Error: rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.mft
File:                     221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.mft (raw, json)
Hash identifier:          tGHZapph8lhRSOeWA18vpbxn2KTHxlwbj5quq8/2eNU=
Subject key identifier:   00:5E:EF:88:D3:74:4D:78:9E:77:4F:6E:37:5C:7B:ED:82:38:26:F7
Authority key identifier: 22:13:38:E9:0C:9C:D3:7D:ED:85:B4:40:9F:CA:B7:BF:4F:5F:E3:AA
Certificate issuer:       /CN=221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA
Certificate serial:       448A4612C6670CCCD8EC3D9142BC047B73D4927B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.mft
Manifest number:          0587
Signing time:             Fri 30 Oct 2026 20:00:00 +0000
Manifest this update:     Fri 30 Oct 2026 19:55:00 +0000
Manifest next update:     Sat 31 Oct 2026 20:00:00 +0000
Files and hashes:         1: 3230302e37312e36342e302f32322d3232203d3e20323636313931.roa (hash: tybpJ3GwjL+dBOO4n5SwJ2vRq30ANOZmP8AKX2EPP0g=)
                          2: 3230302e37312e36342e302f32332d3233203d3e20323636313931.roa (hash: N+F6u0J2yPD+F49eJ/4UhA2mpe7el1327maAKU/Zw44=)
                          3: 3230302e37312e36362e302f32332d3233203d3e20323636313931.roa (hash: QMkatyPiNPQKLMszTkR2WUQnFQUs19PpGn9TV366HE0=)
                          4: 323830343a336331633a3a2f33322d3332203d3e20323636313931.roa (hash: 6mXhJtRvjSEIgFUUiLlob2avhD5IklqXkSLqmiqCB8k=)
                          5: 221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.crl (hash: 8Kr4gwXED9RVv+g1rPgBb+0d/xp/louMIu6y5DEXIrU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.crl
                          rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:8a:46:12:c6:67:0c:cc:d8:ec:3d:91:42:bc:04:7b:73:d4:92:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA
        Validity
            Not Before: Oct 30 19:55:00 2026 GMT
            Not After : Oct 31 20:00:00 2026 GMT
        Subject: CN=3082010A0282010100DDB3E8AB7DDCEAF56A5CE70C527E4CF0171936F6E7A1456F84D473C78CDA3F354AA290B3458C7EF5DFB5DE6BD361F8584C5AE7A256599D74F909C3780D6948CCEBE73C0D5FC78F2CE6DAA7B4A03942F23275E65E72FE462BFF8A6A9CF106F7FF7441A8733FFECC8F802F7C71E4CF29335D606A08E7D9A752EDC02CB0D152D94BD2D9BC6DAECD60198CCB1B4939232F9E686D038A0314CD6720190DBE4EE19FEA0426875F728EDDE3ADF78A3B28F4D547FE99E6EA6E1907324359603FA80CAF19DDFB7509BE1EC7EBE1D6B19F858D3AEE5C4917ED76F128B0E7B1E0D68062EC7CCF775CA1E8A359E8CCB9634BCDE3F2C56BDFD6D0322C7883A8BBDA039ED718710203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b3:e8:ab:7d:dc:ea:f5:6a:5c:e7:0c:52:7e:
                    4c:f0:17:19:36:f6:e7:a1:45:6f:84:d4:73:c7:8c:
                    da:3f:35:4a:a2:90:b3:45:8c:7e:f5:df:b5:de:6b:
                    d3:61:f8:58:4c:5a:e7:a2:56:59:9d:74:f9:09:c3:
                    78:0d:69:48:cc:eb:e7:3c:0d:5f:c7:8f:2c:e6:da:
                    a7:b4:a0:39:42:f2:32:75:e6:5e:72:fe:46:2b:ff:
                    8a:6a:9c:f1:06:f7:ff:74:41:a8:73:3f:fe:cc:8f:
                    80:2f:7c:71:e4:cf:29:33:5d:60:6a:08:e7:d9:a7:
                    52:ed:c0:2c:b0:d1:52:d9:4b:d2:d9:bc:6d:ae:cd:
                    60:19:8c:cb:1b:49:39:23:2f:9e:68:6d:03:8a:03:
                    14:cd:67:20:19:0d:be:4e:e1:9f:ea:04:26:87:5f:
                    72:8e:dd:e3:ad:f7:8a:3b:28:f4:d5:47:fe:99:e6:
                    ea:6e:19:07:32:43:59:60:3f:a8:0c:af:19:dd:fb:
                    75:09:be:1e:c7:eb:e1:d6:b1:9f:85:8d:3a:ee:5c:
                    49:17:ed:76:f1:28:b0:e7:b1:e0:d6:80:62:ec:7c:
                    cf:77:5c:a1:e8:a3:59:e8:cc:b9:63:4b:cd:e3:f2:
                    c5:6b:df:d6:d0:32:2c:78:83:a8:bb:da:03:9e:d7:
                    18:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:5E:EF:88:D3:74:4D:78:9E:77:4F:6E:37:5C:7B:ED:82:38:26:F7
            X509v3 Authority Key Identifier:
                keyid:22:13:38:E9:0C:9C:D3:7D:ED:85:B4:40:9F:CA:B7:BF:4F:5F:E3:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:dd:93:59:9b:27:ef:87:dd:74:68:78:a7:f2:78:55:34:26:
         45:51:78:e6:b8:97:7d:1b:ff:9b:b6:60:e6:08:c3:80:47:21:
         36:71:a1:f3:12:89:3a:87:49:25:1f:7e:15:93:dc:79:d8:b6:
         34:d6:53:c3:23:08:a8:73:6d:5f:29:e7:97:f8:40:02:2a:15:
         ff:b5:23:53:31:8c:24:87:e0:f2:9c:a2:ee:d9:19:07:ba:f6:
         0a:cb:23:80:dd:82:a9:24:0a:40:21:df:11:86:d4:ca:16:f3:
         76:8c:68:aa:62:52:3b:66:75:6b:72:72:9a:da:e5:a1:20:db:
         aa:24:3b:bc:0e:7f:bd:aa:b5:97:7d:cf:14:a3:25:d3:f7:12:
         31:a7:02:cc:0a:40:89:cc:ae:76:7e:df:5d:06:c8:05:18:4d:
         1d:04:10:21:68:94:20:f9:9c:29:66:a7:db:fb:35:43:9a:76:
         14:fd:92:b1:de:90:a8:d2:77:92:a5:89:ff:18:81:2f:1b:98:
         08:50:09:a4:13:98:db:bc:f6:6f:f6:9e:16:98:bc:5c:0b:69:
         cb:13:0d:ae:7e:7b:6e:b4:1d:f7:40:72:17:06:6c:24:a0:90:
         2a:03:19:1f:c6:9f:6b:62:cf:4d:67:c3:86:bd:ff:0c:3b:34:
         7a:0e:1d:64
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 31 12:20:15 2026 by rpki-client