Error: rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.mft
File:                     2D7667AAA3EBB72048A79335E58D7FD1F8263830.mft (raw, json)
Hash identifier:          uRGDRLpOnWmY0i1orPiHXknVQd70P7tgBBMAo3I1NO0=
Subject key identifier:   B3:9D:43:B8:4B:E1:04:97:66:6A:B7:3D:79:08:78:52:AE:BE:FA:46
Authority key identifier: 2D:76:67:AA:A3:EB:B7:20:48:A7:93:35:E5:8D:7F:D1:F8:26:38:30
Certificate issuer:       /CN=2D7667AAA3EBB72048A79335E58D7FD1F8263830
Certificate serial:       451A8DD111D170C73F7516555B378BE7F8FF5785
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.mft
Manifest number:          051B
Signing time:             Sat 22 Aug 2026 10:50:00 +0000
Manifest this update:     Sat 22 Aug 2026 10:45:00 +0000
Manifest next update:     Sun 23 Aug 2026 10:50:00 +0000
Files and hashes:         1: 2D7667AAA3EBB72048A79335E58D7FD1F8263830.crl (hash: xoiBlXaXMtItyze3+czSmhHSI8UE98gY/DDo5hC/nF8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.crl
                          rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 10:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:1a:8d:d1:11:d1:70:c7:3f:75:16:55:5b:37:8b:e7:f8:ff:57:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D7667AAA3EBB72048A79335E58D7FD1F8263830
        Validity
            Not Before: Aug 22 10:45:00 2026 GMT
            Not After : Aug 29 10:50:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f8:a4:12:1e:5f:b6:65:72:2b:d6:24:78:15:
                    f5:b5:5a:ff:8f:a4:af:f4:99:e0:4e:97:df:68:7f:
                    04:8b:75:9c:ad:5c:44:ed:46:e8:3f:1f:44:43:05:
                    01:af:d2:77:c2:f0:8e:38:7a:a6:bf:5d:f9:77:81:
                    60:20:5c:c4:ef:b6:3a:c7:fb:c7:65:af:f1:ec:7c:
                    17:78:9a:20:ae:62:df:f7:74:bb:be:fb:93:d6:e0:
                    b3:c9:94:e2:13:4c:15:8e:f3:3b:d6:f0:2d:37:df:
                    8f:0e:6d:4f:09:58:c8:b1:45:62:c7:f1:6e:91:ce:
                    1d:ac:a5:46:50:0c:35:af:e6:7f:8e:10:31:80:2b:
                    89:d0:4a:55:6e:11:7a:e5:07:4c:0a:22:92:bd:25:
                    e4:81:5a:ed:cc:ad:a6:b3:eb:bf:f3:c2:80:e9:54:
                    8a:89:99:b2:df:0d:cb:ca:18:3a:68:87:80:a8:7e:
                    32:23:4e:24:71:0e:0b:1c:00:58:35:78:37:d9:ae:
                    58:3b:76:00:16:e3:50:22:45:6b:60:b6:80:7d:30:
                    84:93:b1:3d:86:72:57:ae:a6:86:ca:8f:09:fc:5a:
                    61:a3:8f:8a:11:2c:6b:71:b9:97:02:a4:5a:90:f8:
                    e0:d5:53:d2:46:e4:20:5e:74:f7:26:e4:82:93:44:
                    d5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:9D:43:B8:4B:E1:04:97:66:6A:B7:3D:79:08:78:52:AE:BE:FA:46
            X509v3 Authority Key Identifier:
                keyid:2D:76:67:AA:A3:EB:B7:20:48:A7:93:35:E5:8D:7F:D1:F8:26:38:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:23:54:07:21:27:4b:c4:8c:dc:8c:d5:61:8e:8e:47:8b:8b:
         07:99:72:35:65:8b:fe:13:fb:7f:1b:1d:06:61:a2:75:c1:a0:
         65:48:25:21:15:34:da:a1:5a:82:fd:90:47:30:e7:b3:fc:9d:
         c1:4f:ac:d3:9b:42:b5:95:02:a4:7d:f1:ce:85:ae:61:e0:11:
         79:96:fa:e1:81:99:f7:db:eb:33:42:f4:f4:fa:e2:03:ec:ba:
         2b:d1:b7:95:4b:c6:07:c5:bc:a0:80:ec:c5:17:4b:c9:20:b7:
         02:b1:fd:62:2a:29:64:fd:e7:c7:fb:0b:60:05:c1:74:31:b9:
         4b:34:90:c1:a1:92:6b:19:af:f9:14:92:58:be:08:30:7e:fb:
         b6:23:00:6f:d6:92:69:2e:10:69:fb:e3:94:c1:00:fc:da:d2:
         70:74:39:1a:3e:66:6c:10:83:c3:b1:fa:b1:49:42:45:b6:92:
         a9:75:7f:7e:d0:74:f4:12:ae:41:8c:7d:47:72:8f:3d:05:d1:
         da:b9:f3:a4:1e:3d:90:67:85:fe:a9:0d:96:0f:85:98:08:56:
         a1:91:85:9f:b1:e1:95:5e:6c:04:89:6e:37:3b:07:0f:01:2c:
         3f:87:51:06:cb:a2:5c:c2:77:eb:ea:36:d4:57:a2:54:36:8b:
         91:35:10:4b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Aug 23 02:52:43 2026 by rpki-client