Error: rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/062347D8F4F770415633E22D794F8D58F390BA86.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/062347D8F4F770415633E22D794F8D58F390BA86.mft
File:                     062347D8F4F770415633E22D794F8D58F390BA86.mft (raw, json)
Hash identifier:          +uvdW44syJfo/ojbEuUkwphnPP0izEez1WgKK2dN9xw=
Subject key identifier:   6B:55:93:D1:2B:A5:57:C9:42:DD:32:50:DF:20:14:AC:A3:69:58:2F
Authority key identifier: 06:23:47:D8:F4:F7:70:41:56:33:E2:2D:79:4F:8D:58:F3:90:BA:86
Certificate issuer:       /CN=062347D8F4F770415633E22D794F8D58F390BA86
Certificate serial:       0AA55F6F378FC9B7B8A036E618A94D59F4DCABFF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/062347D8F4F770415633E22D794F8D58F390BA86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/062347D8F4F770415633E22D794F8D58F390BA86.mft
Manifest number:          051D
Signing time:             Sun 23 Aug 2026 03:10:00 +0000
Manifest this update:     Sun 23 Aug 2026 03:05:00 +0000
Manifest next update:     Mon 24 Aug 2026 03:10:00 +0000
Files and hashes:         1: 062347D8F4F770415633E22D794F8D58F390BA86.crl (hash: 5e7qi7PWafma5GDtrfE9p/Ss32Ze/b9ryUJBGx0Xsbg=)
                          2: 323830343a366232633a3a2f33322d3335203d3e20323730333833.roa (hash: +MEKwdws3x3s9D2KqYylPSLBoKLUSSShhawfHhm3wbM=)
                          3: 3139302e38392e3136382e302f32322d3234203d3e20323730333833.roa (hash: SBUrw02b1xdhOVQH1EQlyfdsqcQOVCjMZQ9TaX5wu8Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/062347D8F4F770415633E22D794F8D58F390BA86.crl
                          rsync://rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/062347D8F4F770415633E22D794F8D58F390BA86.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/062347D8F4F770415633E22D794F8D58F390BA86.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 03:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:a5:5f:6f:37:8f:c9:b7:b8:a0:36:e6:18:a9:4d:59:f4:dc:ab:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=062347D8F4F770415633E22D794F8D58F390BA86
        Validity
            Not Before: Aug 23 03:05:00 2026 GMT
            Not After : Aug 24 03:10:00 2026 GMT
        Subject: CN=3082010A0282010100B383007BF7AA95E9D0533C080D1346362A495D1712657D43A071DE52DBFE615BAE96848CD24D5482E9077CC8C392551044214E75ADED060521EBC5A118B3C1203C62F30C194B2B30452604732E711CF47490027A6C0D5AA202E1E612472575206A0EC679A66561386FEF9F5B66BFA06E137C03209F3C72BFE7DF2E5ABF0FBD6385F4B0210BD155C5B4535214904FBF152ABAE47084C0F0657DE04D88363ABD2654C96E63FE70628C4AB358F7D7FCD92D72EEF9334F3351204C27BBC31AD9F2F5183794B1AC4D250A0C1D58F6211C3BBF63408A888DACFF020643EEB28E92ACC87548064AC6FEAC6D3A776AE921C3A899E00561CE93CDC3641EFFE0FB06BB5FB90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:83:00:7b:f7:aa:95:e9:d0:53:3c:08:0d:13:
                    46:36:2a:49:5d:17:12:65:7d:43:a0:71:de:52:db:
                    fe:61:5b:ae:96:84:8c:d2:4d:54:82:e9:07:7c:c8:
                    c3:92:55:10:44:21:4e:75:ad:ed:06:05:21:eb:c5:
                    a1:18:b3:c1:20:3c:62:f3:0c:19:4b:2b:30:45:26:
                    04:73:2e:71:1c:f4:74:90:02:7a:6c:0d:5a:a2:02:
                    e1:e6:12:47:25:75:20:6a:0e:c6:79:a6:65:61:38:
                    6f:ef:9f:5b:66:bf:a0:6e:13:7c:03:20:9f:3c:72:
                    bf:e7:df:2e:5a:bf:0f:bd:63:85:f4:b0:21:0b:d1:
                    55:c5:b4:53:52:14:90:4f:bf:15:2a:ba:e4:70:84:
                    c0:f0:65:7d:e0:4d:88:36:3a:bd:26:54:c9:6e:63:
                    fe:70:62:8c:4a:b3:58:f7:d7:fc:d9:2d:72:ee:f9:
                    33:4f:33:51:20:4c:27:bb:c3:1a:d9:f2:f5:18:37:
                    94:b1:ac:4d:25:0a:0c:1d:58:f6:21:1c:3b:bf:63:
                    40:8a:88:8d:ac:ff:02:06:43:ee:b2:8e:92:ac:c8:
                    75:48:06:4a:c6:fe:ac:6d:3a:77:6a:e9:21:c3:a8:
                    99:e0:05:61:ce:93:cd:c3:64:1e:ff:e0:fb:06:bb:
                    5f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:55:93:D1:2B:A5:57:C9:42:DD:32:50:DF:20:14:AC:A3:69:58:2F
            X509v3 Authority Key Identifier:
                keyid:06:23:47:D8:F4:F7:70:41:56:33:E2:2D:79:4F:8D:58:F3:90:BA:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/062347D8F4F770415633E22D794F8D58F390BA86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/062347D8F4F770415633E22D794F8D58F390BA86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/062347D8F4F770415633E22D794F8D58F390BA86.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:7d:b3:16:fa:c9:d5:96:da:83:e7:6e:a2:b3:20:51:53:42:
         ae:29:0d:1c:13:28:a9:23:8c:6a:dc:a8:ee:70:06:16:ba:aa:
         4a:4b:27:4f:39:ac:5c:94:ac:1c:c1:4b:48:68:e5:21:76:8e:
         73:39:d7:5d:13:da:6f:3e:67:30:87:1b:af:c3:a6:20:80:ff:
         95:0b:37:73:18:df:a4:bd:a2:39:47:84:8b:05:c7:42:61:3f:
         57:f5:14:e6:0d:6c:3b:0e:7c:63:5c:db:28:02:67:ea:e8:c0:
         bf:06:09:18:ac:5a:0a:e9:42:18:13:ca:0e:29:e1:c7:71:e8:
         12:a3:67:29:c7:c5:28:55:32:e8:9e:8c:fb:26:11:f5:7d:0b:
         1e:b6:da:9d:7c:5e:97:3b:e2:bb:68:27:60:40:76:e2:83:aa:
         e2:e9:9b:23:eb:ab:72:98:6a:7c:a0:67:97:23:84:0f:4d:b6:
         98:aa:9b:f6:48:b3:4c:3a:de:28:5f:e4:77:a8:44:a0:20:8e:
         86:1c:20:24:8b:48:0f:4e:d3:db:c1:be:4b:bc:13:12:c4:e6:
         23:35:7e:6a:73:b6:83:01:78:a6:59:88:93:06:2f:da:df:df:
         76:6b:02:c1:b5:e4:bb:af:1c:10:02:af:ef:13:5f:d7:51:92:
         6d:38:91:26
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Aug 23 13:50:47 2026 by rpki-client