Error: rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.mft
File:                     6321913B8F265DB266263684C1BC420640061E1A.mft (raw, json)
Hash identifier:          GXbAxuiXuqFx/bJUiJz2i9TFYSgpOJfo5pM6JtO5Bs0=
Subject key identifier:   C8:2D:D0:91:11:E0:DC:9C:9A:12:60:27:9E:42:4C:E9:AD:D0:06:17
Authority key identifier: 63:21:91:3B:8F:26:5D:B2:66:26:36:84:C1:BC:42:06:40:06:1E:1A
Certificate issuer:       /CN=6321913B8F265DB266263684C1BC420640061E1A
Certificate serial:       6451A242BF75F12E331E174010FF6FCF0CADC3CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6321913B8F265DB266263684C1BC420640061E1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.mft
Manifest number:          0413
Signing time:             Fri 04 Sep 2026 10:38:35 +0000
Manifest this update:     Fri 04 Sep 2026 10:33:35 +0000
Manifest next update:     Sat 05 Sep 2026 12:46:35 +0000
Files and hashes:         1: 6321913B8F265DB266263684C1BC420640061E1A.crl (hash: 2kNf6OFSgW3QXafaS0t3l1cCoNoqWFeu3xT+9U2ohs4=)
                          2: 323830313a38653a3a2f33322d3438203d3e20313938393439.roa (hash: CxBZcVcs0zRokgf5NsuyeWExlz9SeC4w5+lGEh2FhQ0=)
                          3: 3137302e36362e302e302f31362d3234203d3e20313938393439.roa (hash: 072VEbaI7xB9Jhovu0RQAyYnQXYwsrJAt5OhwHYTOLE=)
                          4: 3137302e36362e302e302f31362d3234203d3e203131393933.roa (hash: Aa6+6KgZHik6+ABzhpmvLEKv4dZCz7fRMiExXTKJrRE=)
                          5: 3139382e3138342e3136312e302f32342d3234203d3e20313938393439.roa (hash: 4Z9cha3sVBOlzTrT0dVMcvNNK+EHRcrGLqWw2BwB8zA=)
                          6: 323830313a38653a3a2f33322d313236203d3e203131393933.roa (hash: Ey7Imlr5pLL+DH2mMRpmrRyRdOVVI3qVj9OnEUUXico=)
                          7: 3139382e3138342e3136312e302f32342d3234203d3e203131393933.roa (hash: QIRLiXgnYMfb4NQLMga6l9oGFV4HRi7LxF1Dsm3IXgo=)
                          8: 3230312e33332e3134342e302f32302d3234203d3e203131393933.roa (hash: TdA9895ONLIzi4qc+d1f2GAp2J5CYRUmZoT7qlO38BY=)
                          9: 3230312e33332e3134342e302f32302d3234203d3e20313938393439.roa (hash: lI2E/VYVJ+2wUZmeC41kZFySZrgdHxD6/s3ruqb3rk4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.crl
                          rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6321913B8F265DB266263684C1BC420640061E1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 12:46:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:51:a2:42:bf:75:f1:2e:33:1e:17:40:10:ff:6f:cf:0c:ad:c3:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6321913B8F265DB266263684C1BC420640061E1A
        Validity
            Not Before: Sep  4 10:33:35 2026 GMT
            Not After : Sep  5 12:46:35 2026 GMT
        Subject: CN=C82DD09111E0DC9C9A1260279E424CE9ADD00617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:13:f0:f5:4c:b5:17:ad:fa:2c:d1:4f:ac:31:
                    d6:49:35:73:94:8e:83:fe:2d:b6:b7:79:16:3d:9d:
                    a1:87:cc:4e:10:3d:3a:25:db:0c:ce:eb:32:01:db:
                    cd:ff:18:d2:6b:8b:7a:73:b5:c2:37:40:7f:99:5c:
                    ed:60:e7:cc:98:26:03:64:d4:d8:cf:cf:bb:3d:f9:
                    dc:da:c5:7c:06:42:1e:f9:5c:df:ff:d3:59:9b:c7:
                    84:26:6e:4a:3d:2e:39:c7:d4:c3:1f:a7:56:25:3b:
                    d2:4d:fc:ed:55:d8:57:58:6b:44:88:6f:e7:b0:8d:
                    4c:0f:94:4b:74:89:fd:d8:37:f2:64:ff:60:b0:b4:
                    db:95:72:e5:96:61:93:f2:9b:98:f2:29:63:a3:d0:
                    50:7d:83:17:d8:11:b6:68:7a:06:5b:5b:69:3a:8b:
                    cc:99:5f:c9:61:60:55:45:07:d0:b6:fc:c6:9e:eb:
                    6d:5a:cd:1c:8b:94:4d:65:a6:92:ef:4f:81:8b:7e:
                    ed:72:27:0f:53:84:81:dd:2a:90:f6:98:e5:15:db:
                    7e:45:31:73:4a:44:3b:a3:92:34:11:af:89:62:54:
                    9a:40:05:a7:f0:85:92:bc:2d:04:ed:08:05:2e:28:
                    0a:01:eb:ab:4f:1c:07:53:5b:16:e2:d3:f0:f0:6f:
                    ae:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:2D:D0:91:11:E0:DC:9C:9A:12:60:27:9E:42:4C:E9:AD:D0:06:17
            X509v3 Authority Key Identifier:
                keyid:63:21:91:3B:8F:26:5D:B2:66:26:36:84:C1:BC:42:06:40:06:1E:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6321913B8F265DB266263684C1BC420640061E1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:1e:30:ab:73:67:ce:9a:a4:74:08:f8:80:0d:51:65:3c:e9:
         27:6e:8a:d5:e7:0e:8d:fb:ca:3a:ef:99:9e:5a:d7:f3:37:41:
         a7:26:9e:16:fc:28:2f:10:64:09:47:0f:d8:38:81:de:c2:2b:
         c0:21:51:72:9e:d8:d8:3d:1a:20:d6:35:a1:fb:08:fa:1a:62:
         7b:b4:18:46:03:b3:5b:6f:fd:74:54:df:eb:a6:38:3d:76:ec:
         a0:fa:40:c3:63:3b:fe:fc:33:e0:87:1b:85:2b:8a:8a:68:ce:
         9f:07:66:73:13:8e:39:88:94:91:ba:74:a0:4d:9f:6a:fb:6e:
         07:b8:19:3e:bd:3f:d3:25:d2:50:8e:72:6c:c4:48:d6:37:e6:
         f2:e5:4b:19:e3:82:76:ac:90:1a:65:f6:fb:8c:c3:98:36:69:
         37:64:19:af:5e:ca:54:f8:eb:cd:45:e1:cd:82:29:39:31:8f:
         4d:f0:45:b6:eb:f8:c1:09:c1:4a:1b:06:b0:59:70:42:3a:b0:
         12:61:ca:ad:83:72:35:00:96:25:cb:85:84:ab:9a:62:a5:c9:
         cc:9e:5c:c3:c5:e1:75:c4:a2:4b:f0:ce:92:4a:be:7c:87:3e:
         72:5c:fb:4b:b3:92:82:56:0b:76:b0:15:37:8a:8a:d1:d9:31:
         5b:ac:80:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:19:00 2026 by rpki-client