Error: rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.mft
File:                     18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.mft (raw, json)
Hash identifier:          dWSAZd0gh7P03D8hOv2WuJAUIK9FNEnmcs7k8uMfx64=
Subject key identifier:   11:24:C3:0F:65:98:B4:23:5A:94:D8:5D:8F:E1:17:DF:D2:47:1C:CF
Authority key identifier: 18:FB:DB:75:17:89:A3:D1:CC:FA:7F:42:BC:38:F0:A8:CA:BA:F2:CE
Certificate issuer:       /CN=18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE
Certificate serial:       0BDB99CBEC8A56E8F3299F2E8C96682B9B90032C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.mft
Manifest number:          0490
Signing time:             Mon 24 Aug 2026 07:40:05 +0000
Manifest this update:     Mon 24 Aug 2026 07:35:05 +0000
Manifest next update:     Tue 25 Aug 2026 09:47:05 +0000
Files and hashes:         1: 323830343a316132633a3a2f33322d3332203d3e203631383432.roa (hash: evA4SJLFGY5+g/Oz8s+3Ci9qxUiGCjH+4UCT9q7GEz8=)
                          2: 18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.crl (hash: 89TCo6pKFkXs2Z3XSueNU4dEq+pADLbkdGQ3ZzzGND0=)
                          3: 3230312e3133312e3137322e302f32322d3234203d3e203631383432.roa (hash: SSS9DbB52itqQxi2OwrhVH0PFKSFkyzP/BMDopMK9wQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.crl
                          rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 09:47:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:db:99:cb:ec:8a:56:e8:f3:29:9f:2e:8c:96:68:2b:9b:90:03:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE
        Validity
            Not Before: Aug 24 07:35:05 2026 GMT
            Not After : Aug 25 09:47:05 2026 GMT
        Subject: CN=1124C30F6598B4235A94D85D8FE117DFD2471CCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:67:62:88:26:88:ea:a3:91:c1:83:d5:16:6a:
                    bf:09:31:70:4c:16:7c:05:ad:d3:ee:46:30:63:66:
                    98:09:15:ac:1c:7d:2d:32:49:6c:46:d2:85:ac:c6:
                    c4:16:1d:24:d9:e5:70:17:b8:4b:bb:b7:ef:b1:02:
                    67:9b:1f:73:3e:8d:3c:78:d0:3e:f5:d0:73:7e:4c:
                    6e:90:79:c1:19:22:5f:e0:90:5f:b6:7a:18:0c:1c:
                    20:cc:93:44:2e:57:7a:3b:33:f0:a9:44:c4:09:90:
                    91:48:95:e7:53:1d:13:42:8d:31:d2:23:4e:c9:8d:
                    93:33:49:4f:2a:2f:44:64:cd:fb:02:fc:7a:a2:e4:
                    1e:dc:a8:f6:0c:9e:dc:8f:ad:1b:92:0f:ea:8b:6f:
                    b2:20:5f:ed:04:3c:d6:d6:81:08:0d:e2:88:81:2d:
                    ba:75:d8:61:43:11:e7:26:fe:a0:11:93:18:60:01:
                    f5:41:fd:4e:61:6b:31:89:11:7c:34:a1:11:d1:9f:
                    cb:0b:19:9b:e6:e2:c0:4d:2e:37:d0:1d:e1:1f:17:
                    18:f8:58:88:8e:7c:ed:ef:79:75:f2:d8:95:8f:ff:
                    1c:0b:e7:8c:4d:92:a7:61:01:73:0c:88:96:66:30:
                    5f:8b:2d:3c:78:d4:51:0e:5e:0c:de:89:db:76:ce:
                    97:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:24:C3:0F:65:98:B4:23:5A:94:D8:5D:8F:E1:17:DF:D2:47:1C:CF
            X509v3 Authority Key Identifier:
                keyid:18:FB:DB:75:17:89:A3:D1:CC:FA:7F:42:BC:38:F0:A8:CA:BA:F2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:17:eb:38:94:04:7f:62:03:19:1a:3a:e5:d6:aa:61:7d:70:
         d1:06:fc:0d:d2:6c:54:12:ce:3e:76:e9:23:9d:7d:2a:61:1c:
         c3:3b:02:dd:ef:eb:c0:86:40:eb:8c:81:26:35:7a:f3:38:3e:
         2e:16:76:cb:48:f4:c5:69:16:c5:df:9c:8b:22:94:97:e1:c6:
         56:0b:68:67:42:f1:81:44:00:01:1c:1f:7a:c1:01:46:60:2e:
         fc:b0:c3:ae:2e:1c:d0:f1:14:b5:54:df:b0:1f:4d:97:95:81:
         74:37:cf:32:3f:da:d4:bc:5d:e4:50:e5:89:39:71:6e:6b:bd:
         5c:7b:6d:33:ce:55:b9:ac:f4:cf:ac:e1:25:c0:5a:52:b6:6a:
         e6:16:60:66:76:fe:3a:25:a7:ad:f8:e0:87:01:bc:44:1d:23:
         ef:b4:ec:f4:8c:e7:5a:a3:d8:10:de:1c:79:64:84:c1:d0:cd:
         69:b1:c2:bf:61:67:39:f5:31:95:55:57:78:1d:3c:66:19:dc:
         74:8a:7d:bb:49:10:aa:dc:70:d1:44:de:55:f4:cb:fb:77:43:
         d6:49:f5:cf:13:44:aa:b0:45:d7:42:02:81:74:81:36:ed:96:
         c3:f5:1f:0e:ba:57:5a:f0:c0:dd:67:07:b5:86:c2:e8:6b:1e:
         a7:36:c6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 14:49:11 2026 by rpki-client