Error: rpki-repo.registro.br/repo/6zwou2pBNSuBJXMvVbp3BUt8JbAzFewaKwmC9NWkkw3E/0/982DA19AC0848799D2A301B47824DBA97B1A2364.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/6zwou2pBNSuBJXMvVbp3BUt8JbAzFewaKwmC9NWkkw3E/0/982DA19AC0848799D2A301B47824DBA97B1A2364.mft
File:                     982DA19AC0848799D2A301B47824DBA97B1A2364.mft (raw, json)
Hash identifier:          zsJmR84QdjwyRmEeIlLssCBEockgf6hTLfvNVRshNx8=
Subject key identifier:   A5:01:6A:79:3F:28:CB:1F:64:8E:D4:97:B7:2A:BB:F5:9C:A6:50:CD
Authority key identifier: 98:2D:A1:9A:C0:84:87:99:D2:A3:01:B4:78:24:DB:A9:7B:1A:23:64
Certificate issuer:       /CN=982DA19AC0848799D2A301B47824DBA97B1A2364
Certificate serial:       31002BE419F6032B9CCDCCA49B2C91FFD1FEA3A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/982DA19AC0848799D2A301B47824DBA97B1A2364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6zwou2pBNSuBJXMvVbp3BUt8JbAzFewaKwmC9NWkkw3E/0/982DA19AC0848799D2A301B47824DBA97B1A2364.mft
Manifest number:          3A
Signing time:             Sat 22 Aug 2026 18:22:28 +0000
Manifest this update:     Sat 22 Aug 2026 18:17:28 +0000
Manifest next update:     Sun 23 Aug 2026 21:49:28 +0000
Files and hashes:         1: 3138312e3139312e3133322e302f32322d3332203d3e20323637343234.roa (hash: 6wiGxMTXjvsQvktiiiy72uUWPbGAqhkXSYPa4QnhVPY=)
                          2: 323830343a343134343a3a2f33322d313238203d3e20323637343234.roa (hash: tgZ4VopM3img2Gz+ARBDvJaQr6bsppHTqiT1sFZuhE4=)
                          3: 323830343a336264303a3a2f33322d313238203d3e20323636313732.roa (hash: xY46l5QylFb62Zix0LAterhabTPKDDw5COVLT/gFsqo=)
                          4: 3136302e31392e3234382e302f32322d3332203d3e20323636313732.roa (hash: 9f0oFi/ZpXJ7QD77X3+z3uYD8LbthEoY8chloEIDekk=)
                          5: 982DA19AC0848799D2A301B47824DBA97B1A2364.crl (hash: fCB1YX8tBtLC4OLlw3pfEDoHb0/mFavNb/dCt6TwFhw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6zwou2pBNSuBJXMvVbp3BUt8JbAzFewaKwmC9NWkkw3E/0/982DA19AC0848799D2A301B47824DBA97B1A2364.crl
                          rsync://rpki-repo.registro.br/repo/6zwou2pBNSuBJXMvVbp3BUt8JbAzFewaKwmC9NWkkw3E/0/982DA19AC0848799D2A301B47824DBA97B1A2364.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/982DA19AC0848799D2A301B47824DBA97B1A2364.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 21:49:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:00:2b:e4:19:f6:03:2b:9c:cd:cc:a4:9b:2c:91:ff:d1:fe:a3:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=982DA19AC0848799D2A301B47824DBA97B1A2364
        Validity
            Not Before: Aug 22 18:17:28 2026 GMT
            Not After : Aug 23 21:49:28 2026 GMT
        Subject: CN=A5016A793F28CB1F648ED497B72ABBF59CA650CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d6:a3:8c:73:ed:d9:d8:ae:19:a5:0d:62:6a:
