Error: rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.mft
File:                     561575F60242E48030BC35A771871EB47C6EFF55.mft (raw, json)
Hash identifier:          xryFb3SmShpAovfVZa4NfJsn/1S8ne6M0zXGON8ZJ1Q=
Subject key identifier:   69:23:4F:F6:68:FB:2A:73:1D:47:61:D7:A3:18:DB:05:97:13:B8:DC
Authority key identifier: 56:15:75:F6:02:42:E4:80:30:BC:35:A7:71:87:1E:B4:7C:6E:FF:55
Certificate issuer:       /CN=561575F60242E48030BC35A771871EB47C6EFF55
Certificate serial:       06FAC5A024791CA668BA97CA9F26D3782D0A5B09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/561575F60242E48030BC35A771871EB47C6EFF55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.mft
Manifest number:          02FF
Signing time:             Sun 23 Aug 2026 20:33:40 +0000
Manifest this update:     Sun 23 Aug 2026 20:28:40 +0000
Manifest next update:     Mon 24 Aug 2026 23:45:40 +0000
Files and hashes:         1: 3137372e3133362e37322e302f32332d3233203d3e20323633363036.roa (hash: Ltzfx3YxVW1Pa4cq6whSf/IcB1Vnx4DNecq6eVchHTo=)
                          2: 3137372e3133362e37352e302f32342d3234203d3e20323633363036.roa (hash: nuck+0kAF3Zd6pXyFdvnR29Zkxz9c+G8kbnTC7qgamU=)
                          3: 3137372e3133362e37322e302f32342d3234203d3e20323633363036.roa (hash: 0p5oJNW1u7sbcdTmM4zJyxU4ZM7NUKqBR1aXh8tF8Ps=)
                          4: 323830343a6664343a3a2f33322d3332203d3e20323633363036.roa (hash: Yo271OiucLB/aigZDCLUq3cAGSPHW0PFSAiLJnTJVo0=)
                          5: 3137372e3133362e37342e302f32342d3234203d3e20323633363036.roa (hash: XWBGDS6q88+5UVkXGYmDHRa7wfxLNTeJHNiLkIHR6ec=)
                          6: 3137372e3133362e37332e302f32342d3234203d3e20323633363036.roa (hash: 4H+CxB+EpINq2RjZT91EYiq/DtDn8cQlc/74NWiOQwU=)
                          7: 561575F60242E48030BC35A771871EB47C6EFF55.crl (hash: 7LepOvSuZJApcmbQqfJOkDmujG67W+zuFxl0IM6pzLs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.crl
                          rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/561575F60242E48030BC35A771871EB47C6EFF55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 23:45:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:fa:c5:a0:24:79:1c:a6:68:ba:97:ca:9f:26:d3:78:2d:0a:5b:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=561575F60242E48030BC35A771871EB47C6EFF55
        Validity
            Not Before: Aug 23 20:28:40 2026 GMT
            Not After : Aug 24 23:45:40 2026 GMT
        Subject: CN=69234FF668FB2A731D4761D7A318DB059713B8DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e3:d8:a9:02:f7:bd:2d:84:fb:7e:73:04:f7:
                    4e:8b:db:ac:e8:b4:a6:51:5f:25:b9:fa:11:24:fc:
                    f7:ee:19:23:74:b4:bc:88:86:dd:74:5f:5c:89:5a:
                    7d:ae:b9:1b:ee:12:9b:03:d2:12:e0:b3:29:b2:88:
                    26:42:df:d6:8e:b3:b7:fd:8b:8c:d3:d1:34:5a:3c:
                    b2:f2:2f:e8:a3:c9:55:aa:80:89:0f:65:05:ad:65:
                    13:a2:30:f6:45:d0:76:32:a6:2d:3b:0a:33:c7:5d:
                    37:60:c2:a4:51:66:ee:48:53:39:b9:4d:05:79:f9:
                    35:9d:83:da:ff:88:c6:a9:aa:57:2f:e0:66:25:4f:
                    1d:33:fe:87:4c:96:59:32:c1:69:ee:35:a5:9b:1e:
                    7f:5f:6a:b3:fc:e9:14:ce:1f:a0:1a:43:09:96:be:
                    27:b2:9a:37:7f:3d:8e:6d:5b:87:64:a3:e9:95:89:
                    18:89:3e:43:5d:8d:5f:e9:43:ba:97:b0:e6:9e:7a:
