Error: rpki-repo.registro.br/repo/5YNaAuts3DuZd2n3bps9ausCi4pCDoxNB35R3aCtptFH/0/44AA67B8361484903B52C5717C3AC07266651DDA.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5YNaAuts3DuZd2n3bps9ausCi4pCDoxNB35R3aCtptFH/0/44AA67B8361484903B52C5717C3AC07266651DDA.mft
File:                     44AA67B8361484903B52C5717C3AC07266651DDA.mft (raw, json)
Hash identifier:          O99LCjkghO8zYgZhJAwOarRvmzglQQ8h89EXmbrfkn4=
Subject key identifier:   7C:FA:95:0A:23:0F:E7:CE:9B:60:4F:20:F2:C1:C1:1B:28:AA:EC:47
Authority key identifier: 44:AA:67:B8:36:14:84:90:3B:52:C5:71:7C:3A:C0:72:66:65:1D:DA
Certificate issuer:       /CN=44AA67B8361484903B52C5717C3AC07266651DDA
Certificate serial:       057344ECD81C1832E020A9363FB9E7AB0F0BE721
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44AA67B8361484903B52C5717C3AC07266651DDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5YNaAuts3DuZd2n3bps9ausCi4pCDoxNB35R3aCtptFH/0/44AA67B8361484903B52C5717C3AC07266651DDA.mft
Manifest number:          78
Signing time:             Sun 23 Aug 2026 03:01:18 +0000
Manifest this update:     Sun 23 Aug 2026 02:56:18 +0000
Manifest next update:     Mon 24 Aug 2026 05:52:18 +0000
Files and hashes:         1: 44AA67B8361484903B52C5717C3AC07266651DDA.crl (hash: 1V3Ow2vGM0ntBlwIAfF8x3vQjn5vovdOdyBT1pSO2U4=)
                          2: 323830343a386461383a3a2f33322d3332203d3e20323733333731.roa (hash: dUSclG3hcnvmzCtZad0ztte8VuntvaZbq6OAKVQlXpg=)
                          3: 3137372e39312e302e302f32342d3234203d3e20323733333731.roa (hash: I+ai2zrryIB3jm/ZyUhGUCYdlQNlYlsJoBGvwg5y1Qk=)
                          4: 3137372e39312e302e302f32322d3232203d3e20323733333731.roa (hash: FJNudzw+KP3HO+d7mgZJJmAc6MZm7EnyiN6jQ/uu1fQ=)
                          5: 3137372e39312e332e302f32342d3234203d3e20323733333731.roa (hash: 4rJ2qZ0yZt79f8SRQfm6ezLUKfXsSzqk254BIL2m0NE=)
                          6: 3137372e39312e312e302f32342d3234203d3e20323733333731.roa (hash: b+vlEn9PV+UPgjfoB6HaIT2kxWoQSIFG9HMDR0ANizg=)
                          7: 3137372e39312e322e302f32342d3234203d3e20323733333731.roa (hash: 3uxyq/H6+IL4AqA8WdQh52Drrhs8STO5IL5xDQRr1PY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5YNaAuts3DuZd2n3bps9ausCi4pCDoxNB35R3aCtptFH/0/44AA67B8361484903B52C5717C3AC07266651DDA.crl
                          rsync://rpki-repo.registro.br/repo/5YNaAuts3DuZd2n3bps9ausCi4pCDoxNB35R3aCtptFH/0/44AA67B8361484903B52C5717C3AC07266651DDA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44AA67B8361484903B52C5717C3AC07266651DDA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 05:52:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:73:44:ec:d8:1c:18:32:e0:20:a9:36:3f:b9:e7:ab:0f:0b:e7:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44AA67B8361484903B52C5717C3AC07266651DDA
        Validity
            Not Before: Aug 23 02:56:18 2026 GMT
            Not After : Aug 24 05:52:18 2026 GMT
