Error: rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.mft
File:                     817F1A503A376C564F65BFB27FD51A3B4D5C92F6.mft (raw, json)
Hash identifier:          LhjP7Gjl9YZx9sO0OmTvAz9Dr3AyQgIccaLqP+WudHE=
Subject key identifier:   6F:94:97:87:4B:9E:31:6B:8A:56:D0:B1:5F:2D:DB:24:DC:E8:0A:9E
Authority key identifier: 81:7F:1A:50:3A:37:6C:56:4F:65:BF:B2:7F:D5:1A:3B:4D:5C:92:F6
Certificate issuer:       /CN=817F1A503A376C564F65BFB27FD51A3B4D5C92F6
Certificate serial:       1312A949174048432A2304EDB7CB998ECE4787A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.mft
Manifest number:          0E
Signing time:             Fri 04 Sep 2026 14:02:01 +0000
Manifest this update:     Fri 04 Sep 2026 13:57:01 +0000
Manifest next update:     Sat 05 Sep 2026 17:52:01 +0000
Files and hashes:         1: 817F1A503A376C564F65BFB27FD51A3B4D5C92F6.crl (hash: IT3btMvIqD8VMlWmqYLGZBMq0j/uveLkx7B9G5U5ORk=)
                          2: 3133382e3132322e34302e302f32322d3234203d3e20323634333136.roa (hash: jczCTAnDptXDN/jTyF5vZHyUTpVOyeiS5qFHV2S2ax0=)
                          3: 3136382e3132312e3231362e302f32322d3234203d3e20323634333136.roa (hash: ifkq/WZnqNxa4KZDKatWhhki5JDZRtHdN91pOIWqUBc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.crl
                          rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 17:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:12:a9:49:17:40:48:43:2a:23:04:ed:b7:cb:99:8e:ce:47:87:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=817F1A503A376C564F65BFB27FD51A3B4D5C92F6
        Validity
            Not Before: Sep  4 13:57:01 2026 GMT
            Not After : Sep  5 17:52:01 2026 GMT
        Subject: CN=6F9497874B9E316B8A56D0B15F2DDB24DCE80A9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:90:ae:65:35:8c:67:ab:09:fc:09:dc:ee:68:
                    d7:f1:8f:15:22:5c:44:0a:3b:ab:fd:de:6b:7d:45:
                    75:f8:89:85:a0:3f:32:b1:26:05:9f:a9:41:c3:03:
                    de:55:4c:0e:12:b9:2f:ab:9a:cd:ca:c2:16:98:56:
                    96:cf:09:32:dc:ee:a5:d1:e1:b1:4b:5d:f2:e0:c7:
                    e5:1c:12:6a:2d:d9:72:fb:6d:4a:c4:91:ea:c5:88:
                    bb:92:72:93:40:2e:8b:d5:eb:db:c7:27:ff:f4:d0:
                    71:91:4b:b2:2b:c6:68:21:e2:b9:e3:79:61:e5:eb:
                    27:6e:c1:fb:ee:78:7a:53:a0:b9:e4:a0:b4:89:0c:
                    5e:54:86:03:ec:8c:02:c3:be:86:15:97:a7:d5:81:
                    ee:fa:35:3a:29:d4:74:7c:6f:e5:35:96:50:38:15:
                    9f:7b:cc:4a:bd:3e:02:a2:3a:74:2b:3b:42:0a:78:
                    a9:96:c5:4d:6d:07:1d:69:09:82:a8:58:bb:8f:44:
                    bf:54:18:de:71:35:73:2f:c8:13:90:00:cf:dd:92:
                    b4:57:1d:78:57:04:6b:b3:c2:66:d6:11:e7:73:fc:
                    bf:05:ee:05:2d:1c:b9:c9:9d:ec:97:75:a8:f4:52:
                    25:6b:c9:93:0d:64:76:c7:ec:69:c0:fa:d7:e5:37:
                    69:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:94:97:87:4B:9E:31:6B:8A:56:D0:B1:5F:2D:DB:24:DC:E8:0A:9E
            X509v3 Authority Key Identifier:
                keyid:81:7F:1A:50:3A:37:6C:56:4F:65:BF:B2:7F:D5:1A:3B:4D:5C:92:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:c4:bd:62:48:9e:46:92:d8:56:fc:cd:eb:46:72:79:4a:48:
         c3:93:d4:8a:74:ad:e3:85:c1:d9:c6:46:f7:f0:e2:4f:c8:eb:
         3a:8b:ea:dd:87:03:17:ba:91:37:bb:75:40:e4:43:7e:6b:d7:
         b8:f4:f3:e2:51:f5:79:fc:9d:13:ac:7e:8d:29:6d:da:0a:02:
         63:82:c9:c3:df:b0:75:6c:69:73:5e:09:1c:bf:e0:a7:ed:cc:
         12:14:36:b3:58:b9:22:2e:22:3f:20:15:30:70:18:10:4a:9b:
         32:88:b6:8d:e7:ea:ed:fb:f4:84:52:8d:0f:09:70:29:74:6a:
         6a:ae:e9:f6:7e:48:12:7e:cd:19:2c:4d:ed:5a:2c:a4:90:b4:
         90:b6:f2:14:37:16:a4:83:13:44:c9:d1:58:13:2e:9a:7f:7f:
         81:a7:08:a6:3c:04:fd:35:fa:9d:5a:ba:71:74:47:7d:cb:54:
         74:53:3b:7f:7d:33:a6:58:f9:ce:52:2a:6c:5e:1d:93:7c:04:
         5c:3f:7c:be:bf:26:31:b5:75:36:fd:6b:49:8d:29:c9:de:e6:
         77:4f:72:12:45:0c:98:fd:62:4e:d9:e2:6e:11:02:30:ff:6b:
         aa:12:c7:c3:ff:1e:ff:ff:de:d8:02:7a:43:cc:89:a5:d4:58:
         be:17:37:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:28:10 2026 by rpki-client