Error: rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.mft
File:                     AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.mft (raw, json)
Hash identifier:          bq+Z5MgLQsmnInJ4/5Aars0giuOGmQS3AyB9t1YwQn0=
Subject key identifier:   F5:C6:34:B5:58:78:D3:93:65:33:8A:3E:35:BB:57:73:F6:6C:C2:52
Authority key identifier: AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3
Certificate issuer:       /CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3
Certificate serial:       74A7EA4547B1694EED8BABC124EB3992EB96CAC3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.mft
Manifest number:          04E7
Signing time:             Sat 31 Oct 2026 05:20:00 +0000
Manifest this update:     Sat 31 Oct 2026 05:15:00 +0000
Manifest next update:     Sun 01 Nov 2026 06:33:00 +0000
Files and hashes:         1: AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl (hash: XbVa93i7I5Cfu5brVtDrJ/fCF0yJ6JggVqDaDoQjRps=)
                          2: 3136382e3139372e3130342e302f32322d3232203d3e20323635343737.roa (hash: NKhhelO6RGKaDs/+G0sIJiQ1J6kRVq9sUC9DrbVdsj4=)
                          3: 3136382e3139372e3130362e302f32342d3234203d3e20323635343737.roa (hash: 6CA4Mq/PYj8AnA4oMt7greKQTeFDPBWkxHXxynUWkps=)
                          4: 3139302e3130332e3135322e302f32322d3232203d3e20323730393336.roa (hash: SFRan6wUUl+qAuIJbMy9u85RZ8B4HjWtf5RbEesDQqs=)
                          5: 3136382e3139372e3130372e302f32342d3234203d3e20323635343737.roa (hash: vD4ePhiAPlTsCQKon4eQyb3yE8Su8leuU5XvXEbZXX0=)
                          6: 323830343a333463303a366530303a3a2f34302d3430203d3e20323635343737.roa (hash: kSkcYmLT3kTrA+/6WC/wGmTeeCwx7H5Lfs+prllOL70=)
                          7: 3136382e3139372e3130362e302f32332d3233203d3e20323635343737.roa (hash: 5ltVlS3Kl97Yjf/5Sc5opCe5VhlqUxevy8d9XzNoU58=)
                          8: 3136382e3139372e3130342e302f32342d3234203d3e20323635343737.roa (hash: CVRAWic0EMJ3pC526p3Q7/WIg3l/by+zZ0ZpByHrrxM=)
                          9: 3139302e3130332e3135342e302f32332d3233203d3e20323730393336.roa (hash: HZLoF4N4vb3MPIztZ/meVhJOaEhrWzYfaiCTVRYrHuU=)
                          10: 3139302e3130332e3135332e302f32342d3234203d3e20323730393336.roa (hash: Qj4BcZi9WxmzPiYC1JGsVFmMnlRO+pXzl9u3M4xkOzM=)
                          11: 3139302e3130332e3135352e302f32342d3234203d3e20323730393336.roa (hash: AJwSNUqwibi6aCbSiRlHGoy7GE2RneVrt15fLiVpSHE=)
                          12: 323830343a333463303a383930303a3a2f34382d3438203d3e20323635343737.roa (hash: y0EFE8dpHe4yxi3q83IOSWYKX/kF394+0wu5IjY4S1Q=)
                          13: 3139302e3130332e3135342e302f32342d3234203d3e20323730393336.roa (hash: CQp32iZLq25kiAzFALDiuQDj5zrp69tj8mN2ys+3uMw=)
                          14: 3139302e3130332e3135322e302f32332d3233203d3e20323730393336.roa (hash: +btokG+zhcSUNkznZNOfe7SFPDzKr67TekppHFk/m+4=)
                          15: 3136382e3139372e3130352e302f32342d3234203d3e20323635343737.roa (hash: cH5xircoVxX2fIlURwlIduelRHDj4QzfCMlCF+nht/w=)
                          16: 323830343a333463303a3a2f33322d3332203d3e20323635343737.roa (hash: 5WnT5qW6x9e/XYQVuQsSZdRUsMbS9SgduNaUds6OpBs=)
