E6:EC:80:DB:B1
Authority key identifier: AB:2A:97:FB:18:AC:96:C0:61:77:34:3B:1F:B9:82:A8:50:6F:10:4A
Certificate issuer:       /CN=AB2A97FB18AC96C06177343B1FB982A8506F104A
Certificate serial:       0C5C07C79835870BF8B8A3606B64FDEB07E9EAFA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB2A97FB18AC96C06177343B1FB982A8506F104A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdoeVcXTsCC3pCJAs5kjHC4euAu5ek26USiLR7N8eq1U/1/AB2A97FB18AC96C06177343B1FB982A8506F104A.mft
Manifest number:          0569
Signing time:             Tue 13 Oct 2026 10:40:00 +0000
Manifest this update:     Tue 13 Oct 2026 10:35:00 +0000
Manifest next update:     Wed 14 Oct 2026 10:40:00 +0000
Files and hashes:         1: AB2A97FB18AC96C06177343B1FB982A8506F104A.crl (hash: 3a6QleSqZLr6pttG+TEYFo5T+Ux30xXzgWrwkQ+qQ/g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HdoeVcXTsCC3pCJAs5kjHC4euAu5ek26USiLR7N8eq1U/1/AB2A97FB18AC96C06177343B1FB982A8506F104A.crl
                          rsync://rpki-repo.registro.br/repo/HdoeVcXTsCC3pCJAs5kjHC4euAu5ek26USiLR7N8eq1U/1/AB2A97FB18AC96C06177343B1FB982A8506F104A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB2A97FB18AC96C06177343B1FB982A8506F104A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 10:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:5c:07:c7:98:35:87:0b:f8:b8:a3:60:6b:64:fd:eb:07:e9:ea:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB2A97FB18AC96C06177343B1FB982A8506F104A
        Validity
            Not Before: Oct 13 10:35:00 2026 GMT
            Not After : Oct 20 10:40:00 2026 GMT
        Subject: CN=3082010A0282010100BF2001E8EC24685E2DED338687B75230C9A5805CA127FF261DDB35410F9D1A87CBED57EE397C7D5CFABA6134E0635977168E6CD2F573BDDB0FF6B78101A18CB6E042A335EEF1A9A754B714A0F6E384E15F418A769B1500A3ECCD8AEB255903F30D38632985ED43F61D7E3C59C5A128E3849789E37760FE1F1F03D50EFF5F322090943ACB0A361E14CCC608F40CDD71A170723CFA882538F001372093545742279567EBF71491E62578FD95EE619E32F71EBCF851C24F20613FCE7A8372C03E8B6E44AE328776288518D7C1DD9E77F9B016B1A2D57CF760468F4B6D236819AA480E4FD28E0BE68426D756C446DD4F92A1953F14FAB681355807598DC61D0F118B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:20:01:e8:ec:24:68:5e:2d:ed:33:86:87:b7:
                    52:30:c9:a5:80:5c:a1:27:ff:26:1d:db:35:41:0f:
                    9d:1a:87:cb:ed:57:ee:39:7c:7d:5c:fa:ba:61:34:
                    e0:63:59:77:16:8e:6c:d2:f5:73:bd:db:0f:f6:b7:
                    81:01:a1:8c:b6:e0:42:a3:35:ee:f1:a9:a7:54:b7:
                    14:a0:f6:e3:84:e1:5f:41:8a:76:9b:15:00:a3:ec:
                    cd:8a:eb:25:59:03:f3:0d:38:63:29:85:ed:43:f6:
                    1d:7e:3c:59:c5:a1:28:e3:84:97:89:e3:77:60:fe:
                    1f:1f:03:d5:0e:ff:5f:32:20:90:94:3a:cb:0a:36:
                    1e:14:cc:c6:08:f4:0c:dd:71:a1:70:72:3c:fa:88:
                    25:38:f0:01:37:20:93:54:57:42:27:95:67:eb:f7:
                    14:91:e6:25:78:fd:95:ee:61:9e:32:f7:1e:bc:f8:
                    51:c2:4f:20:61:3f:ce:7a:83:72:c0:3e:8b:6e:44:
                    ae:32:87:76:28:85:18:d7:c1:dd:9e:77:f9:b0:16:
                    b1:a2:d5:7c:f7:60:46:8f:4b:6d:23:68:19:aa:48:
                    0e:4f:d2:8e:0b:e6:84:26:d7:56:c4:46:dd:4f:92:
                    a1:95:3f:14:fa:b6:81:35:58:07:59:8d:c6:1d:0f:
                    11:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:10:F0:8D:EB:88:87:88:86:7D:BF:FA:08:D1:0D:E6:EC:80:DB:B1
            X509v3 Authority Key Identifier:
                keyid:AB:2A:97:FB:18:AC:96:C0:61:77:34:3B:1F:B9:82:A8:50:6F:10:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdoeVcXTsCC3pCJAs5kjHC4euAu5ek26USiLR7N8eq1U/1/AB2A97FB18AC96C06177343B1FB982A8506F104A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB2A97FB18AC96C06177343B1FB982A8506F104A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdoeVcXTsCC3pCJAs5kjHC4euAu5ek26USiLR7N8eq1U/1/AB2A97FB18AC96C06177343B1FB982A8506F104A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:c6:11:3f:aa:04:74:16:b8:02:7f:15:18:0e:92:58:52:b6:
         86:22:e6:9d:83:53:74:f3:a1:75:1a:d1:b7:2e:be:6d:9e:10:
         fb:48:69:ee:f5:cf:9b:79:39:8e:ea:59:5d:68:00:5b:d9:bb:
         e1:42:cb:74:f4:23:fe:78:d9:86:f8:0b:fc:8f:2b:b7:cf:1b:
         c4:39:e2:c4:24:30:2b:c5:eb:4c:85:fc:a5:03:3f:7f:1c:00:
         34:0d:33:1a:f4:d1:22:b4:8c:d3:66:c7:cd:c0:31:6f:28:3a:
         d1:21:e4:e3:34:a2:97:7d:fb:6a:76:91:45:27:8b:cf:3a:c4:
         fc:2a:95:25:20:e9:ae:2c:60:dd:4d:99:2f:4b:71:af:da:ca:
         32:3c:ea:6a:39:fc:4f:8a:67:3b:91:a8:f5:5d:aa:f4:aa:47:
         88:6c:b1:d0:51:df:48:36:c5:aa:f8:00:d5:05:a7:4a:2f:a4:
         e0:a3:a5:d8:b8:79:9a:63:24:42:93:fa:18:1e:60:64:b1:88:
         d0:b0:73:17:31:0b:e8:a9:43:af:20:8c:04:68:9e:2f:28:7f:
         29:54:82:e4:8b:c3:ca:3c:e4:fd:b3:1f:a1:4c:d4:82:df:10:
         59:4b:ad:d3:84:1a:ba:3a:e5:e6:5a:5d:01:0b:69:da:6e:67:
         e3:b2:4b:45
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 13 17:23:10 2026 by rpki-client