Error: rpki-repo.registro.br/repo/8gsGh9gfZTtJ73vfZYyxxxATPws1AkpDSodR1vmxWLJh/0/13275A4411181B2568BCBC027250E0796CE06A13.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/8gsGh9gfZTtJ73vfZYyxxxATPws1AkpDSodR1vmxWLJh/0/13275A4411181B2568BCBC027250E0796CE06A13.mft
File:                     13275A4411181B2568BCBC027250E0796CE06A13.mft (raw, json)
Hash identifier:          o4FjP/eA5LmIkPLQY65tApjOZgg5eSpUJ5775zP6Ihc=
Subject key identifier:   64:D1:5F:88:BB:05:E6:9A:C8:86:17:C5:49:67:2E:88:65:9B:98:21
Authority key identifier: 13:27:5A:44:11:18:1B:25:68:BC:BC:02:72:50:E0:79:6C:E0:6A:13
Certificate issuer:       /CN=13275A4411181B2568BCBC027250E0796CE06A13
Certificate serial:       347352545FD5E8E4408B985D897A00FA3B0B2D17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13275A4411181B2568BCBC027250E0796CE06A13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gsGh9gfZTtJ73vfZYyxxxATPws1AkpDSodR1vmxWLJh/0/13275A4411181B2568BCBC027250E0796CE06A13.mft
Manifest number:          52
Signing time:             Sun 23 Aug 2026 13:28:06 +0000
Manifest this update:     Sun 23 Aug 2026 13:23:06 +0000
Manifest next update:     Mon 24 Aug 2026 15:42:06 +0000
Files and hashes:         1: 34352e3232352e3134342e302f32322d3234203d3e20323636393434.roa (hash: Q35EDnNipeITEG+6oAF/4v7blQXAa03W0rsXBhn/tWY=)
                          2: 323830343a343562343a383030303a3a2f33332d313238203d3e20323636393434.roa (hash: IhIBy4qP7NJKtXU6MV7xH5QhuRWs44dvR71Bbh0uusA=)
                          3: 13275A4411181B2568BCBC027250E0796CE06A13.crl (hash: tveKBNPveMcuTyIru1lTel/TtlhuVsCfliJF1EFQtiM=)
                          4: 323830343a343562343a3a2f33322d313238203d3e20323636393434.roa (hash: EVIbKr8ET/3p8/rBWWWoytCuGcV4E7D1Tj9PIJ+C1QU=)
                          5: 323830343a343562343a3a2f33332d313238203d3e20323636393434.roa (hash: cMtqVjJXSK8l7hhfCtljKWdtN+RVEzMYHuHB1jrGKQ4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8gsGh9gfZTtJ73vfZYyxxxATPws1AkpDSodR1vmxWLJh/0/13275A4411181B2568BCBC027250E0796CE06A13.crl
                          rsync://rpki-repo.registro.br/repo/8gsGh9gfZTtJ73vfZYyxxxATPws1AkpDSodR1vmxWLJh/0/13275A4411181B2568BCBC027250E0796CE06A13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13275A4411181B2568BCBC027250E0796CE06A13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 15:42:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:73:52:54:5f:d5:e8:e4:40:8b:98:5d:89:7a:00:fa:3b:0b:2d:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13275A4411181B2568BCBC027250E0796CE06A13
        Validity
            Not Before: Aug 23 13:23:06 2026 GMT
            Not After : Aug 24 15:42:06 2026 GMT
        Subject: CN=64D15F88BB05E69AC88617C549672E88659B9821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4c:ff:3a:13:74:ff:3d:1c:56:ae:f2:8e:d2:
                    c5:61:d3:43:7d:98:29:de:ee:ea:02:2c:31:27:95:
                    48:4f:63:81:c3:0d:06:8e:e1:9b:29:e0:30:6f:74:
                    85:af:e4:9b:ed:77:5e:40:64:d2:93:a9:f5:b4:99:
                    3c:6f:83:a6:97:27:23:7a:01:1b:90:b6:3d:6a:28:
                    ce:df:03:9c:4f:fd:4d:3a:4e:44:76:67:28:d2:ff:
                    35:e6:2a:42:23:2f:ae:ca:24:d5:78:90:fc:26:ce:
                    c4:55:95:de:46:c5:81:22:8b:ab:c8:99:bc:82:cb:
                    49:2c:0d:8f:cb:f7:e3:db:4b:f1:52:39:83:39:b7:
                    0e:8b:b3:70:ed:e2:30:7b:99:49:60:f9:24:e7:6c:
                    bb:24:37:3d:c5:c3:ed:fa:34:82:08:d1:c2:9a:73:
                    39:39:78:f5:71:23:f1:c4:c8:f5:8e:4b:31:b0:9f:
                    80:de:f3:56:12:da:78:15:80:70:5b:e0:b9:f0:e8:
                    a5:ef:c0:d8:17:6d:24:27:ce:d8:b9:0c:96:2b:54:
                    6e:98:3f:19:ff:79:87:1c:41:03:61:a7:cf:3f:f6:
                    75:ce:0f:7a:e3:34:d3:fd:d8:1b:f0:cc:b4:1f:6d:
                    ff:f0:a0:a4:78:ac:08:86:34:45:92:ff:eb:b5:19:
                    9a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D1:5F:88:BB:05:E6:9A:C8:86:17:C5:49:67:2E:88:65:9B:98:21
            X509v3 Authority Key Identifier:
                keyid:13:27:5A:44:11:18:1B:25:68:BC:BC:02:72:50:E0:79:6C:E0:6A:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gsGh9gfZTtJ73vfZYyxxxATPws1AkpDSodR1vmxWLJh/0/13275A4411181B2568BCBC027250E0796CE06A13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13275A4411181B2568BCBC027250E0796CE06A13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gsGh9gfZTtJ73vfZYyxxxATPws1AkpDSodR1vmxWLJh/0/13275A4411181B2568BCBC027250E0796CE06A13.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:fb:b4:b5:d7:b5:b6:86:99:51:54:df:0f:3d:b8:60:f1:68:
         1b:68:8d:ca:8d:dc:e4:6f:43:41:60:05:38:d2:d1:59:6c:44:
         7f:4e:d1:6f:64:eb:4b:a7:5a:ba:de:53:65:3e:53:42:79:f6:
         b8:b1:36:ba:82:ed:35:0a:ab:35:10:6d:4f:37:92:04:93:0a:
         e7:43:5c:ab:64:c4:3a:aa:b7:96:bc:5d:2b:e8:6f:fe:f1:30:
         42:b4:47:f0:c7:d9:6e:83:3c:55:b0:4d:f1:fc:96:f8:00:1b:
         50:6a:53:d0:6f:06:e3:05:7f:98:69:26:66:9f:90:ac:44:1e:
         30:19:fd:cf:1c:34:44:b3:4c:ad:bb:3e:dd:39:0a:27:33:28:
         cf:c7:1d:d3:79:8c:3e:39:84:b1:af:4f:02:77:5f:87:de:2e:
         c4:a7:16:89:f9:29:df:91:49:d4:c2:52:6a:38:a7:80:14:1b:
         4a:f1:57:ac:9f:d2:ee:3f:f4:27:fd:44:12:09:a4:12:20:67:
         62:4b:11:b8:41:74:30:00:82:7b:8f:69:80:53:10:47:d9:29:
         04:03:4c:74:5f:69:9c:00:d9:6d:e4:a6:9f:24:d1:cc:df:00:
         cf:bc:b7:fe:c3:3b:07:b4:39:62:53:1f:5f:56:d2:2e:5c:57:
         94:11:39:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 01:19:37 2026 by rpki-client