Error: rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.mft
File:                     650CDA051146F7753756149BDB6B92197765D95E.mft (raw, json)
Hash identifier:          7nGWLNYzygISidK8CPYd5Q4gZ0n2x6g+ekw9sD+kF9Q=
Subject key identifier:   C0:96:0D:D6:0C:57:B5:82:BF:3E:E7:5F:65:56:07:09:B3:B7:03:71
Authority key identifier: 65:0C:DA:05:11:46:F7:75:37:56:14:9B:DB:6B:92:19:77:65:D9:5E
Certificate issuer:       /CN=650CDA051146F7753756149BDB6B92197765D95E
Certificate serial:       3082B213470F1190C74EA949BE0E8956C9920B56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/650CDA051146F7753756149BDB6B92197765D95E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.mft
Manifest number:          048B
Signing time:             Mon 24 Aug 2026 21:40:00 +0000
Manifest this update:     Mon 24 Aug 2026 21:35:00 +0000
Manifest next update:     Wed 26 Aug 2026 01:01:00 +0000
Files and hashes:         1: 323830343a363937383a3a2f33322d3438203d3e20323730323732.roa (hash: AN25yo3eXMHV1W8PhjsweFfiym7xl37gbOtqoXKPI/o=)
                          2: 3230302e3131352e3132342e302f32322d3234203d3e20323730323732.roa (hash: I/xnq0bsZM2KCqDQuEwyR/TUNXt4kaaRIw7Q1uq0nSQ=)
                          3: 650CDA051146F7753756149BDB6B92197765D95E.crl (hash: GreT5l/Flz37qrSWXESCczJOteeCi2gA5gGpii6mKRI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.crl
                          rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/650CDA051146F7753756149BDB6B92197765D95E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 01:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:82:b2:13:47:0f:11:90:c7:4e:a9:49:be:0e:89:56:c9:92:0b:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=650CDA051146F7753756149BDB6B92197765D95E
        Validity
            Not Before: Aug 24 21:35:00 2026 GMT
            Not After : Aug 26 01:01:00 2026 GMT
        Subject: CN=C0960DD60C57B582BF3EE75F65560709B3B70371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5b:da:c3:99:c7:9d:50:57:fa:7c:4b:b6:ff:
                    c5:3e:04:6f:63:50:b2:1f:55:c7:96:7a:af:67:ca:
                    49:62:44:79:6f:bd:6d:79:d5:ce:5f:08:f8:79:b8:
                    c1:62:cd:8c:ea:ec:b3:b3:19:56:e6:3d:89:67:05:
                    7d:16:f8:72:2e:9c:3c:4a:ec:aa:e4:f9:24:f1:1e:
                    4c:1b:9a:54:9f:fb:01:f6:a2:e3:da:e0:89:99:53:
                    35:75:67:e1:bc:e1:15:e0:4b:ff:ac:66:16:9d:71:
                    ae:ab:0f:7f:ae:c0:34:ff:74:5f:00:dc:bc:6b:8b:
                    df:88:31:30:9f:27:22:aa:b6:87:a4:cd:54:bf:5c:
                    31:f8:96:79:e6:95:48:51:83:df:87:72:4e:3e:ad:
                    b4:8b:83:22:96:e6:a5:c6:eb:4c:2e:c8:49:2b:f2:
                    68:f1:f4:e8:c1:2f:13:9d:db:8e:00:2e:6b:84:d4:
                    3a:e9:7e:fe:ac:4f:cd:11:5b:22:8e:ef:3b:48:86:
                    e2:34:83:a6:59:14:74:cf:15:2f:d2:93:dc:76:52:
                    f5:2c:0e:17:3c:35:c5:ba:f4:97:d3:10:39:56:c7:
                    1e:cf:1e:fb:be:42:b5:fc:62:f8:b5:70:25:6c:87:
                    00:e3:a2:59:81:2c:2a:a3:dc:71:29:f1:ee:23:b8:
