Error: rpki-repo.registro.br/repo/9mSXHSQpdAqhL4Er4j4nK7Rts98AqvNgBeZ5ecr3NzD7/0/0A964427D4213D4E03FCAA84837EAABAF7B964D7.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/9mSXHSQpdAqhL4Er4j4nK7Rts98AqvNgBeZ5ecr3NzD7/0/0A964427D4213D4E03FCAA84837EAABAF7B964D7.mft
File:                     0A964427D4213D4E03FCAA84837EAABAF7B964D7.mft (raw, json)
Hash identifier:          r7q3SYA4otpuA1ZGXIcYW/yfqprXmtzcSpSYPEPuzZg=
Subject key identifier:   40:FF:65:08:35:7E:0F:6B:EF:C3:AB:9A:4E:8D:E7:FD:3D:8B:41:00
Authority key identifier: 0A:96:44:27:D4:21:3D:4E:03:FC:AA:84:83:7E:AA:BA:F7:B9:64:D7
Certificate issuer:       /CN=0A964427D4213D4E03FCAA84837EAABAF7B964D7
Certificate serial:       7BA3944F7D0D13F41B6C4C48C56BF8FC79827CD0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A964427D4213D4E03FCAA84837EAABAF7B964D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9mSXHSQpdAqhL4Er4j4nK7Rts98AqvNgBeZ5ecr3NzD7/0/0A964427D4213D4E03FCAA84837EAABAF7B964D7.mft
Manifest number:          40
Signing time:             Mon 12 Oct 2026 09:30:10 +0000
Manifest this update:     Mon 12 Oct 2026 09:25:10 +0000
Manifest next update:     Tue 13 Oct 2026 09:38:10 +0000
Files and hashes:         1: 3139302e3130372e38382e302f32322d3332203d3e20323731313839.roa (hash: 73wfLZ6nJyyCyrYzyb6ovvK8T9wL6TJ+ADfWACLQsQY=)
                          2: 0A964427D4213D4E03FCAA84837EAABAF7B964D7.crl (hash: coqAFNTeIYo/q3yEFX22o4cFKRggttXRv+4GD2HKeXY=)
                          3: 323830343a373739633a3a2f33322d313238203d3e20323731313839.roa (hash: ttIN3goA8GnAWL0gcSQB+o8dz/J9nNZCt+cCcaBjCRI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9mSXHSQpdAqhL4Er4j4nK7Rts98AqvNgBeZ5ecr3NzD7/0/0A964427D4213D4E03FCAA84837EAABAF7B964D7.crl
                          rsync://rpki-repo.registro.br/repo/9mSXHSQpdAqhL4Er4j4nK7Rts98AqvNgBeZ5ecr3NzD7/0/0A964427D4213D4E03FCAA84837EAABAF7B964D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A964427D4213D4E03FCAA84837EAABAF7B964D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 09:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a3:94:4f:7d:0d:13:f4:1b:6c:4c:48:c5:6b:f8:fc:79:82:7c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A964427D4213D4E03FCAA84837EAABAF7B964D7
        Validity
            Not Before: Oct 12 09:25:10 2026 GMT
            Not After : Oct 13 09:38:10 2026 GMT
        Subject: CN=40FF6508357E0F6BEFC3AB9A4E8DE7FD3D8B4100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b6:79:cb:d2:31:8c:30:95:6a:b6:3b:23:19:
                    3d:de:66:3f:7f:a1:68:45:8b:01:b3:77:ac:5a:f7:
                    e8:f8:06:a5:f5:5b:e3:38:69:fa:63:22:6d:db:6f:
                    81:9a:0e:65:37:65:54:58:44:fa:c1:3e:15:db:48:
                    ef:5c:b2:23:96:bd:4f:9f:08:02:9d:23:2c:95:78:
                    b7:47:bc:56:db:f0:ef:a4:00:ec:ba:48:f1:9b:06:
                    fe:63:15:e1:7f:66:fd:bb:14:ba:58:1c:fd:87:1d:
                    79:ff:ad:97:4e:9e:bc:54:0b:c6:25:3d:91:b4:52:
                    10:17:72:be:9d:41:ac:80:24:c7:7d:ed:92:82:0b:
                    1b:19:51:36:a1:d8:82:6c:32:79:d6:67:aa:65:f2:
                    d3:62:18:75:6d:32:8c:24:82:79:e3:a0:28:73:f1:
                    c3:c3:2f:47:81:67:eb:9a:de:dc:74:f0:d1:b7:c4:
                    0b:cb:d2:00:08:a2:2b:3d:c3:49:ea:c2:f8:76:4a:
                    7a:77:04:68:ed:33:e5:16:78:ec:ea:55:d9:85:d6:
                    82:83:43:d5:98:15:96:39:3c:1d:a8:4d:d4:5d:0f:
                    8e:14:30:a8:af:d4:e6:43:bf:64:e5:7e:4e:6d:cc:
                    fa:58:af:81:52:bd:33:81:b8:33:8c:d0:29:9b:06:
                    d2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:FF:65:08:35:7E:0F:6B:EF:C3:AB:9A:4E:8D:E7:FD:3D:8B:41:00
            X509v3 Authority Key Identifier:
                keyid:0A:96:44:27:D4:21:3D:4E:03:FC:AA:84:83:7E:AA:BA:F7:B9:64:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9mSXHSQpdAqhL4Er4j4nK7Rts98AqvNgBeZ5ecr3NzD7/0/0A964427D4213D4E03FCAA84837EAABAF7B964D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A964427D4213D4E03FCAA84837EAABAF7B964D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9mSXHSQpdAqhL4Er4j4nK7Rts98AqvNgBeZ5ecr3NzD7/0/0A964427D4213D4E03FCAA84837EAABAF7B964D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:64:48:62:7f:11:ec:73:34:c6:e2:f7:ff:13:bd:0f:ec:cd:
         42:23:cc:d3:ce:5b:bc:97:24:68:6c:1a:d3:fe:65:e7:29:7f:
         76:e0:c1:12:96:fa:68:1b:d1:aa:fe:8e:ab:66:70:54:39:8a:
         26:b8:d9:32:32:53:e8:b6:eb:b3:b2:cc:57:c5:de:de:0c:57:
         1f:14:c5:8b:c3:d2:32:f5:cd:14:c1:f9:a6:9e:cd:48:4a:db:
         e2:51:70:63:cc:b4:92:e5:f3:1c:38:24:b9:36:41:0a:98:f2:
         03:70:9f:f7:02:65:6d:25:c4:13:a6:8b:f0:8b:6f:48:66:20:
         01:20:74:49:7b:3d:e6:55:45:c4:a0:32:25:0d:bd:37:fc:fe:
         86:0f:19:ed:a8:91:4b:17:58:a0:46:b3:a3:1b:0a:87:33:8f:
         82:06:0b:19:0d:c8:31:75:9b:fc:36:37:b7:cd:5d:92:67:ff:
         cc:07:75:65:7b:6c:43:d7:e2:9b:ed:ec:62:7b:12:07:72:c8:
         b0:32:88:48:7d:fa:ed:c6:b4:89:11:06:71:22:4e:bb:ca:36:
         b5:0b:93:72:ea:1e:2f:6f:bb:0c:25:a3:41:4b:da:32:cf:10:
         0f:51:37:1f:8b:b6:06:c8:c0:10:ca:2d:8e:6e:2f:8a:e2:2f:
         d4:bf:b1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:57:55 2026 by rpki-client