                    db:ae:89:97:80:58:e4:e1:08:b1:ab:9d:33:03:b0:
                    9f:c9:38:09:cd:88:29:91:54:d7:11:7e:06:ec:a3:
                    52:3c:b1:f6:91:8c:78:c4:41:0d:90:e9:25:f3:a5:
                    0c:68:35:2f:aa:84:1c:83:4a:7d:92:75:bc:82:f3:
                    6b:bd:21:8d:a6:ec:cd:2d:8b:6f:c6:95:7a:41:11:
                    da:c7:8f:c1:16:22:19:84:9d:69:08:82:37:5d:4b:
                    7d:72:3e:3b:45:ef:c4:fa:9c:0c:4a:e7:9f:ea:a0:
                    30:58:71:08:5f:6d:c6:b1:78:22:5d:4a:9d:7d:d8:
                    31:23:3c:2c:2b:4e:22:ba:d9:2e:57:1f:0f:a6:07:
                    c8:79:0c:bc:80:03:8e:4e:ec:06:ab:0f:b8:46:a4:
                    b4:28:54:21:0d:ff:6c:7a:9b:5b:37:9e:b8:28:3c:
                    a4:22:71:89:ba:8a:e8:df:9d:e2:69:c5:35:a6:68:
                    65:d0:5d:a7:f5:2b:04:4a:35:27:6d:63:74:6a:26:
                    af:f7:2b:09:d6:19:07:15:f7:79:f7:42:0e:06:72:
                    0b:f1:3f:2b:9a:95:68:0c:df:9e:d2:80:fb:41:60:
                    a8:2b:80:29:dc:71:3d:1a:e1:89:88:49:4f:17:d9:
                    a1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:01:6A:79:3F:28:CB:1F:64:8E:D4:97:B7:2A:BB:F5:9C:A6:50:CD
            X509v3 Authority Key Identifier:
                keyid:98:2D:A1:9A:C0:84:87:99:D2:A3:01:B4:78:24:DB:A9:7B:1A:23:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6zwou2pBNSuBJXMvVbp3BUt8JbAzFewaKwmC9NWkkw3E/0/982DA19AC0848799D2A301B47824DBA97B1A2364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/982DA19AC0848799D2A301B47824DBA97B1A2364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zwou2pBNSuBJXMvVbp3BUt8JbAzFewaKwmC9NWkkw3E/0/982DA19AC0848799D2A301B47824DBA97B1A2364.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:1e:3a:28:5c:b6:68:e2:b3:28:b3:9a:3b:bf:55:dc:9d:c9:
         f9:e5:80:94:f3:d9:bf:c7:a3:96:fc:97:a7:e3:63:48:31:1f:
         14:0d:ec:75:5f:34:7a:da:28:05:39:94:33:ac:38:d2:67:c2:
         40:c5:4b:3a:77:f6:0e:6d:18:05:94:86:76:b2:f8:02:60:fd:
         97:68:18:0e:fd:03:7f:d9:73:af:8d:68:92:b3:b9:f1:6b:b6:
         43:d7:eb:9a:33:98:a7:dd:52:06:1c:c9:56:0b:95:49:e8:94:
         e9:11:fb:f2:f7:ff:7b:7e:45:bd:8f:41:9e:eb:f4:e1:f3:c6:
         30:50:4d:13:c4:e2:9d:33:fd:ab:25:00:66:14:2a:a1:db:48:
         d8:3e:7f:8f:b9:08:f0:8f:b1:46:fe:b7:b2:19:b1:bc:2a:45:
         7f:fd:8a:8e:60:c0:0e:cf:de:b4:f0:ae:54:07:cb:8e:98:ff:
         a1:1f:53:b7:56:20:17:71:92:64:66:8d:bf:55:ad:82:0f:3f:
         17:c0:db:69:60:fc:24:46:6f:6a:2e:bd:95:0e:04:dd:44:55:
         06:9f:4e:08:aa:7f:9f:ff:7a:1e:3d:41:32:2b:de:49:38:8d:
         7b:00:9f:25:70:39:2e:6e:c5:74:73:af:86:f2:13:cd:d7:20:
         d7:83:d0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 05:59:05 2026 by rpki-client