Error: rpki-repo.registro.br/repo/BVUH9Yv1QXtFry7CGPUTWiKT74fsMu13kkoA4feuhHbk/1/E6A6493F94A8507877191030829BC5477C5A89E2.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/BVUH9Yv1QXtFry7CGPUTWiKT74fsMu13kkoA4feuhHbk/1/E6A6493F94A8507877191030829BC5477C5A89E2.mft
File:                     E6A6493F94A8507877191030829BC5477C5A89E2.mft (raw, json)
Hash identifier:          bhR9rMcglbp1fnl1uWf3mwFhz+HmALQ3zA8QGw+GcSs=
Subject key identifier:   D0:07:1B:BD:3B:4B:ED:C9:A7:FF:62:96:55:D2:AC:E2:8B:4C:38:3C
Authority key identifier: E6:A6:49:3F:94:A8:50:78:77:19:10:30:82:9B:C5:47:7C:5A:89:E2
Certificate issuer:       /CN=E6A6493F94A8507877191030829BC5477C5A89E2
Certificate serial:       49BD5E4DADC602266F45DD5BEB86039C37949AF3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6A6493F94A8507877191030829BC5477C5A89E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVUH9Yv1QXtFry7CGPUTWiKT74fsMu13kkoA4feuhHbk/1/E6A6493F94A8507877191030829BC5477C5A89E2.mft
Manifest number:          0488
Signing time:             Sun 23 Aug 2026 15:51:46 +0000
Manifest this update:     Sun 23 Aug 2026 15:46:46 +0000
Manifest next update:     Mon 24 Aug 2026 19:42:46 +0000
Files and hashes:         1: 3136382e3232382e3134382e302f32322d3234203d3e20323634393533.roa (hash: q0dwPSQf4XmIPRSYYrBj/AsdHKrQEdiJq+vqACPE+E4=)
                          2: 323830343a333037383a3a2f33322d3438203d3e20323634393533.roa (hash: MZNlBNYw9VFuavlBxGr//yV9Rxxv3vmyRAWp6M5Ccj0=)
                          3: E6A6493F94A8507877191030829BC5477C5A89E2.crl (hash: sn8c2k0x0pcDa97lS/gg3G+4OHR/cGGtkzHvtczlNXM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BVUH9Yv1QXtFry7CGPUTWiKT74fsMu13kkoA4feuhHbk/1/E6A6493F94A8507877191030829BC5477C5A89E2.crl
                          rsync://rpki-repo.registro.br/repo/BVUH9Yv1QXtFry7CGPUTWiKT74fsMu13kkoA4feuhHbk/1/E6A6493F94A8507877191030829BC5477C5A89E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6A6493F94A8507877191030829BC5477C5A89E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 19:42:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:bd:5e:4d:ad:c6:02:26:6f:45:dd:5b:eb:86:03:9c:37:94:9a:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6A6493F94A8507877191030829BC5477C5A89E2
        Validity
            Not Before: Aug 23 15:46:46 2026 GMT
            Not After : Aug 24 19:42:46 2026 GMT
        Subject: CN=D0071BBD3B4BEDC9A7FF629655D2ACE28B4C383C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:70:8a:6a:91:5b:8a:ff:b9:14:75:2d:2e:5d:
                    c6:e6:32:11:aa:12:64:f4:3d:4e:96:01:26:cc:47:
                    05:03:10:c7:d0:20:20:94:41:ba:87:62:0f:39:14:
                    8b:3c:f2:12:eb:cf:2c:bd:6b:24:ad:7c:0a:8d:a1:
                    5b:a0:c8:9a:fe:83:cc:26:f1:08:b4:9b:13:62:4d:
                    03:ea:0e:1c:b4:ef:28:cc:48:45:ef:4d:b2:d7:60:
                    02:71:43:b9:bc:18:82:6c:d8:2a:fb:de:a6:c8:2e:
                    f7:71:b2:fd:92:34:af:7f:a0:05:5f:2e:c0:d3:0a:
                    55:a9:d4:e0:ba:31:5a:7b:55:d0:b3:c1:81:87:1c:
                    df:14:ce:19:f1:a4:48:5f:23:cc:d6:3e:60:5a:54:
                    7d:18:88:60:2b:81:12:d1:a2:b9:30:9f:62:32:4f:
                    c2:a4:4c:02:5e:82:ea:3a:cb:9e:2e:89:54:cd:87:
                    64:0f:46:2e:c8:29:75:d0:ef:de:88:f5:fa:01:93:
                    41:f9:c9:ce:49:df:65:8d:5b:9b:fb:64:c6:13:35:
                    b8:39:bf:bc:62:22:40:a6:6b:72:14:76:7b:31:b0:
                    ed:44:4a:7b:03:fc:f9:bf:0e:e8:5f:4c:4c:15:b4:
                    db:08:f1:61:b3:b9:ee:71:7d:c2:5c:27:b5:b3:80:
                    d9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:07:1B:BD:3B:4B:ED:C9:A7:FF:62:96:55:D2:AC:E2:8B:4C:38:3C
            X509v3 Authority Key Identifier:
                keyid:E6:A6:49:3F:94:A8:50:78:77:19:10:30:82:9B:C5:47:7C:5A:89:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVUH9Yv1QXtFry7CGPUTWiKT74fsMu13kkoA4feuhHbk/1/E6A6493F94A8507877191030829BC5477C5A89E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6A6493F94A8507877191030829BC5477C5A89E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVUH9Yv1QXtFry7CGPUTWiKT74fsMu13kkoA4feuhHbk/1/E6A6493F94A8507877191030829BC5477C5A89E2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:60:cf:2b:8f:9d:95:c9:08:e9:d7:72:a0:00:48:30:cc:bc:
         b0:2b:a9:87:63:55:2b:6c:b9:0e:f1:be:bf:00:b0:9f:2d:24:
         ac:4d:59:ce:b4:1b:6a:b1:76:a3:84:17:ea:17:be:a5:2f:9e:
         21:d4:08:ed:5b:5f:a6:62:2f:d3:dc:c5:8d:2f:3e:a9:9f:88:
         48:c7:09:7c:6e:02:52:16:80:0d:c1:30:6b:ff:eb:1d:03:57:
         16:7d:04:7e:da:11:a9:e6:45:ea:45:cf:46:20:af:73:6c:cc:
         a6:70:52:2e:1a:47:da:28:94:07:0a:d9:9e:ae:95:50:f7:6e:
         3d:1d:b9:1d:bb:50:e6:42:3b:f3:c4:14:a3:3c:0a:2a:63:3f:
         aa:26:e3:43:b0:05:6f:bc:26:df:19:c7:48:4d:e7:e1:0f:e0:
         09:b9:dd:ae:40:c2:c2:70:1b:68:fe:1f:54:67:9a:80:19:30:
         bb:3d:d7:2b:1e:9d:89:8c:01:0a:e1:81:2e:cf:1b:1b:2b:b1:
         7c:b9:4c:27:9e:6c:96:47:84:e5:01:46:2a:ae:d2:44:63:88:
         b8:7d:a6:cd:f6:8c:e0:df:33:80:56:5f:7f:b1:46:b3:63:3f:
         af:f2:dd:eb:46:98:6d:8f:74:82:4c:97:c5:c5:15:ca:9e:5c:
         e4:cd:25:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 13:24:22 2026 by rpki-client