Error: rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.mft
File:                     AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.mft (raw, json)
Hash identifier:          7wC5JpnA5IbVBlwQ6G+9nmfOHzfwHavILQIuAe7UQpw=
Subject key identifier:   2F:24:B9:90:D2:83:81:9E:31:A0:C5:DA:64:F8:ED:D1:AC:66:65:92
Authority key identifier: AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3
Certificate issuer:       /CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3
Certificate serial:       5A373658CB0417D33052A3495C779E013815B583
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.mft
Manifest number:          048B
Signing time:             Sun 23 Aug 2026 02:20:00 +0000
Manifest this update:     Sun 23 Aug 2026 02:15:00 +0000
Manifest next update:     Mon 24 Aug 2026 02:54:00 +0000
Files and hashes:         1: 3139302e3130332e3135322e302f32342d3234203d3e20323730393336.roa (hash: suyVJQxFSSlMNFJz6ep+N6+4RnVzd93YjC+x8+CnOQo=)
                          2: 3136382e3139372e3130352e302f32342d3234203d3e20323635343737.roa (hash: cH5xircoVxX2fIlURwlIduelRHDj4QzfCMlCF+nht/w=)
                          3: 3139302e3130332e3135352e302f32342d3234203d3e20323730393336.roa (hash: AJwSNUqwibi6aCbSiRlHGoy7GE2RneVrt15fLiVpSHE=)
                          4: 3136382e3139372e3130362e302f32332d3233203d3e20323635343737.roa (hash: 5ltVlS3Kl97Yjf/5Sc5opCe5VhlqUxevy8d9XzNoU58=)
                          5: 3136382e3139372e3130342e302f32322d3232203d3e20323635343737.roa (hash: NKhhelO6RGKaDs/+G0sIJiQ1J6kRVq9sUC9DrbVdsj4=)
                          6: 323830343a333463303a366530303a3a2f34302d3430203d3e20323635343737.roa (hash: kSkcYmLT3kTrA+/6WC/wGmTeeCwx7H5Lfs+prllOL70=)
                          7: 3136382e3139372e3130372e302f32342d3234203d3e20323635343737.roa (hash: vD4ePhiAPlTsCQKon4eQyb3yE8Su8leuU5XvXEbZXX0=)
                          8: 3139302e3130332e3135332e302f32342d3234203d3e20323730393336.roa (hash: Qj4BcZi9WxmzPiYC1JGsVFmMnlRO+pXzl9u3M4xkOzM=)
                          9: 3139302e3130332e3135322e302f32322d3232203d3e20323730393336.roa (hash: SFRan6wUUl+qAuIJbMy9u85RZ8B4HjWtf5RbEesDQqs=)
                          10: 3136382e3139372e3130342e302f32332d3233203d3e20323635343737.roa (hash: SzYdQ81OdRxS3LcFk0Y+PxdUupzvm7wDE50N6UqaWFc=)
                          11: 323830343a333463303a3a2f33322d3332203d3e20323635343737.roa (hash: 5WnT5qW6x9e/XYQVuQsSZdRUsMbS9SgduNaUds6OpBs=)
                          12: 3139302e3130332e3135322e302f32332d3233203d3e20323730393336.roa (hash: +btokG+zhcSUNkznZNOfe7SFPDzKr67TekppHFk/m+4=)
                          13: 323830343a333463303a383930303a3a2f34382d3438203d3e20323635343737.roa (hash: y0EFE8dpHe4yxi3q83IOSWYKX/kF394+0wu5IjY4S1Q=)
                          14: AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl (hash: JrZbGeymLXjE7W/+XXL538IS+gKarpc0lto5dXIHums=)
                          15: 3136382e3139372e3130362e302f32342d3234203d3e20323635343737.roa (hash: 6CA4Mq/PYj8AnA4oMt7greKQTeFDPBWkxHXxynUWkps=)
                          16: 3139302e3130332e3135342e302f32332d3233203d3e20323730393336.roa (hash: HZLoF4N4vb3MPIztZ/meVhJOaEhrWzYfaiCTVRYrHuU=)
