Error: rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft
File:                     174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft (raw, json)
Hash identifier:          skWMXvxIsQz6flpXi3g99cmbHFipKD35FjTIuMg+efU=
Subject key identifier:   76:54:77:DC:37:1E:35:5E:0D:E1:F3:B2:CD:B5:1A:B8:0C:0D:A9:80
Authority key identifier: 17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F
Certificate issuer:       /CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
Certificate serial:       1E92CE8542979CFCD7E054C166D013A06B711F86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft
Manifest number:          051F
Signing time:             Sun 23 Aug 2026 20:10:00 +0000
Manifest this update:     Sun 23 Aug 2026 20:05:00 +0000
Manifest next update:     Mon 24 Aug 2026 20:10:00 +0000
Files and hashes:         1: 3137372e31302e3132332e302f32342d3234203d3e203533323336.roa (hash: jG4ghX4Wob+63mHmsuf6vFaIsEkhHavneIEx8UERwiA=)
                          2: 3137302e3135302e3137392e302f32342d3234203d3e203533323336.roa (hash: dwOB4Q4rIK8d2TC1QMDSBZOvBUGhPHW2QH3dOvgw5xw=)
                          3: 174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl (hash: QsymYVq6bhoxmv2xN7JQUq8GKYYqoN8qW9BCKkS1vRc=)
                          4: 323830343a3266303a3a2f33362d3430203d3e203533323336.roa (hash: qodRUUjyQ1+ZN0PIMUlPCk/YsUUEWk4hF5c8bWtD+wI=)
                          5: 323830343a3266303a3a2f33362d3336203d3e203533323336.roa (hash: 3dqmsQ455F7+PLHfPLd4xMEWmmtAZVDOu1tTREdmocI=)
                          6: 323830343a3266303a3a2f33322d3332203d3e203533323336.roa (hash: WbTBKMVjWEpbtdR3lyQ0pqFtKYfBxq4W8pkK3f/7Hpo=)
                          7: 3137302e38332e3230352e302f32342d3234203d3e203533323336.roa (hash: ee2WkWd1BrrceZO6ah3hXJx4UPI4wgPZEwJ67AtmYRc=)
                          8: 3137302e38332e3230372e302f32342d3234203d3e203533323336.roa (hash: wjBmV7gf9CQ3fJ7sPDa1qUNImJ0f0gxnp5Qk8PlRLRQ=)
                          9: 3137372e31302e3132302e302f32322d3234203d3e203533323336.roa (hash: QfGZPys6gzQD0vqjumVY2poUp7smmBGChRcJ4Cv1/Fs=)
                          10: 323830343a3266303a3a2f34302d3430203d3e203533323336.roa (hash: giyxt9aB2s+wNfulqN2/qJiaGo9qBVoy2eS8a1eNdGU=)
                          11: 3137372e31302e3132322e302f32342d3234203d3e203533323336.roa (hash: bHYU/1PajYGiGdcu5dWklICaaI34xEmcjZzZA46Clts=)
                          12: 323830343a3266303a3a2f33322d3438203d3e203533323336.roa (hash: iCIduF7QQxqfe9WWIhRxBn01qy2cguSACUQ3uZL6Mc8=)
                          13: 3137302e38332e3230342e302f32322d3234203d3e203533323336.roa (hash: TJ08uyZJ1GJOcamzsN53j3TnZ8PU/Pwvf3HfKQfVKWs=)
                          14: 3137302e3135302e3137382e302f32342d3234203d3e203533323336.roa (hash: 8QwnqTYTjUUgS1xL+woxvdVAENmonnunTBiufokGkJU=)
                          15: 3137372e31302e3132302e302f32342d3234203d3e203533323336.roa (hash: W7MyW5BNLKEnWFkA1hKjFcgyjbdZrNdWaU6UMrj1xv4=)
                          16: 3137302e3135302e3137372e302f32342d3234203d3e203533323336.roa (hash: czdeHRFj9PnL7M7qj/lZcM02APqAmhcftgFk8kE5N6k=)
