Error: rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.mft
File:                     B191DF220BC62DB6A525C9A4D6A09F762F806D45.mft (raw, json)
Hash identifier:          vkIQ7xFoYMv77HG6SSxNG0AG5P50Uv2OPD1Pnfc+sq8=
Subject key identifier:   DB:A5:62:75:BE:87:BF:EA:65:78:49:CE:71:97:8E:72:6A:74:F5:71
Authority key identifier: B1:91:DF:22:0B:C6:2D:B6:A5:25:C9:A4:D6:A0:9F:76:2F:80:6D:45
Certificate issuer:       /CN=B191DF220BC62DB6A525C9A4D6A09F762F806D45
Certificate serial:       7C79750AF54DBAD31887FBA13D4F3E187E8FB799
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.mft
Manifest number:          047C
Signing time:             Sat 22 Aug 2026 19:52:02 +0000
Manifest this update:     Sat 22 Aug 2026 19:47:02 +0000
Manifest next update:     Sun 23 Aug 2026 22:59:02 +0000
Files and hashes:         1: 323830343a376530343a3a2f33322d3334203d3e20323731353937.roa (hash: ERY7fX2dsrKpFlE8bq7J/GcWuqcAKTCxzmCk9TGWSMo=)
                          2: B191DF220BC62DB6A525C9A4D6A09F762F806D45.crl (hash: ywMgKEV0mGbUKwgOClRMOxRkCEzs3RcJ0u8ST8Jzh4w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.crl
                          rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 22:59:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:79:75:0a:f5:4d:ba:d3:18:87:fb:a1:3d:4f:3e:18:7e:8f:b7:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B191DF220BC62DB6A525C9A4D6A09F762F806D45
        Validity
            Not Before: Aug 22 19:47:02 2026 GMT
            Not After : Aug 23 22:59:02 2026 GMT
        Subject: CN=DBA56275BE87BFEA657849CE71978E726A74F571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2c:e9:ff:9c:91:55:6a:b4:a6:83:33:a5:2e:
                    0f:95:38:51:56:d0:d6:19:dc:9c:ec:66:b5:84:27:
                    8a:0a:d0:d1:59:c2:12:3a:c4:aa:de:d1:71:be:0d:
                    f2:54:b8:75:65:08:30:69:c1:be:19:96:38:83:3f:
                    92:b3:6c:2f:55:54:a5:43:00:8d:f1:21:bc:9e:09:
                    41:34:c9:b6:c5:ee:3c:60:09:36:a6:f5:9c:a4:05:
                    51:5b:db:7a:71:4a:c0:6d:ab:65:16:9f:92:08:ba:
                    9a:e2:f4:ed:e2:a5:86:53:b1:d9:5c:c1:b2:ed:de:
                    36:e4:fd:74:a9:af:63:d3:91:23:cf:0f:64:7b:c4:
                    05:a6:f2:4e:27:82:ce:d7:a2:79:db:fd:08:9f:2d:
                    78:f4:7a:44:39:4a:6a:91:93:04:15:d5:eb:a9:d7:
                    5a:35:27:02:cf:1a:5b:6f:12:40:5e:27:c2:9f:06:
                    ec:10:5c:cd:2f:5e:27:f8:16:56:6d:eb:66:e9:e0:
                    3f:6e:6c:f1:d8:11:88:a8:4c:b3:08:9e:a0:e4:83:
                    84:61:12:f0:b2:7e:29:23:a9:53:4f:0b:59:77:2e:
                    65:be:80:af:36:57:79:20:1f:d6:be:2f:9d:22:c0:
                    72:43:eb:a5:38:89:68:c6:ee:ad:8b:13:60:65:ee:
                    05:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A5:62:75:BE:87:BF:EA:65:78:49:CE:71:97:8E:72:6A:74:F5:71
