Error: rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.mft
File:                     E98018CD2C68060BD13517BC1BB31EAD6E73038A.mft (raw, json)
Hash identifier:          hkRUPnTcKi6pkv8J46chf4ufx7E32bV6o1BQO5a9Ibw=
Subject key identifier:   C7:ED:C2:69:35:B5:8D:6C:B0:CD:ED:04:FC:CB:AC:90:76:F4:7D:A7
Authority key identifier: E9:80:18:CD:2C:68:06:0B:D1:35:17:BC:1B:B3:1E:AD:6E:73:03:8A
Certificate issuer:       /CN=E98018CD2C68060BD13517BC1BB31EAD6E73038A
Certificate serial:       09BAF44C43FE50C3FC328AA4611776EAFC957D13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.mft
Manifest number:          048D
Signing time:             Sat 22 Aug 2026 21:10:00 +0000
Manifest this update:     Sat 22 Aug 2026 21:05:00 +0000
Manifest next update:     Sun 23 Aug 2026 22:42:00 +0000
Files and hashes:         1: E98018CD2C68060BD13517BC1BB31EAD6E73038A.crl (hash: 6MbT/XC4Uhgje5JuKO5z8CxTvMtCA0B38k8KaddcBSI=)
                          2: 3136382e302e3234382e302f32322d3234203d3e20323632373535.roa (hash: 0CZXt0UnajiGKsJyiX26vzLF6q1LpiU2bW+wAJE8iMY=)
                          3: 323830343a3139633a3a2f33322d3438203d3e20323632373535.roa (hash: bV7kjVQfshS1Gs6Zk0yjJpODNwkBjEfaGiLXQxvVl8A=)
                          4: 3137302e38312e3138382e302f32322d3234203d3e20323632373535.roa (hash: gTFfMSTjK6XQ/Fgp9NPEcPcRjjvMDtvOIW4h04EDh4o=)
                          5: 3138362e3232342e302e302f32302d3234203d3e20323632373535.roa (hash: tzNQmKtKT7DcMJ5hNaLI9DJwW5AdtT2dIlsCg8gSLJQ=)
                          6: 3137302e3233382e38382e302f32322d3234203d3e20323632373535.roa (hash: cegYiEZ25O9/w0DZDDTNeCXKhb+KTtiuDLeFpoPKv34=)
                          7: 3133382e302e33322e302f32322d3234203d3e20323632373535.roa (hash: /PSvItM2MpjD0s9HMVuC1Gv6V+AncXqX9tGL62Wwtjo=)
                          8: 3138362e3232342e31362e302f32312d3234203d3e20323632373535.roa (hash: tY2WEy1xLetzLSVwoWwMJhPt0vChUjtGJQ6mUzN/FSE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.crl
                          rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 22:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ba:f4:4c:43:fe:50:c3:fc:32:8a:a4:61:17:76:ea:fc:95:7d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E98018CD2C68060BD13517BC1BB31EAD6E73038A
        Validity
            Not Before: Aug 22 21:05:00 2026 GMT
            Not After : Aug 23 22:42:00 2026 GMT
        Subject: CN=C7EDC26935B58D6CB0CDED04FCCBAC9076F47DA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6b:c8:74:85:35:75:94:01:c1:4a:14:ce:a2:
                    a4:e1:ee:2c:ad:6a:e8:70:75:75:21:42:94:ff:27:
                    71:e9:6c:2e:cf:ed:f6:31:cb:65:69:70:15:03:55:
                    c2:65:d4:17:ee:35:1e:9a:01:2f:9d:79:d9:78:49:
                    a7:e8:63:76:b8:ef:4c:55:f5:14:62:b7:28:60:c6:
                    8e:4a:1e:6e:c1:8d:ad:90:c0:e6:fd:68:84:23:07:
                    7d:6c:30:65:e7:0e:00:76:3d:0b:7f:2a:c1:1f:7f:
                    94:71:71:f4:8a:d3:87:99:0e:98:50:a3:7c:d5:d7:
                    e1:90:5d:15:c0:04:89:ba:68:ef:39:58:5d:ce:ea:
                    69:88:a1:30:2c:40:10:b1:bf:12:c5:5f:d6:8f:03:
                    ae:e5:58:62:f4:40:fa:2b:69:49:20:b4:2a:d6:80:
                    f9:96:f1:4b:c4:e5:35:6f:17:15:3d:97:df:63:79:
                    de:32:06:3c:92:ae:ce:e8:b8:81:97:5e:23:70:92:
                    c5:94:ee:ee:0c:1d:0e:04:0d:be:73:00:f1:5f:f5:
                    9d:39:d8:dc:fa:7b:89:02:dc:85:18:ef:33:95:21:
                    25:b7:d4:0d:9e:ea:ce:34:8f:4d:a4:76:3c:f0:27:
                    f6:15:71:37:9a:e3:6c:21:d1:dc:59:86:ec:7b:92:
                    32:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:ED:C2:69:35:B5:8D:6C:B0:CD:ED:04:FC:CB:AC:90:76:F4:7D:A7
            X509v3 Authority Key Identifier:
                keyid:E9:80:18:CD:2C:68:06:0B:D1:35:17:BC:1B:B3:1E:AD:6E:73:03:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:c2:2f:66:2b:ee:79:c3:67:5a:4b:bc:39:49:76:91:bf:d9:
         72:4e:5d:2b:a2:e2:4e:7c:55:87:00:fa:f4:94:6e:41:ed:5f:
         31:1f:d9:0d:92:0f:30:ea:22:8c:5d:37:6c:90:9e:32:20:86:
         4f:06:fa:a1:66:75:e6:25:b2:9f:85:fd:c1:2c:2a:03:9f:7c:
         39:7c:6d:e7:13:93:19:ac:75:9f:e9:2c:21:6d:04:6d:ce:41:
         a1:90:22:5c:13:1a:14:f1:f3:b9:59:83:e4:ee:bc:30:21:70:
         e7:3e:9d:c5:be:32:f4:ef:9e:e7:c8:50:ad:23:88:48:ee:de:
         db:79:01:4d:d8:18:75:ed:ac:9c:d3:f0:49:a8:c7:50:93:b1:
         3d:23:af:0f:16:7b:97:84:c1:ba:33:85:f7:66:d1:28:20:67:
         60:d5:dd:e8:ea:47:c3:db:fd:89:65:49:09:b0:8e:1c:e3:8f:
         1f:3b:75:b9:d9:e3:ab:d8:9c:9d:f3:7e:f0:88:f7:76:15:e5:
         79:bb:5a:cb:3a:60:5c:86:36:a1:53:47:83:b4:05:0b:ce:21:
         5a:91:a5:b1:76:b0:58:f9:49:d5:07:7a:25:c9:db:9c:45:fa:
         f5:c4:a8:54:7c:8b:3a:a1:36:90:8d:4f:46:a6:f2:4e:81:ac:
         8c:29:3d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:08:01 2026 by rpki-client