Error: rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.mft
File:                     C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.mft (raw, json)
Hash identifier:          m5vCJ58wVS1V7qe4ULH4066En9diCtXcZX9IqdpB1MM=
Subject key identifier:   57:B1:48:35:DF:68:41:27:66:56:32:38:2F:E0:C3:C8:5A:11:4E:B4
Authority key identifier: C7:34:68:2B:0C:C1:F8:FC:BD:DF:FA:96:85:FF:12:9F:B7:F4:62:41
Certificate issuer:       /CN=C734682B0CC1F8FCBDDFFA9685FF129FB7F46241
Certificate serial:       581B908FD95182A5077C9B82ED6860E83820D88C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.mft
Manifest number:          0460
Signing time:             Sat 22 Aug 2026 13:41:11 +0000
Manifest this update:     Sat 22 Aug 2026 13:36:11 +0000
Manifest next update:     Sun 23 Aug 2026 17:30:11 +0000
Files and hashes:         1: 323830343a316139303a3a2f33322d3438203d3e203631383638.roa (hash: 5RMjqXzbK8n6PLdVrrLf9Z1kwgX+ZpdUBnAmW6bLuH4=)
                          2: C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.crl (hash: mMGzIm8CaM/5qD4b7yMT+wwTO5uGzeFO9aDYJqz+b1w=)
                          3: 34352e3232362e3139322e302f32322d3234203d3e203631383638.roa (hash: sE9xPaj796qaYB5xU9+MCxWjQMNU4r700xNK2CsDnjE=)
                          4: 3133312e302e33322e302f32322d3234203d3e203631383638.roa (hash: RfCyVP3bpNFpUlcrZFzUJQmoiASRdXs/NltHlFPbZEc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.crl
                          rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 17:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:1b:90:8f:d9:51:82:a5:07:7c:9b:82:ed:68:60:e8:38:20:d8:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C734682B0CC1F8FCBDDFFA9685FF129FB7F46241
        Validity
            Not Before: Aug 22 13:36:11 2026 GMT
            Not After : Aug 23 17:30:11 2026 GMT
        Subject: CN=57B14835DF684127665632382FE0C3C85A114EB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5a:77:9d:0a:f7:b6:30:e8:d1:e1:ae:bf:dd:
                    b3:22:f5:42:47:4c:3f:b1:a2:05:af:55:0c:cc:7f:
                    fb:55:6e:dc:86:ce:97:10:f9:32:c1:a3:24:12:a4:
                    49:4d:d6:77:51:9a:e9:e4:9f:22:b8:f7:6f:af:2f:
                    89:ea:fb:65:f2:0d:9c:4a:3e:6a:f7:e3:a6:96:cb:
                    2c:58:af:b8:3c:e3:53:62:6d:e6:81:5a:dc:12:b3:
                    bb:ab:10:d5:52:a3:a7:25:b7:81:db:9c:be:5a:f6:
                    56:9a:4b:6f:ce:31:1d:fc:14:97:34:e7:fe:c8:c8:
                    c4:ff:e8:3f:1d:03:8c:71:91:87:18:38:9a:fa:51:
                    c9:48:f6:d4:7e:a7:c2:7e:e7:1a:38:95:98:25:83:
                    fb:a1:3d:bd:1e:52:1a:ca:e2:1d:d1:07:5f:37:c5:
                    50:87:49:20:eb:19:00:da:90:dc:56:92:1b:cc:27:
                    98:74:65:7f:49:2f:61:44:bf:d3:bf:6f:86:cb:8a:
                    3d:32:df:29:99:c4:1f:de:40:af:76:25:d4:76:17:
                    e4:65:1e:d0:01:51:97:7f:b3:5b:5d:36:71:14:6f:
                    b6:14:a4:38:1c:ed:dc:01:c4:f5:70:3e:4c:90:d2:
                    0a:83:52:0d:bf:dd:3e:61:54:2e:31:dc:b8:25:90:
                    26:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B1:48:35:DF:68:41:27:66:56:32:38:2F:E0:C3:C8:5A:11:4E:B4
            X509v3 Authority Key Identifier:
                keyid:C7:34:68:2B:0C:C1:F8:FC:BD:DF:FA:96:85:FF:12:9F:B7:F4:62:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:f5:62:ad:e3:e2:a0:b9:6a:16:46:83:67:65:4e:c4:15:6e:
         2d:d7:7f:9d:51:99:af:cd:dd:0d:25:5b:ad:f0:0b:ac:82:f0:
         4d:fd:92:29:dc:72:6b:58:97:81:a9:c6:be:f9:a8:a4:d1:d0:
         5b:62:8c:ec:11:10:33:55:b1:2e:ef:ce:7d:c8:ca:ad:fb:dd:
         85:c3:5a:dd:18:01:ed:f1:ff:0a:9f:eb:74:59:bc:8a:45:71:
         fb:ec:24:da:a2:31:12:0c:b4:c6:18:0a:d4:a4:7b:b6:11:89:
         74:75:fe:29:68:25:f8:3b:2a:ca:7b:ff:f3:e3:05:b2:1a:55:
         02:97:85:11:32:9f:84:2c:5c:ba:45:6f:e2:69:1b:2a:1a:16:
         c9:ec:ba:03:40:5d:5f:6e:f7:28:2d:c4:d8:ee:7f:6c:09:8e:
         af:02:27:ed:48:63:e0:69:2e:96:85:54:c0:62:f5:2b:8b:f5:
         50:ba:29:33:60:46:2c:eb:c9:ce:b2:5f:4c:3d:b7:f2:35:55:
         5d:6d:27:f6:51:d7:8c:26:5a:ed:9a:b1:b2:20:30:09:d8:0c:
         37:f9:23:dd:96:f1:2c:37:af:fe:78:34:e9:42:11:18:68:ed:
         1b:e6:d8:3e:ca:0e:84:20:f2:e1:05:02:69:9a:58:38:58:ea:
         31:9f:33:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 07:18:40 2026 by rpki-client