Error: rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.mft
File:                     FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.mft (raw, json)
Hash identifier:          Wpb9RDlxpiM0QToCZapks5FStDYvjtZn6tmwQLT2EAE=
Subject key identifier:   05:50:80:E0:0B:65:A5:8E:C9:D4:85:8F:CE:7C:0E:ED:8D:CA:75:79
Authority key identifier: FA:15:85:E4:2E:73:8E:E5:96:DB:2F:2B:97:0C:C3:CB:74:3B:D8:FC
Certificate issuer:       /CN=FA1585E42E738EE596DB2F2B970CC3CB743BD8FC
Certificate serial:       19E5616785BBD47131E4AD323BF2C35A9181A08C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.mft
Manifest number:          048A
Signing time:             Sun 23 Aug 2026 16:10:00 +0000
Manifest this update:     Sun 23 Aug 2026 16:05:00 +0000
Manifest next update:     Mon 24 Aug 2026 18:41:00 +0000
Files and hashes:         1: 3137372e32332e36342e302f32312d3231203d3e20323632383931.roa (hash: 1O+C4gKehoZbB1bzgM9P5Hl3u1YA7QbbPbBfTZuNlJA=)
                          2: 3137372e32302e3138342e302f32312d3231203d3e20323632383931.roa (hash: m+nssQYHrnXOq/hb0eyIYVP0zd1CutzVa1h16yS87XE=)
                          3: 3139312e3235332e37322e302f32312d3231203d3e20323632383931.roa (hash: 32MUjmMlipIQ5w66Tg0yyXCGK7iNkWxFA5S1Vz0pfXE=)
                          4: 323830343a6335303a3a2f33322d3332203d3e20323632383931.roa (hash: rY/AbGdTlh2PZKTUHZ0W9omjzqensEoBLVsBXZuCsrQ=)
                          5: FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.crl (hash: rN9VIYNfMAie058ghxt9ts2FSsatfAmB0mY0wzCijVQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.crl
                          rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 18:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e5:61:67:85:bb:d4:71:31:e4:ad:32:3b:f2:c3:5a:91:81:a0:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA1585E42E738EE596DB2F2B970CC3CB743BD8FC
        Validity
            Not Before: Aug 23 16:05:00 2026 GMT
            Not After : Aug 24 18:41:00 2026 GMT
        Subject: CN=055080E00B65A58EC9D4858FCE7C0EED8DCA7579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e1:7a:38:e6:2c:98:53:66:c3:86:22:d9:c9:
                    46:f9:50:6c:41:13:2f:f4:9a:65:3b:44:3e:78:71:
                    5f:e0:43:b8:e1:21:70:f1:97:a8:0e:b9:44:c0:44:
                    b4:40:9d:6c:e4:0c:cc:63:02:6f:60:ee:c1:d5:ac:
                    b6:66:e2:93:ca:cb:fd:de:37:14:60:fd:f4:01:1b:
                    10:b2:22:b1:32:16:62:7f:39:89:69:36:29:1e:cf:
                    82:63:ac:62:36:f0:8e:3e:79:16:22:5b:9e:45:b9:
                    26:21:a2:5d:89:23:0d:23:77:8c:79:fc:0b:54:1c:
                    b0:23:f9:5e:d3:14:b0:e2:0b:d8:3b:c2:23:89:4f:
                    46:99:db:4b:62:1c:32:10:cc:23:4f:5d:14:97:2d:
                    67:97:93:5f:28:b8:fa:57:29:0f:a9:5f:e2:48:30:
                    ff:c6:34:0d:00:7c:ef:3f:0e:83:af:0c:85:69:32:
                    09:52:90:89:0a:78:fa:d8:1d:f2:16:b1:e1:6c:48:
                    d1:bd:50:77:2f:06:c4:69:c1:7b:fb:68:3b:98:0f:
                    ad:e2:aa:a3:46:eb:20:46:65:14:b4:87:d2:20:5f:
                    91:5e:44:63:65:b6:98:9e:23:1e:0c:69:3b:c8:36:
                    6f:8b:82:ef:c8:fa:7d:db:39:9d:76:47:c5:f4:25:
                    41:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:50:80:E0:0B:65:A5:8E:C9:D4:85:8F:CE:7C:0E:ED:8D:CA:75:79
            X509v3 Authority Key Identifier:
                keyid:FA:15:85:E4:2E:73:8E:E5:96:DB:2F:2B:97:0C:C3:CB:74:3B:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:2f:81:59:1c:4e:04:d2:2a:91:23:73:87:93:be:5b:c0:0f:
         44:b2:79:f3:d9:39:06:21:ed:eb:b6:59:59:dc:a7:73:94:af:
         eb:c6:f3:f7:0d:a3:58:3a:89:cc:5f:26:e6:ae:c6:95:dc:ae:
         49:00:f4:27:05:12:4b:bf:71:d4:48:59:ac:77:d1:54:22:d6:
         22:7c:fb:7e:c5:c3:96:f8:30:f1:f8:6b:fc:2f:55:76:4a:85:
         93:50:18:d0:15:a6:c6:7f:69:7b:30:77:e6:05:fb:ba:56:61:
         a9:51:f5:a0:0f:22:7e:fe:94:ef:01:63:58:01:84:2b:a6:16:
         87:d2:8c:b5:de:6c:48:c4:85:62:4b:cf:af:b3:98:db:e3:69:
         29:e2:86:59:38:6e:6b:5f:a9:71:66:30:49:d1:4e:4c:e0:d8:
         d6:91:7a:71:29:dd:8a:c8:51:bb:ee:53:a4:94:b1:1e:cd:ac:
         24:e9:0d:43:c6:c5:62:b4:92:9a:f9:ab:79:ea:9a:a6:61:35:
         f8:d2:7c:c0:65:20:73:bc:2e:db:8e:0f:d4:54:ed:45:76:c6:
         f7:54:2b:59:0a:b1:87:3c:ee:99:ff:8a:1b:04:30:16:ea:6b:
         03:30:71:cd:f7:ec:cb:48:56:fc:19:3d:b4:ce:0f:48:e7:8b:
         71:4d:d1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 04:37:02 2026 by rpki-client