Error: rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.mft
File:                     E1358C78FC7E005E12280CFDE60E73419CC6A38A.mft (raw, json)
Hash identifier:          mXeIV0/hYcI7WAOZfRnDgM2A2HLAkfvsRv7Z9wSb0EQ=
Subject key identifier:   EF:7C:6A:B7:82:05:92:9D:EC:AB:34:2D:65:D2:F3:4B:B1:FA:9B:69
Authority key identifier: E1:35:8C:78:FC:7E:00:5E:12:28:0C:FD:E6:0E:73:41:9C:C6:A3:8A
Certificate issuer:       /CN=E1358C78FC7E005E12280CFDE60E73419CC6A38A
Certificate serial:       0BE50F393F63058B421EC054154C314BA57F4159
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.mft
Manifest number:          048B
Signing time:             Sun 23 Aug 2026 15:55:54 +0000
Manifest this update:     Sun 23 Aug 2026 15:50:54 +0000
Manifest next update:     Mon 24 Aug 2026 18:07:54 +0000
Files and hashes:         1: E1358C78FC7E005E12280CFDE60E73419CC6A38A.crl (hash: mh+EsxdwBhZSiLhwgHCbYrdp2lvwcVE9We3m9zSBXwU=)
                          2: 3137302e3135302e3232342e302f32322d3234203d3e20323635303336.roa (hash: Qo71QGZ9woegBbILiBBordLVHq7zvNeXN6kD/86h7hI=)
                          3: 323830343a333163343a3a2f33322d3438203d3e20323635303336.roa (hash: N7bfUjlulTd84mWzIVaRJJZIcr+4ErrhVlo8DGadX3Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.crl
                          rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 18:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e5:0f:39:3f:63:05:8b:42:1e:c0:54:15:4c:31:4b:a5:7f:41:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1358C78FC7E005E12280CFDE60E73419CC6A38A
        Validity
            Not Before: Aug 23 15:50:54 2026 GMT
            Not After : Aug 24 18:07:54 2026 GMT
        Subject: CN=EF7C6AB78205929DECAB342D65D2F34BB1FA9B69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e7:f3:20:80:89:27:c6:42:6c:ea:ae:b6:2b:
                    29:0d:ff:cb:86:64:95:5e:07:fe:ce:fa:d7:ba:cf:
                    5b:e1:c4:81:b4:65:40:b5:06:ed:58:c9:6b:4a:11:
                    8c:b1:6e:6c:52:90:83:4c:e3:45:6f:cd:a5:74:a2:
                    2e:51:eb:dc:68:21:d0:32:72:73:f7:3f:bb:71:85:
                    00:a2:bb:84:24:3c:87:32:f8:7c:61:b3:6c:f6:6f:
                    e1:f5:94:3e:5d:44:49:af:ea:f2:d7:ff:d0:73:26:
                    42:0b:d6:8e:25:69:1e:18:af:11:aa:ea:2e:38:06:
                    17:4a:34:45:91:dd:57:1b:a8:cf:cc:22:93:a1:8e:
                    8f:97:bb:d7:70:e9:12:49:3f:df:fe:c9:65:2c:d8:
                    65:75:0b:e2:8b:cf:ae:c6:90:4c:13:6c:13:a7:c8:
                    3d:9d:c1:92:58:c7:2f:5c:bd:e0:96:3e:60:be:b7:
                    4a:d0:2b:cd:ed:8d:e2:1c:81:aa:00:8b:93:8c:3d:
                    97:75:cb:70:61:e2:be:a8:f6:42:58:c0:26:f8:81:
                    21:e3:d9:20:b9:8a:d9:7c:30:58:55:ae:91:85:83:
                    92:2e:68:50:cc:0f:55:4b:ed:ec:97:e0:41:e6:99:
                    bb:9c:72:14:be:c9:24:ea:54:f8:6e:cf:6d:ef:fa:
