Error: rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.mft
File:                     F4CE893E9874372932D6054F7AFDD9FBBD021974.mft (raw, json)
Hash identifier:          tV1Qsozfdb7pcIUJbao+vFMKCOripb2UTBwJpcrPXDc=
Subject key identifier:   8A:D2:A7:BF:1C:8B:27:1E:15:AA:CD:93:42:FD:80:9D:4A:F6:E4:DD
Authority key identifier: F4:CE:89:3E:98:74:37:29:32:D6:05:4F:7A:FD:D9:FB:BD:02:19:74
Certificate issuer:       /CN=F4CE893E9874372932D6054F7AFDD9FBBD021974
Certificate serial:       2F56F5F7933E0966E1E6F17FEF2ECDE1E243DC61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.mft
Manifest number:          048C
Signing time:             Sat 22 Aug 2026 21:43:07 +0000
Manifest this update:     Sat 22 Aug 2026 21:38:07 +0000
Manifest next update:     Mon 24 Aug 2026 00:38:07 +0000
Files and hashes:         1: 323830343a356664633a3a2f33322d3332203d3e20323639313238.roa (hash: x973QcKWMa2kKFVJgixdxY4Yy1ivykJ4K2KrBW9FCmg=)
                          2: 34352e3138302e39362e302f32332d3233203d3e20323639313238.roa (hash: 0eyF3jxkiTqMJPvWvaIXaVQw4yclLCkPekb7F/LOg8c=)
                          3: 34352e3138302e39382e302f32342d3234203d3e20323639313238.roa (hash: P76wIP2is1D+fDVhf/iE6swwxFW9BMmI5bF4u2ueRX8=)
                          4: F4CE893E9874372932D6054F7AFDD9FBBD021974.crl (hash: W/LlYX7hjMP1FujbZgtBES+gq11ikAHtFdnw6p3FQTY=)
                          5: 34352e3138302e39392e302f32342d3234203d3e20323639313238.roa (hash: EvD8bZuIojvbGAUd/7FIqMkjvVmmzMrB1ZPSBWKzSAo=)
                          6: 323830343a356664633a323030303a3a2f33362d3336203d3e20323639313238.roa (hash: s8r72wWlzGe6mae/DSF7TLWlJoar8P48OvwGqSY8Vmg=)
                          7: 323830343a356664633a313030303a3a2f33362d3336203d3e20323639313238.roa (hash: WuScM7gXN7K5TRfN+s+Tp/cxtEReRpFf4dypgGP45TY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.crl
                          rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 22:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:56:f5:f7:93:3e:09:66:e1:e6:f1:7f:ef:2e:cd:e1:e2:43:dc:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4CE893E9874372932D6054F7AFDD9FBBD021974
        Validity
            Not Before: Aug 22 21:38:07 2026 GMT
            Not After : Aug 24 00:38:07 2026 GMT
        Subject: CN=8AD2A7BF1C8B271E15AACD9342FD809D4AF6E4DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d4:41:4e:1b:51:13:75:2f:da:34:2d:ba:ff:
                    53:dc:7e:b5:36:ff:b2:41:70:2d:21:88:a7:39:b9:
                    34:7a:21:f9:b6:01:df:7c:14:4a:68:c4:e5:ae:67:
                    11:ef:62:80:f2:73:50:73:0a:87:d3:1a:04:bb:8a:
                    bf:c4:92:0b:18:21:c1:ed:0b:57:ed:ae:aa:02:32:
                    75:5a:12:93:f0:b0:3b:22:a6:91:18:64:fb:c5:0d:
                    17:fc:fe:2e:ae:dd:a9:36:3e:e8:d6:d2:49:db:e1:
                    5a:5f:5f:26:28:66:6e:81:b0:56:50:c7:bc:9e:71:
                    78:3b:d6:86:eb:3b:ad:1d:e8:39:3a:95:82:c1:62:
                    c8:43:3a:80:59:e6:7c:eb:84:2f:62:aa:ec:a1:59:
                    1d:6b:42:4f:44:68:0c:e2:23:a3:ae:6b:91:17:50:
                    bc:87:c0:87:af:5a:ca:52:74:d2:be:be:85:8e:ef:
                    be:20:8d:dc:ae:7e:2e:a3:56:ed:2b:5a:72:5f:ff:
                    c1:a6:81:fa:57:2c:61:64:7c:35:03:44:cd:32:d9:
                    d2:d0:f7:c9:53:ae:7f:7a:f6:ad:a5:e3:d3:da:cf:
                    0d:9e:ee:0c:6a:cf:9f:82:e6:d1:81:71:c8:82:c2:
                    fb:9b:cf:01:5f:85:60:f6:bf:e1:f3:47:08:e5:79:
                    69:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D2:A7:BF:1C:8B:27:1E:15:AA:CD:93:42:FD:80:9D:4A:F6:E4:DD
            X509v3 Authority Key Identifier:
                keyid:F4:CE:89:3E:98:74:37:29:32:D6:05:4F:7A:FD:D9:FB:BD:02:19:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:19:2f:f5:96:3b:d7:d8:a5:dd:73:77:b9:5c:bc:ee:03:14:
         42:b8:e5:c3:c7:70:14:36:8f:8e:c7:3e:d0:76:5f:42:7d:df:
         f4:2b:2f:ec:4c:1f:82:a6:47:94:d2:0c:ac:6d:f3:53:94:88:
         d3:ef:79:15:77:c7:49:5f:83:90:e1:4b:90:54:f0:62:ec:3c:
         ae:a0:d8:c1:73:01:65:15:4c:d2:2a:94:7a:af:68:e1:9f:cc:
         3e:4e:5b:73:68:b0:62:2c:73:06:9f:65:98:94:b0:6b:e9:09:
         60:ae:37:fd:8e:11:f6:98:72:c1:37:ec:9f:7c:99:01:86:82:
         04:09:c8:c9:d4:64:73:f9:e6:c2:9a:75:19:35:13:a0:ac:5e:
         0d:61:35:48:3b:ae:27:f0:79:0f:af:a9:82:f1:4d:4b:55:2a:
         e7:46:e1:f4:f2:72:4a:52:ea:92:d6:67:09:37:32:15:bb:0f:
         54:b4:3a:c1:43:6d:8d:b5:df:7c:10:61:c1:0e:0e:f5:48:c4:
         bf:19:ea:3f:8b:1f:bd:7c:a0:56:b7:ab:36:c7:2b:df:e8:84:
         80:f8:08:7e:c0:1a:86:24:a9:04:6e:dd:14:8f:db:cf:4d:88:
         3b:48:d9:9c:01:cb:06:11:a5:2e:6c:03:b8:c4:e0:63:af:f4:
         a5:44:02:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 22:53:56 2026 by rpki-client