                          17: 3139302e3130332e3135342e302f32342d3234203d3e20323730393336.roa (hash: CQp32iZLq25kiAzFALDiuQDj5zrp69tj8mN2ys+3uMw=)
                          18: 3136382e3139372e3130342e302f32342d3234203d3e20323635343737.roa (hash: CVRAWic0EMJ3pC526p3Q7/WIg3l/by+zZ0ZpByHrrxM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl
                          rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 02:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:37:36:58:cb:04:17:d3:30:52:a3:49:5c:77:9e:01:38:15:b5:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3
        Validity
            Not Before: Aug 23 02:15:00 2026 GMT
            Not After : Aug 24 02:54:00 2026 GMT
        Subject: CN=2F24B990D283819E31A0C5DA64F8EDD1AC666592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:cb:e1:f4:9e:a0:76:f6:6a:41:c2:e2:b2:10:
                    b8:24:71:58:a8:9e:70:e1:ec:7d:9b:3d:b2:c6:b4:
                    7b:da:40:fb:0d:8c:a7:d7:01:52:22:34:4d:13:de:
                    f9:2c:83:5e:02:3c:55:ea:7f:24:1e:02:2b:84:03:
                    13:98:41:8e:66:8b:8e:b8:15:76:69:a2:78:b4:16:
                    d7:99:f8:fa:f5:6d:ee:ce:c4:af:85:e8:94:ae:f4:
                    e7:ae:24:5f:bc:88:67:b7:87:64:68:9c:42:d3:1e:
                    97:10:b4:60:cc:43:76:29:dd:9e:d9:03:9c:d0:73:
                    36:cc:de:f6:46:7c:0b:b1:3f:e5:58:1e:0a:2f:83:
                    23:39:cf:54:e4:62:60:a3:1c:4b:cf:8a:9c:8e:f9:
                    d8:bd:3a:7e:24:5f:9b:b8:51:b7:b2:1a:4a:f8:5a:
                    ac:49:f2:61:4f:fb:bd:cd:26:bf:d2:75:ce:6d:ce:
                    e9:fa:23:03:09:29:e3:43:5c:3a:6a:f8:4f:0d:a3:
                    fa:aa:fa:28:58:14:f6:00:d6:0b:e0:1e:ef:dc:0f:
                    81:8f:f4:56:43:b9:98:c8:e7:ed:7d:c7:13:dc:7a:
                    f2:2e:c7:0c:17:02:15:66:1a:ba:fd:ae:29:8f:19:
                    f2:06:6e:89:a2:1e:3c:42:b3:1d:fe:c7:37:25:92:
                    fe:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:24:B9:90:D2:83:81:9E:31:A0:C5:DA:64:F8:ED:D1:AC:66:65:92
            X509v3 Authority Key Identifier:
                keyid:AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:32:03:23:59:15:87:0f:cc:47:06:c5:bc:a1:09:d0:c5:44:
         f5:3e:65:a3:d2:02:c6:bf:02:af:5d:6d:63:c5:d9:54:ff:44:
         18:02:60:7e:1a:17:fd:f6:ce:4c:4d:38:b9:91:1d:65:1f:d2:
         fc:1e:46:4e:f9:44:2a:d8:7e:a4:6f:06:6b:11:20:d8:53:2d:
         d0:b3:5f:18:ed:0c:0f:e5:6f:e0:77:26:6a:5f:ba:4a:93:03:
         f7:0c:9c:45:9a:b0:b7:35:6b:6a:98:a5:5f:07:1a:0a:8a:23:
         fb:22:11:f5:39:71:61:70:27:8e:1c:12:51:bb:a6:9b:76:ec:
         36:2e:94:c2:62:d6:57:7f:da:1f:59:92:55:b4:ab:fb:75:89:
         0a:73:8d:16:07:6e:3d:a4:80:65:54:15:b0:e3:e9:53:c3:cf:
         2e:a1:a4:22:47:90:f9:48:90:c9:9a:da:84:09:45:5a:3e:0d:
         ee:6e:1f:2c:7c:00:86:b0:28:2f:01:4c:04:5e:a6:5b:61:f2:
         d7:fc:69:af:1d:23:97:a0:0b:d8:d1:49:ac:11:40:43:4b:69:
         d1:c0:ae:78:06:bb:9f:c2:53:d3:61:0f:1e:1c:26:a5:e9:96:
         6b:27:cd:f3:76:83:b5:53:fd:24:96:9f:d7:85:58:35:89:42:
         2d:b2:15:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 06:19:11 2026 by rpki-client