Error: rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.mft
File:                     C67FC27679C5C58D1A1904874E35000B74C71E78.mft (raw, json)
Hash identifier:          DApwoqNXPXVYmZ/iQPV3H++yNQ/ubV/7xqHjI5Rptnc=
Subject key identifier:   3B:B2:FF:EC:00:C2:A8:C9:19:7F:CB:A0:E4:E4:EB:77:D9:BC:AF:0D
Authority key identifier: C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78
Certificate issuer:       /CN=C67FC27679C5C58D1A1904874E35000B74C71E78
Certificate serial:       0DECB31B9C62521316AD1193D000B72F0DDE0E04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.mft
Manifest number:          052C
Signing time:             Tue 25 Aug 2026 13:00:00 +0000
Manifest this update:     Tue 25 Aug 2026 12:55:00 +0000
Manifest next update:     Wed 26 Aug 2026 13:00:00 +0000
Files and hashes:         1: 323830343a323062343a383132303a3a2f34332d3433203d3e20323634353039.roa (hash: ER059z9Yx4AbpNKmMPJjjpUIEeiYLtLvIaUyjIDM4ZA=)
                          2: 323830343a323062343a383030303a3a2f33342d3334203d3e20323634353039.roa (hash: gEA5uYqu2w6FYeDEOW5dLVM3aGUnhYRxVvDoZhHS6A4=)
                          3: 323830343a323062343a383035303a3a2f34342d3434203d3e20323634353039.roa (hash: VNrrYcveaoy/hrdqnp0SUXYP5y+MxskutIBaBy7SWdw=)
                          4: 323830343a323062343a383033303a3a2f34342d3434203d3e20323634353039.roa (hash: 0JJeWN//oFPZytJ6ol/UJetUvZzcrqvnyEvN5oFpmeA=)
                          5: 3133322e3235352e3136382e302f32342d3234203d3e20323634353039.roa (hash: 6eWcnwnpGuXJv64qaHPtusWSbOvdCKD8gyzkiVWg0DI=)
                          6: 323830343a323062343a383034303a3a2f34342d3434203d3e20323634353039.roa (hash: mxyo02+BSgXj6L7u+HmsEpBQx+AcZGZR+vOTUduQdog=)
                          7: 323830343a323062343a383063303a3a2f34332d3433203d3e20323634353039.roa (hash: oj/e+VuUWCbUsedH+0ewUxjnSngvEo5W6rJO29GSDQc=)
                          8: 3133322e3235352e3136392e302f32342d3234203d3e20323634353039.roa (hash: mgCC/lWO/d8C57WBYP+U/FOFVDIxOhtqtWqrkTm0rQQ=)
                          9: 3133322e3235352e3137302e302f32332d3233203d3e20323634353039.roa (hash: 1IZIi3vbHtDczrfVWf9cuvJIEDh4qapXPSyF2w0EHiE=)
                          10: 323830343a323062343a343030303a3a2f33342d3334203d3e20323634353039.roa (hash: c8FRbNAmIcv8TEui1ltClkiuvqrMfY6W1oNHgwIv3G8=)
                          11: 323830343a323062343a3a2f33342d3334203d3e20323634353039.roa (hash: +jjqP5gAmJA1PSZE5F72aGmm7viIOIcd0THpcF+DNww=)
                          12: 3133322e3235352e3137302e302f32342d3234203d3e20323634353039.roa (hash: B3sjGqR5zzIRasku53H4+qj7/XAinLYSNHaOOWRLRIY=)
                          13: C67FC27679C5C58D1A1904874E35000B74C71E78.crl (hash: e14gBkQJBvnv9CNc8eMvDaXhr/k9ah/xzmiPLqwMkOc=)
                          14: 323830343a323062343a383037303a3a2f34342d3434203d3e20323634353039.roa (hash: tm129aCEIyNC30T9DltDFOOkghUoEX+5b54OXpEpc0w=)
                          15: 323830343a323062343a383036303a3a2f34342d3434203d3e20323634353039.roa (hash: pvGyyoK+z+s7K9UTWiSWPkwWCRd6H24iIj08LvYWCgE=)
