Error: rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.mft
File:                     D477F47EB674BB270E21D1DF467090789AFE23F1.mft (raw, json)
Hash identifier:          BUs4XdeP/MrIalkF2brdwiOEX7OX5qCl7KhKGCTm2H0=
Subject key identifier:   20:8D:2B:38:5D:26:A8:5F:6A:83:EF:EB:69:5E:E5:D9:7C:DE:3D:F5
Authority key identifier: D4:77:F4:7E:B6:74:BB:27:0E:21:D1:DF:46:70:90:78:9A:FE:23:F1
Certificate issuer:       /CN=D477F47EB674BB270E21D1DF467090789AFE23F1
Certificate serial:       7A26F5BFC47490ECEB7E00EC70F04D45A8B5F975
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D477F47EB674BB270E21D1DF467090789AFE23F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.mft
Manifest number:          0522
Signing time:             Tue 25 Aug 2026 20:00:00 +0000
Manifest this update:     Tue 25 Aug 2026 19:55:00 +0000
Manifest next update:     Wed 26 Aug 2026 20:00:00 +0000
Files and hashes:         1: 323830343a373931633a3a2f33322d3334203d3e20323731323835.roa (hash: pRLO03E/pKtp6Fgxs8x8CbPOUhPrdIrrVnmcqJGIwKc=)
                          2: 3230302e38302e3130342e302f32322d3234203d3e20323731323835.roa (hash: FzCGLrNvevqPx8mrdMdwtN3D84F7sXonIqpUijTk29g=)
                          3: D477F47EB674BB270E21D1DF467090789AFE23F1.crl (hash: eWRnP0V5/6F1e271Cg6uFUUWHlGuN6SNNWzCG61U5co=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.crl
                          rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D477F47EB674BB270E21D1DF467090789AFE23F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:26:f5:bf:c4:74:90:ec:eb:7e:00:ec:70:f0:4d:45:a8:b5:f9:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D477F47EB674BB270E21D1DF467090789AFE23F1
        Validity
            Not Before: Aug 25 19:55:00 2026 GMT
            Not After : Aug 26 20:00:00 2026 GMT
        Subject: CN=3082010A0282010100BBC78F0E8B49DCD064C9BE686532DA96C720BCA1539726EBE07DE870E5C3DE1AE79A129FC01D4F29EF5C42738832FD532FFE16ADAFA32575576BEA3EC006BA8E53BCDD9DE4D6DC36F8485EE3DE4A019225B5E2B5EBC96CD25C9B69C4B9C9B600DFDCF0572FD2B30D841F9A1FEC04D56053DEE0B79B071A19C28E96DB186444328A476ADBDA3B9C1D936AE32317E47A9F90DA4C77C646FDA3F8174FDC074DBD988F67DCC3A18C0F1934E57EE9BE8D2DC4869BBE755803611CC3CC204100FBEFC36B334305B1E35CB0EF4A81892DE34062340541B7A64B2EDE6F53AD94C03952889A644CC3B4F2FD2EC28DCE329A9A8D7D1208EF38D35D3D45429E53939FA50F3F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c7:8f:0e:8b:49:dc:d0:64:c9:be:68:65:32:
                    da:96:c7:20:bc:a1:53:97:26:eb:e0:7d:e8:70:e5:
                    c3:de:1a:e7:9a:12:9f:c0:1d:4f:29:ef:5c:42:73:
                    88:32:fd:53:2f:fe:16:ad:af:a3:25:75:57:6b:ea:
                    3e:c0:06:ba:8e:53:bc:dd:9d:e4:d6:dc:36:f8:48:
                    5e:e3:de:4a:01:92:25:b5:e2:b5:eb:c9:6c:d2:5c:
                    9b:69:c4:b9:c9:b6:00:df:dc:f0:57:2f:d2:b3:0d:
                    84:1f:9a:1f:ec:04:d5:60:53:de:e0:b7:9b:07:1a:
                    19:c2:8e:96:db:18:64:44:32:8a:47:6a:db:da:3b:
                    9c:1d:93:6a:e3:23:17:e4:7a:9f:90:da:4c:77:c6:
                    46:fd:a3:f8:17:4f:dc:07:4d:bd:98:8f:67:dc:c3:
                    a1:8c:0f:19:34:e5:7e:e9:be:8d:2d:c4:86:9b:be:
                    75:58:03:61:1c:c3:cc:20:41:00:fb:ef:c3:6b:33:
                    43:05:b1:e3:5c:b0:ef:4a:81:89:2d:e3:40:62:34:
                    05:41:b7:a6:4b:2e:de:6f:53:ad:94:c0:39:52:88:
                    9a:64:4c:c3:b4:f2:fd:2e:c2:8d:ce:32:9a:9a:8d:
                    7d:12:08:ef:38:d3:5d:3d:45:42:9e:53:93:9f:a5:
                    0f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:8D:2B:38:5D:26:A8:5F:6A:83:EF:EB:69:5E:E5:D9:7C:DE:3D:F5
            X509v3 Authority Key Identifier:
                keyid:D4:77:F4:7E:B6:74:BB:27:0E:21:D1:DF:46:70:90:78:9A:FE:23:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D477F47EB674BB270E21D1DF467090789AFE23F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:37:4c:ec:4a:a0:90:61:b0:29:69:30:9f:5b:f7:3a:7b:ef:
         ee:7d:9f:02:d8:ec:c7:76:68:96:a1:cb:ce:5a:8c:b6:28:b8:
         b4:b9:b4:6e:0f:94:65:d1:b0:53:cb:24:7f:f4:14:e2:bd:a4:
         c2:ce:7e:bc:81:b8:80:ea:9f:e7:23:8e:12:78:dd:d3:47:28:
         3d:a2:d7:48:87:61:ac:ba:8f:f1:df:84:be:0c:5c:93:db:53:
         63:8b:18:c3:97:74:63:1e:fa:27:d3:45:07:97:11:80:9f:f4:
         84:4e:e9:e6:0f:da:cb:0b:a1:fa:24:f7:8c:bf:44:22:98:5f:
         5d:73:ea:b2:6a:a5:f8:5e:9d:d0:5f:ea:01:c7:98:74:cf:91:
         ff:b5:6b:f8:fc:9b:06:84:59:2a:b1:9a:61:fa:95:57:5c:f8:
         c8:3b:78:52:a5:f7:ac:df:c3:85:b5:bc:6e:d5:24:14:b0:f8:
         91:0e:30:05:3e:94:e5:d4:80:44:ad:5a:08:0c:6f:78:19:e3:
         e5:b9:5f:03:5c:1c:a6:e1:c3:12:62:c0:ef:f3:6c:23:e8:95:
         0b:55:b9:6c:d5:76:d5:33:03:da:36:4e:d5:b1:51:57:f0:52:
         de:f7:76:52:a4:b2:6c:b4:1d:c6:f5:21:40:b7:58:12:7b:a7:
         82:11:54:1d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 26 02:56:32 2026 by rpki-client