Error: rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.mft
File:                     A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.mft (raw, json)
Hash identifier:          D09PO6bWqrgOEpJRKw9sRoiemnb58nMacfkLWqnsbZ0=
Subject key identifier:   D7:5B:E1:6F:8E:4A:F3:4B:1F:FA:49:CF:71:31:A0:95:D7:2A:48:DF
Authority key identifier: A9:48:AB:96:F6:BB:7D:AC:2C:16:76:EF:BE:E8:D6:10:99:C6:1E:0A
Certificate issuer:       /CN=A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A
Certificate serial:       77E24AE3D1D7AB220F8B52A9D4DC6CBE4877509D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.mft
Manifest number:          0251
Signing time:             Sun 23 Aug 2026 05:47:22 +0000
Manifest this update:     Sun 23 Aug 2026 05:42:22 +0000
Manifest next update:     Mon 24 Aug 2026 09:11:22 +0000
Files and hashes:         1: A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.crl (hash: c+Bot2JwrTwRO+g6qZq+AvbwZR4fg/40NegePzanGM0=)
                          2: 3136382e39302e33362e302f32322d3234203d3e20323634323336.roa (hash: sfH7iliEnFn+lZOZmOIbMicXhpUjZ+FlDxfrILDs5K8=)
                          3: 323830343a323461383a3a2f33322d3438203d3e20323634323336.roa (hash: 7rglwH81TnEjxeWemCrfPaJn0/HGb2XvAJ6Zj37PSdc=)
                          4: 3133382e3131372e38382e302f32322d3234203d3e20323634323336.roa (hash: jRl6uCp1lXSdBu+elav8qJ1k4MyeTiN66tGuXLXGYMY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.crl
                          rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 09:11:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e2:4a:e3:d1:d7:ab:22:0f:8b:52:a9:d4:dc:6c:be:48:77:50:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A
        Validity
            Not Before: Aug 23 05:42:22 2026 GMT
            Not After : Aug 24 09:11:22 2026 GMT
        Subject: CN=D75BE16F8E4AF34B1FFA49CF7131A095D72A48DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0d:f8:55:e1:e7:f3:59:ad:3a:17:f8:7c:c6:
                    80:ac:4a:04:0d:87:0d:f3:bf:03:4e:25:a4:43:ef:
                    a1:64:6c:c6:6c:04:e5:fd:f4:72:cb:ca:c7:87:83:
                    50:64:b7:fc:0e:9d:ae:5a:56:a5:42:ce:57:00:23:
                    d6:d8:3a:56:be:b2:bf:f6:b7:c9:0c:64:f1:55:7b:
                    81:a1:40:34:79:0c:b5:9a:37:ab:f9:45:31:90:57:
                    15:b9:a0:c1:3b:cf:6d:f7:dc:ed:64:b6:8a:c7:fb:
                    69:3a:5e:26:2b:29:e2:cc:7e:09:f5:7d:f7:5c:44:
                    68:8f:64:47:35:cf:7e:51:ff:1d:9d:ad:d5:2e:e3:
                    fe:df:ce:02:24:e0:cc:2e:4a:5a:76:31:17:13:70:
                    ae:1d:02:7e:b5:3f:01:14:24:b8:59:3f:df:9f:45:
                    de:34:c9:67:cc:0d:75:a6:57:26:38:28:18:b3:53:
                    3a:65:4d:97:17:18:ee:47:5b:ec:35:e2:75:f7:12:
                    e1:36:0d:d2:6f:23:96:bc:ad:68:62:4b:b1:ce:f8:
                    84:04:9e:40:0b:61:88:9a:f7:d0:40:79:66:af:88:
                    3e:8f:e3:e3:62:3e:8b:66:dd:92:06:7e:ac:ef:01:
                    98:9b:69:d1:3a:36:e4:72:2f:aa:55:bf:b5:f9:e4:
                    b1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:5B:E1:6F:8E:4A:F3:4B:1F:FA:49:CF:71:31:A0:95:D7:2A:48:DF
            X509v3 Authority Key Identifier:
                keyid:A9:48:AB:96:F6:BB:7D:AC:2C:16:76:EF:BE:E8:D6:10:99:C6:1E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:aa:06:02:42:a6:2f:6e:bb:ac:f0:66:36:23:aa:ff:16:cb:
         2c:7b:16:b3:2c:cf:fb:ab:a4:64:ac:6c:32:78:d6:d5:55:87:
         2f:21:8e:e1:cc:0e:32:66:e7:73:2f:e5:a0:bb:a4:24:e8:97:
         24:25:82:dc:94:d9:a9:a2:5b:20:e7:c3:d0:4c:e7:35:05:06:
         a6:6c:91:7d:19:51:6c:fb:86:4e:01:c4:f5:e9:ea:69:3e:47:
         24:e9:f1:c9:b1:ff:57:f5:f7:5a:69:a4:bf:f7:ac:95:38:ee:
         8e:75:79:8c:38:7b:97:ce:16:99:b9:05:4c:88:76:85:f5:66:
         ef:a5:a6:85:30:62:73:0d:0b:0e:04:24:f5:6c:77:6e:6c:1c:
         08:02:f7:62:c5:78:8f:16:1c:6f:94:3b:4e:20:b3:89:69:66:
         35:02:31:cb:dc:38:93:ff:74:7a:80:c1:c6:bc:7a:54:02:bf:
         12:ee:0c:41:50:75:0b:54:57:93:8e:78:c0:a3:a5:19:10:3c:
         ff:7d:1d:67:dd:b8:e5:94:dc:80:c5:d0:86:bb:cc:98:38:32:
         4d:b0:bf:c8:33:cd:e5:70:c3:81:a5:d6:da:9b:69:f5:d1:b6:
         54:8f:f3:93:8d:da:e1:30:76:04:90:28:13:8c:c1:e4:10:65:
         80:8e:f4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:15:52 2026 by rpki-client