Error: rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft
File:                     D2FC8637672F6995F171A261D51674A50FE454A6.mft (raw, json)
Hash identifier:          RckL5leBNW10JN6UHkIHxWhGyH1LtAWY3Tj4oqP9kkg=
Subject key identifier:   A6:20:B9:48:AD:30:7D:D7:0C:51:C9:2F:C4:4C:ED:8F:3B:42:0C:EA
Authority key identifier: D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6
Certificate issuer:       /CN=D2FC8637672F6995F171A261D51674A50FE454A6
Certificate serial:       22936AA8CE680CBD6D140316A0EFBA6B9C946BDB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft
Manifest number:          0480
Signing time:             Sat 22 Aug 2026 11:10:00 +0000
Manifest this update:     Sat 22 Aug 2026 11:05:00 +0000
Manifest next update:     Sun 23 Aug 2026 13:38:00 +0000
Files and hashes:         1: 323830343a346265303a3a2f33332d3333203d3e20323637333334.roa (hash: xWKs2MipihXxzqW+9K8qFQCXsWQCpHuxCy1DLfFGWOo=)
                          2: 323830343a346265303a383030303a3a2f33342d3334203d3e20323637333334.roa (hash: dbyHcT+WPlp5FVMKEMjK8+it8GRMeEQdQl+5GHqVSuY=)
                          3: 34352e3233332e3235322e302f32322d3232203d3e20323637333334.roa (hash: 1UswwfBXHmuieTD6Y4yJlMuOxyZ5tOHFADZLxYj5p+I=)
                          4: 323830343a346265303a633030303a3a2f33342d3334203d3e20323637333334.roa (hash: 6FiIqFD4BA0F4EwSW3P6ekKNWYGR3g9PC/cmQmzMsCY=)
                          5: 34352e3233332e3235352e302f32342d3234203d3e20323637333334.roa (hash: UmL9+Do3hDCC9iZvlhbwNAU+BIx24uWbSydpIv4oE5Q=)
                          6: 34352e3233332e3235322e302f32342d3234203d3e20323637333334.roa (hash: YOSK2fhrIRrZIoN2z6lFS0rEplWgSdy33jcOY7F+GYA=)
                          7: D2FC8637672F6995F171A261D51674A50FE454A6.crl (hash: eB2ZrZqSccGWC4yn7ZsP1raQijPBImcF9+8Z6jJ38uU=)
                          8: 34352e3233332e3235322e302f32332d3233203d3e20323637333334.roa (hash: ouAK0kg+/aVpVcCbP4bexh8VaG4XPjMUX+oO6I58BDo=)
                          9: 34352e3233332e3235332e302f32342d3234203d3e20323637333334.roa (hash: +RyxeuoxhIKAMJEFMFWIS8Ulh+f+4ywuY0/2h9LL3ZI=)
                          10: 323830343a346265303a383030303a3a2f33332d3333203d3e20323637333334.roa (hash: Uc1aN6iWD8f8P9eEDgxgniCHPV3udq5wKyIMhj5Ggxw=)
                          11: 323830343a346265303a3a2f33322d3332203d3e20323637333334.roa (hash: bPDjHNBUl/H6ulvwmhReA/RBgXTLcWuKJZY4ftKoDkc=)
                          12: 323830343a346265303a3a2f33342d3334203d3e20323637333334.roa (hash: G+RNKtP53PWokExgTrWiduE47E7/QZcfxFmzIPS3wvY=)
                          13: 34352e3233332e3235342e302f32332d3233203d3e20323637333334.roa (hash: QCv6+deZd8kWe76fqsJ8iIYvPbvZxchVE1dwaxoIxkw=)
                          14: 323830343a346265303a343030303a3a2f33342d3334203d3e20323637333334.roa (hash: wrniQHnF8nS0MuQ4m91PKnaCakmlJ1TuIBqSLuoiyQk=)
                          15: 34352e3233332e3235342e302f32342d3234203d3e20323637333334.roa (hash: j2qGuSPvxexL96NEu1I1xCgoaChpbHCA9ZE87e2oaPQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl
                          rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 13:38:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:93:6a:a8:ce:68:0c:bd:6d:14:03:16:a0:ef:ba:6b:9c:94:6b:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2FC8637672F6995F171A261D51674A50FE454A6
        Validity
            Not Before: Aug 22 11:05:00 2026 GMT
            Not After : Aug 23 13:38:00 2026 GMT
        Subject: CN=A620B948AD307DD70C51C92FC44CED8F3B420CEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:66:dc:39:cb:8d:bb:85:fd:5b:e9:16:34:92:
                    40:8e:5b:72:e6:6b:f0:68:8d:ca:99:28:6c:f9:0e:
                    66:20:ad:5a:b2:05:a7:52:19:b0:5f:ff:bc:1a:e3:
                    1f:f7:6c:25:bd:2a:cc:11:8d:e7:ac:6d:d8:f2:e1:
                    88:e0:f5:60:30:78:a5:48:67:b6:87:cf:a5:7f:40:
                    ff:77:ec:46:51:e4:0f:d2:a2:1d:26:bf:91:0f:84:
                    21:c6:2d:60:db:e1:b7:e1:64:59:d9:6a:e3:95:72:
                    fe:51:df:f2:c5:a1:71:86:e1:49:6c:92:28:f2:2f:
                    43:17:fd:be:b3:5b:9e:92:be:b7:78:0a:23:b5:33:
                    0f:ca:f4:70:e2:c2:bc:5b:9c:44:7c:62:a3:38:48:
                    3f:eb:c2:18:fb:81:20:87:bf:66:73:6c:f1:9b:1e:
                    7f:ed:53:5c:a6:37:03:54:2c:6b:38:14:42:a4:63:
                    c4:cb:5b:74:fe:1b:17:50:52:56:89:99:16:08:47:
                    5e:3e:93:0f:10:a8:9a:29:9d:4d:fa:16:e9:5a:de:
                    41:47:6e:ab:9a:34:e8:21:12:82:f6:42:60:f4:15:
                    db:3c:8a:43:ee:12:da:1e:07:d5:42:dc:b2:7d:49:
                    20:93:77:69:a9:97:13:87:21:25:82:69:5b:05:bf:
                    14:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:20:B9:48:AD:30:7D:D7:0C:51:C9:2F:C4:4C:ED:8F:3B:42:0C:EA
            X509v3 Authority Key Identifier:
                keyid:D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:34:3d:dd:45:38:2a:a1:ea:a1:dc:71:7b:a4:ed:2a:02:13:
         d4:72:03:d8:a9:dc:bc:b9:c1:33:f1:42:a9:7e:2d:f6:46:14:
         d5:a7:f6:07:51:55:55:75:1d:48:d8:a2:86:f1:e7:99:81:87:
         7b:9a:07:29:cf:70:d8:6a:ea:91:5d:a6:11:4f:19:d9:de:64:
         f1:ae:aa:5d:94:16:7e:07:87:1a:fd:48:76:5b:c2:d1:b9:4d:
         77:75:5f:d0:2a:ab:22:a3:1f:e7:d9:08:63:2e:e7:af:78:12:
         f0:50:98:ba:84:e9:e0:ac:33:38:61:94:78:81:24:87:d4:28:
         2c:59:5c:4f:d1:86:5d:04:e3:fb:7d:ff:e0:72:dc:58:fe:cf:
         b8:76:9f:b8:a8:1e:13:2b:51:ca:ba:ff:4a:f2:29:de:1d:0e:
         60:5c:53:a9:40:0d:f3:b0:bc:9a:59:7b:e4:84:bf:30:1d:da:
         fc:39:e4:de:7c:a3:2c:08:a1:a1:28:e7:29:ea:27:7f:ae:67:
         80:0f:72:85:78:6b:03:bc:80:9a:85:27:1d:dc:9b:00:46:47:
         51:91:4e:61:f2:37:1d:07:6d:9a:0c:d1:bb:bf:19:23:18:00:
         44:ef:f8:08:14:25:10:d8:d7:f1:92:5f:8c:85:6a:0b:01:e8:
         aa:a6:d7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 23:50:29 2026 by rpki-client