                          17: 3136382e3139372e3130342e302f32332d3233203d3e20323635343737.roa (hash: SzYdQ81OdRxS3LcFk0Y+PxdUupzvm7wDE50N6UqaWFc=)
                          18: 3139302e3130332e3135322e302f32342d3234203d3e20323730393336.roa (hash: suyVJQxFSSlMNFJz6ep+N6+4RnVzd93YjC+x8+CnOQo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl
                          rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 06:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a7:ea:45:47:b1:69:4e:ed:8b:ab:c1:24:eb:39:92:eb:96:ca:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3
        Validity
            Not Before: Oct 31 05:15:00 2026 GMT
            Not After : Nov  1 06:33:00 2026 GMT
        Subject: CN=F5C634B55878D39365338A3E35BB5773F66CC252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:03:01:81:40:12:08:5d:f2:b3:e3:01:e1:8d:
                    cb:89:8a:e0:45:8f:66:8c:e2:ca:15:37:ec:19:f5:
                    bd:72:8a:26:6b:88:28:84:39:4c:2f:37:c9:c4:81:
                    eb:15:3b:2d:80:75:0c:8c:62:9f:45:12:ce:ce:6d:
                    cf:9c:f5:7c:ed:d7:42:c4:e9:b2:bf:76:45:f2:81:
                    70:b0:36:49:80:6e:86:7b:1f:e1:14:3b:4b:3b:67:
                    cb:f1:eb:f2:30:32:fd:ea:f8:3b:c2:46:57:2f:28:
                    5c:84:89:f4:22:4b:ae:3f:b1:eb:17:da:9d:f7:df:
                    ea:82:8d:29:69:14:06:d6:64:a6:e1:98:17:43:df:
                    27:fe:d1:41:2f:ed:45:19:a8:25:fd:73:4e:8f:03:
                    2c:16:78:8e:b8:fc:66:56:a7:ac:4e:ba:de:19:74:
                    c3:0c:83:66:4b:43:11:b2:ce:c8:9c:d3:11:4e:6a:
                    85:21:40:31:4e:67:52:30:ce:1e:f5:43:ef:94:c3:
                    2c:c8:20:a2:71:59:c9:55:95:50:a5:5a:19:b9:cf:
                    d3:1b:72:85:ea:b2:d6:8e:ce:8b:d8:21:09:a3:4a:
                    61:b4:65:ca:c3:4b:32:af:b3:e6:19:dc:b8:32:c1:
                    62:e6:ce:8f:0b:4b:9c:fd:7f:bc:91:ea:51:dc:3a:
                    5b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C6:34:B5:58:78:D3:93:65:33:8A:3E:35:BB:57:73:F6:6C:C2:52
            X509v3 Authority Key Identifier:
                keyid:AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:2a:f0:95:fd:07:66:fd:38:10:73:b3:dd:12:92:3c:37:1f:
         78:9f:38:12:7a:c9:7c:b3:36:fc:b3:9c:5c:97:9b:04:6c:8f:
         30:71:9b:cc:ab:a7:5d:77:b9:a4:eb:7c:0c:9f:6b:7c:2c:00:
         e8:09:00:41:53:7f:b7:e5:ea:80:e1:f4:66:75:39:d8:35:d6:
         aa:9b:20:1a:1b:91:28:e9:89:e8:4e:84:e4:fc:b4:d4:ff:5d:
         d6:24:43:18:61:74:0c:12:67:68:d6:27:33:c4:ad:29:a4:e8:
         a7:e2:a2:d0:52:7b:b0:51:b8:b8:8b:5c:87:4a:a3:e0:15:00:
         30:98:b2:3c:ca:75:c7:d0:0d:37:43:8f:00:0c:68:dc:f0:17:
         87:fa:04:17:18:91:06:49:99:5d:64:ae:98:f3:68:61:23:c8:
         24:a2:b2:e1:b2:5b:b4:09:e2:db:08:66:6c:89:41:bb:97:e2:
         56:c0:90:a4:1c:32:d6:a2:9a:76:a7:3a:5c:49:d3:ca:7e:96:
         a7:25:aa:18:4b:3d:c5:88:12:ab:b6:c4:f5:7b:96:39:45:ad:
         f0:c5:1f:25:16:dd:e7:31:dd:df:34:e7:f3:41:df:ea:6b:f6:
         fd:2d:46:db:c5:7f:6a:8f:27:12:48:b5:3c:fa:bc:56:e2:52:
         78:17:89:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:56:59 2026 by rpki-client