Error: rpki-repo.registro.br/repo/HmzZf9GHkWkpxePeKTQDyuHHm7YhnrLQjD4QgCTzDn5Y/1/E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/HmzZf9GHkWkpxePeKTQDyuHHm7YhnrLQjD4QgCTzDn5Y/1/E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349.mft
File:                     E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349.mft (raw, json)
Hash identifier:          6b4L4RPHB3atwTBOxyfYsZQP79fa5cQ9dJrpO/MCp4o=
Subject key identifier:   F0:AC:31:23:C7:A4:AE:F2:9E:4D:EA:AD:03:EE:AD:CF:69:03:6A:8C
Authority key identifier: E9:D8:2D:4D:B7:C3:B1:3D:2D:B2:96:D7:6A:B4:6A:66:AB:53:D3:49
Certificate issuer:       /CN=E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349
Certificate serial:       13D29BB6E7A9F0CE2780D06BE3C13136C8F96B24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmzZf9GHkWkpxePeKTQDyuHHm7YhnrLQjD4QgCTzDn5Y/1/E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349.mft
Manifest number:          0565
Signing time:             Tue 13 Oct 2026 08:50:00 +0000
Manifest this update:     Tue 13 Oct 2026 08:45:00 +0000
Manifest next update:     Wed 14 Oct 2026 08:50:00 +0000
Files and hashes:         1: E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349.crl (hash: tm+1KgMyi1Gh2mqjWp7iNY+65F6JZVtnblBzi5G81q8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HmzZf9GHkWkpxePeKTQDyuHHm7YhnrLQjD4QgCTzDn5Y/1/E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349.crl
                          rsync://rpki-repo.registro.br/repo/HmzZf9GHkWkpxePeKTQDyuHHm7YhnrLQjD4QgCTzDn5Y/1/E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 08:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d2:9b:b6:e7:a9:f0:ce:27:80:d0:6b:e3:c1:31:36:c8:f9:6b:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349
        Validity
            Not Before: Oct 13 08:45:00 2026 GMT
            Not After : Oct 20 08:50:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d0:76:9f:81:59:0f:ef:39:4b:af:d0:c7:ca:
                    09:48:7b:82:86:ef:6f:ac:02:af:6c:09:b9:31:ac:
                    93:b4:d0:de:dc:63:ab:90:50:44:15:c8:48:e3:87:
                    5a:9d:24:da:8d:f5:43:2c:bf:8c:a4:e2:8f:06:9b:
                    5e:09:41:ae:6f:03:aa:9a:14:eb:44:d7:68:17:0c:
                    d8:47:6e:17:db:fc:82:76:83:1e:46:29:ab:a1:9b:
                    49:3f:ba:f3:24:6d:7a:1e:fa:40:5f:63:ca:51:f5:
                    67:49:a1:7c:02:32:c7:a5:ea:11:83:60:e3:ee:59:
                    35:ad:e3:5c:e4:8f:3e:d9:6c:30:15:b2:6a:1d:66:
                    24:50:93:67:fb:58:f7:58:87:3b:f6:06:45:c1:3d:
                    ac:bd:90:47:f0:c1:45:e9:4b:74:06:a0:65:c6:a2:
                    91:bc:be:ae:16:ea:58:9d:56:ba:84:60:03:52:f9:
                    98:6e:6a:b2:03:55:b3:cb:f2:83:c4:f9:b7:7c:27:
                    b2:c6:33:77:30:56:c4:e3:92:f6:27:29:49:28:d6:
                    32:f7:35:ea:fc:b6:50:ba:80:f1:e6:56:57:c7:79:
                    bc:ba:fc:19:7d:da:17:2c:61:14:1f:db:e3:d0:7e:
                    1d:20:e9:89:5b:4d:9e:1d:55:85:b4:64:ff:d4:6d:
                    ba:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:AC:31:23:C7:A4:AE:F2:9E:4D:EA:AD:03:EE:AD:CF:69:03:6A:8C
            X509v3 Authority Key Identifier:
                keyid:E9:D8:2D:4D:B7:C3:B1:3D:2D:B2:96:D7:6A:B4:6A:66:AB:53:D3:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmzZf9GHkWkpxePeKTQDyuHHm7YhnrLQjD4QgCTzDn5Y/1/E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmzZf9GHkWkpxePeKTQDyuHHm7YhnrLQjD4QgCTzDn5Y/1/E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:3e:9d:59:58:93:09:2a:76:e1:2a:a5:92:52:c2:ab:c9:22:
         59:6d:2e:26:3a:d0:6c:8e:dc:1b:33:86:a1:cc:6d:10:6b:46:
         c6:96:de:6b:39:f0:e9:33:0f:6b:8a:b7:3a:83:a1:80:58:d6:
         74:30:57:0e:a1:b6:07:e4:fc:9b:2a:e9:7e:11:a8:5f:4f:6c:
         16:15:32:9b:84:86:2d:f8:32:5e:e7:73:43:04:70:39:81:b7:
         e8:fa:1a:a1:5b:4a:0c:9a:a3:45:dc:94:f1:85:84:5c:ec:c0:
         67:df:7f:b9:03:7f:5b:7f:fa:fd:4b:da:48:38:bf:22:1d:51:
         85:92:9a:4a:1a:90:54:78:2d:9f:7c:84:a5:10:16:ea:72:5c:
         2e:e2:d1:77:eb:01:98:05:80:3a:38:d6:27:e2:5a:f2:65:c3:
         09:05:ed:36:c5:07:14:2e:10:3e:ac:68:62:d7:d1:6c:a6:4e:
         75:5a:70:bb:06:c2:ac:f3:38:c0:a8:f9:05:c5:08:5c:17:3f:
         76:f9:0d:2f:b0:36:60:cf:d3:4a:8d:9e:74:1e:33:c6:1c:6a:
         5f:83:ba:72:a0:20:2f:3a:12:bb:aa:a3:2b:c4:9c:20:2c:37:
         1e:33:dc:71:05:96:c9:47:0d:46:4f:76:ab:20:8c:3c:56:b8:
         32:c9:77:93
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 13 19:43:46 2026 by rpki-client