Error: rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/A2481D14FAE137FC69C2002900E8E133F914C990.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/A2481D14FAE137FC69C2002900E8E133F914C990.mft
File:                     A2481D14FAE137FC69C2002900E8E133F914C990.mft (raw, json)
Hash identifier:          WdYQrPMVUN1aMtXVhpIaSN2nKm413/BXLCdI+CMeXyM=
Subject key identifier:   71:FC:E4:57:A3:84:FB:C3:4B:4E:F3:4B:4A:91:02:FB:60:22:82:80
Authority key identifier: A2:48:1D:14:FA:E1:37:FC:69:C2:00:29:00:E8:E1:33:F9:14:C9:90
Certificate issuer:       /CN=A2481D14FAE137FC69C2002900E8E133F914C990
Certificate serial:       45D8C942E537C7A61E5704613F5F763C390DE8BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2481D14FAE137FC69C2002900E8E133F914C990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/A2481D14FAE137FC69C2002900E8E133F914C990.mft
Manifest number:          0408
Signing time:             Wed 26 Aug 2026 06:09:11 +0000
Manifest this update:     Wed 26 Aug 2026 06:04:11 +0000
Manifest next update:     Thu 27 Aug 2026 07:25:11 +0000
Files and hashes:         1: 34352e3138312e37322e302f32322d3234203d3e20323639313838.roa (hash: qZcD+SdGxEDDQ7deoplsrKdOcEm+RGgBPv6nIEdE/2I=)
                          2: A2481D14FAE137FC69C2002900E8E133F914C990.crl (hash: o8485TPUJiL8m93LOzceu4cwDtVYFiK9S24530DS4RE=)
                          3: 323830343a363063303a3a2f33322d3438203d3e20323639313838.roa (hash: C9EUllxEOjlgmqXXVZHGTCSfmrDozUqKCH3N+IIJA6Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/A2481D14FAE137FC69C2002900E8E133F914C990.crl
                          rsync://rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/A2481D14FAE137FC69C2002900E8E133F914C990.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2481D14FAE137FC69C2002900E8E133F914C990.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 07:25:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d8:c9:42:e5:37:c7:a6:1e:57:04:61:3f:5f:76:3c:39:0d:e8:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2481D14FAE137FC69C2002900E8E133F914C990
        Validity
            Not Before: Aug 26 06:04:11 2026 GMT
            Not After : Aug 27 07:25:11 2026 GMT
        Subject: CN=71FCE457A384FBC34B4EF34B4A9102FB60228280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a8:fa:25:d1:ea:0a:8b:ff:47:65:fb:6c:3f:
                    c8:9b:eb:eb:b9:ff:64:6c:a9:d2:24:f1:74:2d:02:
                    e6:f9:82:2f:cc:98:1d:6a:40:0a:54:33:93:6c:0b:
                    2d:1e:9c:4b:d7:0a:67:0a:db:ae:80:88:f0:71:43:
                    f3:0c:64:00:c4:cf:86:c4:de:a5:5d:82:f1:e8:ba:
                    08:1c:50:47:8d:73:d9:c5:64:f5:8d:df:fb:73:00:
                    7a:14:3f:51:5e:49:3d:3f:fb:25:cd:82:74:30:f1:
                    6f:fa:2a:9e:cf:53:82:4e:89:13:5e:42:f4:a9:e0:
                    a4:83:19:e9:5b:2a:cb:99:60:f5:63:15:cf:47:90:
                    21:a6:1c:50:44:21:fa:ed:e6:73:a4:80:2a:de:ea:
                    25:44:bf:ce:80:5a:80:04:5e:2f:a7:1b:03:91:bd:
                    80:27:d7:a8:f9:7b:a3:87:9a:60:a5:1c:47:f0:7b:
                    58:c0:90:a9:0c:f8:0e:3c:a6:ce:23:61:52:34:26:
                    5c:f5:98:65:4a:42:3d:2e:8b:f9:ec:ef:54:4d:76:
                    ae:82:c8:a5:e7:33:5d:47:a7:18:a5:84:2b:8b:47:
                    f9:56:a8:75:4d:52:21:81:f4:11:16:5e:f4:7e:ff:
                    7e:3a:d2:77:0b:ec:b9:07:2d:ac:c4:29:ee:fc:e7:
                    08:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:FC:E4:57:A3:84:FB:C3:4B:4E:F3:4B:4A:91:02:FB:60:22:82:80
            X509v3 Authority Key Identifier:
                keyid:A2:48:1D:14:FA:E1:37:FC:69:C2:00:29:00:E8:E1:33:F9:14:C9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/A2481D14FAE137FC69C2002900E8E133F914C990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2481D14FAE137FC69C2002900E8E133F914C990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/A2481D14FAE137FC69C2002900E8E133F914C990.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:9a:3f:50:9d:c2:38:09:f8:6c:56:be:31:8a:75:7f:37:be:
         4e:b8:8b:00:96:84:9e:49:58:f6:ac:cf:5a:dc:9d:01:da:f0:
         45:f2:e4:28:3c:03:ad:d0:be:74:58:23:55:75:83:c6:c3:c4:
         4b:f9:d7:a3:24:98:25:b8:eb:97:98:7f:c8:94:66:d7:30:cc:
         1e:60:30:cc:ea:f0:7e:ed:dd:9d:86:88:88:e6:ed:18:54:98:
         e7:4c:98:25:bc:af:80:d4:52:fb:65:94:fe:59:51:56:2d:c7:
         f1:31:8a:39:72:63:7e:ff:e6:13:61:ab:18:5a:1c:7f:a6:10:
         0d:2a:d2:82:ae:d7:b8:4b:22:6d:3b:d6:95:dd:21:da:7c:c4:
         41:e8:34:85:4a:a5:b8:48:de:60:4c:c8:a8:bd:25:42:7d:d1:
         f1:18:eb:29:98:25:cb:1a:43:58:c4:ea:e5:c6:cf:35:ae:2e:
         8b:fd:bd:d9:a5:b0:94:19:c5:7d:8e:40:cf:e0:2a:1b:8c:05:
         0b:c2:97:15:9d:4b:3c:dc:a8:cb:22:ff:5c:76:e0:2d:fb:ca:
         d5:ff:e2:ef:a4:0e:92:6a:7b:92:8a:ff:fc:bb:fd:4f:67:cc:
         66:8d:7d:f2:31:e9:37:1d:66:a1:0f:50:47:37:b4:8e:94:93:
         05:6b:b8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 15:17:43 2026 by rpki-client