Error: rpki-repo.registro.br/repo/4cZZ1U7qrCVsVkKrTnWzie9GTwEToKYb6WLBs699aQHv/1/E4F791204103C86901D987898EEC377E6C3EB8B7.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4cZZ1U7qrCVsVkKrTnWzie9GTwEToKYb6WLBs699aQHv/1/E4F791204103C86901D987898EEC377E6C3EB8B7.mft
File:                     E4F791204103C86901D987898EEC377E6C3EB8B7.mft (raw, json)
Hash identifier:          oNaGvXFCZ//w0LJQ1ZtXpzI1wp/gnmLjivLD6NM26Bc=
Subject key identifier:   37:06:1E:7D:82:0B:D7:70:76:A3:AD:82:9D:65:EB:A0:AC:B7:87:54
Authority key identifier: E4:F7:91:20:41:03:C8:69:01:D9:87:89:8E:EC:37:7E:6C:3E:B8:B7
Certificate issuer:       /CN=E4F791204103C86901D987898EEC377E6C3EB8B7
Certificate serial:       064404DA3DFF7B101CD145E91931C5D5573FE70A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4F791204103C86901D987898EEC377E6C3EB8B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4cZZ1U7qrCVsVkKrTnWzie9GTwEToKYb6WLBs699aQHv/1/E4F791204103C86901D987898EEC377E6C3EB8B7.mft
Manifest number:          0482
Signing time:             Sat 22 Aug 2026 12:38:18 +0000
Manifest this update:     Sat 22 Aug 2026 12:33:18 +0000
Manifest next update:     Sun 23 Aug 2026 14:22:18 +0000
Files and hashes:         1: 34352e3233342e3139322e302f32322d3234203d3e20323637333738.roa (hash: diKVb0TwAuH8C4RtgWWtIoyN6yaNGFpjVVbFNvXG5m8=)
                          2: E4F791204103C86901D987898EEC377E6C3EB8B7.crl (hash: pCKpFt+E46W83TyyARhaDJxokcZQh91HahlIUlvrvi8=)
                          3: 323830343a346339303a3a2f33322d3438203d3e20323637333738.roa (hash: lCt6cOV0+Pqm3RLBrlXPnHeA49mzvhPdkrbvCcwoD04=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4cZZ1U7qrCVsVkKrTnWzie9GTwEToKYb6WLBs699aQHv/1/E4F791204103C86901D987898EEC377E6C3EB8B7.crl
                          rsync://rpki-repo.registro.br/repo/4cZZ1U7qrCVsVkKrTnWzie9GTwEToKYb6WLBs699aQHv/1/E4F791204103C86901D987898EEC377E6C3EB8B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4F791204103C86901D987898EEC377E6C3EB8B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 14:22:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:44:04:da:3d:ff:7b:10:1c:d1:45:e9:19:31:c5:d5:57:3f:e7:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4F791204103C86901D987898EEC377E6C3EB8B7
        Validity
            Not Before: Aug 22 12:33:18 2026 GMT
            Not After : Aug 23 14:22:18 2026 GMT
        Subject: CN=37061E7D820BD77076A3AD829D65EBA0ACB78754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ff:f8:3e:81:96:bc:77:d6:89:8f:98:93:75:
                    43:5f:ce:ad:e6:4b:56:fa:79:9e:65:ff:b6:e9:ad:
                    9b:ae:83:d7:25:85:cf:a5:4d:c7:ac:ac:bd:cf:74:
                    73:49:5d:02:07:0e:d1:8f:6a:00:13:1c:b9:ff:66:
                    8c:08:d5:31:f1:f7:4c:50:2b:92:d1:6f:27:71:a6:
                    c6:08:ec:91:23:72:e0:bc:d6:de:0e:76:05:ed:7a:
                    f7:74:cc:31:3e:02:09:50:a7:ee:8a:d3:02:5f:ba:
                    15:83:f9:97:ab:6c:90:3a:c4:d7:02:03:da:7b:79:
                    66:92:12:e0:28:22:ac:74:42:73:8b:2e:89:d1:ec:
                    f1:48:f0:e8:d6:5c:c4:8d:bc:89:31:1b:3d:24:91:
                    86:a5:f0:47:2d:85:43:f5:e7:d8:42:8e:b6:6c:f1:
                    f6:86:31:fc:0f:c4:a8:77:ee:cc:06:5c:37:9c:af:
                    fe:e8:31:25:5a:25:2a:bf:1e:c6:a7:d6:9c:ea:e6:
                    d1:42:4d:11:9c:7d:a7:43:8c:7b:0b:89:54:e2:3b:
                    4a:f2:4f:86:12:b0:02:5c:15:e3:8b:24:ed:e6:96:
                    0e:1e:37:64:48:ac:28:27:7d:77:f3:b2:ff:15:c6:
                    03:2d:dc:fc:9f:33:18:bd:58:0e:aa:cf:e0:13:df:
                    33:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:06:1E:7D:82:0B:D7:70:76:A3:AD:82:9D:65:EB:A0:AC:B7:87:54
            X509v3 Authority Key Identifier:
                keyid:E4:F7:91:20:41:03:C8:69:01:D9:87:89:8E:EC:37:7E:6C:3E:B8:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4cZZ1U7qrCVsVkKrTnWzie9GTwEToKYb6WLBs699aQHv/1/E4F791204103C86901D987898EEC377E6C3EB8B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4F791204103C86901D987898EEC377E6C3EB8B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cZZ1U7qrCVsVkKrTnWzie9GTwEToKYb6WLBs699aQHv/1/E4F791204103C86901D987898EEC377E6C3EB8B7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:63:fe:55:78:9e:a7:59:22:a0:18:2f:64:29:b5:ec:d7:44:
         e0:60:84:a8:68:be:6f:8a:ce:d9:90:ff:c1:7b:da:c4:bd:6e:
         1f:61:88:bd:f6:80:c7:61:8a:3b:5b:54:20:fd:18:c6:79:0d:
         21:e0:50:cd:2b:8d:0b:d1:ed:f1:db:d3:d9:c2:82:80:2c:76:
         80:2d:2d:34:2a:4f:ee:eb:f4:0a:a4:c1:93:c5:52:23:ef:d5:
         cb:3b:98:02:3d:bf:e3:ea:d6:7a:fb:6b:d7:93:3b:54:9d:a6:
         32:0f:c9:4b:9f:b3:67:8f:a0:7e:20:98:98:66:05:a2:c1:60:
         5a:9d:fe:71:27:95:89:9c:06:f4:ca:81:31:ef:9b:21:c2:a6:
         3c:aa:a2:4f:49:03:fe:6e:11:31:48:7c:31:46:a0:4c:f0:22:
         c5:a4:f8:f9:25:0e:7a:9e:b5:2f:37:db:1d:ca:9c:67:27:2e:
         82:56:ac:cd:70:e9:00:a6:d5:b4:e5:53:5d:38:1d:8f:5f:99:
         ae:3b:08:6c:a6:92:62:b9:10:32:2d:47:df:e9:1d:20:7e:aa:
         ea:1f:33:cf:ef:5d:23:6b:e8:7a:1e:3d:31:49:9d:e2:5b:5a:
         a1:59:5b:0d:ec:88:ca:b5:98:05:ac:b4:27:5f:4b:90:25:44:
         3f:56:39:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 01:17:03 2026 by rpki-client