        Subject: CN=7CFA950A230FE7CE9B604F20F2C1C11B28AAEC47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9f:bd:2b:8a:f9:3f:31:93:c2:55:f0:23:22:
                    6f:69:74:65:83:83:74:a7:4d:4b:e1:84:71:67:61:
                    8f:cb:7d:4f:fc:96:bb:31:c4:da:5e:69:c4:4f:db:
                    33:62:3d:7e:1b:2e:42:95:85:5a:5f:cf:a8:8c:fe:
                    ea:e4:a5:7e:a9:6d:5c:4e:4a:dc:34:b0:56:c9:0a:
                    9f:fd:8b:8c:7d:ce:9d:6d:b8:f0:db:70:d1:08:90:
                    d4:ab:52:cb:ee:d5:9d:69:2b:8c:45:ae:ec:12:89:
                    bb:1f:e3:b5:65:2b:20:cc:37:08:14:b7:f3:9a:0b:
                    6b:ba:e1:a5:39:06:a9:6e:27:fc:79:14:46:fb:58:
                    1a:7e:b9:62:91:56:ed:44:b4:cf:9b:a4:00:1d:e3:
                    7a:b6:fc:45:34:4b:e4:fb:c0:8a:ca:e8:28:b8:77:
                    3f:bf:62:8b:4b:81:1f:50:c7:75:27:38:52:8e:c8:
                    a0:ef:02:66:5a:18:42:f7:06:8e:b3:83:44:5c:5c:
                    d9:aa:75:69:5a:96:71:ca:cf:44:e3:fe:aa:ea:8b:
                    03:84:7a:f3:ad:67:73:e7:ef:75:b0:ed:52:0d:22:
                    3a:f2:ed:a3:22:f2:50:84:b9:7e:77:cc:1b:43:5d:
                    86:87:a8:28:a7:bd:f6:21:19:1a:8c:ad:0d:3e:9d:
                    8f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:FA:95:0A:23:0F:E7:CE:9B:60:4F:20:F2:C1:C1:1B:28:AA:EC:47
            X509v3 Authority Key Identifier:
                keyid:44:AA:67:B8:36:14:84:90:3B:52:C5:71:7C:3A:C0:72:66:65:1D:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5YNaAuts3DuZd2n3bps9ausCi4pCDoxNB35R3aCtptFH/0/44AA67B8361484903B52C5717C3AC07266651DDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44AA67B8361484903B52C5717C3AC07266651DDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5YNaAuts3DuZd2n3bps9ausCi4pCDoxNB35R3aCtptFH/0/44AA67B8361484903B52C5717C3AC07266651DDA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:9e:52:db:bc:ea:8d:81:e4:e4:c9:15:ed:56:2a:31:56:bc:
         26:fd:6d:ec:41:06:82:72:c7:c2:12:24:99:75:25:8d:8e:a7:
         0f:05:6f:0a:1f:5b:61:50:42:a1:dc:9e:56:06:e7:eb:12:fd:
         85:48:34:4b:65:de:a3:6c:a7:79:a5:a6:48:f1:d4:d5:1a:67:
         56:57:7a:28:1f:4d:f4:c9:6f:b5:12:67:5c:51:a2:21:ad:ba:
         df:0d:99:1e:42:c8:48:17:04:3a:ad:e3:6f:fd:fa:9c:db:d6:
         d0:f9:3e:9d:14:b8:36:f1:05:e2:07:fc:24:63:82:61:f2:64:
         8f:ca:c0:d0:bc:9c:7d:aa:bc:4d:a3:38:37:7c:53:2c:e5:e8:
         07:09:71:5a:23:3e:69:bc:b0:7d:ac:f3:92:8c:d8:28:38:18:
         fe:7a:70:41:5c:c6:1f:5f:62:88:15:16:13:cb:e2:d1:4a:d3:
         2f:9d:54:46:bb:1a:0a:00:5a:3c:ad:31:9e:51:7a:47:db:e7:
         e2:a4:31:81:15:db:e2:cd:e8:59:94:ee:7f:73:a0:f4:5a:d1:
         63:64:32:0d:99:42:28:1d:40:45:39:91:d1:44:07:b4:2a:83:
         03:32:97:f9:ca:81:e5:6d:24:91:fb:ac:50:53:92:78:d5:48:
         51:1e:a1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 15:09:18 2026 by rpki-client