Error: rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/1/E205EB197526993ADD700764E53493B3E4B2EEB8.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/1/E205EB197526993ADD700764E53493B3E4B2EEB8.mft
File:                     E205EB197526993ADD700764E53493B3E4B2EEB8.mft (raw, json)
Hash identifier:          PE13LdSpyJ+lURMFGZQPRN96DfqXeo4Mmqhpg0eqdPk=
Subject key identifier:   9D:8D:D0:DB:6E:79:EF:F2:C2:1C:AD:48:B4:A5:1B:CB:A7:EF:A8:88
Authority key identifier: E2:05:EB:19:75:26:99:3A:DD:70:07:64:E5:34:93:B3:E4:B2:EE:B8
Certificate issuer:       /CN=E205EB197526993ADD700764E53493B3E4B2EEB8
Certificate serial:       33B225905150DB0AAB5319BC5DF6395449E67A66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E205EB197526993ADD700764E53493B3E4B2EEB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/1/E205EB197526993ADD700764E53493B3E4B2EEB8.mft
Manifest number:          047F
Signing time:             Sun 23 Aug 2026 13:31:15 +0000
Manifest this update:     Sun 23 Aug 2026 13:26:15 +0000
Manifest next update:     Mon 24 Aug 2026 13:55:15 +0000
Files and hashes:         1: 34352e3137392e34302e302f32322d3234203d3e20323639303832.roa (hash: T73vgI6yXwB8rXpY68RURAengx9pqcYxh/eKsWhFfEw=)
                          2: E205EB197526993ADD700764E53493B3E4B2EEB8.crl (hash: qrcKGybUv4ZHaL4QVpG8caL7/hqVQJ8b3p/Q2SHHtwo=)
                          3: 323830343a356633303a3a2f33322d313238203d3e20323639303832.roa (hash: h/x665YZRICzTdy4jelZNeu8ftauMGTa9bxp59RoUk4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/1/E205EB197526993ADD700764E53493B3E4B2EEB8.crl
                          rsync://rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/1/E205EB197526993ADD700764E53493B3E4B2EEB8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E205EB197526993ADD700764E53493B3E4B2EEB8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 13:55:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:b2:25:90:51:50:db:0a:ab:53:19:bc:5d:f6:39:54:49:e6:7a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E205EB197526993ADD700764E53493B3E4B2EEB8
        Validity
            Not Before: Aug 23 13:26:15 2026 GMT
            Not After : Aug 24 13:55:15 2026 GMT
        Subject: CN=9D8DD0DB6E79EFF2C21CAD48B4A51BCBA7EFA888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:24:28:39:19:6e:8d:ac:3d:a8:61:d8:97:0d:
                    b1:f0:a2:39:48:f3:8f:b1:a1:c6:2a:e5:31:f3:03:
                    d4:a9:e4:bf:6f:0a:20:57:21:5d:12:0d:a9:6f:0d:
                    fe:13:a3:80:d5:66:3c:e6:ab:8e:f2:20:4e:bc:76:
                    5a:9e:10:83:fe:6c:78:24:8d:00:df:5a:fc:fe:6c:
                    16:36:ae:80:f4:8a:c1:a1:a5:8f:2b:e2:db:40:cc:
                    db:cc:77:8d:78:38:3e:59:12:41:37:fe:cd:ba:83:
                    1e:8c:92:47:93:eb:fc:2d:c7:4b:0d:02:8d:5d:c0:
                    6f:02:02:53:00:24:df:03:21:2e:09:29:a3:49:68:
                    1d:48:6d:c9:0d:9d:f3:50:02:2b:d2:8f:2e:f5:c1:
                    b0:01:40:f2:48:1d:6e:1c:66:06:b3:6a:74:21:8d:
                    9d:e5:eb:9d:b1:2e:ea:03:ba:47:e8:b3:4f:0c:2e:
                    2c:e8:05:d3:4d:4e:1e:f3:69:32:27:1e:75:ea:82:
                    1b:1f:4a:7d:63:15:ca:53:0e:e0:21:63:a0:e7:05:
                    a5:04:57:45:cd:de:fc:ac:8e:2f:88:ce:26:a5:04:
                    e4:e4:e0:18:52:48:c7:5d:a7:61:4c:f4:b6:25:bd:
                    30:45:7a:14:cc:28:5d:1d:09:51:df:e1:e6:83:d8:
                    38:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:8D:D0:DB:6E:79:EF:F2:C2:1C:AD:48:B4:A5:1B:CB:A7:EF:A8:88
            X509v3 Authority Key Identifier:
                keyid:E2:05:EB:19:75:26:99:3A:DD:70:07:64:E5:34:93:B3:E4:B2:EE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/1/E205EB197526993ADD700764E53493B3E4B2EEB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E205EB197526993ADD700764E53493B3E4B2EEB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/1/E205EB197526993ADD700764E53493B3E4B2EEB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:1e:d3:27:50:89:2c:f1:6c:1f:08:3e:37:ab:55:08:27:ac:
         c5:1c:0e:33:e3:d2:05:20:a6:6b:ce:f0:9b:d2:cc:60:d9:f5:
         76:cd:c5:08:2b:69:69:8d:99:cd:2c:cb:f1:76:e1:27:ae:5c:
         a3:4e:10:2c:13:aa:5f:ad:a6:0d:db:bb:c2:86:be:1a:e6:b3:
         cd:fd:44:f1:51:b4:c5:bf:bb:f8:1c:26:ff:68:95:3d:0a:4c:
         34:97:5b:93:c7:9c:51:3d:b1:9e:71:9d:39:c3:92:d7:8f:e1:
         48:45:d8:69:04:41:ff:45:7b:da:13:c3:ff:09:58:c7:86:94:
         22:ee:86:2a:de:87:f7:c1:94:83:75:75:82:3b:11:e5:de:f4:
         d6:7c:e2:b2:71:73:de:f7:37:de:2c:90:42:24:f2:66:ae:ec:
         01:77:71:69:bf:e5:88:b4:b6:e0:be:1e:11:ba:d9:23:23:59:
         fd:6c:da:70:24:36:2b:72:4c:df:44:72:24:03:6b:99:fe:b9:
         5f:fc:eb:0f:76:0a:81:8b:2d:c3:0f:b2:cc:65:93:58:c8:36:
         9b:9e:13:5b:65:99:2e:aa:da:62:e7:96:74:9b:83:77:63:37:
         f7:2e:07:1b:b4:16:97:f8:49:4d:63:1f:39:80:9c:d2:0f:9a:
         21:18:34:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:16:41 2026 by rpki-client