Error: rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/02841926F957B15864E9B2B024AD350B3F57EC78.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/02841926F957B15864E9B2B024AD350B3F57EC78.mft
File:                     02841926F957B15864E9B2B024AD350B3F57EC78.mft (raw, json)
Hash identifier:          J0cn+/k8cfUmkznRMQflWToD4EHKa9IRCbgRljk6QKU=
Subject key identifier:   97:A0:65:60:EF:8C:EF:9A:B6:A6:BB:FF:1C:EE:AB:C7:12:4C:9B:1D
Authority key identifier: 02:84:19:26:F9:57:B1:58:64:E9:B2:B0:24:AD:35:0B:3F:57:EC:78
Certificate issuer:       /CN=02841926F957B15864E9B2B024AD350B3F57EC78
Certificate serial:       70FBF06EE9304F3E86F69FB1D75C573BAE3FAC3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02841926F957B15864E9B2B024AD350B3F57EC78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/02841926F957B15864E9B2B024AD350B3F57EC78.mft
Manifest number:          04
Signing time:             Wed 26 Aug 2026 06:59:35 +0000
Manifest this update:     Wed 26 Aug 2026 06:54:35 +0000
Manifest next update:     Thu 27 Aug 2026 07:06:35 +0000
Files and hashes:         1: 02841926F957B15864E9B2B024AD350B3F57EC78.crl (hash: ggOhXDZ3jyHc9E1egGa49evi0/LkcDSm8CfiJe7MEUs=)
                          2: 3136382e3232372e3232302e302f32322d3332203d3e20323634383839.roa (hash: B+/3G+PhdEhiOUG1MnlSsGZ+YLMB49aZNWJkioNfOFg=)
                          3: 323830343a326636383a3a2f33322d313238203d3e20323634383839.roa (hash: SelNCK+n7byE6x3SkITTF46op56QPsSXAXJb+Wg0J/I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/02841926F957B15864E9B2B024AD350B3F57EC78.crl
                          rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/02841926F957B15864E9B2B024AD350B3F57EC78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02841926F957B15864E9B2B024AD350B3F57EC78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 07:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:fb:f0:6e:e9:30:4f:3e:86:f6:9f:b1:d7:5c:57:3b:ae:3f:ac:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02841926F957B15864E9B2B024AD350B3F57EC78
        Validity
            Not Before: Aug 26 06:54:35 2026 GMT
            Not After : Aug 27 07:06:35 2026 GMT
        Subject: CN=97A06560EF8CEF9AB6A6BBFF1CEEABC7124C9B1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:76:9d:28:f1:ab:fe:a1:f3:ba:ba:b0:21:39:
                    89:4e:13:86:43:79:ad:58:9e:0b:16:6e:b6:aa:64:
                    c3:3c:4c:f1:2b:9c:05:63:1e:26:e0:3c:72:71:8c:
                    2b:01:eb:f7:14:5c:84:4b:2c:04:e4:a7:7d:7f:59:
                    97:07:30:ce:f5:9d:e3:8e:2e:8d:99:5a:d3:81:03:
                    e9:ec:c3:3e:02:29:86:cc:6b:fd:62:6d:a0:93:9b:
                    11:61:e6:f3:ed:05:4c:ad:22:78:47:b0:fa:17:bf:
                    c7:72:04:c0:a0:d3:ff:fa:af:5f:15:f8:c8:96:d3:
                    a3:25:34:b9:98:8b:c7:b8:0d:4e:05:24:0e:03:2c:
                    33:e0:b3:9d:cb:b5:b2:d9:d8:88:a5:47:12:27:52:
                    86:84:3d:ff:33:85:0e:5e:6a:7d:09:d1:18:7c:37:
                    ce:f4:d9:b1:ea:0b:0d:b6:d5:9d:f4:da:3a:8e:ec:
                    8a:aa:6d:c4:fe:4f:cf:3e:54:dc:c4:83:9e:ea:ac:
                    a2:e6:d0:b1:a7:a6:cb:af:18:ff:8a:7d:b2:bf:b2:
                    0b:d7:40:c6:21:cc:f3:2f:28:38:b7:9a:6a:30:e8:
                    6f:e5:59:98:62:cc:d8:26:14:f8:bd:ff:e1:e2:d8:
                    f9:7d:90:fd:4b:17:69:3b:07:e4:bc:77:d7:e9:8a:
                    b5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A0:65:60:EF:8C:EF:9A:B6:A6:BB:FF:1C:EE:AB:C7:12:4C:9B:1D
            X509v3 Authority Key Identifier:
                keyid:02:84:19:26:F9:57:B1:58:64:E9:B2:B0:24:AD:35:0B:3F:57:EC:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/02841926F957B15864E9B2B024AD350B3F57EC78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02841926F957B15864E9B2B024AD350B3F57EC78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/02841926F957B15864E9B2B024AD350B3F57EC78.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:5e:c0:f6:e5:c0:c6:df:5b:0c:70:b7:47:aa:ae:04:9f:f3:
         ce:d2:c3:91:7c:9c:ef:8e:40:36:21:0d:b4:f2:6b:c0:03:19:
         b0:ed:a2:f6:81:14:63:95:1d:3c:c4:44:95:36:f6:fe:6f:c7:
         18:37:c3:1a:af:17:e7:0f:e4:59:ae:dd:76:e6:06:35:61:b3:
         70:a9:a7:ec:24:9c:a6:0e:eb:58:e8:c0:07:91:b4:0c:f3:c7:
         b5:35:e6:f5:c7:b3:d9:14:59:e3:01:5c:3f:27:0d:c7:64:5c:
         5a:94:f8:a5:d4:dc:06:69:c9:d5:bc:ec:ac:81:79:c1:d0:36:
         5b:75:c9:4f:c6:63:77:af:08:cd:11:f2:80:ca:f7:95:14:6c:
         11:42:e2:07:c8:49:d0:bd:ce:3f:21:df:d3:76:4c:60:c1:4d:
         3a:96:cc:29:89:24:7b:d9:e0:b8:66:9f:f0:bb:8d:60:54:7c:
         d8:de:cd:20:0e:ca:27:30:7b:15:e3:5f:2a:59:03:31:15:3c:
         90:e9:77:14:ce:84:d6:7b:4e:0d:59:af:0a:bc:64:6a:3b:c1:
         e8:89:3a:3a:5e:be:65:e1:0f:8a:78:62:5a:b5:3a:2e:59:6b:
         b0:ec:7d:96:b0:aa:16:bf:97:80:78:0d:03:2c:da:f0:50:0c:
         58:71:22:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:59:54 2026 by rpki-client