                    62:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7C:6A:B7:82:05:92:9D:EC:AB:34:2D:65:D2:F3:4B:B1:FA:9B:69
            X509v3 Authority Key Identifier:
                keyid:E1:35:8C:78:FC:7E:00:5E:12:28:0C:FD:E6:0E:73:41:9C:C6:A3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:ad:ba:72:f9:51:d0:45:5b:11:66:89:12:7d:97:c6:2b:9a:
         19:ee:1b:75:42:17:a7:2f:5e:17:df:16:6f:96:6f:7a:d2:4b:
         39:28:86:09:80:00:9a:d5:1d:ac:ea:1b:bd:03:2c:d2:69:0b:
         05:ab:1e:35:18:f7:50:f1:c2:70:2c:d0:b6:6d:8a:5d:f1:cd:
         be:d5:47:d9:dc:97:2b:e0:e2:3c:aa:98:0d:02:37:92:e5:2d:
         e1:2f:f6:c8:f8:38:34:24:85:5f:94:3f:40:6b:3a:64:ac:b2:
         37:f3:cd:3a:3b:c9:c6:05:a3:a9:79:b2:17:ec:08:85:5d:bd:
         ab:98:07:b8:14:21:a8:4c:8d:1a:16:b4:00:97:b4:e0:38:72:
         9c:fa:e2:c6:e4:e8:38:87:0c:e9:40:1c:0a:cb:8c:c4:a1:43:
         5d:df:24:6a:48:6a:b6:ee:be:8c:41:94:28:30:ce:6a:20:6c:
         9c:db:76:5c:0b:30:3f:d1:5c:c2:ec:de:ac:19:8b:d4:88:5d:
         37:db:34:ff:22:25:d6:ba:31:db:4d:ca:dc:4d:b0:a8:a4:de:
         08:ad:4d:0c:5e:82:54:82:f2:b8:7f:09:6b:f1:55:99:26:89:
         9b:75:07:f6:7f:4a:73:38:80:c8:17:65:f2:4e:4b:2b:51:0b:
         8d:47:ec:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUC+UPOT9jBYtCHsBUFUwxS6V/QVkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTEzNThDNzhGQzdFMDA1RTEyMjgwQ0ZERTYwRTczNDE5
Q0M2QTM4QTAeFw0yNjA4MjMxNTUwNTRaFw0yNjA4MjQxODA3NTRaMDMxMTAvBgNV
BAMTKEVGN0M2QUI3ODIwNTkyOURFQ0FCMzQyRDY1RDJGMzRCQjFGQTlCNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC85/MggIknxkJs6q62KykN/8uG
ZJVeB/7O+te6z1vhxIG0ZUC1Bu1YyWtKEYyxbmxSkINM40VvzaV0oi5R69xoIdAy
cnP3P7txhQCiu4QkPIcy+Hxhs2z2b+H1lD5dREmv6vLX/9BzJkIL1o4laR4YrxGq
6i44BhdKNEWR3VcbqM/MIpOhjo+Xu9dw6RJJP9/+yWUs2GV1C+KLz67GkEwTbBOn
yD2dwZJYxy9cveCWPmC+t0rQK83tjeIcgaoAi5OMPZd1y3Bh4r6o9kJYwCb4gSHj
2SC5itl8MFhVrpGFg5IuaFDMD1VL7eyX4EHmmbucchS+ySTqVPhuz23v+mIhAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU73xqt4IFkp3sqzQtZdLzS7H6m2kwHwYDVR0j
BBgwFoAU4TWMePx+AF4SKAz95g5zQZzGo4owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnMzbWlIbWNKWjFuaEpmcDhXUmJ2VGNKQXl4N3ZBMlUyR3kya2VCc3VX
ZkUvMS9FMTM1OEM3OEZDN0UwMDVFMTIyODBDRkRFNjBFNzM0MTlDQzZBMzhBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UxMzU4Qzc4RkM3RTAwNUUx
MjI4MENGREU2MEU3MzQxOUNDNkEzOEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MnMzbWlIbWNKWjFuaEpmcDhXUmJ2VGNKQXl4N3ZBMlUyR3kya2VCc3VXZkUvMS9F
MTM1OEM3OEZDN0UwMDVFMTIyODBDRkRFNjBFNzM0MTlDQzZBMzhBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAR626cvlR0EVbEWaJEn2XxiuaGe4bdUIXpy9eF98Wb5ZvetJLOSiGCYAAmtUd
rOobvQMs0mkLBaseNRj3UPHCcCzQtm2KXfHNvtVH2dyXK+DiPKqYDQI3kuUt4S/2
yPg4NCSFX5Q/QGs6ZKyyN/PNOjvJxgWjqXmyF+wIhV29q5gHuBQhqEyNGha0AJe0
4DhynPrixuToOIcM6UAcCsuMxKFDXd8kakhqtu6+jEGUKDDOaiBsnNt2XAswP9Fc
wuzerBmL1IhdN9s0/yIl1rox203K3E2wqKTeCK1NDF6CVILyuH8Ja/FVmSaJm3UH
9n9KcziAyBdl8k5LK1ELjUfsiQ==
-----END CERTIFICATE-----
Generated at Mon Aug 24 10:41:56 2026 by rpki-client