Error: rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.mft
File:                     4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.mft (raw, json)
Hash identifier:          lNMBI+iY6e+3KTQV7WUvmOOR95hNdWEwqc3MTHEwAVE=
Subject key identifier:   14:5D:01:34:87:08:5A:3B:EE:40:AE:A8:58:68:96:33:17:F3:1A:9A
Authority key identifier: 4E:4C:2C:4C:FA:13:78:55:EA:25:A4:FE:C4:39:1B:70:C2:1A:5B:BD
Certificate issuer:       /CN=4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD
Certificate serial:       196E9CA517DD99DE409AFD707334B8DAF5F39BF1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.mft
Manifest number:          0483
Signing time:             Sat 22 Aug 2026 21:13:25 +0000
Manifest this update:     Sat 22 Aug 2026 21:08:25 +0000
Manifest next update:     Sun 23 Aug 2026 22:12:25 +0000
Files and hashes:         1: 3137372e36362e3132382e302f32312d3234203d3e20323632343936.roa (hash: DpH9Tx3KSKs2Pv3Xu8LN3BscDXf0FMihxQcYkBUpuoo=)
                          2: 323830343a3532303a3a2f33322d3332203d3e20323632343936.roa (hash: weT5RoIG4960k4pRdcVkTZt1h1LjkI7+tLSqpMpWVlU=)
                          3: 4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.crl (hash: K3QusqHu1S4Bb5TjQEGhzwLjE+PDFZvb7HtPAupNhuk=)
                          4: 3137372e36362e3133362e302f32312d3234203d3e20323632343936.roa (hash: S2kd9/Xw3EiB7jHakIqtJSmSLLfTM5vNxI75Jeurei4=)
                          5: 3139312e3234302e3136382e302f32312d3234203d3e20323632343936.roa (hash: gyiZlsWdDqNy4Dr04Y65DxszCTgsB/U5fULw1M302cM=)
                          6: 323830343a3532303a313a3a2f34382d3438203d3e20323632343936.roa (hash: dGRevKxdfo1wJIJcrovmrfliigR3U9fSFFeTfL19mTQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.crl
                          rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 22:12:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:6e:9c:a5:17:dd:99:de:40:9a:fd:70:73:34:b8:da:f5:f3:9b:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD
        Validity
            Not Before: Aug 22 21:08:25 2026 GMT
            Not After : Aug 23 22:12:25 2026 GMT
        Subject: CN=145D013487085A3BEE40AEA85868963317F31A9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:16:e3:5c:4a:c3:a6:54:37:4c:6c:c6:9b:6b:
                    49:00:8e:6d:13:f2:d5:f8:fb:ca:03:80:cd:14:c6:
                    10:5d:28:de:07:96:49:f3:3a:e1:68:d7:78:31:e6:
                    01:eb:49:02:87:0a:a9:68:b3:0d:3d:d7:74:ca:5b:
                    1b:7d:44:c9:7f:63:ad:f9:40:55:38:f9:fd:a2:49:
                    b8:ee:aa:d6:0a:09:7f:e7:39:7c:b1:63:2c:41:5a:
                    d5:f6:c1:28:78:2d:72:d5:4e:e5:87:40:f2:77:b5:
                    41:10:73:cf:9e:ee:15:1f:01:d9:19:75:1a:b5:d3:
                    34:bf:be:01:44:93:45:2b:00:22:f9:5e:d7:6f:a4:
                    1f:6a:a9:f5:02:cc:9a:92:0f:81:85:95:c8:87:fe:
                    82:82:52:87:b5:ad:ca:a8:b9:c1:0b:58:59:3d:74:
                    74:a3:7b:6b:e9:70:b0:3b:be:14:f5:3f:64:49:f6:
                    b1:cf:9c:44:27:9f:e1:f7:79:36:64:b8:e2:66:9b:
                    57:94:e7:69:50:bb:13:ad:5e:c5:42:7c:b6:07:0b:
                    3e:15:d7:20:5b:67:0f:57:a4:e6:f4:d7:24:4f:7d:
                    11:fd:42:0f:22:f6:34:11:19:87:bf:3a:4d:3b:a1:
                    15:46:a0:8d:d4:65:2e:82:28:2e:f5:be:5e:fc:94:
                    8e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5D:01:34:87:08:5A:3B:EE:40:AE:A8:58:68:96:33:17:F3:1A:9A
            X509v3 Authority Key Identifier:
                keyid:4E:4C:2C:4C:FA:13:78:55:EA:25:A4:FE:C4:39:1B:70:C2:1A:5B:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:1e:54:bd:68:e6:8a:3e:65:4e:df:fd:c9:f3:23:56:b2:46:
         66:ab:02:fd:e4:ce:10:07:e5:c0:3d:e7:f8:a5:5f:92:58:53:
         2a:98:95:7f:7c:ea:f1:0c:11:8f:8d:d5:0c:cb:13:c8:84:bd:
         18:38:e5:21:f3:10:61:68:c6:27:f0:74:38:13:04:5e:1e:c9:
         6b:5c:d8:25:3e:41:87:42:d9:a3:91:7d:16:44:f7:8f:7a:d4:
         a9:a8:9c:a4:31:6d:9b:28:3e:c9:d5:f5:f0:67:9e:9a:fd:a6:
         8b:5e:4e:4e:b3:61:6d:b0:94:eb:d6:b5:4c:46:44:2d:79:f2:
         ce:32:a3:3a:94:5e:d1:b6:4b:50:9d:96:af:55:b1:b8:05:e4:
         e0:8a:85:db:00:f9:95:c3:10:05:51:d7:a1:0e:54:0b:cb:ad:
         c2:f2:8b:0c:20:0f:64:5e:1a:77:0f:cd:9c:18:8e:e8:7d:06:
         d6:ad:eb:91:17:45:a1:e9:53:d5:2f:6d:06:08:54:be:71:41:
         ae:9b:13:c9:b1:57:a7:8c:6d:4d:77:df:f2:2e:78:d2:44:d1:
         ef:a6:24:96:fe:df:33:e8:c9:35:02:3e:43:6b:18:f9:56:92:
         57:02:02:ec:b8:48:dd:5d:6e:0c:a6:2d:8f:5f:37:4c:2e:61:
         23:b5:22:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:07:45 2026 by rpki-client