                    ba:00:2d:22:ae:39:30:14:1e:8f:f4:ad:3f:32:7a:
                    0d:9c:a6:a6:e7:34:2e:a5:8d:c6:f3:63:65:2f:42:
                    40:04:d6:5b:19:c8:fc:a5:21:08:56:92:f8:32:11:
                    cc:67:0f:da:13:70:ea:15:9a:1e:4f:ca:28:82:84:
                    8e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:23:4F:F6:68:FB:2A:73:1D:47:61:D7:A3:18:DB:05:97:13:B8:DC
            X509v3 Authority Key Identifier:
                keyid:56:15:75:F6:02:42:E4:80:30:BC:35:A7:71:87:1E:B4:7C:6E:FF:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/561575F60242E48030BC35A771871EB47C6EFF55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:c2:13:42:0f:d7:c3:4c:e8:27:dd:f7:0f:a0:4f:27:e6:55:
         49:cc:20:3f:5d:ba:8e:7b:86:00:ed:61:22:8c:00:99:78:1e:
         47:c9:33:e0:b8:cd:ce:b8:9a:5b:77:d2:b4:83:57:1e:51:a4:
         7a:c6:bc:17:92:c3:58:4f:69:6f:f6:ea:6c:a2:bc:72:85:cc:
         9c:ff:ce:55:34:d5:7c:f0:5b:24:4d:c4:c7:10:b1:3a:44:85:
         72:a0:7f:46:bf:1a:2d:41:49:9e:9d:d0:e7:a0:63:c9:8a:5e:
         5e:24:56:e3:68:65:39:4b:f4:e8:da:ee:16:de:9c:1d:00:a9:
         fc:e1:ca:56:13:1b:cc:c2:dd:bf:b3:d8:7e:8a:39:b8:64:b6:
         73:33:32:35:a7:65:2f:2c:bd:bd:f2:16:e7:37:b7:d7:f7:93:
         ad:be:ad:17:12:a8:d3:df:b0:2c:e7:86:c3:34:7d:34:be:56:
         af:11:f8:db:02:d8:e9:e8:a7:5f:08:06:0f:db:c3:10:13:10:
         f4:a7:c7:aa:71:0d:be:bb:8d:60:54:85:64:0e:15:bb:bd:b2:
         29:58:4a:aa:99:01:f3:ec:45:84:5e:44:99:b7:eb:df:70:4f:
         04:ad:e3:37:b6:8d:53:b0:b9:14:8a:68:13:34:a7:a6:a3:23:
         74:ad:79:0e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBvrFoCR5HKZoupfKnybTeC0KWwkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTYxNTc1RjYwMjQyRTQ4MDMwQkMzNUE3NzE4NzFFQjQ3
QzZFRkY1NTAeFw0yNjA4MjMyMDI4NDBaFw0yNjA4MjQyMzQ1NDBaMDMxMTAvBgNV
BAMTKDY5MjM0RkY2NjhGQjJBNzMxRDQ3NjFEN0EzMThEQjA1OTcxM0I4REMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC549ipAve9LYT7fnME906L26zo
tKZRXyW5+hEk/PfuGSN0tLyIht10X1yJWn2uuRvuEpsD0hLgsymyiCZC39aOs7f9
i4zT0TRaPLLyL+ijyVWqgIkPZQWtZROiMPZF0HYypi07CjPHXTdgwqRRZu5IUzm5
TQV5+TWdg9r/iMapqlcv4GYlTx0z/odMllkywWnuNaWbHn9farP86RTOH6AaQwmW
vieymjd/PY5tW4dko+mViRiJPkNdjV/pQ7qXsOaeeroALSKuOTAUHo/0rT8yeg2c
pqbnNC6ljcbzY2UvQkAE1lsZyPylIQhWkvgyEcxnD9oTcOoVmh5PyiiChI77AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUaSNP9mj7KnMdR2HXoxjbBZcTuNwwHwYDVR0j
BBgwFoAUVhV19gJC5IAwvDWncYcetHxu/1UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkZ6cnNrckFkeHhOWnhXaVJiN0JjVVpHTW5lRTExUTZQa1FKdmpOWTFm
ZTIvMC81NjE1NzVGNjAyNDJFNDgwMzBCQzM1QTc3MTg3MUVCNDdDNkVGRjU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU2MTU3NUY2MDI0MkU0ODAz
MEJDMzVBNzcxODcxRUI0N0M2RUZGNTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MkZ6cnNrckFkeHhOWnhXaVJiN0JjVVpHTW5lRTExUTZQa1FKdmpOWTFmZTIvMC81
NjE1NzVGNjAyNDJFNDgwMzBCQzM1QTc3MTg3MUVCNDdDNkVGRjU1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACMITQg/Xw0zoJ933D6BPJ+ZVScwgP126jnuGAO1hIowAmXgeR8kz4LjNzria
W3fStINXHlGkesa8F5LDWE9pb/bqbKK8coXMnP/OVTTVfPBbJE3ExxCxOkSFcqB/
Rr8aLUFJnp3Q56BjyYpeXiRW42hlOUv06NruFt6cHQCp/OHKVhMbzMLdv7PYfoo5
uGS2czMyNadlLyy9vfIW5ze31/eTrb6tFxKo09+wLOeGwzR9NL5WrxH42wLY6ein
XwgGD9vDEBMQ9KfHqnENvruNYFSFZA4Vu72yKVhKqpkB8+xFhF5Embfr33BPBK3j
N7aNU7C5FIpoEzSnpqMjdK15Dg==
-----END CERTIFICATE-----
Generated at Mon Aug 24 13:34:36 2026 by rpki-client