Error: rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft
File:                     CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft (raw, json)
Hash identifier:          y+57GgMuzQT9jFPsEuGi1dN9qYbjPRRtvJNx/zQRHGg=
Subject key identifier:   58:1D:08:4C:94:1B:11:75:FC:EC:05:0E:3A:1A:6C:B0:D0:25:95:C5
Authority key identifier: CF:B7:58:2F:28:69:9F:35:10:69:C8:C7:6C:C9:71:67:BF:7B:B2:EE
Certificate issuer:       /CN=CFB7582F28699F351069C8C76CC97167BF7BB2EE
Certificate serial:       6E8E2DC822DF4FB8FE8F829DFE45C9201B79F083
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft
Manifest number:          048D
Signing time:             Sun 23 Aug 2026 15:21:40 +0000
Manifest this update:     Sun 23 Aug 2026 15:16:40 +0000
Manifest next update:     Mon 24 Aug 2026 18:41:40 +0000
Files and hashes:         1: CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl (hash: +fidGeveYYJFuPV6TNJAmiHWC5Gfl3uMa2wM1L974LE=)
                          2: 3137372e3133302e31362e302f32302d3234203d3e203532373432.roa (hash: rJari9HForGWIAVn++KHhqqJxayzpXRfuI70oICH5Ek=)
                          3: 3133382e3131382e3235322e302f32322d3234203d3e203532373432.roa (hash: 0+L4aZDGVE+xOx58Nqs5OwAMrEmJylvDxU3iV/y2d0A=)
                          4: 323830343a6362303a3a2f33322d3438203d3e203532373432.roa (hash: OhngJLTjITTfBnt+qyHLrtVqgrZC2VpFlDFytpAhzhI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl
                          rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 18:41:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:8e:2d:c8:22:df:4f:b8:fe:8f:82:9d:fe:45:c9:20:1b:79:f0:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFB7582F28699F351069C8C76CC97167BF7BB2EE
        Validity
            Not Before: Aug 23 15:16:40 2026 GMT
            Not After : Aug 24 18:41:40 2026 GMT
        Subject: CN=581D084C941B1175FCEC050E3A1A6CB0D02595C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2a:72:72:f5:7e:07:44:d4:46:66:3a:5e:84:
                    8f:d9:63:d3:8a:25:68:08:bf:92:05:7b:ff:fb:40:
                    ac:66:99:f6:bf:d1:fa:9f:e7:31:ae:66:23:67:7a:
                    54:c5:3e:79:8c:d2:66:e5:b5:7b:f8:a2:62:ef:f0:
                    80:bd:6c:9f:08:f9:17:f5:90:89:19:a3:88:4a:1c:
                    17:f5:ea:2a:4f:be:f5:ac:0e:ab:68:de:7b:1a:d4:
                    a4:4c:f8:99:80:45:fb:29:88:d8:5d:89:1c:1a:38:
                    b9:d7:64:b1:69:78:44:e1:ad:fb:25:b4:46:0f:af:
                    16:4e:85:a1:fe:ec:3c:0f:a4:cd:cc:ac:77:02:38:
                    3b:b9:cc:51:cf:ad:76:70:0f:68:8d:d9:22:88:c0:
                    02:cf:c7:a4:c5:cc:c4:7d:ec:ba:9e:d7:2e:79:3f:
                    f7:d8:3e:0f:3b:0d:ac:64:61:6e:78:43:90:c8:b2:
                    d6:c7:d9:00:f4:e0:37:be:5c:ec:a5:36:74:9f:42:
                    22:b3:67:ac:8b:51:2e:ec:69:e1:50:2f:b2:e9:f5:
                    9e:f3:d5:c0:60:eb:51:28:96:b1:86:aa:34:0d:57:
                    64:b0:d8:58:6c:89:c5:b4:23:e7:98:cb:16:33:b3:
                    c6:61:3f:16:ea:ac:4f:5a:b0:98:23:84:d2:df:25:
                    6b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:1D:08:4C:94:1B:11:75:FC:EC:05:0E:3A:1A:6C:B0:D0:25:95:C5
            X509v3 Authority Key Identifier:
                keyid:CF:B7:58:2F:28:69:9F:35:10:69:C8:C7:6C:C9:71:67:BF:7B:B2:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:00:43:74:d2:57:45:ba:6f:c1:0a:bc:4d:58:2b:35:2f:27:
         9b:27:37:1b:6c:1a:91:b2:0b:0e:5d:9b:98:cf:ef:61:a8:04:
         44:1a:92:29:e9:cf:4f:f2:0d:eb:de:28:fa:0a:0d:f6:3e:54:
         5e:bc:1c:83:4b:b0:31:35:f3:ec:30:a1:fa:f9:3f:5f:22:4e:
         e2:cf:52:f9:60:2b:6c:d0:4f:ae:6f:29:99:c1:d6:85:38:f0:
         f8:32:9f:58:06:8d:ef:d7:9b:26:ab:20:34:95:18:4d:e3:af:
         c4:6b:f3:0c:1d:98:47:b2:f9:39:a6:e7:44:54:bc:3c:9d:80:
         2f:28:06:b1:23:fc:63:5c:6b:8c:34:d9:d8:20:14:b7:13:0a:
         0f:38:fb:9d:65:3d:9f:b1:e8:ac:81:81:c6:eb:ee:ea:12:18:
         6c:c4:19:e1:ad:00:fd:e6:d4:57:8a:75:6a:2c:9e:80:b2:57:
         04:b0:f4:dd:b3:10:c3:79:8c:a2:2b:9d:0e:f0:ec:91:8e:72:
         6c:0b:9c:35:52:a4:e6:91:65:54:8f:a4:6c:75:15:0d:4e:7f:
         55:f5:c0:de:66:c4:d9:bc:e5:4e:2e:0d:6b:a8:2d:46:6b:66:
         a8:2c:a6:f2:2c:10:08:cb:eb:ed:70:e6:19:9f:7f:1f:be:7d:
         1f:6c:b5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:49:26 2026 by rpki-client