Error: rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.mft
File:                     AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.mft (raw, json)
Hash identifier:          KBbeE5NV46GwI6YeLRwNsgSQnwZmXPCzaA5Ih4xk24k=
Subject key identifier:   15:7D:24:56:6E:96:46:80:C3:1C:AD:DB:03:90:EA:64:29:60:EE:3C
Authority key identifier: AC:9D:ED:B6:6C:13:A6:8A:FC:D2:B7:A3:76:D9:E8:14:C9:F2:0B:CD
Certificate issuer:       /CN=AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD
Certificate serial:       447AC9E06F65DF031AB224D8612F3C1B0C1BFD08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.mft
Manifest number:          0587
Signing time:             Sun 01 Nov 2026 22:00:00 +0000
Manifest this update:     Sun 01 Nov 2026 21:55:00 +0000
Manifest next update:     Mon 02 Nov 2026 22:00:00 +0000
Files and hashes:         1: AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.crl (hash: qoMkRoOoKYXxvU60zQuq45gWN11t71ZK/RbLz1t0P+k=)
                          2: 3133382e3138352e3135362e302f32322d3234203d3e20323634333432.roa (hash: cnzbZ+PHLAjHkOXuZZHC2S/UIcVEQHtc3vmH6IRoJoo=)
                          3: 3137302e3234352e3133362e302f32322d3234203d3e20323634333432.roa (hash: ELHlETihcWqCAwPowAsxt8TR/y+vFXU009Qvsh/V2lU=)
                          4: 323830343a323637383a3a2f33322d3335203d3e20323634333432.roa (hash: 7bXztEkkjutzCuDzMjrpjB7HukkkBAKAC2suGoA2guQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.crl
                          rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:7a:c9:e0:6f:65:df:03:1a:b2:24:d8:61:2f:3c:1b:0c:1b:fd:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD
        Validity
            Not Before: Nov  1 21:55:00 2026 GMT
            Not After : Nov  2 22:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:48:0e:62:ae:e2:69:92:a5:66:d7:b5:d7:2c:
                    49:23:90:b8:a4:a3:b1:e0:89:ef:b8:1e:73:16:dd:
                    47:e8:7c:cf:73:65:75:28:4f:88:b0:12:42:11:75:
                    26:ff:7e:24:00:de:6b:76:37:d1:98:74:9f:6b:e9:
                    45:42:31:d5:ac:f0:28:14:62:dd:70:b6:36:02:dc:
                    fb:fc:d9:00:49:4e:79:e2:d8:9a:b1:73:1f:88:7d:
                    c8:74:b9:ed:16:c2:3d:9f:04:e4:0c:99:1e:8d:2b:
                    c2:3a:24:42:29:0c:f2:57:20:1c:05:46:cb:ef:6f:
                    11:1d:3e:ee:7a:91:60:ee:c5:5c:f4:b1:99:c6:47:
                    85:af:1d:44:60:a2:4c:29:b3:bd:e8:6e:6e:1b:53:
                    88:66:ac:be:f5:6e:3b:5a:10:9e:3d:ef:1d:7a:37:
                    7d:cc:61:5a:db:05:88:47:c0:d1:80:17:78:11:90:
                    48:4b:71:fa:ef:e7:03:a7:7f:53:a5:1a:ef:58:b8:
                    e4:44:fe:3b:b3:6b:bb:0f:25:0e:10:fc:83:cd:25:
                    5e:57:a3:5b:59:5a:d2:32:f6:25:d2:74:f3:ac:05:
                    40:76:56:40:f0:3d:ea:39:d0:fd:c1:77:ed:17:57:
                    9c:e3:79:da:1b:c8:3e:00:96:b0:3c:0a:01:09:d7:
                    b6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:7D:24:56:6E:96:46:80:C3:1C:AD:DB:03:90:EA:64:29:60:EE:3C
            X509v3 Authority Key Identifier:
                keyid:AC:9D:ED:B6:6C:13:A6:8A:FC:D2:B7:A3:76:D9:E8:14:C9:F2:0B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:b2:7e:40:5f:66:85:6c:2d:25:f2:70:8e:63:ea:31:af:a6:
         a3:89:e2:b4:2c:1d:39:9c:71:a1:85:db:9b:73:9b:ae:42:35:
         fd:15:22:52:8d:88:fc:90:7d:33:3a:ec:31:eb:ad:30:b7:89:
         cf:54:4e:42:a1:b7:0a:6b:74:41:0b:67:a0:31:f0:2a:ac:80:
         48:62:40:b9:69:31:6c:c1:2b:72:2a:aa:e2:fb:bc:75:f3:c6:
         0f:5e:da:8f:55:bd:28:48:3e:cd:60:29:d1:1c:21:1a:58:74:
         05:c0:ab:8c:51:60:58:75:c7:b1:74:0f:42:80:9c:5f:ad:65:
         50:ef:cd:1d:05:60:bf:34:26:59:33:94:26:9a:af:29:e0:2c:
         e6:9b:dc:01:42:69:8e:7b:89:64:a9:02:7d:b9:72:fc:0f:4d:
         e3:e3:ef:c7:27:b5:ba:a5:88:9e:aa:f6:f8:34:b1:1f:98:fb:
         72:b8:7f:08:d7:48:70:bc:4e:94:69:46:e3:d6:e1:ec:a0:23:
         e5:ee:a1:49:e2:55:d3:4a:45:41:2c:ba:7b:31:f5:5d:6b:58:
         bc:d2:0d:2d:e2:f0:8c:ca:9e:a3:b0:a7:cd:6e:d6:a0:f3:4e:
         31:57:1c:e7:ef:22:fd:1c:0c:3b:b9:3b:df:2d:22:0f:8d:86:
         b1:67:28:22
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 2 08:33:43 2026 by rpki-client