Error: rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.mft
File:                     0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.mft (raw, json)
Hash identifier:          EYUwR+9LR7m/4oyWBUdtsq4D6h6783C32uQ0gBuj53c=
Subject key identifier:   19:E9:26:B5:0A:B2:98:29:19:CD:17:28:75:BF:B5:5E:5F:50:FE:94
Authority key identifier: 0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9
Certificate issuer:       /CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
Certificate serial:       3B244D13916F5D92E7CCEB39149DC5666A799D8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.mft
Manifest number:          048A
Signing time:             Sun 23 Aug 2026 13:50:00 +0000
Manifest this update:     Sun 23 Aug 2026 13:45:00 +0000
Manifest next update:     Mon 24 Aug 2026 15:15:00 +0000
Files and hashes:         1: 0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl (hash: p/sgjuDi6SJVhI7hvDkjCeOtMamHo5ZE7EM9JaEnCJ4=)
                          2: 323830343a333365633a3a2f33322d3332203d3e20323635343235.roa (hash: oWCB5UMnsM2tJOWmmB38pB9ddd15xa2+UN3PmjRY270=)
                          3: 3136382e3139352e33302e302f32332d3233203d3e20323635343235.roa (hash: LoIelVvsczA4GGxaVWkjpZku3YwfLzIc81GSGUpapAI=)
                          4: 323830343a333365633a383030303a3a2f33332d3333203d3e20323635343235.roa (hash: Qkyhj9uKXGJlfSWqLUNMQtaQmQKKcTwEm6GubbIZEm0=)
                          5: 3136382e3139352e32382e302f32322d3232203d3e20323635343235.roa (hash: jW+27qnBONQb3X6K4ukU8xWfFK21YUQvRVbQAkkEyug=)
                          6: 3136382e3139352e32382e302f32342d3234203d3e20323635343235.roa (hash: 0zr4HOWglDBMRBEvjEimG8Y3xElJAQKy0sYxjOEmiO4=)
                          7: 3136382e3139352e33312e302f32342d3234203d3e20323635343235.roa (hash: lN7KYt8FAhD4Ue2umu70mTWNaZQm9gko80XwRBNVTfQ=)
                          8: 323830343a333365633a3a2f33332d3333203d3e20323635343235.roa (hash: 0k2VUxdL6lDQwbpI4gzaD/Zxu9JRaNpS+atdvYHnU+U=)
                          9: 3136382e3139352e33302e302f32342d3234203d3e20323635343235.roa (hash: sMMtFRckJdFsWNqx+LB292CQ0yulmr/f/rIDHD4srPI=)
                          10: 3136382e3139352e32392e302f32342d3234203d3e20323635343235.roa (hash: UOQrhpiQuITGJrdHytgCUvS7V7IkjA/MO9R1MjW9ih4=)
                          11: 3136382e3139352e32382e302f32332d3233203d3e20323635343235.roa (hash: 0WbFphquhwaKDkLrOX1HCGuZhmRtLOXad0Tlkm7cH8o=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl
                          rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 15:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:24:4d:13:91:6f:5d:92:e7:cc:eb:39:14:9d:c5:66:6a:79:9d:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
        Validity
            Not Before: Aug 23 13:45:00 2026 GMT
            Not After : Aug 24 15:15:00 2026 GMT
        Subject: CN=19E926B50AB2982919CD172875BFB55E5F50FE94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ab:ad:7d:bd:24:99:97:68:e5:c0:5f:38:d8:
                    6f:a1:d9:2f:e9:0c:84:15:9b:71:31:49:b0:41:45:
                    bf:dd:1c:bf:1a:c1:84:53:c3:52:25:0a:a3:8b:3e:
                    14:eb:9f:fa:57:79:9b:79:80:64:5b:b4:21:f5:cc:
                    43:77:b7:54:e2:9f:2c:b8:77:88:1e:c4:dd:1b:dc:
                    a2:5e:b8:52:58:b4:52:45:72:be:c5:b9:f6:09:33:
                    8b:04:6e:a6:33:e9:58:4c:8c:3f:79:46:75:77:1a:
                    d6:e1:66:0f:ab:d2:29:32:60:84:25:e4:18:53:86:
                    ac:5c:54:22:60:85:e4:2f:0f:ec:85:50:d5:ff:08:
                    07:3d:2b:7e:08:dc:91:9c:72:2c:c7:13:52:4b:99:
                    5a:c9:4e:20:9b:d1:2f:51:77:51:df:c1:a7:a3:40:
                    cf:fd:72:91:d4:1f:f7:46:f0:c4:85:d2:75:2e:74:
                    dc:2b:e3:d3:2c:16:38:fa:59:da:c4:65:df:5c:af:
                    85:9f:c1:b8:63:a4:4b:c4:6a:fc:59:3c:8d:33:f8:
                    b4:4d:a4:66:69:90:ff:fb:38:c8:2b:33:c8:8c:b2:
                    00:bf:fa:a9:bc:91:2c:6c:ec:85:df:c8:8c:5e:51:
                    68:d1:3c:e7:b4:ff:7b:22:57:52:8f:a9:47:72:dd:
                    90:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E9:26:B5:0A:B2:98:29:19:CD:17:28:75:BF:B5:5E:5F:50:FE:94
            X509v3 Authority Key Identifier:
                keyid:0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:a9:3c:43:86:65:28:ad:4b:94:4d:51:48:b5:26:43:c7:63:
         97:c6:2e:bc:23:b6:e9:b1:47:ef:c8:6a:5e:cc:21:79:94:a0:
         2f:74:71:4e:2a:68:b3:47:c8:07:60:9c:3f:e7:5d:c3:74:cf:
         92:e7:c9:97:a1:da:e9:a7:68:3c:d9:fc:c2:f9:72:b6:e4:3c:
         9f:85:df:ec:6a:d0:cc:6e:de:cb:c6:f1:91:4a:15:8c:7a:ac:
         4d:4b:51:27:0a:6f:50:81:e8:6b:07:28:09:7f:79:5a:94:b3:
         b1:ec:32:19:44:48:7a:02:15:c1:ae:4b:1f:bb:5f:b3:08:85:
         21:9a:80:16:df:1f:d4:d2:ef:11:6b:1d:4f:72:ab:06:1d:4a:
         86:96:1d:ca:14:7b:32:1e:f8:f8:e6:37:73:24:b4:bf:5f:0f:
         2b:69:68:7d:fe:3a:96:cf:a4:20:1a:30:89:43:39:bb:04:27:
         76:33:a5:4d:63:09:18:cf:ca:26:fe:5d:07:e4:da:c0:38:0b:
         b2:aa:51:75:40:d9:f4:23:46:20:7a:d6:e6:da:5f:05:44:5f:
         7c:60:fa:97:fa:f7:21:f1:1e:e2:94:bd:b4:99:20:19:40:8d:
         c8:57:a3:80:7c:bf:c7:62:7b:77:08:87:82:62:ea:a1:07:e2:
         64:6f:0c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 03:29:34 2026 by rpki-client