Error: rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.mft
File:                     B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.mft (raw, json)
Hash identifier:          ZGGRb0+4Oj5B4CeyjIG8VMIeQuYWsS/tc/Xkar/6Nqg=
Subject key identifier:   6C:A3:DE:1D:AF:43:7D:F9:1A:50:2E:DF:4E:33:8A:BB:85:E5:E2:4B
Authority key identifier: B8:16:A6:DE:EE:87:A9:7A:EC:5A:D5:8B:35:70:BA:BA:44:CF:DA:AD
Certificate issuer:       /CN=B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD
Certificate serial:       0FD7B3D66484FF146A33D09A8D73AE463A359103
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.mft
Manifest number:          0487
Signing time:             Sun 23 Aug 2026 15:31:38 +0000
Manifest this update:     Sun 23 Aug 2026 15:26:38 +0000
Manifest next update:     Mon 24 Aug 2026 17:19:38 +0000
Files and hashes:         1: B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.crl (hash: /Ahi7RSYiHtNce7Zlzck4K7o6jrqgjdPXODKMMvkwBk=)
                          2: 323830343a346635343a3a2f33322d3438203d3e20323638333230.roa (hash: x7AZdLuBLjpf4wqSsK/DHHz1xo1yqFjFZ3fdvrS5ulk=)
                          3: 34352e3233382e39322e302f32322d3234203d3e20323638333230.roa (hash: uCwF4/WvjXX3xmQMQUDVk8JwCwZYzgnwnaH8XR363i0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.crl
                          rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 17:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:d7:b3:d6:64:84:ff:14:6a:33:d0:9a:8d:73:ae:46:3a:35:91:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD
        Validity
            Not Before: Aug 23 15:26:38 2026 GMT
            Not After : Aug 24 17:19:38 2026 GMT
        Subject: CN=6CA3DE1DAF437DF91A502EDF4E338ABB85E5E24B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:79:55:21:ef:48:8c:51:d8:f3:17:cb:50:d9:
                    de:f5:45:7f:e2:78:11:21:e6:d6:be:ee:03:e2:6f:
                    22:ab:ef:ec:54:ba:49:07:be:7a:84:97:f1:9c:59:
                    c7:db:1c:8f:b9:97:7a:56:a7:f9:e8:0f:83:ea:08:
                    f8:69:08:6f:f7:85:80:9a:13:75:dc:06:71:ae:46:
                    5d:dd:a8:fa:e4:e9:b9:b8:bb:29:4d:70:59:9b:17:
                    9f:b6:c9:d7:36:2f:4d:9c:2b:e4:4d:cd:40:f2:0a:
                    0d:b1:70:9c:5a:d7:d3:eb:1d:aa:25:11:d4:e3:5b:
                    05:42:04:50:58:9d:d9:7c:92:9f:d4:9d:20:54:39:
                    17:a9:19:db:07:b2:6a:81:08:9c:fb:66:50:ce:b2:
                    66:31:68:65:7b:d4:08:e4:ca:d1:dd:e8:7c:bb:14:
                    8c:1e:db:1f:e6:6d:b3:e6:82:f2:7a:1a:bc:5d:7b:
                    66:e7:fd:2d:45:b8:49:04:79:bd:e4:48:27:d1:85:
                    9d:41:d4:40:16:08:fd:68:8d:51:18:5d:99:5c:72:
                    cc:26:39:d1:43:9b:88:ff:f9:02:5a:f1:86:c7:92:
                    5b:89:61:e2:aa:43:4d:c9:f0:86:33:59:ec:a0:e0:
                    b6:8f:76:bd:2a:c6:ae:a3:35:29:23:8c:9a:d8:73:
                    d8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A3:DE:1D:AF:43:7D:F9:1A:50:2E:DF:4E:33:8A:BB:85:E5:E2:4B
            X509v3 Authority Key Identifier:
                keyid:B8:16:A6:DE:EE:87:A9:7A:EC:5A:D5:8B:35:70:BA:BA:44:CF:DA:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:f7:cb:ae:b6:89:a4:0b:47:63:13:02:f4:3a:96:16:22:48:
         78:94:c0:0f:3b:d1:b5:2f:5a:cb:c5:03:f1:3f:27:bd:9d:60:
         6e:80:56:fb:6e:d9:d5:12:80:1f:f4:a2:db:3b:f6:f2:e4:32:
         c0:f1:f3:29:7f:83:88:d0:75:46:ed:31:7b:cc:ff:a1:e8:f7:
         39:bc:93:31:44:30:b1:8b:f6:ff:a5:4f:00:f0:87:20:f9:13:
         0e:f3:e7:aa:dd:f6:d3:45:b9:5e:2c:c0:e3:17:93:e6:d8:4c:
         1c:c9:36:47:29:ac:95:5c:d2:df:2f:cb:c8:d4:81:44:4c:32:
         c0:ba:f5:a6:9c:31:e4:98:bd:e3:be:de:d8:3a:6b:74:7a:9e:
         f2:f5:d3:cb:11:72:ba:a8:eb:9f:cd:b2:dd:41:c0:60:5f:74:
         72:c3:b9:dc:24:cf:ea:e8:ce:56:15:47:a2:2f:66:7b:42:0f:
         0a:e4:2e:08:28:6b:e8:20:a3:b3:10:e8:87:f7:48:27:5a:4e:
         29:a5:37:91:ef:1d:e0:aa:d3:db:96:41:93:e0:d8:6f:2f:c8:
         68:b5:b9:c5:2f:14:c4:e1:e7:6b:55:0b:3a:7a:c8:af:93:10:
         2e:44:68:17:66:b8:87:74:73:0b:9e:2e:fd:52:82:41:b2:d0:
         60:e5:22:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 00:59:25 2026 by rpki-client