Error: rpki-repo.registro.br/repo/6kZg7zjHyeGPDXzMh6gmDAXKh6vEbYPpZMEhwHPjsZnB/0/36244827F02756DD24031B3B242555C70EB4D0C3.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/6kZg7zjHyeGPDXzMh6gmDAXKh6vEbYPpZMEhwHPjsZnB/0/36244827F02756DD24031B3B242555C70EB4D0C3.mft
File:                     36244827F02756DD24031B3B242555C70EB4D0C3.mft (raw, json)
Hash identifier:          p47j1s26QEZU+XOLatKe9NwL5sNnCUylV10j99nZi1Y=
Subject key identifier:   D5:53:23:C1:BE:2E:EC:06:7C:5C:97:41:19:93:21:35:92:62:C2:7F
Authority key identifier: 36:24:48:27:F0:27:56:DD:24:03:1B:3B:24:25:55:C7:0E:B4:D0:C3
Certificate issuer:       /CN=36244827F02756DD24031B3B242555C70EB4D0C3
Certificate serial:       0E5721ED4AA947F586CDA5C87D1B102C36F33B34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36244827F02756DD24031B3B242555C70EB4D0C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kZg7zjHyeGPDXzMh6gmDAXKh6vEbYPpZMEhwHPjsZnB/0/36244827F02756DD24031B3B242555C70EB4D0C3.mft
Manifest number:          0155
Signing time:             Tue 25 Aug 2026 04:37:45 +0000
Manifest this update:     Tue 25 Aug 2026 04:32:45 +0000
Manifest next update:     Wed 26 Aug 2026 08:21:45 +0000
Files and hashes:         1: 34352e3138382e3234302e302f32322d3234203d3e20323639353631.roa (hash: q3b368ZzCNZLfO6SwPa7rsF2rfDVHEdLx84ESBaPH4s=)
                          2: 34352e3138382e3234322e302f32342d3234203d3e20323639353631.roa (hash: r0ipxxUotswfPIaIlHvTRsdWksn91Gy49lwWepxyM5I=)
                          3: 34352e3138382e3234312e302f32342d3234203d3e20323639353631.roa (hash: b4frb7WeOMoPesHWLOLu42RxkSO6dq/SsLsT6or+950=)
                          4: 323830343a363637383a3a2f33322d3336203d3e20323639353631.roa (hash: j0tlNv6NLMv2Z9V5p29kFYzhTZBTiCuWQt3KPfF2y5g=)
                          5: 36244827F02756DD24031B3B242555C70EB4D0C3.crl (hash: gie0q1X2R0liBQ4+4vWANKTNviFoQcHoeGurLY7WIRs=)
                          6: 34352e3138382e3234302e302f32342d3234203d3e20323639353631.roa (hash: LRK2EqwotZooxW8hkQfg2TTGd8W4y3cM+Xp3XAP/Dsk=)
                          7: 34352e3138382e3234332e302f32342d3234203d3e20323639353631.roa (hash: 00sVIkNBrM8gkHJUJUkmx0r9LZTDz75BsXLnG0FQyns=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6kZg7zjHyeGPDXzMh6gmDAXKh6vEbYPpZMEhwHPjsZnB/0/36244827F02756DD24031B3B242555C70EB4D0C3.crl
                          rsync://rpki-repo.registro.br/repo/6kZg7zjHyeGPDXzMh6gmDAXKh6vEbYPpZMEhwHPjsZnB/0/36244827F02756DD24031B3B242555C70EB4D0C3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36244827F02756DD24031B3B242555C70EB4D0C3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 08:21:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:57:21:ed:4a:a9:47:f5:86:cd:a5:c8:7d:1b:10:2c:36:f3:3b:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36244827F02756DD24031B3B242555C70EB4D0C3
        Validity
            Not Before: Aug 25 04:32:45 2026 GMT
            Not After : Aug 26 08:21:45 2026 GMT
