Error: rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.mft
File:                     0E88601104C6C43AC785175C29585EFD06974620.mft (raw, json)
Hash identifier:          xBJNTtovYJplQFr0dm/jbT8mIc2aeLRTFdkvcW74OrI=
Subject key identifier:   3E:95:1E:E4:69:B1:F1:C5:A4:F0:C4:7E:B5:1D:75:53:BE:97:3E:9A
Authority key identifier: 0E:88:60:11:04:C6:C4:3A:C7:85:17:5C:29:58:5E:FD:06:97:46:20
Certificate issuer:       /CN=0E88601104C6C43AC785175C29585EFD06974620
Certificate serial:       2E4FA10ECEBC16C3D06363F39EF17FA338F6DCD8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.mft
Manifest number:          048A
Signing time:             Sun 23 Aug 2026 02:56:06 +0000
Manifest this update:     Sun 23 Aug 2026 02:51:06 +0000
Manifest next update:     Mon 24 Aug 2026 05:27:06 +0000
Files and hashes:         1: 323830343a323231303a3a2f33332d3333203d3e20323634353839.roa (hash: dLg9p7Df89AwEpxDVqrVvaVJKdz+MnFkdj4ndQjnyPw=)
                          2: 323830343a323231303a343030303a3a2f33342d3334203d3e20323634353839.roa (hash: QVZEEUvuASBobIYvcZXEcyblGIve/O6HdC0PAnpN9bY=)
                          3: 323830343a323231303a3a2f33322d3332203d3e20323634353839.roa (hash: yfUW6W51gVgX183DeLRc1Voe5ChFB3K1h9ffk3MeUJk=)
                          4: 3134332e3230322e3232382e302f32342d3234203d3e20323634353839.roa (hash: 9Wt7A92CXL3vEH6jsYnQpiUBwdK+WHO5j9keaccB8yk=)
                          5: 323830343a323231303a3a2f33342d3334203d3e20323634353839.roa (hash: IHZprTKidVZ/n0vg7yzKER/Rzcf+sBHMsZybxxyjgvQ=)
                          6: 323830343a323231303a383030303a3a2f33332d3333203d3e20323634353839.roa (hash: 86KhuW4r58Bd3ntJ3+W9VPub26mxDw3AeKe4X0bkqCg=)
                          7: 3133382e33362e3234322e302f32332d3233203d3e20323634353839.roa (hash: PqNE61e4F1B0vKhhiJ3XegrM9B6rGOxug9rrwb4JMts=)
                          8: 3133382e33362e3234302e302f32342d3234203d3e20323634353839.roa (hash: whoaC+XOIw1kGF2ALfHYWfX4whqCPUbI41JU5NG34Rc=)
                          9: 323830343a323231303a383030303a3a2f33342d3334203d3e20323634353839.roa (hash: qIDqj0+MHuylRVmWsfabBOl0J0WnaOV9Y2r+cNjI5Sc=)
                          10: 3133382e33362e3234302e302f32332d3233203d3e20323634353839.roa (hash: x8aoQh345D46XrrEkKWr+sO5VetAvHZwDROoQKzTWkU=)
                          11: 3134332e3230322e3232382e302f32332d3233203d3e20323634353839.roa (hash: E16ssuav1UAKZvVPg/EWwrhkoU7gOzT70npEprwSPRE=)
                          12: 3134332e3230322e3232392e302f32342d3234203d3e20323634353839.roa (hash: NZH8JK+wtjXPHaozpFxYc0ZIObBN1WtCIks2T+VQSrE=)
                          13: 0E88601104C6C43AC785175C29585EFD06974620.crl (hash: CNUVoZSVf6VL9BpZMXyN/Lxf1uJ9hn1g7SdbLrTFln8=)
                          14: 3134332e3230322e3233302e302f32342d3234203d3e20323634353839.roa (hash: 4/kgNAyYedFRPnGn88vu/zWqUqSISjPyIQmChDU0Bak=)
                          15: 3133382e33362e3234332e302f32342d3234203d3e20323634353839.roa (hash: FtAGgXAEldivajQhC5+Sv7fNXyeQl0gu3//CrMDDju0=)
                          16: 3133382e33362e3234322e302f32342d3234203d3e20323634353839.roa (hash: ZxdIl5zDrLkw+qU+pINxgGvgAlKofYyFXa7TVaqBBhA=)
                          17: 3134332e3230322e3233312e302f32342d3234203d3e20323634353839.roa (hash: Rj4+1oNkvSdq8bh6fUJQxDuIcEo4Z1dpt3MRraI/dEU=)
                          18: 323830343a323231303a633030303a3a2f33342d3334203d3e20323634353839.roa (hash: USFSRSRg5wT38uZzu20ChJimOR1k+gPhdnPh8S1gpDo=)
