Error: rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/EAB467368870DA703732D42A059330F5218787CD.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/EAB467368870DA703732D42A059330F5218787CD.mft
File:                     EAB467368870DA703732D42A059330F5218787CD.mft (raw, json)
Hash identifier:          IBscca0zwlV7TqmknxTaF9a4/5F5PKRy+5/OfC+/wzM=
Subject key identifier:   B7:9A:69:93:88:0F:83:0E:0F:6A:EA:AA:86:98:31:CB:ED:87:ED:49
Authority key identifier: EA:B4:67:36:88:70:DA:70:37:32:D4:2A:05:93:30:F5:21:87:87:CD
Certificate issuer:       /CN=EAB467368870DA703732D42A059330F5218787CD
Certificate serial:       5E2B273CE4895F3DF3A0AA8728E7A766C48FC68E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB467368870DA703732D42A059330F5218787CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/EAB467368870DA703732D42A059330F5218787CD.mft
Manifest number:          0489
Signing time:             Sun 23 Aug 2026 22:59:15 +0000
Manifest this update:     Sun 23 Aug 2026 22:54:15 +0000
Manifest next update:     Tue 25 Aug 2026 02:51:15 +0000
Files and hashes:         1: 323830343a6132343a3a2f33322d3332203d3e20323633303235.roa (hash: fMLY+JQWsySoNVmo9WntyMWTBc+p9BZhWuveYafzZ0w=)
                          2: 3137372e31302e3230312e302f32342d3234203d3e20323633303235.roa (hash: FeojLNr1eacWXNqi0MHb4MkAbY7mhXPk0zs3AJ5qS00=)
                          3: 3137372e31302e3230322e302f32332d3233203d3e20323633303235.roa (hash: 1prry0biAwu9fk5wzVqjqVFHFeStvXQsUYiWiyL8djA=)
                          4: 3137372e31302e3230302e302f32322d3232203d3e20323633303235.roa (hash: H1KsPiPNitvBFYv6CqX67dMtSHo7YmdwSgpU3K84+WM=)
                          5: 3137372e31302e3230322e302f32342d3234203d3e20323633303235.roa (hash: EvkdXfGzBhcigMjXRFYLyCkPPeCjKhucsns7l01IwhQ=)
                          6: 3137372e31302e3230302e302f32332d3233203d3e20323633303235.roa (hash: x7PyYgBMNZtHA1xPrPHhPXKqFDrjufVYij/CjsUHPJs=)
                          7: 3137372e31302e3230302e302f32342d3234203d3e20323633303235.roa (hash: byI9XAHDtFq9CdqXsqB5dNMEAJVGbe6r25vsc1IN4qQ=)
                          8: EAB467368870DA703732D42A059330F5218787CD.crl (hash: 5QrmA+10Dk9smwkFrkw6mi7mVrnEVs3AlVsdKshjftE=)
                          9: 3137372e31302e3230332e302f32342d3234203d3e20323633303235.roa (hash: bRA2YPTN2p0uPpuAuvova6SZxenA5vfQOdakIRqMdmU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/EAB467368870DA703732D42A059330F5218787CD.crl
                          rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/EAB467368870DA703732D42A059330F5218787CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB467368870DA703732D42A059330F5218787CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 02:51:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:2b:27:3c:e4:89:5f:3d:f3:a0:aa:87:28:e7:a7:66:c4:8f:c6:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAB467368870DA703732D42A059330F5218787CD
        Validity
            Not Before: Aug 23 22:54:15 2026 GMT
            Not After : Aug 25 02:51:15 2026 GMT
        Subject: CN=B79A6993880F830E0F6AEAAA869831CBED87ED49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:10:d0:e2:a5:98:ec:58:84:c2:c8:f4:fd:d3:
                    50:37:3d:19:0b:c3:cd:6a:26:85:fc:fe:4d:56:5c:
                    fe:bd:e9:ec:b9:42:d6:5a:28:dd:da:9c:11:2d:44:
                    3c:f2:29:84:ce:b8:6f:83:2c:d8:e1:17:a4:a2:c4:
                    3c:1e:da:0a:98:35:c4:cd:9e:77:7c:f8:5f:52:a3:
                    87:2a:dd:f1:54:2e:6c:64:ab:c2:51:44:2c:29:6c:
                    0c:f5:9f:16:43:55:81:c6:12:70:a7:db:18:82:a5:
                    ab:60:db:a3:5c:61:c5:f1:75:f7:78:96:d1:65:40:
                    ee:b1:90:d3:84:56:a1:19:72:fc:4a:5b:1f:f7:32:
                    3c:ac:91:21:dd:ab:4c:29:e4:10:d7:04:2c:83:b9:
                    b3:30:14:9c:a7:aa:f5:19:17:fd:d9:15:39:77:dc:
                    9d:3d:c0:95:62:dc:ec:af:4f:ad:58:33:66:49:a0:
                    fa:80:5a:51:32:76:1d:c7:66:ca:8b:43:de:3c:f8:
                    d6:93:e3:5b:89:99:a5:6a:f8:c9:e6:37:7b:4c:78:
                    e0:db:14:58:9f:bf:6d:24:8f:99:79:7d:14:8c:5c:
                    6a:f5:c0:c3:89:ce:fb:28:fe:d1:de:c8:c3:dc:14:
                    87:f4:6d:10:90:81:1d:e0:4a:bb:15:02:80:fb:6e:
                    cb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9A:69:93:88:0F:83:0E:0F:6A:EA:AA:86:98:31:CB:ED:87:ED:49
            X509v3 Authority Key Identifier:
                keyid:EA:B4:67:36:88:70:DA:70:37:32:D4:2A:05:93:30:F5:21:87:87:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/EAB467368870DA703732D42A059330F5218787CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB467368870DA703732D42A059330F5218787CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/EAB467368870DA703732D42A059330F5218787CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:93:94:33:62:28:d0:17:30:13:b1:bd:7e:a4:a3:11:69:be:
         3c:e6:e1:e5:fb:cc:08:37:b3:e5:39:93:27:dd:f3:27:55:92:
         e2:18:74:bb:23:ba:a9:17:c8:69:77:bb:93:2d:86:88:b5:69:
         80:6e:fa:64:87:94:f9:88:3a:1e:29:8f:ae:44:32:20:ab:05:
         d4:7d:c5:ce:74:f0:b1:f6:72:41:f0:59:ce:20:d5:11:5d:54:
         9c:95:e7:d9:45:ea:3f:91:66:7f:11:0e:fd:dd:ed:39:b6:19:
         35:6d:dc:76:8a:f9:ba:8f:4b:34:9f:ba:18:0d:f1:25:7c:c3:
         c3:88:70:f2:aa:7b:71:cc:29:c4:7d:a3:ef:19:bb:8b:c6:41:
         92:eb:21:a7:f1:92:6d:40:36:8d:05:13:4b:b7:e6:50:fd:c9:
         19:10:03:11:f1:99:7e:3f:1f:0a:06:b3:37:6b:fd:d7:39:98:
         dd:9e:20:07:9e:81:63:73:ae:bb:93:d6:d9:49:8f:5e:0e:df:
         90:fc:d4:ae:44:0e:f9:32:40:f8:d5:50:be:a9:32:02:2e:fd:
         5b:cd:69:a7:1c:97:42:e4:9e:8c:34:43:d7:60:59:92:4b:79:
         12:ae:36:fc:42:49:d4:b4:30:12:34:ab:3c:8a:6f:46:96:61:
         d5:8a:75:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 15:55:54 2026 by rpki-client