        Subject: CN=D55323C1BE2EEC067C5C9741199321359262C27F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c0:db:76:71:bf:7b:4a:b1:c4:88:4c:62:5a:
                    45:a0:2d:7a:a6:8e:ff:05:04:61:92:e2:bb:78:41:
                    ac:db:d0:39:f3:33:48:4c:da:5c:76:6a:d3:8b:cb:
                    8f:7e:77:ec:36:fe:7c:21:13:7d:74:41:db:3e:c7:
                    50:b8:97:f9:e8:67:a0:87:05:ef:a7:24:01:ad:9c:
                    b0:df:26:bb:9a:2e:57:35:4c:2e:d9:09:9d:e1:ac:
                    74:e3:bf:cf:b8:f3:e6:76:a1:7f:5f:ac:33:0d:78:
                    61:a2:7f:8e:b7:b8:c9:20:f6:ac:6b:8c:11:35:d0:
                    46:55:ca:2a:71:a6:fd:e0:38:a9:04:b8:d1:49:d1:
                    d3:f2:9d:f0:b1:cb:7a:43:a1:3e:40:3f:2c:6d:29:
                    45:34:b7:d6:97:56:4a:f7:33:81:b8:5e:3f:b4:eb:
                    da:06:d5:1a:47:74:4b:83:31:02:ed:66:3b:6e:d5:
                    06:38:04:e8:72:4e:29:d6:15:c8:df:ea:83:7d:ab:
                    f0:56:b3:2c:a9:ef:f5:54:7a:fa:38:e5:7f:00:9d:
                    6c:d1:49:3e:ce:b0:eb:1a:e5:20:77:62:2f:a4:42:
                    d9:0b:ce:d5:df:71:1f:fc:c2:fb:88:6d:27:f4:e5:
                    3f:53:a8:a5:09:3f:e2:f2:0e:39:7c:1e:e1:f7:05:
                    b5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:53:23:C1:BE:2E:EC:06:7C:5C:97:41:19:93:21:35:92:62:C2:7F
            X509v3 Authority Key Identifier:
                keyid:36:24:48:27:F0:27:56:DD:24:03:1B:3B:24:25:55:C7:0E:B4:D0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kZg7zjHyeGPDXzMh6gmDAXKh6vEbYPpZMEhwHPjsZnB/0/36244827F02756DD24031B3B242555C70EB4D0C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36244827F02756DD24031B3B242555C70EB4D0C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kZg7zjHyeGPDXzMh6gmDAXKh6vEbYPpZMEhwHPjsZnB/0/36244827F02756DD24031B3B242555C70EB4D0C3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:61:4a:07:7d:5b:da:10:74:8e:f7:6c:89:88:1d:38:da:05:
         4c:27:ef:b2:a7:25:0f:a0:fc:6f:80:85:e4:30:f4:d4:3d:a5:
         32:56:70:dd:dd:67:ed:0d:ee:40:89:38:29:3f:de:3a:bc:29:
         34:eb:00:91:27:24:98:f9:4f:b9:80:cf:ea:13:bc:94:00:cd:
         1e:e2:3d:2b:de:27:a3:a8:9d:d4:3a:64:6c:1c:1f:a7:de:b1:
         46:dd:0d:b5:83:53:a0:86:fa:de:4d:e3:aa:2c:4c:a4:80:77:
         63:63:8b:e0:4b:14:94:b3:1f:d9:c1:80:ba:f0:06:39:ed:62:
         e6:0a:72:f2:6e:30:57:3d:aa:9b:a5:ea:22:fa:48:de:53:3f:
         79:de:e0:d4:0d:e3:b3:b4:f8:52:a8:ee:4a:4c:9b:e7:14:40:
         6d:e6:34:37:46:63:2b:ae:8a:9f:4a:fd:ad:3c:e8:c7:2e:ee:
         43:00:d7:dd:53:0d:ac:e2:a5:ef:08:c4:c7:f6:a1:f6:95:94:
         1b:29:f4:19:41:3a:d6:e4:0b:50:d4:1f:22:6d:38:ac:62:7d:
         2b:58:eb:26:08:4f:17:44:cb:b9:ca:cd:5c:63:13:29:31:19:
         87:e4:6b:f1:4d:ea:d2:25:a9:66:6b:10:98:20:b0:b9:45:79:
         2c:15:a2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 18:13:50 2026 by rpki-client