Error: rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/2/2C560CEA37E6F47330059B729E295155CABC663F.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/2/2C560CEA37E6F47330059B729E295155CABC663F.mft
File:                     2C560CEA37E6F47330059B729E295155CABC663F.mft (raw, json)
Hash identifier:          3qyZWchHtmS7GPDKoSCjXQ06PkNYeNPmaQJg7nMGwik=
Subject key identifier:   49:80:69:3A:E5:BC:0B:E3:7A:90:DC:23:95:1E:E1:D3:D3:9E:AD:95
Authority key identifier: 2C:56:0C:EA:37:E6:F4:73:30:05:9B:72:9E:29:51:55:CA:BC:66:3F
Certificate issuer:       /CN=2C560CEA37E6F47330059B729E295155CABC663F
Certificate serial:       6BFF18CFCCA9F94A47CEE8EF542292FE4A8CFF47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C560CEA37E6F47330059B729E295155CABC663F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/2/2C560CEA37E6F47330059B729E295155CABC663F.mft
Manifest number:          5A
Signing time:             Sat 22 Aug 2026 18:04:06 +0000
Manifest this update:     Sat 22 Aug 2026 17:59:06 +0000
Manifest next update:     Sun 23 Aug 2026 21:22:06 +0000
Files and hashes:         1: 2C560CEA37E6F47330059B729E295155CABC663F.crl (hash: p0kmYZKSfuHd9dneqda03hlu3S7ynYQXwrY1j9emosU=)
                          2: 3230302e31312e3130342e302f32322d3234203d3e20323730343337.roa (hash: jmu4c+ENrUrhlUcTwqIrzrfY7ij7mEjJKm77EEZ4VP4=)
                          3: 323830343a366266383a3a2f33322d3334203d3e20323730343337.roa (hash: m1a2DQCLSJNldVIC851x9hfgNemiy4juAVAhqRCxYbE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/2/2C560CEA37E6F47330059B729E295155CABC663F.crl
                          rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/2/2C560CEA37E6F47330059B729E295155CABC663F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C560CEA37E6F47330059B729E295155CABC663F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 21:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ff:18:cf:cc:a9:f9:4a:47:ce:e8:ef:54:22:92:fe:4a:8c:ff:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C560CEA37E6F47330059B729E295155CABC663F
        Validity
            Not Before: Aug 22 17:59:06 2026 GMT
            Not After : Aug 23 21:22:06 2026 GMT
        Subject: CN=4980693AE5BC0BE37A90DC23951EE1D3D39EAD95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:53:f3:d1:0f:44:ae:f8:5f:df:e2:7e:a7:3c:
                    63:0c:84:43:60:fe:bb:cc:e0:68:e0:2d:7d:39:9f:
                    78:f9:d5:0b:86:92:17:27:44:d9:ab:b9:49:86:af:
                    a5:92:97:88:21:1b:36:f7:4d:6c:5f:04:d8:86:cc:
                    2c:be:01:bb:dd:72:f0:81:0b:99:9e:c9:ff:a8:1a:
                    3f:8c:cb:33:d3:27:b9:74:62:8b:c8:73:04:19:b2:
                    b0:6a:a7:6f:8d:3c:33:b3:39:d2:4a:85:60:7a:57:
                    f3:f2:e2:98:c9:a9:4b:3a:a0:af:01:e7:20:16:56:
                    18:6a:4b:2a:30:77:55:5e:7d:8d:4c:7c:26:cc:89:
                    b1:98:09:42:3b:d4:05:8a:c5:67:f9:6f:ff:71:e1:
                    10:a2:88:ae:96:f6:c9:5a:f5:39:ca:59:f1:b4:0c:
                    20:30:e6:23:52:15:c4:ef:1e:8c:9c:a6:5b:a8:dc:
                    3c:37:fb:4c:3f:d9:a9:5f:a7:5a:e7:f2:0f:48:13:
                    c2:5c:94:bd:04:e7:00:a3:08:74:62:3f:25:84:d1:
                    f4:55:6c:99:6d:e9:ab:49:78:f9:7a:18:08:83:12:
                    67:e3:bd:1b:c1:f1:66:a2:0a:a7:bf:88:88:6c:7f:
                    f9:ba:15:e0:a9:94:9a:d7:48:c7:5d:bc:1f:3a:7a:
                    d1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:80:69:3A:E5:BC:0B:E3:7A:90:DC:23:95:1E:E1:D3:D3:9E:AD:95
            X509v3 Authority Key Identifier:
                keyid:2C:56:0C:EA:37:E6:F4:73:30:05:9B:72:9E:29:51:55:CA:BC:66:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/2/2C560CEA37E6F47330059B729E295155CABC663F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C560CEA37E6F47330059B729E295155CABC663F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/2/2C560CEA37E6F47330059B729E295155CABC663F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:22:f0:43:e8:84:db:dc:a7:d7:5c:a6:2d:b3:9c:87:15:f7:
         a5:47:0d:b1:dc:a0:57:10:9e:11:7e:d7:cb:d2:f4:65:3b:3f:
         ae:fd:ff:ec:19:6c:89:3c:5a:c9:53:64:c0:79:c4:8d:1b:d2:
         02:17:5d:85:8d:2c:32:6d:5e:9b:09:42:62:be:41:76:50:52:
         1c:65:ff:86:ea:3d:1a:37:2b:1e:da:13:7d:a7:05:13:41:8f:
         5c:f9:2f:0a:04:ba:ca:94:03:50:5e:d9:61:fd:eb:92:b0:94:
         36:9b:b3:d0:bc:8b:9f:2c:2e:56:b7:ec:a8:51:d1:7a:ea:3b:
         1c:bd:29:2f:3c:11:e0:db:72:62:32:01:42:92:3b:10:a0:8b:
         de:57:8b:a7:4e:09:af:a1:8e:18:e1:f1:b3:a6:23:6b:a3:2e:
         29:70:33:c8:92:a0:49:1c:1c:9f:36:b6:10:85:2f:12:20:66:
         f5:ac:d8:ba:d0:ce:1e:06:96:a3:f9:d8:4b:84:a8:3f:4e:ec:
         93:4b:2a:7c:c1:89:92:6b:17:ea:1d:05:89:61:fa:f1:ff:06:
         4f:fc:10:0d:34:06:ae:de:8e:ec:7a:3e:58:f7:c0:4a:80:be:
         c0:2c:b2:fd:04:8a:49:3c:60:c6:97:3a:8a:fb:f5:3e:39:57:
         83:27:00:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 07:54:34 2026 by rpki-client