Error: rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft
File:                     01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft (raw, json)
Hash identifier:          kCcIdr2d5OMd/fp7HM5HQdQeACvo99aOhZlXxDQlgss=
Subject key identifier:   D5:E1:9B:EB:E5:EE:6E:3C:50:AB:FA:A5:11:D6:28:D4:4F:54:B5:BB
Authority key identifier: 01:CB:71:08:BB:CA:29:F5:54:D4:21:AC:E0:32:B9:77:AA:1B:F6:7C
Certificate issuer:       /CN=01CB7108BBCA29F554D421ACE032B977AA1BF67C
Certificate serial:       204A4966B97A192812C219D85D6116FE670449D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft
Manifest number:          04E7
Signing time:             Fri 30 Oct 2026 18:17:38 +0000
Manifest this update:     Fri 30 Oct 2026 18:12:38 +0000
Manifest next update:     Sat 31 Oct 2026 20:40:38 +0000
Files and hashes:         1: 323830343a356233303a3a2f33322d3438203d3e20323638383234.roa (hash: ashwnlAibbNwSgP5vRGNo5jGaiBT/0Chbnd873TTeT4=)
                          2: 3137392e3130372e35322e302f32322d3234203d3e20323638383234.roa (hash: Rz4oEJOP6UvkBFjPK3ZuyT7m869P08DDJ4ho0q7tOSo=)
                          3: 34352e3137322e3230302e302f32322d3234203d3e20323638383234.roa (hash: 1jiPLN7k23pfp303XMfvHpUfO1fnwC1H4dxKN6JZTRI=)
                          4: 01CB7108BBCA29F554D421ACE032B977AA1BF67C.crl (hash: lOphTu96cUgl60S7UG/C00DfjQzs5K8S1wXwCV/LLiQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.crl
                          rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 20:40:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:4a:49:66:b9:7a:19:28:12:c2:19:d8:5d:61:16:fe:67:04:49:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01CB7108BBCA29F554D421ACE032B977AA1BF67C
        Validity
            Not Before: Oct 30 18:12:38 2026 GMT
            Not After : Oct 31 20:40:38 2026 GMT
        Subject: CN=D5E19BEBE5EE6E3C50ABFAA511D628D44F54B5BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e9:3f:c0:23:54:9d:47:eb:91:42:38:48:b5:
                    87:9d:d0:5e:0a:45:ca:22:96:4b:ee:40:21:af:01:
                    a1:77:4c:b8:a2:92:10:90:90:d9:d7:26:bd:fe:3a:
                    03:64:80:29:98:89:7b:9f:22:91:4d:0e:6b:f5:61:
                    63:51:ec:ef:ac:90:dc:e1:31:4e:4b:1a:d8:ab:61:
                    7c:e6:cf:91:ca:98:9a:43:06:ca:61:27:1b:46:95:
                    f9:8b:14:e4:fb:c9:4d:76:f5:4e:2b:83:80:16:56:
                    74:e3:e4:1a:85:27:52:20:a7:f1:1f:68:12:b3:4a:
                    4d:fa:30:ca:69:85:31:21:3b:c2:fa:07:41:63:83:
                    61:8b:71:09:af:19:3b:96:83:70:02:e9:72:6f:b3:
                    c1:81:14:7c:e2:ab:77:0e:79:ba:87:4b:b3:c9:75:
                    47:bf:90:40:9e:e7:54:72:4e:c0:a5:0c:cc:6e:c3:
                    ff:5c:45:c6:f9:e2:1e:7f:a2:21:0c:08:bb:81:6d:
                    df:7e:0f:e7:3b:c2:71:f6:91:de:f0:69:8a:82:b8:
                    4a:35:61:37:cb:01:b1:d8:9b:e6:ee:63:5e:85:20:
                    1c:e1:3b:2f:78:20:0c:22:9f:c6:95:ef:aa:3e:a3:
                    5c:53:29:9a:81:1d:b4:df:f3:e5:e1:07:cc:1d:fe:
                    44:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E1:9B:EB:E5:EE:6E:3C:50:AB:FA:A5:11:D6:28:D4:4F:54:B5:BB
            X509v3 Authority Key Identifier:
                keyid:01:CB:71:08:BB:CA:29:F5:54:D4:21:AC:E0:32:B9:77:AA:1B:F6:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:00:cb:3f:b3:5e:78:a8:2f:bd:15:d2:56:3e:a1:7f:fd:ed:
         7a:f0:2b:e3:e1:77:79:30:1d:2f:6d:b6:b7:f6:4c:6f:7a:a5:
         cc:3e:8f:7f:6f:75:2a:e1:1c:fe:58:58:76:19:62:5d:3b:13:
         f0:21:e9:8b:96:d6:b4:d4:e3:aa:e9:e0:b2:d9:b0:e6:24:cb:
         d8:0b:aa:af:dc:95:c3:b9:fc:7a:f7:12:45:22:e1:0e:b4:a5:
         7e:2f:23:07:4b:fc:e4:d8:f1:9d:7c:70:65:28:d8:1d:96:b5:
         1f:5e:5c:99:cf:6e:0a:f8:b3:28:b2:f0:4e:93:03:66:f6:12:
         f9:5e:51:a8:39:d9:70:2c:db:0c:2c:50:9e:df:15:c9:42:28:
         16:4f:c5:78:86:a1:4c:df:04:64:23:a5:4b:98:b3:f4:01:cc:
         ec:fa:41:5c:54:8a:b4:14:68:45:4e:ee:18:91:5e:93:2e:64:
         aa:eb:be:84:e9:1d:bf:4c:12:d9:7f:32:b7:35:5f:3c:98:df:
         17:13:95:de:69:d3:e1:1e:77:75:9c:68:48:33:91:b3:43:4a:
         54:23:5d:12:5b:05:ea:6e:00:d8:cc:a9:8c:16:12:4c:a2:f2:
         2b:2c:ca:c7:d4:f9:c0:af:da:39:6b:42:3a:ee:19:2a:0a:39:
         7a:39:e0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:19:51 2026 by rpki-client