Error: rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.mft
File:                     DCE24D4E9D4DE179A93239E5972A0A48CBE24117.mft (raw, json)
Hash identifier:          kKLC9nqEYSMVC6NzWEH4YDCFk54MyZEDHAZgYZRxCf0=
Subject key identifier:   D7:BE:39:71:7D:53:2E:07:62:4C:FC:56:90:7B:10:CE:52:F2:00:53
Authority key identifier: DC:E2:4D:4E:9D:4D:E1:79:A9:32:39:E5:97:2A:0A:48:CB:E2:41:17
Certificate issuer:       /CN=DCE24D4E9D4DE179A93239E5972A0A48CBE24117
Certificate serial:       3F0A76C6EC95472AC9117B68C6B8FB94D062B9FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.mft
Manifest number:          0481
Signing time:             Mon 24 Aug 2026 15:05:40 +0000
Manifest this update:     Mon 24 Aug 2026 15:00:40 +0000
Manifest next update:     Tue 25 Aug 2026 16:42:40 +0000
Files and hashes:         1: DCE24D4E9D4DE179A93239E5972A0A48CBE24117.crl (hash: 9LTfZFns3jeih0aN65diFD82BiERnL1u1u+2ptlPW2M=)
                          2: 34352e3136342e3234342e302f32322d3234203d3e20323638363438.roa (hash: SPpdLSNtEv9usVoSgjPUyf6e0e4wAl8RG3A7fsobArY=)
                          3: 323830343a353436383a3a2f33322d3335203d3e20323638363438.roa (hash: H9KNxRSpawSThsNwGW8gvnKiyL5Y5taahCHvijRF64o=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.crl
                          rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 16:42:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:0a:76:c6:ec:95:47:2a:c9:11:7b:68:c6:b8:fb:94:d0:62:b9:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCE24D4E9D4DE179A93239E5972A0A48CBE24117
        Validity
            Not Before: Aug 24 15:00:40 2026 GMT
            Not After : Aug 25 16:42:40 2026 GMT
        Subject: CN=D7BE39717D532E07624CFC56907B10CE52F20053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:28:eb:01:a8:a5:bd:61:07:59:da:03:79:87:
                    db:fc:d0:55:80:14:a9:5b:de:23:74:f4:0c:50:08:
                    6e:db:2d:d0:2e:f6:a4:4a:95:7f:7e:f8:22:a1:fb:
                    3a:78:88:53:65:c4:f5:30:e8:a2:d5:75:e0:de:20:
                    e2:db:c0:87:5b:bd:d2:89:07:b5:29:4d:86:26:e4:
                    3d:59:92:c5:79:82:6f:62:40:8c:18:81:6f:fd:49:
                    fa:0b:9e:2f:4f:d4:ec:3e:7c:aa:c1:be:34:4d:25:
                    cb:58:a2:6f:79:f2:fd:7f:d6:6c:5a:91:9d:df:4f:
                    66:e5:e9:85:f6:0f:e8:d6:95:57:04:a2:6b:5c:a3:
                    a2:d5:90:c0:af:80:d0:ff:4c:3b:11:47:72:71:4d:
                    ef:0f:6f:7b:b9:9c:44:35:ff:df:a9:6a:89:34:04:
                    dd:6c:56:59:93:2c:c3:62:7e:bf:0f:ec:4c:50:83:
                    e8:be:20:1b:c2:0b:68:c0:28:c8:3a:73:8b:6a:ca:
                    15:b2:68:05:dd:b2:c8:5f:96:85:4f:96:8b:78:9b:
                    9a:a7:6c:65:eb:b2:dd:33:65:39:34:c3:ae:b5:d5:
                    dc:d3:17:48:fb:0f:f9:e8:90:b4:80:51:f1:a0:ba:
                    8f:00:6b:4c:22:95:07:97:7b:0f:7a:8a:83:32:72:
                    a1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BE:39:71:7D:53:2E:07:62:4C:FC:56:90:7B:10:CE:52:F2:00:53
            X509v3 Authority Key Identifier:
                keyid:DC:E2:4D:4E:9D:4D:E1:79:A9:32:39:E5:97:2A:0A:48:CB:E2:41:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:fa:0d:b2:39:02:bc:61:0f:a2:63:18:60:56:d0:04:42:c6:
         3d:0b:12:dd:eb:02:18:2b:fb:eb:03:af:aa:ca:d4:23:d2:18:
         33:de:e5:7c:51:fe:b8:2f:0a:12:33:3c:b6:1e:11:d4:9f:05:
         82:95:d2:29:1a:db:fe:f4:af:26:b1:7e:65:0b:1f:cc:da:af:
         4c:40:97:65:2e:d1:90:ed:2d:75:54:ae:55:10:aa:67:8b:8a:
         06:ed:03:ba:a9:8a:4d:2c:8a:7b:a4:5e:40:f3:74:7c:20:b1:
         a7:92:1e:a3:c5:93:b1:3b:09:1d:2e:ac:3e:d7:4a:03:40:6c:
         51:c8:2d:00:fe:ab:4d:97:2e:ae:64:0e:e3:47:aa:b2:f7:e9:
         41:10:a8:fe:a4:53:40:04:bc:e0:e4:a6:c8:f5:22:d0:12:77:
         35:6d:0b:87:f9:b1:da:49:16:64:0b:b2:e0:f8:b4:e8:4e:6d:
         37:99:5d:27:d4:90:42:c0:f0:17:2e:09:7d:d6:d1:c0:02:ff:
         53:9b:0a:10:b3:a3:d1:5e:18:bf:44:c6:75:88:9e:1f:cd:79:
         b6:a7:b6:b0:bf:7a:64:3e:51:3a:d3:a5:d6:5c:18:37:89:ad:
         35:6c:2f:7b:da:bb:4e:f7:4a:0a:48:59:fb:3e:c6:fe:20:04:
         b1:61:95:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 22:45:48 2026 by rpki-client