Error: rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.mft
File:                     EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.mft (raw, json)
Hash identifier:          0ZX0Q3h4eG2rAp26rUo3tGyYCsZU6qauYBsL980HtP8=
Subject key identifier:   20:10:E6:99:14:13:98:25:C8:06:DB:3A:FD:03:9B:9B:2A:D9:CC:99
Authority key identifier: EA:35:0D:DF:6B:8B:36:1C:D6:83:E0:FE:B3:EB:B5:3F:41:71:A9:A6
Certificate issuer:       /CN=EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6
Certificate serial:       03113DE7D9583834C01806BB28D5C6B480B614DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.mft
Manifest number:          051C
Signing time:             Sat 22 Aug 2026 16:20:00 +0000
Manifest this update:     Sat 22 Aug 2026 16:15:00 +0000
Manifest next update:     Sun 23 Aug 2026 16:20:00 +0000
Files and hashes:         1: 323830343a366534383a3a2f33322d3335203d3e20323730353836.roa (hash: nFPOmSAfLWs6YOnilTluglYMDMDhIuQzPgJg2Usfc4M=)
                          2: 3137372e3135322e3130302e302f32322d3234203d3e20323730353836.roa (hash: dqfh25QxS8RbRh9Z0pFvfixf33QBdpQUemQv4CBe7Kc=)
                          3: EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.crl (hash: qQyI7meTFxjroGxoFpk7969gPqcbaJhJQkVrUFEuHQE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.crl
                          rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 16:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:11:3d:e7:d9:58:38:34:c0:18:06:bb:28:d5:c6:b4:80:b6:14:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6
        Validity
            Not Before: Aug 22 16:15:00 2026 GMT
            Not After : Aug 23 16:20:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:30:1a:d4:38:ad:bf:f5:8e:de:6c:99:ce:24:
                    ab:6f:57:77:82:70:c3:10:20:d9:35:28:c7:39:71:
                    cd:32:8f:be:a4:8a:21:7d:2a:74:d3:00:a0:7c:79:
                    0c:e0:f6:cb:45:da:f0:af:87:25:1f:63:da:fd:cc:
                    89:7a:20:64:8f:79:e3:6f:b2:52:18:34:b0:2f:83:
                    75:0d:02:9e:8b:4f:dc:fb:b5:dc:f5:98:3a:5e:47:
                    36:77:52:39:3f:c1:c7:ce:6c:95:12:92:b2:6a:3c:
                    e5:a0:4f:c5:ff:03:89:87:dc:05:24:8c:9e:28:87:
                    9d:d4:19:50:9a:86:df:41:e7:29:5c:d1:0b:58:64:
                    46:8f:14:12:aa:87:81:75:96:e5:79:2d:cb:5d:e2:
                    95:28:99:00:13:f1:81:cf:62:5e:21:34:8e:5a:41:
                    65:af:6c:22:fa:f4:ce:af:6a:7f:d2:b2:9b:e4:bf:
                    76:ab:2a:03:12:fa:0a:fb:82:8e:fe:11:bb:e6:d0:
                    3d:5a:0b:be:e8:20:63:51:b7:d7:36:81:5c:5f:1d:
                    ee:c0:f7:a3:59:59:24:fa:40:6d:e8:6b:3b:83:14:
                    60:46:08:34:78:24:12:24:de:fb:87:95:57:d1:a8:
                    45:f7:e0:27:09:c6:21:62:88:87:da:48:57:a4:3e:
                    63:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:10:E6:99:14:13:98:25:C8:06:DB:3A:FD:03:9B:9B:2A:D9:CC:99
            X509v3 Authority Key Identifier:
                keyid:EA:35:0D:DF:6B:8B:36:1C:D6:83:E0:FE:B3:EB:B5:3F:41:71:A9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:57:63:b2:5b:a2:cc:5e:49:00:59:d2:7a:cd:46:7b:d1:8c:
         a8:20:bf:2d:9f:21:ff:f7:71:78:10:f4:93:44:f8:cb:6a:df:
         49:38:fe:81:76:82:60:f3:70:5b:e8:40:b7:4d:1a:7a:90:1e:
         82:ba:69:28:59:9d:6a:b6:f3:73:38:43:19:9e:e3:3e:ce:73:
         f2:15:3d:b0:e9:29:47:97:bc:56:dc:2b:f6:f1:4d:64:b8:98:
         08:de:ef:2b:8d:92:e6:6e:06:16:a0:4d:db:50:a2:81:c4:f0:
         8a:2f:b8:d1:66:80:1c:14:fe:c5:c6:82:a3:af:f9:68:23:69:
         aa:52:27:ce:3b:81:88:b6:f5:30:96:2e:ac:d5:0c:2d:71:26:
         c1:c7:78:84:40:69:21:e2:9f:e3:0c:16:b9:27:dc:99:09:9e:
         49:a8:33:26:86:07:08:0e:9d:1a:bf:c0:47:76:a5:e4:85:08:
         7e:2f:f5:86:cc:85:9b:46:ab:14:46:34:87:3e:45:da:68:0d:
         ce:c1:c7:16:8a:eb:e0:29:23:72:7e:84:80:ae:02:2b:a9:6a:
         bd:99:fe:78:29:d3:24:dd:a8:e8:86:c4:39:a1:8e:4b:3b:7b:
         d0:41:00:6e:98:e1:c0:6f:62:f0:7c:08:c1:dc:bb:65:ff:6e:
         45:37:28:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 04:43:15 2026 by rpki-client