Error: rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/0/E6E6AF41B9D58C2D534839F63D9C82E00609A428.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/0/E6E6AF41B9D58C2D534839F63D9C82E00609A428.mft
File:                     E6E6AF41B9D58C2D534839F63D9C82E00609A428.mft (raw, json)
Hash identifier:          87hrLn+Mz4HF4W1Jfn6jO94WD0SIOgY3d/FjJ63aOWw=
Subject key identifier:   F6:04:73:4F:2D:18:AF:2D:F1:00:F6:46:D3:44:BA:D7:B8:99:11:0B
Authority key identifier: E6:E6:AF:41:B9:D5:8C:2D:53:48:39:F6:3D:9C:82:E0:06:09:A4:28
Certificate issuer:       /CN=E6E6AF41B9D58C2D534839F63D9C82E00609A428
Certificate serial:       2E80CD780759A23EC21316676658B9F915B214D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6E6AF41B9D58C2D534839F63D9C82E00609A428.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/0/E6E6AF41B9D58C2D534839F63D9C82E00609A428.mft
Manifest number:          046F
Signing time:             Tue 25 Aug 2026 04:11:48 +0000
Manifest this update:     Tue 25 Aug 2026 04:06:48 +0000
Manifest next update:     Wed 26 Aug 2026 04:52:48 +0000
Files and hashes:         1: E6E6AF41B9D58C2D534839F63D9C82E00609A428.crl (hash: BZcK2Mef1JjsjdfpCBVL39Z0K3Db/GyYY/0CNl+xwck=)
                          2: 323830343a346637343a3a2f33322d313238203d3e20323638333238.roa (hash: mpcthU5nYtPfE/UCspsOFFT7kI9OSUQa3+iXq1MUwkw=)
                          3: 34352e3233382e37322e302f32322d3332203d3e20323638333238.roa (hash: 85W67v+akBSIx+Rklcnj1wFvQnKgUjzJk76BBjqQBik=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/0/E6E6AF41B9D58C2D534839F63D9C82E00609A428.crl
                          rsync://rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/0/E6E6AF41B9D58C2D534839F63D9C82E00609A428.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6E6AF41B9D58C2D534839F63D9C82E00609A428.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 04:52:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:80:cd:78:07:59:a2:3e:c2:13:16:67:66:58:b9:f9:15:b2:14:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6E6AF41B9D58C2D534839F63D9C82E00609A428
        Validity
            Not Before: Aug 25 04:06:48 2026 GMT
            Not After : Aug 26 04:52:48 2026 GMT
        Subject: CN=F604734F2D18AF2DF100F646D344BAD7B899110B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7c:81:9e:bf:6f:8a:8d:96:6d:3b:b5:0e:64:
                    6b:39:22:ff:cb:cf:2f:5a:da:ab:f1:bb:c5:e0:0c:
                    f6:2a:17:b3:b6:d0:41:92:25:32:6e:10:50:e4:8a:
                    1a:26:ca:e4:9d:88:d4:bf:99:1c:4b:97:99:dc:63:
                    1a:6e:ae:32:8f:83:10:fe:ac:a5:d3:82:1c:dd:19:
                    f7:e3:56:05:72:69:c2:3a:25:f1:df:61:85:75:5f:
                    9c:73:6d:78:b6:9e:c2:e7:be:52:1b:5e:8f:53:75:
                    29:a7:38:01:42:d7:e1:c3:d8:e4:94:72:68:48:10:
                    bd:bb:c9:45:4f:3e:80:eb:be:47:d1:2c:ec:b4:25:
                    bb:95:6c:77:b4:e5:04:67:97:f7:2e:f4:a6:bd:97:
                    51:2c:54:1d:9b:54:5e:a6:f6:98:f0:ee:f7:93:f7:
                    32:10:81:03:3a:7b:b1:91:9e:58:46:f0:16:5e:6b:
                    16:8e:56:e2:09:fc:20:c5:23:06:52:85:88:fb:05:
                    75:05:75:33:63:fb:6c:cc:91:3e:ba:c9:67:1e:e1:
                    a4:d3:86:a3:08:59:84:26:ee:2a:92:01:ea:4a:9e:
                    89:43:8d:c7:26:cc:34:f6:97:53:ba:ea:dd:f7:d6:
                    10:70:2c:26:b5:50:7b:d5:15:b7:9a:ea:a7:a6:02:
                    00:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:04:73:4F:2D:18:AF:2D:F1:00:F6:46:D3:44:BA:D7:B8:99:11:0B
            X509v3 Authority Key Identifier:
                keyid:E6:E6:AF:41:B9:D5:8C:2D:53:48:39:F6:3D:9C:82:E0:06:09:A4:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/0/E6E6AF41B9D58C2D534839F63D9C82E00609A428.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6E6AF41B9D58C2D534839F63D9C82E00609A428.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/0/E6E6AF41B9D58C2D534839F63D9C82E00609A428.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:96:17:3d:79:c6:0e:70:af:a4:83:98:d7:6d:e2:3c:a8:da:
         85:67:1d:5b:5f:8e:5a:fa:c3:86:1a:64:b0:19:14:c3:69:ed:
         bb:04:ec:66:91:39:7f:ba:79:93:6e:38:c8:08:94:0b:69:b5:
         3e:d3:c0:dc:28:00:30:45:2e:d2:3b:66:4e:7a:54:1c:f6:bc:
         0b:a9:37:88:8c:ef:49:ca:63:27:b2:46:a7:0a:cf:ec:63:86:
         cc:9c:b1:65:a9:5e:f7:80:cb:27:61:3d:79:19:98:94:39:76:
         f3:3e:21:06:a5:60:4d:11:34:ad:6a:40:03:8c:d0:d0:3e:1c:
         1c:e4:b7:da:e2:7a:e5:71:ff:e1:55:08:ba:0f:7d:51:8f:a2:
         84:30:58:b4:a5:a5:3d:65:7e:db:2d:43:0d:0d:d0:6f:49:b7:
         a0:98:ea:64:86:19:13:16:b5:85:70:7b:58:ba:ab:93:46:96:
         d3:51:b8:86:c6:0a:c7:c0:a7:50:1d:5e:f3:6e:41:b5:cf:ef:
         2e:e2:14:0e:d0:f9:5f:1d:f1:5d:71:4b:52:19:07:84:c7:f0:
         69:e8:70:94:06:1a:a3:d0:af:7c:c3:d6:43:07:87:16:93:5a:
         9b:c7:cc:6d:61:5c:f0:cc:81:c2:cb:ec:f6:5d:ca:cf:e9:76:
         d1:3b:ee:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 11:06:37 2026 by rpki-client