Error: rpki-repo.registro.br/repo/7Hvc3XtLTETGYkfNUXzTPFhPzLAJ8uF7bJq4ocLbJCu/0/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/7Hvc3XtLTETGYkfNUXzTPFhPzLAJ8uF7bJq4ocLbJCu/0/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.mft
File:                     13CD05239CCE57F514CF78D14C0E06AAAC9E9292.mft (raw, json)
Hash identifier:          2wKqAOmlT3RGuJn1vEf1Uqhbdrqlb5Dxo0raIJ/xm+Y=
Subject key identifier:   70:1C:BE:B1:CC:10:6D:AD:C5:AF:8E:E2:BD:5C:E5:D6:06:09:43:7C
Authority key identifier: 13:CD:05:23:9C:CE:57:F5:14:CF:78:D1:4C:0E:06:AA:AC:9E:92:92
Certificate issuer:       /CN=13CD05239CCE57F514CF78D14C0E06AAAC9E9292
Certificate serial:       46F61D38B487D7C963E416E43D6728C160D1BFFE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Hvc3XtLTETGYkfNUXzTPFhPzLAJ8uF7bJq4ocLbJCu/0/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.mft
Manifest number:          02AD
Signing time:             Sun 23 Aug 2026 15:20:45 +0000
Manifest this update:     Sun 23 Aug 2026 15:15:45 +0000
Manifest next update:     Mon 24 Aug 2026 18:56:45 +0000
Files and hashes:         1: 3133382e302e3136342e302f32322d3332203d3e20323634353537.roa (hash: Zu4CbibibHuiR6HArJ04hoy05s8Y2LXooWHOzkB9aGg=)
                          2: 323830343a323137633a3a2f33322d313238203d3e20323634353537.roa (hash: OOTZpKI8FQtbfmgU7oV9DJryt1kSiKrkgtA/SU0iGHk=)
                          3: 13CD05239CCE57F514CF78D14C0E06AAAC9E9292.crl (hash: ZAFHBBVHHscZ23DpLXuAH/LozVruWgtB+q2UzOQWE+Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Hvc3XtLTETGYkfNUXzTPFhPzLAJ8uF7bJq4ocLbJCu/0/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.crl
                          rsync://rpki-repo.registro.br/repo/7Hvc3XtLTETGYkfNUXzTPFhPzLAJ8uF7bJq4ocLbJCu/0/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 18:56:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f6:1d:38:b4:87:d7:c9:63:e4:16:e4:3d:67:28:c1:60:d1:bf:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13CD05239CCE57F514CF78D14C0E06AAAC9E9292
        Validity
            Not Before: Aug 23 15:15:45 2026 GMT
            Not After : Aug 24 18:56:45 2026 GMT
        Subject: CN=701CBEB1CC106DADC5AF8EE2BD5CE5D60609437C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5d:91:38:70:16:ac:4b:5f:43:26:f9:3b:09:
                    ca:99:1d:69:d8:93:9b:7b:24:fb:e5:71:19:ba:1e:
                    2e:25:6b:73:9f:47:06:d0:d2:73:2d:c9:34:29:7c:
                    b0:c8:f2:6d:aa:d3:54:48:81:7d:b0:3a:a9:12:72:
                    41:ff:26:7b:1b:8f:fb:69:e6:27:e7:e0:94:89:23:
                    94:8c:6a:9a:a9:45:63:c5:1d:12:0e:89:2b:8f:ae:
                    a8:4b:f1:75:9d:02:c2:38:a3:59:17:0d:01:ae:ee:
                    cb:bd:a9:63:19:dc:a8:8f:a3:1f:19:9d:69:54:9d:
                    8d:20:ac:ea:5f:de:99:74:66:53:50:ef:f1:db:8c:
                    76:29:c1:fb:e3:9f:b2:2f:5d:37:f7:7a:eb:30:4d:
                    b9:b6:c4:23:8a:05:66:e7:d1:4a:2f:ae:1c:46:be:
                    b4:b6:4e:1c:86:d6:60:b9:6a:94:e0:cd:1c:31:33:
                    ca:d6:1e:15:7c:11:2c:45:99:a7:06:9f:04:6f:85:
                    c5:4f:58:1f:a2:6e:3f:ff:11:55:82:5a:ad:ab:0b:
                    4e:8b:4a:37:31:7a:77:86:fa:65:bf:59:a2:37:fd:
                    67:10:37:a6:ae:da:c3:c0:82:f7:cf:1c:db:c7:5d:
                    39:91:7a:f2:3f:94:b7:3a:86:aa:79:96:9e:43:31:
                    f6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:1C:BE:B1:CC:10:6D:AD:C5:AF:8E:E2:BD:5C:E5:D6:06:09:43:7C
            X509v3 Authority Key Identifier:
                keyid:13:CD:05:23:9C:CE:57:F5:14:CF:78:D1:4C:0E:06:AA:AC:9E:92:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Hvc3XtLTETGYkfNUXzTPFhPzLAJ8uF7bJq4ocLbJCu/0/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Hvc3XtLTETGYkfNUXzTPFhPzLAJ8uF7bJq4ocLbJCu/0/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:9c:a1:d9:fd:db:97:8b:be:bb:ff:09:63:76:a2:cf:a3:de:
         ba:c0:fe:f4:7a:e6:b7:1f:4e:21:f3:c8:ee:da:3e:7e:71:a0:
         39:82:b6:62:5f:84:8b:c9:f1:75:5d:f1:81:67:6a:16:9b:ea:
         66:d0:c2:32:c1:14:9d:c2:71:d5:ad:7f:e7:7c:b6:b2:65:b0:
         e7:1b:90:7a:f7:a2:54:09:fe:9b:a9:af:2d:5a:74:42:7b:d9:
         8d:d5:0b:aa:02:e0:00:ca:6d:01:e5:21:97:9e:64:6e:05:08:
         ec:83:82:a7:5e:b1:45:97:14:11:4e:47:f2:92:d5:93:a2:c2:
         8e:f6:81:b8:d7:1b:db:b2:09:df:05:df:3c:4d:68:47:72:2b:
         45:8a:ae:4c:1a:d2:60:a8:13:44:7b:e2:02:a2:b5:41:47:41:
         37:17:65:5d:56:f2:12:a3:29:7b:cf:9d:d7:0d:fd:db:2d:5b:
         8f:83:41:f3:31:88:2a:18:70:9b:04:74:f7:0d:30:80:98:b0:
         f6:76:c7:39:37:cf:93:63:4e:8a:de:9f:cf:1f:54:a2:13:63:
         18:bd:0d:e1:67:d1:51:e3:82:7c:e5:df:fc:c1:eb:43:c6:e9:
         30:1d:77:e9:d8:b4:b2:cd:10:76:74:32:b6:ce:d9:b5:a3:81:
         5e:a6:8f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 04:31:45 2026 by rpki-client