Error: rpki-repo.registro.br/repo/9Dbz34SJ5YwsD7PCyzUfd1ifoZjSsqWWh46XZUXvpYFS/0/91D0AECE4CA4B520D30283A943EC3430DE576329.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/9Dbz34SJ5YwsD7PCyzUfd1ifoZjSsqWWh46XZUXvpYFS/0/91D0AECE4CA4B520D30283A943EC3430DE576329.mft
File:                     91D0AECE4CA4B520D30283A943EC3430DE576329.mft (raw, json)
Hash identifier:          UsnN4bhpSiTc0vLmUs4UrX0hJ1A2510EdMdClD3E9C0=
Subject key identifier:   01:4D:55:40:E1:91:13:D3:31:FD:4B:30:2C:29:39:1F:1F:9C:D5:8C
Authority key identifier: 91:D0:AE:CE:4C:A4:B5:20:D3:02:83:A9:43:EC:34:30:DE:57:63:29
Certificate issuer:       /CN=91D0AECE4CA4B520D30283A943EC3430DE576329
Certificate serial:       73A178040B8BB363E4884AFC3ABB9740AEA9B276
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D0AECE4CA4B520D30283A943EC3430DE576329.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Dbz34SJ5YwsD7PCyzUfd1ifoZjSsqWWh46XZUXvpYFS/0/91D0AECE4CA4B520D30283A943EC3430DE576329.mft
Manifest number:          024C
Signing time:             Sun 23 Aug 2026 06:22:30 +0000
Manifest this update:     Sun 23 Aug 2026 06:17:30 +0000
Manifest next update:     Mon 24 Aug 2026 07:04:30 +0000
Files and hashes:         1: 3137302e3234372e3234302e302f32322d3234203d3e20323633393439.roa (hash: q2WMrT7TOLmJlqPeA2OqyxJPu9XA4Hopxpa1WRlmAls=)
                          2: 3133382e3235352e342e302f32322d3234203d3e20323633393439.roa (hash: Xu5/3ueneabQZZ/p3s0UzKx4kyNfY6E38gK/1hswH50=)
                          3: 323830343a323833633a3a2f33322d3438203d3e20323633393439.roa (hash: Kumyaw4x7W3edA/N6XYP+jzksdSuJ/BTH+aMafrUikU=)
                          4: 91D0AECE4CA4B520D30283A943EC3430DE576329.crl (hash: Mvf+NH/MDW4P2Bq2ElZe2U44vW3/FUI2lWDcGUeiTq8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Dbz34SJ5YwsD7PCyzUfd1ifoZjSsqWWh46XZUXvpYFS/0/91D0AECE4CA4B520D30283A943EC3430DE576329.crl
                          rsync://rpki-repo.registro.br/repo/9Dbz34SJ5YwsD7PCyzUfd1ifoZjSsqWWh46XZUXvpYFS/0/91D0AECE4CA4B520D30283A943EC3430DE576329.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D0AECE4CA4B520D30283A943EC3430DE576329.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 07:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:a1:78:04:0b:8b:b3:63:e4:88:4a:fc:3a:bb:97:40:ae:a9:b2:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D0AECE4CA4B520D30283A943EC3430DE576329
        Validity
            Not Before: Aug 23 06:17:30 2026 GMT
            Not After : Aug 24 07:04:30 2026 GMT
        Subject: CN=014D5540E19113D331FD4B302C29391F1F9CD58C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:31:e0:1a:81:2c:a0:aa:2b:cd:e9:4b:87:ad:
                    d2:8d:46:82:50:b9:57:92:ca:f3:8d:a2:96:84:62:
                    ca:be:a0:f2:ab:73:00:93:8d:5c:a9:de:d4:6b:5f:
                    e8:45:59:9a:7a:6e:30:7c:41:63:3a:19:05:a4:9c:
                    80:f0:f0:33:73:f2:e1:dc:09:f4:20:7c:dd:ed:cb:
                    14:09:4f:24:a0:fc:9d:20:d6:37:45:98:4a:9a:f3:
                    fc:01:24:cc:d2:48:05:92:6d:62:08:84:ff:39:df:
                    17:06:38:21:4a:9c:1b:cc:d2:91:5a:f6:99:20:6e:
                    88:4a:fe:72:49:8c:9d:22:71:e4:c6:ff:99:82:21:
                    73:a0:41:40:85:85:a1:ce:89:94:08:4c:d2:02:ca:
                    9d:59:3d:b5:2b:10:25:d2:96:12:fc:b1:8f:cf:9e:
                    ef:51:4d:5f:c1:b4:dc:be:33:0a:fe:19:20:31:3c:
                    3f:8d:c9:08:e7:f8:3f:f2:da:6f:cc:20:f5:ae:d2:
                    da:60:42:c5:a5:81:41:73:59:8b:ed:65:96:3c:7d:
                    ff:c6:e6:81:d9:aa:ae:ca:8e:8d:e3:0a:10:8a:94:
                    d9:24:bc:1c:aa:e3:1c:f0:90:fd:76:d6:1a:87:9b:
                    96:8e:ce:34:a1:b3:d6:49:24:f5:14:04:ba:8d:1d:
                    ab:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4D:55:40:E1:91:13:D3:31:FD:4B:30:2C:29:39:1F:1F:9C:D5:8C
            X509v3 Authority Key Identifier:
                keyid:91:D0:AE:CE:4C:A4:B5:20:D3:02:83:A9:43:EC:34:30:DE:57:63:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Dbz34SJ5YwsD7PCyzUfd1ifoZjSsqWWh46XZUXvpYFS/0/91D0AECE4CA4B520D30283A943EC3430DE576329.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D0AECE4CA4B520D30283A943EC3430DE576329.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Dbz34SJ5YwsD7PCyzUfd1ifoZjSsqWWh46XZUXvpYFS/0/91D0AECE4CA4B520D30283A943EC3430DE576329.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:f2:d3:5f:3b:98:33:3c:f3:a6:39:cc:0b:01:f7:7f:ef:05:
         cb:78:27:c3:ea:5e:d5:e3:9b:c5:6d:ef:0a:98:5e:57:57:2a:
         56:82:1b:39:7e:12:6a:12:e9:33:be:b7:dd:26:91:ae:56:0b:
         4e:1e:11:9f:85:24:30:6e:1c:2e:fa:b8:7d:42:dc:a8:74:80:
         da:eb:06:bf:3c:73:83:75:cf:32:8d:f3:47:3f:4f:7a:86:26:
         ed:8e:d1:e7:3e:13:8d:67:57:2a:da:07:3a:30:8a:33:17:fd:
         21:12:07:82:93:42:f5:c2:08:89:46:fd:f0:9b:a1:29:1b:38:
         c7:2c:4f:69:67:5e:7f:e9:e9:82:da:5e:33:f2:c4:8d:90:88:
         32:a8:67:d9:60:ea:79:09:39:b7:3f:f4:96:86:00:76:78:43:
         a2:40:0b:6d:69:36:c3:93:dd:72:25:bc:91:b9:c2:ef:22:16:
         d1:08:5f:f4:fe:66:2b:51:63:65:1d:5e:c1:cb:b5:40:63:19:
         b1:d1:61:ff:fc:ec:a3:5b:aa:24:83:58:30:18:e0:9c:eb:b6:
         14:00:6b:ee:9a:26:69:6f:8c:c1:e0:9d:41:1a:26:68:50:9b:
         3a:74:29:d2:71:f5:53:4c:45:2c:4d:5b:94:d0:40:80:9f:27:
         1d:87:7c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 11:37:23 2026 by rpki-client