Error: rpki-repo.registro.br/repo/667u2mj7VArt4g9piWYeem843FYSqQnUvepTEXrCKTvL/0/4657C8918CAA2153B993BF7595B5A1411FE6F97E.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/667u2mj7VArt4g9piWYeem843FYSqQnUvepTEXrCKTvL/0/4657C8918CAA2153B993BF7595B5A1411FE6F97E.mft
File:                     4657C8918CAA2153B993BF7595B5A1411FE6F97E.mft (raw, json)
Hash identifier:          YnxcSzh9QPZjMWZtSDX1djITjJR6Jj73M3s+Y1oW/5E=
Subject key identifier:   70:7B:39:A7:2C:2C:DB:B3:18:B1:8D:24:B3:DD:2A:A2:D1:91:F2:79
Authority key identifier: 46:57:C8:91:8C:AA:21:53:B9:93:BF:75:95:B5:A1:41:1F:E6:F9:7E
Certificate issuer:       /CN=4657C8918CAA2153B993BF7595B5A1411FE6F97E
Certificate serial:       04AB0A41C8CA372F1AC5EE7C5D4165E8FB0B55B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4657C8918CAA2153B993BF7595B5A1411FE6F97E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/667u2mj7VArt4g9piWYeem843FYSqQnUvepTEXrCKTvL/0/4657C8918CAA2153B993BF7595B5A1411FE6F97E.mft
Manifest number:          95
Signing time:             Sun 23 Aug 2026 09:19:43 +0000
Manifest this update:     Sun 23 Aug 2026 09:14:43 +0000
Manifest next update:     Mon 24 Aug 2026 12:55:43 +0000
Files and hashes:         1: 323830343a373561383a3a2f33322d3335203d3e20323731303631.roa (hash: FY6D45xNsqjgnXPlfapubPI6gXNkbZVIVnj01shnbIQ=)
                          2: 34352e352e32342e302f32322d3234203d3e20323731303631.roa (hash: i7kNW0gFtl5Z3zo8HZpfaaOeA8HccX0b669LoV5k8UY=)
                          3: 4657C8918CAA2153B993BF7595B5A1411FE6F97E.crl (hash: b40EVeBS1ee6ZCjjebAPtgPsVmqMT705HkuOjuQCbGI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/667u2mj7VArt4g9piWYeem843FYSqQnUvepTEXrCKTvL/0/4657C8918CAA2153B993BF7595B5A1411FE6F97E.crl
                          rsync://rpki-repo.registro.br/repo/667u2mj7VArt4g9piWYeem843FYSqQnUvepTEXrCKTvL/0/4657C8918CAA2153B993BF7595B5A1411FE6F97E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4657C8918CAA2153B993BF7595B5A1411FE6F97E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 12:55:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ab:0a:41:c8:ca:37:2f:1a:c5:ee:7c:5d:41:65:e8:fb:0b:55:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4657C8918CAA2153B993BF7595B5A1411FE6F97E
        Validity
            Not Before: Aug 23 09:14:43 2026 GMT
            Not After : Aug 24 12:55:43 2026 GMT
        Subject: CN=707B39A72C2CDBB318B18D24B3DD2AA2D191F279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4f:ba:a8:83:7a:b1:bd:d8:18:d6:01:d2:4a:
                    3b:8a:fa:8c:6b:35:4f:ba:40:0e:8d:f4:dd:c0:ad:
                    f9:79:84:90:d2:1b:29:b6:12:86:dc:b3:22:85:c4:
                    fd:ba:8d:f4:79:5c:d7:99:6f:27:5e:92:81:9b:10:
                    f6:d5:71:91:ba:71:b7:46:a1:10:40:ba:03:65:c1:
                    59:2a:1b:66:60:06:8e:d5:1a:4b:f7:de:ed:c0:05:
                    94:37:fc:8f:f2:b1:47:90:ab:b7:ff:dc:f1:32:cd:
                    1f:79:a8:35:62:6d:22:1d:4d:e1:12:63:50:1a:65:
                    0d:5f:86:23:9d:95:2b:fd:5a:f7:44:ae:0f:ca:11:
                    d0:17:5c:4a:ea:46:a6:75:9f:56:f7:41:1f:ca:98:
                    0d:ab:60:1f:87:a5:6a:59:16:c5:64:a4:be:71:f8:
                    22:3f:c5:72:e0:44:4f:5b:f4:9b:5c:40:29:f8:bf:
                    47:d9:1d:50:90:a2:21:02:10:ab:7b:92:17:20:10:
                    09:78:0b:5d:b1:96:e9:6c:c2:d1:e1:2c:6e:cd:95:
                    55:ce:e3:cc:4f:07:d9:bb:24:fe:b0:b0:82:f1:62:
                    94:ab:32:df:0d:2e:b2:a3:31:25:a2:25:e5:5b:34:
                    8e:2a:d3:58:e3:f4:f9:a3:4f:67:5e:b7:fd:5d:6c:
                    33:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:7B:39:A7:2C:2C:DB:B3:18:B1:8D:24:B3:DD:2A:A2:D1:91:F2:79
            X509v3 Authority Key Identifier:
                keyid:46:57:C8:91:8C:AA:21:53:B9:93:BF:75:95:B5:A1:41:1F:E6:F9:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/667u2mj7VArt4g9piWYeem843FYSqQnUvepTEXrCKTvL/0/4657C8918CAA2153B993BF7595B5A1411FE6F97E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4657C8918CAA2153B993BF7595B5A1411FE6F97E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/667u2mj7VArt4g9piWYeem843FYSqQnUvepTEXrCKTvL/0/4657C8918CAA2153B993BF7595B5A1411FE6F97E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:b3:52:bc:8b:96:6c:ea:ec:99:c6:81:28:b9:41:bb:ef:66:
         f8:a3:0f:1a:98:c3:30:ff:fb:c3:47:2c:a2:f0:8b:64:f4:1d:
         f3:5c:4e:f7:3d:a0:13:bf:a7:00:19:82:db:8b:0d:54:96:16:
         7f:bc:7f:ad:b7:fa:40:cc:da:8a:ac:90:4c:59:b8:0f:92:73:
         e3:80:0e:07:4c:79:7d:93:af:5b:63:84:fb:89:e4:67:ba:97:
         62:ea:96:c7:4e:6c:ff:db:c3:b5:89:0f:3f:ad:c5:1b:c7:25:
         35:13:1c:f8:f5:3a:10:17:0c:ca:ae:a7:40:1f:ef:a3:d0:da:
         8c:2d:2d:37:ee:9e:03:a0:68:58:7c:6e:30:c1:ea:d4:81:e3:
         b3:a8:79:14:32:70:90:d4:08:fb:b6:1b:f9:e3:fa:cb:82:19:
         d3:e4:ed:a7:e9:cf:13:87:b1:6f:8e:55:5c:d0:70:fa:fe:15:
         23:77:d3:d9:38:e4:a2:3f:11:87:ed:b5:15:c1:52:28:e6:6a:
         73:96:ba:34:96:62:cd:28:5a:8b:11:b7:57:3a:41:c6:1e:10:
         e3:50:98:ca:e8:c7:6e:3a:52:b6:e4:56:ac:50:53:ef:2d:42:
         84:25:a4:e0:0c:f0:e1:06:67:87:1f:a1:ef:4a:f7:78:fa:b5:
         47:b9:a2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 01:21:56 2026 by rpki-client