Error: rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/1/6E9AAAC5325433AB1BE58FD2578F26BD250375E5.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/1/6E9AAAC5325433AB1BE58FD2578F26BD250375E5.mft
File:                     6E9AAAC5325433AB1BE58FD2578F26BD250375E5.mft (raw, json)
Hash identifier:          KKUBPJVky/4F8GWY7hrCo7ieVXioxVbFcWV+lfgs9p8=
Subject key identifier:   56:0E:25:22:71:96:64:8E:35:3C:08:28:CF:9C:BC:BF:02:FC:05:70
Authority key identifier: 6E:9A:AA:C5:32:54:33:AB:1B:E5:8F:D2:57:8F:26:BD:25:03:75:E5
Certificate issuer:       /CN=6E9AAAC5325433AB1BE58FD2578F26BD250375E5
Certificate serial:       CC389CF5B8F91FE5B106B51B41EB76F0F129B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E9AAAC5325433AB1BE58FD2578F26BD250375E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/1/6E9AAAC5325433AB1BE58FD2578F26BD250375E5.mft
Manifest number:          051B
Signing time:             Sat 22 Aug 2026 11:40:00 +0000
Manifest this update:     Sat 22 Aug 2026 11:35:00 +0000
Manifest next update:     Sun 23 Aug 2026 11:40:00 +0000
Files and hashes:         1: 6E9AAAC5325433AB1BE58FD2578F26BD250375E5.crl (hash: QUK2iTRdNYfSsVvqUkbpPF/q9zcI+1x4oYStmd69Lig=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/1/6E9AAAC5325433AB1BE58FD2578F26BD250375E5.crl
                          rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/1/6E9AAAC5325433AB1BE58FD2578F26BD250375E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E9AAAC5325433AB1BE58FD2578F26BD250375E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 11:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            cc:38:9c:f5:b8:f9:1f:e5:b1:06:b5:1b:41:eb:76:f0:f1:29:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E9AAAC5325433AB1BE58FD2578F26BD250375E5
        Validity
            Not Before: Aug 22 11:35:00 2026 GMT
            Not After : Aug 29 11:40:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:45:36:33:6c:a1:75:ca:3b:91:03:74:a4:65:
                    bd:ef:7a:eb:19:cd:62:8a:f1:3c:be:dd:5b:19:a5:
                    1f:46:c5:43:62:a9:2e:c5:d7:95:a4:23:1e:ac:4f:
                    b8:4d:a7:bd:35:f6:61:69:26:f1:75:64:0d:44:c7:
                    22:88:25:2c:8e:66:00:70:86:b7:8c:9a:10:cb:67:
                    d4:95:fa:cc:91:cb:fd:b6:33:bd:41:5e:84:bf:b0:
                    55:23:d9:d6:03:d3:fe:48:05:91:52:16:8f:d2:97:
                    7a:2a:10:74:5f:25:82:e0:14:8c:53:73:6d:c0:cb:
                    4c:69:e3:4a:fa:9e:8e:f0:c7:52:e9:62:b1:fa:9b:
                    c5:e8:d3:f0:31:94:cb:bf:01:3c:6c:02:7e:22:ba:
                    9b:09:46:2f:3d:3a:da:f9:49:41:ec:4d:33:ef:ff:
                    f4:46:56:1e:f9:00:f0:95:9a:5c:7e:0d:47:31:4f:
                    85:d1:7d:f0:31:b4:7a:82:10:6b:5e:3c:d5:a0:0b:
                    e0:77:1e:10:51:34:25:02:b4:77:3d:9e:1f:cc:13:
                    ee:d4:31:ab:ad:a7:71:1d:9d:93:03:c4:f8:eb:05:
                    02:22:93:e2:f6:b4:64:5c:d6:35:dc:c6:d1:50:52:
                    96:8b:9f:e2:7e:e9:b4:6c:63:19:ef:e4:40:f0:45:
                    4b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:0E:25:22:71:96:64:8E:35:3C:08:28:CF:9C:BC:BF:02:FC:05:70
            X509v3 Authority Key Identifier:
                keyid:6E:9A:AA:C5:32:54:33:AB:1B:E5:8F:D2:57:8F:26:BD:25:03:75:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/1/6E9AAAC5325433AB1BE58FD2578F26BD250375E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E9AAAC5325433AB1BE58FD2578F26BD250375E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/1/6E9AAAC5325433AB1BE58FD2578F26BD250375E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:6d:8c:0c:c2:72:64:70:f7:66:4f:1c:a0:5d:19:f9:c5:f2:
         6b:3d:c2:84:ac:b6:33:22:5f:b9:dd:a4:19:57:f5:cd:54:d8:
         e8:91:e9:bc:f6:bf:42:a6:b7:fa:71:85:2b:86:e2:75:02:c3:
         50:4e:db:7b:8e:d9:94:ec:c0:de:be:69:7d:ff:67:f5:95:65:
         b9:f7:05:b4:ae:72:82:05:ef:9b:90:8b:ca:65:c8:fb:1e:c6:
         2e:84:68:7e:32:69:a5:2c:30:53:86:99:76:bd:61:d7:22:bb:
         52:be:1f:6d:67:f2:63:bf:aa:4b:e2:72:ac:8e:99:5b:1a:cb:
         6e:52:0c:35:4e:9b:49:41:e8:22:66:f7:52:00:8f:1c:d2:e4:
         d8:cb:1e:ba:46:d1:b4:49:4a:91:d2:8a:6d:1b:29:2f:d8:19:
         98:e6:e0:3e:b9:f3:f6:be:79:b5:26:2a:47:f3:0c:3e:25:c7:
         79:10:77:fb:12:8d:6f:be:80:37:b8:74:31:bd:1d:80:7e:c3:
         1a:cb:84:30:ce:82:17:fd:83:ff:fa:ba:eb:ba:2a:b8:4b:54:
         14:6c:c2:76:1b:29:a4:d9:54:ff:de:f3:7f:4c:97:1f:aa:50:
         d2:a4:db:ef:81:2b:c2:67:5e:9b:83:0f:04:d3:1b:bd:80:93:
         59:69:74:20
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUAMw4nPW4+R/lsQa1G0HrdvDxKbcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkU5QUFBQzUzMjU0MzNBQjFCRTU4RkQyNTc4RjI2QkQy
NTAzNzVFNTAeFw0yNjA4MjIxMTM1MDBaFw0yNjA4MjkxMTQwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDA0NTM2MzM2Q0ExNzVDQTNC
OTEwMzc0QTQ2NUJERUY3QUVCMTlDRDYyOEFGMTNDQkVERDVCMTlBNTFGNDZDNTQz
NjJBOTJFQzVENzk1QTQyMzFFQUM0RkI4NERBN0JEMzVGNjYxNjkyNkYxNzU2NDBE
NDRDNzIyODgyNTJDOEU2NjAwNzA4NkI3OEM5QTEwQ0I2N0Q0OTVGQUNDOTFDQkZE
QjYzM0JENDE1RTg0QkZCMDU1MjNEOUQ2MDNEM0ZFNDgwNTkxNTIxNjhGRDI5NzdB
MkExMDc0NUYyNTgyRTAxNDhDNTM3MzZEQzBDQjRDNjlFMzRBRkE5RThFRjBDNzUy
RTk2MkIxRkE5QkM1RThEM0YwMzE5NENCQkYwMTNDNkMwMjdFMjJCQTlCMDk0NjJG
M0QzQURBRjk0OTQxRUM0RDMzRUZGRkY0NDY1NjFFRjkwMEYwOTU5QTVDN0UwRDQ3
MzE0Rjg1RDE3REYwMzFCNDdBODIxMDZCNUUzQ0Q1QTAwQkUwNzcxRTEwNTEzNDI1
MDJCNDc3M0Q5RTFGQ0MxM0VFRDQzMUFCQURBNzcxMUQ5RDkzMDNDNEY4RUIwNTAy
MjI5M0UyRjZCNDY0NUNENjM1RENDNkQxNTA1Mjk2OEI5RkUyN0VFOUI0NkM2MzE5
RUZFNDQwRjA0NTRCRDcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0EU2M2yhdco7kQN0pGW973rrGc1iivE8vt1bGaUfRsVDYqkuxdeV
pCMerE+4Tae9NfZhaSbxdWQNRMciiCUsjmYAcIa3jJoQy2fUlfrMkcv9tjO9QV6E
v7BVI9nWA9P+SAWRUhaP0pd6KhB0XyWC4BSMU3NtwMtMaeNK+p6O8MdS6WKx+pvF
6NPwMZTLvwE8bAJ+IrqbCUYvPTra+UlB7E0z7//0RlYe+QDwlZpcfg1HMU+F0X3w
MbR6ghBrXjzVoAvgdx4QUTQlArR3PZ4fzBPu1DGrradxHZ2TA8T46wUCIpPi9rRk
XNY13MbRUFKWi5/ifum0bGMZ7+RA8EVL1wIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FFYOJSJxlmSONTwIKM+cvL8C/AVwMB8GA1UdIwQYMBaAFG6aqsUyVDOrG+WP0leP
Jr0lA3XlMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0F1ZHI3b2szRDFhcEJD
VExKcDRTS2NrQ1NBSk5NQXFjZExLekdZSFBmTkZ5LzEvNkU5QUFBQzUzMjU0MzNB
QjFCRTU4RkQyNTc4RjI2QkQyNTAzNzVFNS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS82RTlBQUFDNTMyNTQzM0FCMUJFNThGRDI1NzhGMjZCRDI1MDM3
NUU1LmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0F1ZHI3b2szRDFhcEJDVExKcDRT
S2NrQ1NBSk5NQXFjZExLekdZSFBmTkZ5LzEvNkU5QUFBQzUzMjU0MzNBQjFCRTU4
RkQyNTc4RjI2QkQyNTAzNzVFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHBtjAzCcmRw92ZPHKBdGfnF
8ms9woSstjMiX7ndpBlX9c1U2OiR6bz2v0Kmt/pxhSuG4nUCw1BO23uO2ZTswN6+
aX3/Z/WVZbn3BbSucoIF75uQi8plyPsexi6EaH4yaaUsMFOGmXa9Ydciu1K+H21n
8mO/qkvicqyOmVsay25SDDVOm0lB6CJm91IAjxzS5NjLHrpG0bRJSpHSim0bKS/Y
GZjm4D658/a+ebUmKkfzDD4lx3kQd/sSjW++gDe4dDG9HYB+wxrLhDDOghf9g//6
uuu6KrhLVBRswnYbKaTZVP/e839Mlx+qUNKk2++BK8JnXpuDDwTTG72Ak1lpdCA=
-----END CERTIFICATE-----
Generated at Sun Aug 23 08:19:51 2026 by rpki-client