Error: rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.mft
File:                     E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.mft (raw, json)
Hash identifier:          hDHuJ4jBSZ4WecfQ1MlKllmIjGsOFAD9Upy1eKAHZiY=
Subject key identifier:   0D:4B:73:C7:40:15:7E:74:76:9C:F9:6C:A4:A2:B8:92:1A:94:3B:D5
Authority key identifier: E6:9E:BB:EF:4F:3E:B2:DE:9A:36:8F:10:8A:81:94:F2:D4:12:59:79
Certificate issuer:       /CN=E69EBBEF4F3EB2DE9A368F108A8194F2D4125979
Certificate serial:       313CB2F1ACC05301E5E493FC0A4F44C47E2931BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.mft
Manifest number:          040E
Signing time:             Sun 23 Aug 2026 14:03:24 +0000
Manifest this update:     Sun 23 Aug 2026 13:58:24 +0000
Manifest next update:     Mon 24 Aug 2026 15:46:24 +0000
Files and hashes:         1: 323830343a3339303a3a2f33322d313238203d3e203532393536.roa (hash: 3Wiw/qk3MQZNib9D+1280kNLAuMHYPnBfjXHVc9RLKE=)
                          2: 3136382e3138312e35362e302f32322d3332203d3e203532393536.roa (hash: ut6fa60POg9cfSGFJ8xm0smMZs+QqAsU7VO8vpZEmPo=)
                          3: E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.crl (hash: qj3GH8G9K60L4kq7lsNaPblF/35lzVVvaeO4Hk6TbsY=)
                          4: 3137372e36372e34302e302f32312d3332203d3e203532393536.roa (hash: hUguMml//JHW59W37rRMCABgZ1NFopZex2An3eobsGE=)
                          5: 3137302e37392e35362e302f32322d3332203d3e203532393536.roa (hash: 98rLAjiX7Kh8lKDqXBdgqSTm+YzQRJ6389rme41d9ns=)
                          6: 3137372e32322e39362e302f32302d3332203d3e203532393536.roa (hash: ARjfuGGELdFIBoenHLLQIdkFrcB99eduVbGkOMwAYas=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.crl
                          rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 15:46:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:3c:b2:f1:ac:c0:53:01:e5:e4:93:fc:0a:4f:44:c4:7e:29:31:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E69EBBEF4F3EB2DE9A368F108A8194F2D4125979
        Validity
            Not Before: Aug 23 13:58:24 2026 GMT
            Not After : Aug 24 15:46:24 2026 GMT
        Subject: CN=0D4B73C740157E74769CF96CA4A2B8921A943BD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fd:2b:52:42:79:ef:ce:ca:e1:de:be:07:43:
                    3c:e0:37:8a:90:8a:ea:94:1c:37:5d:1c:9a:8e:79:
                    a6:67:bd:23:6c:08:ad:1b:f1:78:44:bd:84:fe:5c:
                    8c:62:29:6f:06:af:5f:09:b7:c4:e7:2a:ed:6d:33:
                    bd:73:bb:ee:b6:4d:02:88:cf:b7:16:49:53:dc:17:
                    e3:2b:b3:0d:98:98:d0:8f:20:da:ca:f7:70:3c:a6:
                    af:46:cb:6f:9b:1d:91:05:64:97:16:7d:a5:22:bc:
                    eb:e9:79:e5:b0:ce:11:d5:e6:a3:2d:16:40:ac:50:
                    d0:d6:cb:7a:fc:f6:8b:92:76:fb:b3:a9:71:84:69:
                    69:82:b8:55:49:f8:4b:87:b2:10:e9:29:e4:53:1c:
                    c2:a5:e5:7a:b4:e1:9f:9b:5a:db:38:08:11:a4:8b:
                    40:39:d3:7c:d4:fe:ce:e0:8a:9f:5c:b4:90:0e:d5:
                    8e:75:1b:a3:4e:33:b9:69:9e:e8:1b:53:8a:d0:ea:
                    49:48:ab:a3:be:03:d5:de:2f:2b:3b:5e:8b:52:c1:
                    23:75:70:83:1a:dd:ab:17:fc:4a:e6:ef:42:2b:44:
                    78:2c:2d:73:67:d9:0f:24:b6:d1:6a:3e:fb:6a:58:
                    c7:60:57:1e:73:d4:d9:70:6c:8b:76:a1:ed:2a:3d:
                    fb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:4B:73:C7:40:15:7E:74:76:9C:F9:6C:A4:A2:B8:92:1A:94:3B:D5
            X509v3 Authority Key Identifier:
                keyid:E6:9E:BB:EF:4F:3E:B2:DE:9A:36:8F:10:8A:81:94:F2:D4:12:59:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:d9:5d:85:e2:19:ca:46:85:bd:4d:2e:5f:1e:1b:e9:8a:f9:
         6f:92:42:8f:53:cb:a5:a7:6a:28:da:c8:f6:3c:a5:28:ef:dd:
         c7:61:e3:8c:0a:68:e4:bf:71:dc:d5:49:b5:af:a8:f0:b1:fa:
         df:09:aa:b1:3f:2b:53:47:6b:26:9b:20:af:a8:4c:04:4a:22:
         28:a5:cf:f7:81:a9:30:3d:b9:4a:76:ab:6e:22:d3:ed:dd:11:
         de:9f:1e:10:62:a1:26:67:7c:e5:24:8a:1c:44:47:07:5f:6f:
         b2:86:dd:2b:87:0b:1d:fd:09:ce:67:b1:5f:76:4f:2e:66:a3:
         25:c9:ba:0c:49:53:6c:f0:65:15:f3:fe:1e:8e:2c:75:40:30:
         29:75:0b:60:5e:5f:99:67:2b:a8:34:05:20:39:cd:27:0d:d4:
         8a:7e:8e:a1:ad:a4:eb:37:88:f8:77:ad:59:5d:bc:eb:08:6d:
         3a:93:39:54:22:1c:36:42:47:7c:14:50:ce:31:b3:82:b1:d9:
         4a:6c:b4:3a:46:55:18:58:c0:a7:72:3a:4d:22:a2:92:42:d7:
         a8:b6:ba:96:03:41:11:ec:07:11:70:5d:e6:5d:03:31:53:94:
         f6:f5:4e:0e:59:f5:b3:47:7b:d9:36:d0:b2:40:2e:e4:90:a4:
         90:d9:df:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 03:59:48 2026 by rpki-client