                          17: 3137302e3135302e3137362e302f32322d3234203d3e203533323336.roa (hash: 6QmofSex9aoNls5mlIHexbHt288zIWjuxLSauzl6poQ=)
                          18: 3137372e31302e3132312e302f32342d3234203d3e203533323336.roa (hash: dBLhXH9IZ5/tc3dEU2ZVUL/E2zAiyBck/VQGwe4+ABQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl
                          rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 20:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:92:ce:85:42:97:9c:fc:d7:e0:54:c1:66:d0:13:a0:6b:71:1f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
        Validity
            Not Before: Aug 23 20:05:00 2026 GMT
            Not After : Aug 24 20:10:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5a:ed:df:26:3f:2f:a5:af:7b:d8:e9:90:2f:
                    fd:34:ef:ac:ab:32:72:bb:51:08:a9:8f:b5:95:0e:
                    ed:e3:f1:56:44:bb:f2:db:8b:69:4d:f2:54:b2:86:
                    ef:8d:5f:05:14:59:96:97:ad:fe:2c:dc:b8:b7:14:
                    f3:73:69:bb:e2:02:3b:1d:ee:c0:9c:00:72:ee:cc:
                    bc:95:59:b3:e1:a2:b3:88:75:70:59:ca:b1:46:71:
                    7a:68:c2:4e:d8:5f:0a:ad:84:a2:71:9d:a6:3c:5f:
                    79:f7:73:01:c2:ae:b5:91:00:d4:c4:7d:e5:48:95:
                    72:51:8b:7c:27:81:26:3b:e1:c9:40:09:dd:4e:1b:
                    d5:b4:ad:b8:e9:ab:1e:26:7c:a1:24:29:13:bb:21:
                    f3:5d:8c:dc:a3:18:01:86:7c:e3:15:dc:1d:b3:40:
                    61:0f:15:f7:b1:3a:8d:61:8f:3c:cc:be:17:a9:fe:
                    77:c9:46:fc:32:e1:89:d8:a1:35:5c:bb:5c:f3:36:
                    9d:51:d8:4b:0d:9e:33:87:d1:84:36:86:7b:60:ed:
                    b0:1e:b3:1d:5d:ce:52:a1:39:5e:3a:5a:23:93:4c:
                    d3:fd:5a:5d:5c:1e:77:a8:23:d6:d9:70:82:29:a5:
                    47:11:c8:98:4e:e2:db:73:ca:56:2d:c0:22:01:a2:
                    ec:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:54:77:DC:37:1E:35:5E:0D:E1:F3:B2:CD:B5:1A:B8:0C:0D:A9:80
            X509v3 Authority Key Identifier:
                keyid:17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:2e:b6:cd:fb:fd:7b:c6:e8:26:2d:52:39:7e:46:58:a8:44:
         9c:b7:76:cd:d8:de:17:9c:ce:ef:bf:c6:22:03:7b:69:c5:91:
         66:d1:4b:3c:53:1d:50:0d:1e:8d:ed:97:7b:90:64:18:2b:16:
         bc:7a:69:f4:2a:58:2c:9a:4c:ea:19:ad:5d:1b:8c:a9:36:a7:
         0e:2e:d4:ce:1c:17:99:08:f8:cf:76:94:47:e4:64:ee:b0:a7:
         19:54:24:4d:11:61:da:6d:92:ac:f4:1b:4c:2c:8c:18:65:8c:
         49:d5:a3:69:db:33:af:ab:2b:66:31:92:24:32:b5:55:cc:03:
         ce:70:78:82:96:6a:96:fe:d8:2d:3e:89:1e:c5:ee:0e:fc:4e:
         51:ce:0a:43:ea:36:79:a5:f9:a4:6e:b9:f8:47:08:81:6e:b5:
         d6:10:3f:93:99:76:f9:35:ab:ea:e1:d1:61:d2:c7:35:55:f9:
         df:70:0b:0a:f0:5c:cd:37:ca:84:ba:30:b0:6c:a5:33:39:7a:
         e3:d8:c1:14:5c:eb:10:46:0a:8d:db:58:0c:c4:a1:a8:da:c5:
         8c:a0:64:3c:fc:e0:cf:33:9c:3f:f0:3a:78:27:48:b8:d8:18:
         f0:52:55:5a:45:a0:89:35:c4:39:a9:dc:59:1c:18:5e:46:b1:
         06:9c:df:c2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 24 04:37:45 2026 by rpki-client