Error: rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.mft
File:                     A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.mft (raw, json)
Hash identifier:          EZ19C4HKRNoSpxzMCiR+CiwQHWV7zntFW6mqKZmLVE8=
Subject key identifier:   D1:B5:0F:62:D6:06:63:A6:08:B7:89:D7:1C:0F:BD:6D:CD:7D:EE:F2
Authority key identifier: A4:C0:BA:3A:9F:F0:5A:01:E2:EA:16:AB:06:1A:D9:9A:D6:AA:0D:15
Certificate issuer:       /CN=A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15
Certificate serial:       08C84744A97A2A2B2C546C17AB953E56635989E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.mft
Manifest number:          0267
Signing time:             Sun 23 Aug 2026 06:37:33 +0000
Manifest this update:     Sun 23 Aug 2026 06:32:33 +0000
Manifest next update:     Mon 24 Aug 2026 09:35:33 +0000
Files and hashes:         1: 323830343a313762383a3a2f33322d3438203d3e20323632343334.roa (hash: F0lAK/H+F1+uVK+ER7sQSvgPpWB0g5ZYu/wAgXtDj9M=)
                          2: A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.crl (hash: /9N3NpBP6syq5FUB/peVV0OMi5x3F1YkYKmXhUMFZ30=)
                          3: 3138362e3233352e31362e302f32302d3233203d3e20323632343334.roa (hash: vPR2rj4c54vzChTHE+8sO1lppoNmAq3O4UDfnloAuas=)
                          4: 3230302e302e34382e302f32312d3234203d3e20323632343334.roa (hash: Pr54IZ8oheMUYZkaEw5hwrO9OcjaaWuerS8KAzq2QNk=)
                          5: 3138362e3233352e33312e302f32342d3234203d3e20323632343334.roa (hash: 86t37SjNu1L+3hh7f08hGqnC9qDvOYWsasd8uVgA14Y=)
                          6: 3137372e34342e3136302e302f32302d3234203d3e20323632343334.roa (hash: WlDv8D9xF39y8mgRqFaEG0O63hpVWIHBUXqGUmmO7z4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.crl
                          rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 09:35:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c8:47:44:a9:7a:2a:2b:2c:54:6c:17:ab:95:3e:56:63:59:89:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15
        Validity
            Not Before: Aug 23 06:32:33 2026 GMT
            Not After : Aug 24 09:35:33 2026 GMT
        Subject: CN=D1B50F62D60663A608B789D71C0FBD6DCD7DEEF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d5:3c:59:89:45:31:ec:4a:0a:33:97:bf:94:
                    44:78:79:54:e0:28:ee:9f:cd:89:49:0a:3e:6c:4b:
                    18:6d:6e:54:5e:59:f1:d1:ed:95:29:a9:d7:80:51:
                    db:7e:cf:b9:3d:14:d1:e5:52:f3:1a:af:57:7f:49:
                    a1:91:1e:d9:38:b3:a1:58:9d:34:8c:7c:3c:bd:a7:
                    ac:5e:f8:54:25:66:9c:1b:86:a4:91:52:ad:21:5a:
                    ca:39:f4:ee:df:84:3f:4e:97:f1:9f:67:67:64:dc:
                    ab:ab:48:be:70:4e:58:ef:5a:36:a5:48:c2:fb:93:
                    06:a8:51:7a:e4:aa:00:2b:83:02:03:0b:f5:de:2c:
                    8c:50:45:76:45:24:1c:77:63:5e:5e:f6:77:ac:b6:
                    e3:4e:fd:46:7d:61:ea:c4:0b:67:b6:be:b3:ee:ea:
                    73:a0:e5:86:e7:61:fc:4d:9a:8f:e0:f8:25:90:e2:
                    4c:d7:06:55:65:f7:01:01:23:f1:fe:c0:de:57:4e:
                    f9:ea:bf:62:50:19:c3:4d:19:3c:c2:50:6c:d7:54:
                    49:a4:fc:8a:c8:51:2d:db:c8:2f:ea:a5:8c:c9:36:
                    11:4b:83:20:85:25:f1:f7:26:01:83:08:e1:6b:58:
                    a1:57:d7:1b:36:7b:31:f6:84:82:71:00:a5:81:16:
                    89:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B5:0F:62:D6:06:63:A6:08:B7:89:D7:1C:0F:BD:6D:CD:7D:EE:F2
            X509v3 Authority Key Identifier:
                keyid:A4:C0:BA:3A:9F:F0:5A:01:E2:EA:16:AB:06:1A:D9:9A:D6:AA:0D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:d3:84:ab:7c:28:00:c6:e6:5d:1d:86:fb:1d:43:d5:23:3e:
         a2:a5:a5:f1:ba:e0:d8:f4:bb:1d:2e:8b:20:5f:67:d3:67:27:
         ad:05:f4:d4:69:61:da:87:60:f3:48:6c:1d:b2:6b:0e:6c:13:
         c5:ab:a8:f7:48:6b:6a:12:6a:1d:ac:a5:72:75:51:5b:73:ae:
         46:31:8c:2c:2e:25:f7:ed:3b:ef:c4:2b:7c:3d:e4:94:7b:ab:
         aa:f2:50:4e:37:10:97:74:3e:33:da:00:a1:0d:c7:76:1d:9d:
         8b:42:52:fd:6c:e7:0f:95:8d:9c:c6:70:fb:e6:84:50:f8:19:
         82:fe:06:0e:f7:28:97:71:07:75:60:00:a7:eb:66:40:86:63:
         83:48:3b:61:1b:de:ec:a7:7a:13:0a:4c:64:6b:26:42:48:93:
         54:78:89:4a:a2:12:bf:95:d7:54:08:d9:3c:14:80:fa:38:d7:
         51:6c:6f:cf:4b:07:81:03:b2:b3:a0:27:ee:46:72:ad:9d:14:
         0a:da:c4:94:96:41:d7:57:f6:75:38:74:9e:cc:3a:f2:43:31:
         2d:4e:e0:8d:36:72:a0:78:33:9b:17:33:3a:69:18:a6:61:2f:
         dc:fb:7e:0b:b0:4d:71:80:cc:52:79:72:ad:b2:45:8f:0e:a0:
         d0:7d:d9:4a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCMhHRKl6KissVGwXq5U+VmNZiekwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTRDMEJBM0E5RkYwNUEwMUUyRUExNkFCMDYxQUQ5OUFE
NkFBMEQxNTAeFw0yNjA4MjMwNjMyMzNaFw0yNjA4MjQwOTM1MzNaMDMxMTAvBgNV
BAMTKEQxQjUwRjYyRDYwNjYzQTYwOEI3ODlENzFDMEZCRDZEQ0Q3REVFRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/1TxZiUUx7EoKM5e/lER4eVTg
KO6fzYlJCj5sSxhtblReWfHR7ZUpqdeAUdt+z7k9FNHlUvMar1d/SaGRHtk4s6FY
nTSMfDy9p6xe+FQlZpwbhqSRUq0hWso59O7fhD9Ol/GfZ2dk3KurSL5wTljvWjal
SML7kwaoUXrkqgArgwIDC/XeLIxQRXZFJBx3Y15e9nestuNO/UZ9YerEC2e2vrPu
6nOg5YbnYfxNmo/g+CWQ4kzXBlVl9wEBI/H+wN5XTvnqv2JQGcNNGTzCUGzXVEmk
/IrIUS3byC/qpYzJNhFLgyCFJfH3JgGDCOFrWKFX1xs2ezH2hIJxAKWBFol1AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU0bUPYtYGY6YIt4nXHA+9bc197vIwHwYDVR0j
BBgwFoAUpMC6Op/wWgHi6harBhrZmtaqDRUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWVncGtVZEhWTWc0bW1kZlJnUzNRelBSRmVlOVdwVWhGUzFoTDFzdTNU
cVcvMC9BNEMwQkEzQTlGRjA1QTAxRTJFQTE2QUIwNjFBRDk5QUQ2QUEwRDE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E0QzBCQTNBOUZGMDVBMDFF
MkVBMTZBQjA2MUFEOTlBRDZBQTBEMTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QWVncGtVZEhWTWc0bW1kZlJnUzNRelBSRmVlOVdwVWhGUzFoTDFzdTNUcVcvMC9B
NEMwQkEzQTlGRjA1QTAxRTJFQTE2QUIwNjFBRDk5QUQ2QUEwRDE1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmNOEq3woAMbmXR2G+x1D1SM+oqWl8brg2PS7HS6LIF9n02cnrQX01Glh2odg
80hsHbJrDmwTxauo90hrahJqHaylcnVRW3OuRjGMLC4l9+0778QrfD3klHurqvJQ
TjcQl3Q+M9oAoQ3Hdh2di0JS/WznD5WNnMZw++aEUPgZgv4GDvcol3EHdWAAp+tm
QIZjg0g7YRve7Kd6EwpMZGsmQkiTVHiJSqISv5XXVAjZPBSA+jjXUWxvz0sHgQOy
s6An7kZyrZ0UCtrElJZB11f2dTh0nsw68kMxLU7gjTZyoHgzmxczOmkYpmEv3Pt+
C7BNcYDMUnlyrbJFjw6g0H3ZSg==
-----END CERTIFICATE-----
Generated at Sun Aug 23 15:17:26 2026 by rpki-client