                    f1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:96:0D:D6:0C:57:B5:82:BF:3E:E7:5F:65:56:07:09:B3:B7:03:71
            X509v3 Authority Key Identifier:
                keyid:65:0C:DA:05:11:46:F7:75:37:56:14:9B:DB:6B:92:19:77:65:D9:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/650CDA051146F7753756149BDB6B92197765D95E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:69:05:f5:79:50:47:7e:bd:52:58:df:23:b4:ad:39:44:2b:
         ea:c6:33:99:6e:77:ad:e7:46:19:dd:34:ee:b8:85:83:b2:fc:
         ca:68:5c:08:14:55:de:d5:76:8e:f4:07:e0:89:ed:bc:2a:51:
         de:63:b2:22:64:c8:1c:53:9d:8a:d6:df:eb:6c:eb:23:0c:68:
         85:3b:72:a2:6a:f0:98:5d:8a:fe:39:41:4d:0f:6d:c6:9e:18:
         8f:5d:98:48:ab:ea:70:00:9a:77:92:92:56:f7:d1:88:9f:10:
         a0:48:19:8a:4d:80:5b:c0:82:f6:c3:c2:ba:4b:de:72:35:6a:
         34:09:e5:1f:e9:11:39:3a:f2:32:c8:61:ce:5c:21:cf:10:a0:
         98:f8:b7:84:54:90:fc:75:6f:51:69:cc:86:77:1a:44:03:d7:
         2c:ee:ae:72:4f:b5:eb:64:e1:1e:23:c9:44:db:53:96:56:dd:
         5e:51:8e:01:dd:7a:fe:b1:0c:4e:40:91:92:89:35:c1:5f:ba:
         33:f3:96:e0:41:93:95:6b:5a:d0:8f:84:7c:db:1f:2c:aa:13:
         58:50:f1:fe:96:74:38:f5:86:e3:22:26:e9:60:79:63:13:ff:
         f9:9d:a8:2a:db:b5:45:7c:aa:1e:b5:4f:15:58:09:b0:14:f6:
         eb:8b:37:83
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUMIKyE0cPEZDHTqlJvg6JVsmSC1YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjUwQ0RBMDUxMTQ2Rjc3NTM3NTYxNDlCREI2QjkyMTk3
NzY1RDk1RTAeFw0yNjA4MjQyMTM1MDBaFw0yNjA4MjYwMTAxMDBaMDMxMTAvBgNV
BAMTKEMwOTYwREQ2MEM1N0I1ODJCRjNFRTc1RjY1NTYwNzA5QjNCNzAzNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOW9rDmcedUFf6fEu2/8U+BG9j
ULIfVceWeq9nykliRHlvvW151c5fCPh5uMFizYzq7LOzGVbmPYlnBX0W+HIunDxK
7Krk+STxHkwbmlSf+wH2ouPa4ImZUzV1Z+G84RXgS/+sZhadca6rD3+uwDT/dF8A
3Lxri9+IMTCfJyKqtoekzVS/XDH4lnnmlUhRg9+Hck4+rbSLgyKW5qXG60wuyEkr
8mjx9OjBLxOd244ALmuE1Drpfv6sT80RWyKO7ztIhuI0g6ZZFHTPFS/Sk9x2UvUs
Dhc8NcW69JfTEDlWxx7PHvu+QrX8Yvi1cCVshwDjolmBLCqj3HEp8e4juPEbAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUwJYN1gxXtYK/PudfZVYHCbO3A3EwHwYDVR0j
BBgwFoAUZQzaBRFG93U3VhSb22uSGXdl2V4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWR1THBnNE5YVWdBeFZvcXdCcG1KbktrNDM4QXhib2VVTTFLUFJ5WlY3
cWYvMS82NTBDREEwNTExNDZGNzc1Mzc1NjE0OUJEQjZCOTIxOTc3NjVEOTVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1MENEQTA1MTE0NkY3NzUz
NzU2MTQ5QkRCNkI5MjE5Nzc2NUQ5NUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QWR1THBnNE5YVWdBeFZvcXdCcG1KbktrNDM4QXhib2VVTTFLUFJ5WlY3cWYvMS82
NTBDREEwNTExNDZGNzc1Mzc1NjE0OUJEQjZCOTIxOTc3NjVEOTVFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASWkF9XlQR369UljfI7StOUQr6sYzmW53redGGd007riFg7L8ymhcCBRV3tV2
jvQH4IntvCpR3mOyImTIHFOditbf62zrIwxohTtyomrwmF2K/jlBTQ9txp4Yj12Y
SKvqcACad5KSVvfRiJ8QoEgZik2AW8CC9sPCukvecjVqNAnlH+kROTryMshhzlwh
zxCgmPi3hFSQ/HVvUWnMhncaRAPXLO6uck+162ThHiPJRNtTllbdXlGOAd16/rEM
TkCRkok1wV+6M/OW4EGTlWta0I+EfNsfLKoTWFDx/pZ0OPWG4yIm6WB5YxP/+Z2o
Ktu1RXyqHrVPFVgJsBT264s3gw==
-----END CERTIFICATE-----
Generated at Tue Aug 25 11:50:25 2026 by rpki-client