Error: rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft
File:                     5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft (raw, json)
Hash identifier:          LKyRUT6DBjKNPU/hx6MAc9ApitZ270mI5LevURshCOk=
Subject key identifier:   42:59:4B:D2:22:52:0E:D7:14:F1:F6:E6:54:9E:20:BF:F4:C0:B6:17
Authority key identifier: 5F:F5:DC:22:C9:F3:8E:4B:3A:5F:FA:CC:76:89:C6:EB:52:A6:5D:B9
Certificate issuer:       /CN=5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9
Certificate serial:       5EDAB0E5166BFFC56EC5136666C6C0CA94008FF9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft
Manifest number:          048C
Signing time:             Sat 22 Aug 2026 21:19:23 +0000
Manifest this update:     Sat 22 Aug 2026 21:14:23 +0000
Manifest next update:     Sun 23 Aug 2026 23:08:23 +0000
Files and hashes:         1: 3137372e38362e3131362e302f32322d3234203d3e203532353730.roa (hash: x1+GQO8H+q7duDGrJLmVFbvRT4PTXdBBkE2zgyXohJc=)
                          2: 5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.crl (hash: i3MnxR6vemEeKQAvR+7bJuC/Q9uXnAB5doClfTTtEs4=)
                          3: 323830343a313536343a3a2f33322d3336203d3e203532353730.roa (hash: MJEU9stz6b2jhBGcAeFLhP96QluPf2/eiJRTzyfKnO0=)
                          4: 3137392e39362e3230302e302f32312d3234203d3e203532353730.roa (hash: d1r/JqCcRrfI+uplhqwOSFjUh6OVTzwZb6fZkyUCGRU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.crl
                          rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 23:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:da:b0:e5:16:6b:ff:c5:6e:c5:13:66:66:c6:c0:ca:94:00:8f:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9
        Validity
            Not Before: Aug 22 21:14:23 2026 GMT
            Not After : Aug 23 23:08:23 2026 GMT
        Subject: CN=42594BD222520ED714F1F6E6549E20BFF4C0B617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f2:a7:ee:ec:d3:af:30:e1:c7:b1:13:6d:6c:
                    22:65:d5:d4:5b:f8:4d:d5:2e:49:ce:ef:96:ee:07:
                    ea:9b:6e:12:31:ab:5d:20:1a:7f:99:a8:35:8e:a0:
                    07:7d:26:c4:d4:b9:6e:9b:22:98:7d:53:c5:52:75:
                    d8:c9:30:de:5a:ef:91:84:fc:76:71:c7:09:3b:07:
                    d0:cd:3b:9b:6a:f4:9a:6c:7b:14:e0:39:67:b7:02:
                    e6:3e:01:57:33:bd:66:11:b6:81:09:d2:16:4e:73:
                    92:11:5c:09:b7:93:60:b2:f9:05:eb:78:cf:90:0f:
                    ec:44:81:87:3b:5f:1b:a4:52:90:1f:07:85:ee:8f:
                    c3:f5:0f:24:32:54:8c:45:6b:c1:e2:57:97:a9:7e:
                    df:44:a1:1c:ec:49:cb:d6:bf:65:47:62:9a:0d:d6:
                    cc:6f:bf:0a:af:42:b1:65:b2:f5:5f:73:6b:2b:cb:
                    de:fc:4b:43:59:0f:f1:d8:cb:3c:4b:67:69:ff:db:
                    66:99:d3:2b:b6:3e:7c:18:f6:a5:01:8a:9c:e4:fb:
                    04:51:e8:c7:bf:a4:f8:6a:e9:58:63:38:15:d0:dd:
                    92:82:e5:d4:aa:12:e5:cb:fd:8f:e7:74:c5:aa:d0:
                    c7:f7:42:de:e4:9a:dd:f7:1d:cc:fa:10:81:bc:eb:
                    a6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:59:4B:D2:22:52:0E:D7:14:F1:F6:E6:54:9E:20:BF:F4:C0:B6:17
            X509v3 Authority Key Identifier:
                keyid:5F:F5:DC:22:C9:F3:8E:4B:3A:5F:FA:CC:76:89:C6:EB:52:A6:5D:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:63:de:84:2f:d0:d0:a1:f8:c0:c3:2a:16:04:17:03:ed:18:
         69:0b:72:56:4c:cc:39:81:2c:f3:f7:13:cc:61:51:77:b6:f4:
         6c:b4:e0:79:72:c5:36:6b:bc:cc:90:52:87:d6:18:c8:f8:38:
         4b:5a:eb:ca:c2:28:f6:41:8f:76:cc:07:0a:0a:28:93:b4:56:
         ca:21:65:84:f2:3f:21:21:03:b0:0f:e8:f1:1c:84:9c:85:d7:
         ba:39:f1:27:a2:76:69:7a:c7:1c:37:9c:87:8e:76:63:24:15:
         55:fa:4b:e8:94:cb:2f:84:ad:59:55:ff:d1:d1:63:7a:b6:50:
         f3:6d:26:3e:a3:27:53:48:0f:d2:3c:83:88:dd:6c:72:91:c8:
         f8:0a:48:e2:b6:5d:05:7e:86:1a:e0:91:1f:41:f6:ce:e5:8d:
         a1:4a:d5:74:c3:3e:cd:dc:dc:c4:65:2c:22:fc:7e:32:7f:59:
         4e:9a:79:89:f1:64:34:c5:62:da:77:90:8a:5c:57:d0:eb:6c:
         b6:0e:2a:c3:0c:1e:3d:d9:46:4e:fa:9d:32:f9:84:ae:7c:8b:
         fa:52:c4:5d:ef:77:c0:06:3f:ee:e1:f8:e6:a3:a3:21:81:97:
         8c:a1:83:08:dc:f5:ce:91:d4:88:d5:97:0c:1b:4a:a8:3a:e4:
         6e:28:2d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 15:07:11 2026 by rpki-client