Error: rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.mft
File:                     273782B997878A9415F132214E8D09CFA971572F.mft (raw, json)
Hash identifier:          Dlg+mms4jEzV3hA6GPR1fqInwUeaG01OrIYdWhSOsI8=
Subject key identifier:   6D:7F:42:31:CE:A9:45:89:C6:BF:37:4D:EF:40:6B:9F:CD:CC:66:75
Authority key identifier: 27:37:82:B9:97:87:8A:94:15:F1:32:21:4E:8D:09:CF:A9:71:57:2F
Certificate issuer:       /CN=273782B997878A9415F132214E8D09CFA971572F
Certificate serial:       75B77B47BAEF35F820E63A3F777B4CF6B1A9C75E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/273782B997878A9415F132214E8D09CFA971572F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.mft
Manifest number:          0488
Signing time:             Sun 23 Aug 2026 11:30:00 +0000
Manifest this update:     Sun 23 Aug 2026 11:25:00 +0000
Manifest next update:     Mon 24 Aug 2026 12:48:00 +0000
Files and hashes:         1: 273782B997878A9415F132214E8D09CFA971572F.crl (hash: jMuwyxlRj69n2uimX1xuMIKwYp0tsSSsF5iqpn8zYsI=)
                          2: 3137302e3233392e3130382e302f32342d3234203d3e20323636333438.roa (hash: 1rMOn1lHjNoJvQjPkWUj3e2BVMCtnI9aeRLaKTNjwOo=)
                          3: 3137302e3233392e3130392e302f32342d3234203d3e20323636333438.roa (hash: CiYx4abt3OEvYxcJDpL3Ebb1v4hZJuq4CeSTZoZ25WM=)
                          4: 3137302e3233392e3131302e302f32332d3233203d3e20323636333438.roa (hash: kvQc8nkWTGIJKYGvBWZlcrKpY0+KqPMiyT/Odj5JNZM=)
                          5: 3137302e3233392e3130382e302f32322d3232203d3e20323636333438.roa (hash: QGtbTursSV/vuLdxjF0/IpY/EgMfx6zcEH8MlYkeWIo=)
                          6: 3137302e3233392e3130382e302f32332d3233203d3e20323636333438.roa (hash: DbrvbVvzXukMAYThNw2mPdx7CZ3ApWp0vd/WNogRVbs=)
                          7: 3137302e3233392e3131302e302f32342d3234203d3e20323636333438.roa (hash: IRZW/wa7/KHAj9uraVHdJwx5RqOK5+yMSLoSSWMzmmw=)
                          8: 3137302e3233392e3131312e302f32342d3234203d3e20323636343438.roa (hash: pfFsHlVXNkZIAKUo1DACDon/IiPyXHKzn3WJX1uQliM=)
                          9: 323830343a333637303a3a2f33322d3438203d3e20323636333438.roa (hash: NVh5T+aJPXdwU5xm7VTv75Vv8g5u1GDhY+byH0cjwds=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.crl
                          rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/273782B997878A9415F132214E8D09CFA971572F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 12:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:b7:7b:47:ba:ef:35:f8:20:e6:3a:3f:77:7b:4c:f6:b1:a9:c7:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=273782B997878A9415F132214E8D09CFA971572F
        Validity
            Not Before: Aug 23 11:25:00 2026 GMT
            Not After : Aug 24 12:48:00 2026 GMT
        Subject: CN=6D7F4231CEA94589C6BF374DEF406B9FCDCC6675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:97:63:b0:1f:c8:94:f3:aa:19:60:97:0b:19:
                    5f:f2:3f:02:66:7e:2b:2d:6e:ba:68:cf:38:f3:07:
                    8d:a8:2f:12:6a:4d:f3:59:33:be:6e:00:65:16:15:
                    84:58:04:a8:4f:96:c3:f9:b9:a9:16:81:fb:b4:fc:
                    f7:1d:e7:27:86:48:50:5d:6a:f6:91:87:ea:b8:16:
                    49:3f:ab:b9:1d:f3:26:df:a1:18:54:66:47:de:81:
                    4b:04:85:14:8d:cf:21:97:03:e9:5d:04:87:0c:12:
                    4f:8d:2e:1a:55:e3:10:40:ec:b6:7e:cf:1b:5e:8d:
                    84:53:9a:88:32:a9:9c:09:94:a2:f2:af:9c:01:40:
                    54:4e:f5:00:1f:81:73:c0:6f:4f:74:9a:aa:3b:2e:
                    83:31:e8:08:a8:a8:bb:b9:b3:23:5e:78:49:30:da:
                    59:c1:33:32:ab:05:73:d2:f0:07:7c:8d:ed:91:33:
                    07:ce:65:df:c2:d5:fd:2d:c4:04:e3:cf:3d:90:a4:
                    ba:42:46:86:be:a6:b6:16:41:dd:21:7f:b7:c0:09:
                    c3:b3:08:27:66:4e:ee:19:7a:20:1a:b3:cb:63:6b:
                    6a:d1:15:03:b3:ea:50:30:37:fb:47:c4:99:2f:5a:
                    b5:b0:1a:b9:f8:fe:2a:a7:26:09:cd:5a:54:f6:a1:
                    c5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7F:42:31:CE:A9:45:89:C6:BF:37:4D:EF:40:6B:9F:CD:CC:66:75
            X509v3 Authority Key Identifier:
                keyid:27:37:82:B9:97:87:8A:94:15:F1:32:21:4E:8D:09:CF:A9:71:57:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/273782B997878A9415F132214E8D09CFA971572F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:1b:e1:ec:ca:0d:ba:f8:dd:f7:a4:4c:4d:3c:50:12:a5:85:
         a8:19:89:24:87:78:b1:3f:30:20:a2:73:46:65:16:10:ef:c3:
         71:b5:c1:e4:07:74:c0:79:46:b3:1c:4f:2b:f0:1d:02:5f:08:
         a3:df:bd:a0:d4:7f:a6:73:06:e8:84:d2:27:54:83:c4:4f:bf:
         ff:63:6b:61:04:1a:22:95:87:87:ce:89:79:2f:7b:4a:87:6d:
         e6:df:97:a8:6d:da:d6:ab:d7:0d:ff:45:2f:9b:3f:c1:51:2f:
         a0:1d:fa:3d:78:86:2d:a5:30:f9:e9:7c:af:cf:8b:9c:ec:43:
         d8:c8:11:f5:b1:b5:b1:b1:d1:41:fb:7c:eb:f4:6d:dd:46:cf:
         4e:29:a7:d6:2c:57:e9:6d:39:94:5d:87:a7:49:ed:ed:a4:b3:
         7a:8d:cd:fd:d9:d2:78:0b:61:e2:71:65:59:3d:58:06:69:86:
         ad:6c:9a:6a:2c:2b:91:85:e9:66:5c:dd:32:36:d2:8b:7e:95:
         4e:4a:fb:77:bc:d4:ef:8a:a9:6e:10:8e:49:07:78:6b:a9:1c:
         22:c3:f8:40:4b:11:38:72:98:23:bc:d7:55:e2:db:fe:dd:e8:
         90:10:c0:23:4a:1e:56:2c:60:c5:3f:6a:81:e1:f8:fd:19:19:
         5f:07:6b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 17:59:27 2026 by rpki-client