                          19: 3133382e33362e3234302e302f32322d3232203d3e20323634353839.roa (hash: KFwZYZpv1gDzY4a5wvFSmOFT3NqudiRXN5IdCv4wGRU=)
                          20: 323830343a323231303a3a2f34382d3438203d3e20323634353839.roa (hash: e7VUW51Qe8RbORRrvrIjXVSmVu58yH62vxi42/rnvF0=)
                          21: 3133382e33362e3234312e302f32342d3234203d3e20323634353839.roa (hash: Lz4AMiunibVplwV8gVU/DDRRYpcG/aOASOvGqNghPdI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.crl
                          rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 05:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:4f:a1:0e:ce:bc:16:c3:d0:63:63:f3:9e:f1:7f:a3:38:f6:dc:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E88601104C6C43AC785175C29585EFD06974620
        Validity
            Not Before: Aug 23 02:51:06 2026 GMT
            Not After : Aug 24 05:27:06 2026 GMT
        Subject: CN=3E951EE469B1F1C5A4F0C47EB51D7553BE973E9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a5:a7:9d:e9:be:01:14:19:8b:8c:20:e4:49:
                    63:bc:d2:ed:09:46:ea:9e:06:f5:24:39:50:4b:7b:
                    f3:13:1c:f4:28:ba:c9:bf:d7:f2:b5:87:cf:46:45:
                    e4:69:f5:5f:cb:17:2b:5c:48:64:67:d0:94:70:33:
                    56:9e:e0:1b:e8:d3:d6:5b:f1:91:1a:2f:fc:7d:c2:
                    54:ca:8f:54:aa:23:c1:9d:79:33:e8:6e:0c:a1:0e:
                    6e:c6:ce:4d:27:2e:fa:ca:01:f5:83:0a:cd:c8:f3:
                    26:d6:05:12:3a:ad:c5:de:02:c0:66:40:bc:31:73:
                    5c:70:4d:dd:cd:1e:69:06:a7:16:1a:4c:c5:c4:0c:
                    91:31:93:84:12:e2:88:4d:e3:d8:8c:aa:9c:11:04:
                    62:98:d4:a0:30:7a:50:ef:96:e9:e3:37:5a:3f:5d:
                    3f:17:00:92:98:09:e5:5a:a2:3e:c3:d3:ce:13:bd:
                    21:67:ff:b0:d8:f7:02:ba:9a:b2:bf:18:e6:f3:80:
                    67:a2:6c:66:42:33:4c:e9:db:b9:92:da:45:9d:7b:
                    7a:29:e0:e7:a2:ff:1a:eb:a9:17:07:13:00:3c:42:
                    a1:83:4c:d8:88:12:d6:3c:d0:7a:b2:e7:c1:fd:22:
                    35:c9:8b:27:e8:f7:37:88:57:43:c6:46:5a:2e:38:
                    7a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:95:1E:E4:69:B1:F1:C5:A4:F0:C4:7E:B5:1D:75:53:BE:97:3E:9A
            X509v3 Authority Key Identifier:
                keyid:0E:88:60:11:04:C6:C4:3A:C7:85:17:5C:29:58:5E:FD:06:97:46:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:9f:aa:31:3c:9b:77:c0:4d:b9:b9:69:4f:f0:49:96:cb:89:
         97:87:0c:63:4a:ee:ed:f1:0d:d1:6f:53:42:b0:33:a7:d0:67:
         97:e6:6c:f5:f9:4d:26:f3:a0:c6:04:6d:e0:6f:53:43:29:6e:
         b3:4b:f8:b0:06:b2:dd:ae:b4:28:0f:78:e5:2d:94:a6:e4:64:
         f8:96:03:ef:67:2c:64:cb:7b:11:a0:89:82:44:f5:2f:5d:db:
         68:ab:76:b3:72:9e:4d:d1:91:14:42:d6:bc:fc:f2:a1:78:74:
         e6:66:ff:30:b8:4f:27:0f:56:9d:40:a0:6a:cf:23:6b:69:c3:
         7d:c9:4b:1a:2f:a0:63:96:46:b8:2b:bd:d0:04:06:24:d6:99:
         f2:36:d8:a1:09:25:0a:4f:ae:2a:22:62:98:0f:b1:a0:a5:05:
         07:e0:30:38:e0:19:2f:c5:62:b9:02:93:c8:d7:ba:35:f0:a6:
         c7:9f:e4:28:a4:a5:35:43:d1:4e:11:fc:ab:40:20:5f:85:c5:
         b0:ef:6b:1e:c1:1e:68:f2:5d:fe:56:b6:58:f7:57:de:04:72:
         17:c7:a8:f4:9d:d8:0c:40:82:0c:cc:39:40:71:c6:d4:76:16:
         93:c8:c0:60:f7:ac:be:be:12:2b:f7:6c:6f:bb:d9:02:1b:f9:
         10:5f:4e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:05:07 2026 by rpki-client