            X509v3 Authority Key Identifier:
                keyid:B1:91:DF:22:0B:C6:2D:B6:A5:25:C9:A4:D6:A0:9F:76:2F:80:6D:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:5c:fd:ca:60:eb:09:16:51:00:cb:0f:18:ab:b6:06:31:db:
         76:77:29:47:31:4f:82:f2:d8:2e:83:09:92:83:51:f6:d9:cc:
         98:17:43:d1:e3:f8:28:6e:66:a0:5c:3f:c4:2b:21:63:4f:0c:
         d8:4f:c6:0f:1f:b5:60:d1:f7:37:77:10:23:bd:22:7b:0a:aa:
         a3:b3:67:de:39:e2:1a:b0:26:4f:8e:96:98:a3:8f:00:ec:da:
         bf:47:c6:12:c7:e8:8d:a9:50:3c:de:2b:fe:1f:ca:88:c1:f2:
         12:15:7d:b3:8f:45:40:91:91:62:3d:3f:6a:ea:4b:63:f2:5e:
         a1:64:83:b0:81:1e:f8:fd:ae:57:55:88:5b:27:33:85:cd:2c:
         31:49:d4:0d:40:a3:9a:a7:99:32:e8:8d:40:f0:f7:e8:ac:23:
         af:b4:24:7c:8e:77:0a:80:e0:32:66:38:2f:99:4a:72:fb:77:
         0f:c1:d4:b7:fa:9d:83:05:ce:4a:83:44:d0:5a:33:e1:61:02:
         dc:fb:63:5c:22:fd:20:0e:23:ee:f0:45:3e:a8:2b:b6:38:c3:
         3a:29:43:57:d6:5b:9f:fc:2a:91:fb:09:63:0f:48:50:fc:e8:
         e7:b8:f9:52:de:00:5f:aa:63:b5:b2:4d:81:9e:c3:b0:dd:77:
         c2:d5:27:cd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfHl1CvVNutMYh/uhPU8+GH6Pt5kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjE5MURGMjIwQkM2MkRCNkE1MjVDOUE0RDZBMDlGNzYy
RjgwNkQ0NTAeFw0yNjA4MjIxOTQ3MDJaFw0yNjA4MjMyMjU5MDJaMDMxMTAvBgNV
BAMTKERCQTU2Mjc1QkU4N0JGRUE2NTc4NDlDRTcxOTc4RTcyNkE3NEY1NzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGLOn/nJFVarSmgzOlLg+VOFFW
0NYZ3JzsZrWEJ4oK0NFZwhI6xKre0XG+DfJUuHVlCDBpwb4ZljiDP5KzbC9VVKVD
AI3xIbyeCUE0ybbF7jxgCTam9ZykBVFb23pxSsBtq2UWn5IIupri9O3ipYZTsdlc
wbLt3jbk/XSpr2PTkSPPD2R7xAWm8k4ngs7Xonnb/QifLXj0ekQ5SmqRkwQV1eup
11o1JwLPGltvEkBeJ8KfBuwQXM0vXif4FlZt62bp4D9ubPHYEYioTLMInqDkg4Rh
EvCyfikjqVNPC1l3LmW+gK82V3kgH9a+L50iwHJD66U4iWjG7q2LE2Bl7gXjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU26Vidb6Hv+pleEnOcZeOcmp09XEwHwYDVR0j
BBgwFoAUsZHfIgvGLbalJcmk1qCfdi+AbUUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkd3N2ZNM3Bpa002YVRRSmdMWTlCWDV5MkN2and4d0RnUjNwUUxUWVdM
eHUvMS9CMTkxREYyMjBCQzYyREI2QTUyNUM5QTRENkEwOUY3NjJGODA2RDQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxOTFERjIyMEJDNjJEQjZB
NTI1QzlBNEQ2QTA5Rjc2MkY4MDZENDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Nkd3N2ZNM3Bpa002YVRRSmdMWTlCWDV5MkN2and4d0RnUjNwUUxUWVdMeHUvMS9C
MTkxREYyMjBCQzYyREI2QTUyNUM5QTRENkEwOUY3NjJGODA2RDQ1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATFz9ymDrCRZRAMsPGKu2BjHbdncpRzFPgvLYLoMJkoNR9tnMmBdD0eP4KG5m
oFw/xCshY08M2E/GDx+1YNH3N3cQI70iewqqo7Nn3jniGrAmT46WmKOPAOzav0fG
EsfojalQPN4r/h/KiMHyEhV9s49FQJGRYj0/aupLY/JeoWSDsIEe+P2uV1WIWycz
hc0sMUnUDUCjmqeZMuiNQPD36Kwjr7QkfI53CoDgMmY4L5lKcvt3D8HUt/qdgwXO
SoNE0Foz4WEC3PtjXCL9IA4j7vBFPqgrtjjDOilDV9Zbn/wqkfsJYw9IUPzo57j5
Ut4AX6pjtbJNgZ7DsN13wtUnzQ==
-----END CERTIFICATE-----
Generated at Sun Aug 23 15:17:23 2026 by rpki-client