Error: rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/E0E56E765738AF9709155514C8A4C6494D4155B3.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/E0E56E765738AF9709155514C8A4C6494D4155B3.mft
File:                     E0E56E765738AF9709155514C8A4C6494D4155B3.mft (raw, json)
Hash identifier:          KEv2TdHMr6Qh0Et37Z+VWE/VN5RMa28a8aDyeybUYeQ=
Subject key identifier:   F5:05:E4:D0:FC:10:4D:97:62:70:BA:10:D7:C7:3F:7B:3C:15:70:D5
Authority key identifier: E0:E5:6E:76:57:38:AF:97:09:15:55:14:C8:A4:C6:49:4D:41:55:B3
Certificate issuer:       /CN=E0E56E765738AF9709155514C8A4C6494D4155B3
Certificate serial:       6F9DE48C015965B12EC236802783F1AC1A3712E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0E56E765738AF9709155514C8A4C6494D4155B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/E0E56E765738AF9709155514C8A4C6494D4155B3.mft
Manifest number:          052B
Signing time:             Sun 23 Aug 2026 23:10:00 +0000
Manifest this update:     Sun 23 Aug 2026 23:05:00 +0000
Manifest next update:     Mon 24 Aug 2026 23:10:00 +0000
Files and hashes:         1: 34352e3138312e32362e302f32342d3234203d3e20323638323637.roa (hash: 9ylpsdOPHjRhH7hfFrG0BbM4lTJi9+LWY3v80gGmNUY=)
                          2: 34352e3233372e39322e302f32322d3232203d3e20323638323637.roa (hash: aieAQGcZ5bxzOaItSeWXJDyH7M2T7R0XNH01V4rdPME=)
                          3: E0E56E765738AF9709155514C8A4C6494D4155B3.crl (hash: 5d8v/RUVML9MpT0HtZis2pU+lezCZkhxArqgGBJywQQ=)
                          4: 323830343a346538383a313030303a3a2f33382d3338203d3e20323638323637.roa (hash: 6eZPPidfSXfQqEl+lajoqeeb/SexPraFtqZmAhfOMcM=)
                          5: 323830343a346538383a3a2f33322d3332203d3e20323638323637.roa (hash: 7pVG2Xe1wBi98wT5zA9++02AlaI0UL731PErxaJLoY8=)
                          6: 34352e3233372e39322e302f32322d3234203d3e20323638323637.roa (hash: 0xZqRn27RDektb9M3FbMszLy/Bp5ObEumFQ4RH7WlmA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/E0E56E765738AF9709155514C8A4C6494D4155B3.crl
                          rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/E0E56E765738AF9709155514C8A4C6494D4155B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0E56E765738AF9709155514C8A4C6494D4155B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 23:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:9d:e4:8c:01:59:65:b1:2e:c2:36:80:27:83:f1:ac:1a:37:12:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0E56E765738AF9709155514C8A4C6494D4155B3
        Validity
            Not Before: Aug 23 23:05:00 2026 GMT
            Not After : Aug 24 23:10:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:21:87:fd:d0:c5:82:0f:6c:82:51:7e:95:4b:
                    e8:df:23:f4:82:f5:c5:0e:cf:ee:5a:25:ba:83:d5:
                    c5:88:c1:17:e9:f7:25:29:e8:6c:49:7a:74:0f:72:
                    e7:79:8a:e4:6d:c2:01:09:43:07:8d:48:8f:76:4b:
                    7c:6a:a0:ed:e1:15:1d:8e:e2:6c:28:f7:95:85:92:
                    9b:cd:d7:6f:63:0b:14:76:70:af:c4:2a:58:3f:ec:
                    d9:eb:39:23:89:05:5a:05:f2:da:9e:2c:9c:94:a7:
                    a4:eb:fc:0c:ce:79:31:a6:92:cc:6d:ff:b3:af:d5:
                    b2:ae:d1:b1:bc:27:aa:66:20:f9:bd:21:5d:8b:ab:
                    69:2f:3f:3f:09:58:e4:0a:0c:da:72:f3:dc:51:5b:
                    f7:e0:e5:53:e2:11:29:84:c7:e6:86:a8:b2:db:63:
                    09:6c:75:a9:79:8e:18:d3:89:25:57:90:69:ad:86:
                    96:00:6b:a6:d6:33:d8:ad:a7:d7:d2:38:7c:a2:b2:
                    ea:ab:60:18:3f:8a:a0:e4:6f:8e:1b:96:79:8a:95:
                    6a:4b:87:66:a4:dd:87:a1:8d:9c:bc:e8:63:4a:68:
                    6c:28:05:6d:d6:34:1f:f7:cd:c1:6e:55:91:b8:a3:
                    f6:bc:9d:1d:64:b2:5e:cb:52:63:35:e1:b0:b3:66:
                    77:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:05:E4:D0:FC:10:4D:97:62:70:BA:10:D7:C7:3F:7B:3C:15:70:D5
            X509v3 Authority Key Identifier:
                keyid:E0:E5:6E:76:57:38:AF:97:09:15:55:14:C8:A4:C6:49:4D:41:55:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/E0E56E765738AF9709155514C8A4C6494D4155B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0E56E765738AF9709155514C8A4C6494D4155B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/E0E56E765738AF9709155514C8A4C6494D4155B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:4f:e7:c3:a2:b7:e8:b8:1a:ce:e0:27:2d:29:0d:81:e2:e7:
         db:3d:5b:88:0e:03:b0:fc:29:ba:c3:7d:16:d9:4a:a8:9b:8e:
         f2:80:db:36:bc:33:05:a9:b6:d6:38:a6:f0:29:44:3a:73:8a:
         70:e9:0a:71:2e:fc:09:c3:da:ea:03:dc:f8:98:22:da:4b:02:
         72:e9:81:6a:2a:b5:6b:a0:d8:20:d2:91:c7:07:e4:ae:aa:7e:
         46:81:c4:d6:d6:31:b9:f6:b7:0f:b1:54:f3:ce:8b:96:5f:6e:
         dd:21:1c:f8:01:90:ac:66:64:b8:6f:75:f0:23:eb:5f:a9:b6:
         a9:9c:38:d5:13:dc:33:71:11:52:aa:ac:18:23:8b:a4:f0:ba:
         4a:88:a4:2a:7e:7e:38:0f:23:fe:a6:f3:67:e2:a6:e2:fd:18:
         f2:d1:20:82:f8:cc:a1:7d:c4:21:e0:db:f6:86:ad:26:25:09:
         67:da:3f:ff:d3:fd:06:d2:70:8f:1e:55:9c:49:68:4c:c3:e7:
         92:cb:80:cc:3e:28:c1:ef:8a:26:f3:31:68:3c:10:f8:3f:db:
         91:d7:88:de:a7:d0:2a:8d:f5:2c:6f:5f:2a:e1:49:1c:e2:ce:
         1f:b3:11:b8:e9:e1:1a:3a:57:c9:36:2c:85:08:53:34:02:86:
         da:8f:76:28
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 24 01:29:45 2026 by rpki-client