Error: rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.mft
File:                     2E3906019F53CEC4441CD3D21CFF37C136BF24EC.mft (raw, json)
Hash identifier:          eJRjc9aLzkYgt39z6oJp471I/AyEqIJvpwbK3vS8+20=
Subject key identifier:   FA:1C:1D:6B:73:AF:C5:34:30:10:8F:83:02:B7:9E:53:85:BF:77:C7
Authority key identifier: 2E:39:06:01:9F:53:CE:C4:44:1C:D3:D2:1C:FF:37:C1:36:BF:24:EC
Certificate issuer:       /CN=2E3906019F53CEC4441CD3D21CFF37C136BF24EC
Certificate serial:       72619739383CEB5E070EDD370C5B9DA38B4550C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.mft
Manifest number:          048A
Signing time:             Sun 23 Aug 2026 00:01:39 +0000
Manifest this update:     Sat 22 Aug 2026 23:56:37 +0000
Manifest next update:     Mon 24 Aug 2026 00:14:37 +0000
Files and hashes:         1: 3137372e35332e3230302e302f32332d3332203d3e203532393938.roa (hash: /WaesXsz0Xno7VyqwEauwiLSqzzexkH4LMpPjy2BIiE=)
                          2: 2E3906019F53CEC4441CD3D21CFF37C136BF24EC.crl (hash: RODvzykP6cqTytmIBoTFL2Y1PVz63OBKSCVwaCqvJsw=)
                          3: 323830313a38303a3231303a3a2f34382d313238203d3e203532393938.roa (hash: KnrrtfTjIFbnDXJMbjVHjGoQz09T6Hk5pzco31G8Wx0=)
                          4: 3137372e38342e3133322e302f32322d3332203d3e203532393938.roa (hash: znF6N7PFh1mvbrBMmCOtML4RkXP/iF7dwKow+jMPHdg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.crl
                          rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 00:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:61:97:39:38:3c:eb:5e:07:0e:dd:37:0c:5b:9d:a3:8b:45:50:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E3906019F53CEC4441CD3D21CFF37C136BF24EC
        Validity
            Not Before: Aug 22 23:56:37 2026 GMT
            Not After : Aug 24 00:14:37 2026 GMT
        Subject: CN=FA1C1D6B73AFC53430108F8302B79E5385BF77C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:84:04:3f:2c:ef:ee:90:48:9d:02:02:fc:c4:
                    1d:19:eb:ba:f6:72:e2:31:c6:9b:ae:c8:83:8f:3f:
                    a7:4a:84:a5:77:b4:a6:c6:2e:4a:79:d0:f0:4b:2f:
                    6f:07:0b:76:5f:90:83:00:68:27:cd:df:f8:56:bd:
                    bf:ae:23:e0:20:b7:dd:ac:aa:53:67:e6:39:cf:8a:
                    4e:3f:bd:0f:8e:71:7f:e3:0f:f1:9d:31:be:4f:01:
                    2a:4e:0f:46:b6:66:13:b7:d6:b4:ab:3c:ac:b9:a1:
                    47:dc:4f:6c:72:34:98:e5:42:1b:7c:a2:89:64:cd:
                    dd:bf:cb:e6:e6:aa:4b:0c:4c:78:ff:99:87:36:b8:
                    f1:bb:a5:22:99:39:0b:e1:f0:3e:0b:34:71:47:cc:
                    93:30:1e:24:d5:c0:54:eb:e8:22:e7:da:5c:ff:8f:
                    39:65:d5:7a:17:8c:00:62:e6:98:bd:55:0e:34:49:
                    58:5c:76:68:a5:4d:78:82:82:8e:d1:93:08:1e:0b:
                    e2:dd:27:bf:5a:c2:8c:3f:78:b2:ea:62:11:1c:6a:
                    f3:4c:74:04:05:38:56:5f:be:41:d5:aa:56:57:0d:
                    80:70:5b:df:1e:a2:21:fb:e1:bb:fb:d5:08:ca:f5:
                    84:76:31:f9:4c:24:2e:57:5b:5f:c4:83:85:04:f8:
                    f9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:1C:1D:6B:73:AF:C5:34:30:10:8F:83:02:B7:9E:53:85:BF:77:C7
            X509v3 Authority Key Identifier:
                keyid:2E:39:06:01:9F:53:CE:C4:44:1C:D3:D2:1C:FF:37:C1:36:BF:24:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:3d:c2:01:ee:60:b1:10:3c:06:cc:b6:79:ac:83:53:c8:bf:
         a3:77:80:2c:e2:b4:16:af:47:00:9c:e5:df:d7:74:0e:45:9e:
         eb:7d:7a:12:ce:ff:57:64:75:59:81:f3:2f:06:38:07:42:70:
         26:74:7a:0d:fe:13:4f:3c:3f:13:71:58:c5:33:9d:83:40:a0:
         6c:22:54:b6:21:91:fa:27:58:0b:61:5c:45:bb:26:a0:56:61:
         de:1a:6a:76:6e:03:fb:1f:ad:b6:d2:be:ea:8e:53:dc:d9:fb:
         7f:30:77:75:34:bc:7f:42:c7:15:fb:b8:fd:83:5c:4b:3c:a4:
         08:4f:8e:3d:79:11:28:d7:3a:8e:70:a4:34:6a:20:10:d8:6d:
         f3:14:64:26:ec:51:8a:09:21:55:66:5f:c4:4d:fd:93:a7:7e:
         9f:62:65:db:e2:de:35:2e:01:f3:e6:a7:c9:dd:07:9f:07:4e:
         e6:ce:97:45:ce:c0:7f:4c:3f:04:35:d8:b8:56:95:09:72:d7:
         d8:fc:38:ee:2e:46:60:b0:92:98:fd:fe:af:02:00:00:c9:52:
         b5:a2:a9:5a:ba:d1:e9:b6:10:61:4e:19:3c:28:3c:01:a1:f8:
         55:ac:fa:03:69:76:79:b0:3d:8a:1b:90:9e:d9:3d:ef:ae:44:
         a5:f5:60:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 13:50:25 2026 by rpki-client