                          16: 3133322e3235352e3137312e302f32342d3239203d3e20323634353039.roa (hash: FDLkT/yrNO6/SQj7INComkb4BP7SQGJVzlc/3vgy+UI=)
                          17: 323830343a323062343a633030303a3a2f33342d3334203d3e20323634353039.roa (hash: vHFOF6zIeCw3uZGUEb3b1G7g9d5jc9kR0oL6rkRgV2o=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl
                          rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ec:b3:1b:9c:62:52:13:16:ad:11:93:d0:00:b7:2f:0d:de:0e:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67FC27679C5C58D1A1904874E35000B74C71E78
        Validity
            Not Before: Aug 25 12:55:00 2026 GMT
            Not After : Aug 26 13:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c7:42:dc:2f:57:40:2f:4d:9c:b0:f8:a0:ad:
                    50:9d:7b:a0:6c:6e:6c:52:c0:f7:4f:0e:28:49:fe:
                    19:78:c2:88:2a:14:9a:db:67:64:48:f1:cf:0f:c4:
                    ed:7e:52:bc:bd:db:04:a1:11:fb:a2:c5:3f:4c:db:
                    34:2e:08:e5:f3:f3:70:97:c3:11:4f:4e:18:24:b1:
                    16:9f:2d:4b:8b:40:63:eb:31:32:39:59:83:eb:68:
                    a8:1e:0f:61:3e:0a:61:91:86:6f:84:7f:34:5d:fe:
                    2f:df:51:61:bb:96:20:96:40:56:91:74:be:c2:15:
                    9e:ec:6b:78:77:91:41:5e:e9:68:83:1a:2d:07:92:
                    63:43:cb:96:8c:f2:18:bc:ae:97:fd:d5:04:7e:ff:
                    67:c7:c8:67:87:b5:fb:a3:59:b5:cb:b4:5c:f2:8d:
                    87:71:98:cd:67:0e:32:e8:8d:2d:4b:71:fd:6a:50:
                    28:af:54:cf:5c:07:73:db:88:39:e3:43:83:c5:fa:
                    1d:f0:0c:30:70:6f:b8:5a:1d:68:b1:2c:00:39:84:
                    d6:a3:71:8d:d7:c9:b0:6a:c0:74:62:a0:ed:19:9a:
                    89:08:fb:80:aa:e9:67:d2:9d:56:38:bc:d2:6c:4c:
                    cc:4b:ba:06:90:b7:44:59:e6:02:98:e4:62:eb:ac:
                    fe:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B2:FF:EC:00:C2:A8:C9:19:7F:CB:A0:E4:E4:EB:77:D9:BC:AF:0D
            X509v3 Authority Key Identifier:
                keyid:C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:c6:0e:4c:2c:31:98:67:0f:6a:27:fb:d3:d7:21:dd:35:54:
         12:1f:30:5f:d0:fc:85:44:97:5b:97:13:ee:81:b9:8c:2d:88:
         5d:ed:b3:a7:1c:da:f7:ea:09:2a:ac:53:2d:b6:c6:f7:b0:bc:
         d1:28:bc:65:60:32:8f:5c:2e:4f:d1:cf:7b:60:4b:b9:13:f3:
         5b:48:46:25:10:1d:ac:03:98:ce:50:9c:fb:c8:9d:85:a5:7e:
         42:33:43:51:1c:3b:c2:e1:63:e4:98:9e:eb:8e:12:ec:c8:49:
         52:2f:0b:36:5b:d0:f9:bb:ac:1e:e7:92:a2:b7:b3:46:4e:e2:
         76:dc:c5:0a:39:ce:1e:e3:35:0c:4e:11:42:96:d7:0e:d5:af:
         65:ad:53:fb:f6:26:a0:ef:2d:fb:59:98:04:e0:41:6f:99:16:
         0e:94:61:43:b4:f6:a2:a3:b7:a1:14:8b:b6:08:df:da:13:41:
         ed:87:c1:28:b0:4e:76:b4:bb:4f:4d:6d:9d:79:8a:0b:bc:8d:
         8d:a0:48:68:80:66:90:79:ab:14:3a:20:79:d2:18:64:e4:4a:
         9f:95:8e:92:f7:42:8e:42:ba:6b:8a:95:04:fc:00:5f:38:a0:
         e0:24:50:cd:ce:73:33:17:e1:d6:89:d6:86:a9:c5:8b:99:76:
         1d:7f:54:3e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Aug 25 21:59:15 2026 by rpki-client