Error: rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft
File:                     942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft (raw, json)
Hash identifier:          ryU5I6fAiMeBsQbszXcqMULuGmwa3M5wl/Mne06zz4Q=
Subject key identifier:   81:80:B2:79:10:4A:29:41:C9:4F:C5:CE:45:A7:2D:27:40:8E:B7:81
Authority key identifier: 94:2F:2D:5A:E5:5B:72:15:DF:CC:A7:9C:55:2D:22:3D:29:B7:1D:FF
Certificate issuer:       /CN=942F2D5AE55B7215DFCCA79C552D223D29B71DFF
Certificate serial:       1C98525C24DB63C9044A4CB7A0BB5556F7220013
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft
Manifest number:          0489
Signing time:             Sat 22 Aug 2026 17:02:53 +0000
Manifest this update:     Sat 22 Aug 2026 16:57:53 +0000
Manifest next update:     Sun 23 Aug 2026 17:38:53 +0000
Files and hashes:         1: 942F2D5AE55B7215DFCCA79C552D223D29B71DFF.crl (hash: wyyET1DGhGa7Xe1zXLwWevcUDf7Wv1xZ5zRGmvFFB8s=)
                          2: 3230312e3138322e3233362e302f32322d3332203d3e20323637353439.roa (hash: GZlkc04TEiHS/yGu7rHFVGgZRHXaY2e7fADLFday7lc=)
                          3: 323830343a343331633a3a2f33322d313238203d3e20323637353439.roa (hash: QyXOQDEs96gWpD7KTDqJA1FGdGMTzFA2NR1MSDpVqME=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.crl
                          rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 17:38:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:98:52:5c:24:db:63:c9:04:4a:4c:b7:a0:bb:55:56:f7:22:00:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=942F2D5AE55B7215DFCCA79C552D223D29B71DFF
        Validity
            Not Before: Aug 22 16:57:53 2026 GMT
            Not After : Aug 23 17:38:53 2026 GMT
        Subject: CN=8180B279104A2941C94FC5CE45A72D27408EB781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:64:71:a9:16:d0:7b:8d:db:0d:42:bd:e7:b2:
                    e4:2e:96:78:85:1a:9b:c0:46:3d:5d:10:f7:4d:66:
                    63:9f:c8:b3:7d:bf:b8:40:e2:f2:29:0d:a5:78:e2:
                    c7:d2:ce:b7:c5:99:3f:d4:9b:01:d4:df:19:e4:83:
                    8c:fd:e8:fb:fe:59:77:95:c0:5e:25:26:24:51:a7:
                    5f:59:15:23:d7:81:be:cd:17:16:69:44:3d:05:12:
                    34:4d:fd:b9:fa:85:3d:7c:4d:1e:c2:5e:8d:0f:04:
                    42:bf:34:8e:29:7d:1e:a3:66:17:fd:fc:2d:a3:71:
                    d8:6b:4d:d2:6f:d4:56:ef:89:c7:d3:86:4c:ef:71:
                    ae:ea:6c:b3:e5:73:fb:4f:eb:95:4c:98:83:9b:ab:
                    a1:46:48:3f:d8:2f:1f:52:5a:e0:34:8d:3f:ec:ca:
                    ef:5e:75:a3:cf:2b:bb:0e:56:c9:9b:d7:5c:c0:dc:
                    dd:a4:b3:97:9e:bc:c8:5b:30:3c:a7:9f:3b:17:f4:
                    2e:6e:b2:e6:32:71:a5:f7:1e:5b:01:64:71:a0:1a:
                    d4:39:ce:cd:a3:8d:ce:1f:00:b7:89:12:5e:da:7f:
                    45:c0:87:db:ef:a9:8f:52:d1:ac:25:83:e1:67:59:
                    cf:3b:a1:6a:a8:37:ba:49:a5:87:16:14:f2:99:3e:
                    ec:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:80:B2:79:10:4A:29:41:C9:4F:C5:CE:45:A7:2D:27:40:8E:B7:81
            X509v3 Authority Key Identifier:
                keyid:94:2F:2D:5A:E5:5B:72:15:DF:CC:A7:9C:55:2D:22:3D:29:B7:1D:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:e8:51:f9:a9:8e:92:17:71:f5:d8:dc:a9:b7:68:c8:21:89:
         e3:40:93:a9:d3:1a:0e:07:6b:25:0b:2b:9b:52:b1:4b:4e:3c:
         cf:99:9a:8d:0d:ed:f7:e5:c6:05:3c:d3:54:19:9e:ff:e0:e0:
         7c:16:ea:3b:6b:93:5f:5d:b9:d8:77:a1:de:9b:9a:fd:87:e7:
         8c:42:85:27:b3:d8:4b:fa:4d:2e:61:44:ba:53:f2:46:3a:3d:
         d5:1c:3c:1d:ff:08:17:01:e4:18:69:bb:fb:bb:c3:6d:c8:f2:
         b7:96:f1:b8:88:3a:36:e8:df:62:e4:c7:86:84:c9:e0:e9:07:
         ee:28:05:eb:74:ab:96:83:cf:d8:c5:04:c4:39:c1:2a:c9:e2:
         eb:06:bd:43:9a:09:9a:7f:d5:f2:3b:94:79:0d:b9:20:52:25:
         25:5d:f5:04:72:89:ab:dd:3b:d5:fc:a1:5c:32:bd:f3:8b:fb:
         e9:5b:7a:03:4b:cd:30:32:ac:37:0d:9b:c5:f7:a6:9b:cd:76:
         85:e3:de:96:8b:4e:49:e8:7e:5b:55:f8:e5:54:85:92:07:4b:
         7a:0f:ec:eb:6d:b5:2b:fd:37:d5:54:a2:08:a1:a8:dc:1a:01:
         d7:df:8a:43:a8:94:f6:10:a3:50:49:f7:1a:2d:b2:8f:10:38:
         4f:ba:1a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 06:21:11 2026 by rpki-client