Error: rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.mft
File:                     5068952903F5F17C21FA5B2EC1BE472DF306072C.mft (raw, json)
Hash identifier:          sjtpWJoMslkWDQQoWc+O2Bdlq7mZEjRA1AfnKz2FHkU=
Subject key identifier:   9C:6D:8F:47:A5:40:9D:B9:3C:7C:9F:F8:FE:BC:AE:62:78:15:94:80
Authority key identifier: 50:68:95:29:03:F5:F1:7C:21:FA:5B:2E:C1:BE:47:2D:F3:06:07:2C
Certificate issuer:       /CN=5068952903F5F17C21FA5B2EC1BE472DF306072C
Certificate serial:       47E2152C86C1E14B2F9220E8F14AEEFF27F18EBF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.mft
Manifest number:          0440
Signing time:             Mon 24 Aug 2026 02:18:42 +0000
Manifest this update:     Mon 24 Aug 2026 02:13:42 +0000
Manifest next update:     Tue 25 Aug 2026 05:35:42 +0000
Files and hashes:         1: 3137302e37392e302e302f32322d3332203d3e20323636323839.roa (hash: rZTaXIKnQiw3eVa41BnmNEPOZgvOEZc3ujp2ZY+jsfM=)
                          2: 323830343a333537633a3a2f33322d313238203d3e20323636323839.roa (hash: /dqf7ZM/K7ViSc/f3cQWa28CIRpYIbbvi5ldhcT0hCw=)
                          3: 5068952903F5F17C21FA5B2EC1BE472DF306072C.crl (hash: QbXtP8xoYHUt420Ga0SYsEUiLxuC3BqWzYiEWu7ymZw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.crl
                          rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 05:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:e2:15:2c:86:c1:e1:4b:2f:92:20:e8:f1:4a:ee:ff:27:f1:8e:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5068952903F5F17C21FA5B2EC1BE472DF306072C
        Validity
            Not Before: Aug 24 02:13:42 2026 GMT
            Not After : Aug 25 05:35:42 2026 GMT
        Subject: CN=9C6D8F47A5409DB93C7C9FF8FEBCAE6278159480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cc:a5:64:ac:e1:df:8b:21:a2:d7:13:9d:05:
                    b8:1c:56:f4:91:20:79:d4:de:60:e0:1c:6c:ba:57:
                    bf:7b:8a:1a:59:19:b1:1b:3b:0f:fe:13:98:b2:cb:
                    0b:bb:39:ca:71:99:60:b7:07:98:c5:7a:b2:1b:d8:
                    d2:58:18:1e:4e:3a:1f:29:2b:6d:09:ec:a7:12:2c:
                    d4:6d:a2:ee:6a:8f:4d:3d:37:08:be:d7:6a:b2:57:
                    34:c8:3e:f7:29:3d:a2:98:27:71:0d:27:36:d9:c3:
                    fa:e8:85:4f:d3:ed:21:b1:37:87:21:c1:5e:61:29:
                    9f:2e:d0:f5:66:23:aa:41:21:5f:5b:20:6b:98:ae:
                    3d:9c:f4:3b:46:ae:cc:3b:cb:93:90:30:a7:d3:34:
                    d7:92:a6:86:f5:56:01:53:08:12:85:51:74:2d:06:
                    c5:7a:7c:94:f9:7a:3f:c2:0c:2e:87:3b:d7:f4:78:
                    dc:68:8d:ae:07:18:c9:0a:d9:a2:7d:e9:4d:19:eb:
                    36:99:3d:02:50:02:64:5a:fd:3a:c3:71:f9:c2:3e:
                    a9:78:96:5a:02:b0:0d:75:99:62:a0:e0:1c:64:41:
                    f6:50:a2:ea:70:92:78:36:10:db:38:8a:be:bc:c0:
                    33:4e:2f:74:ad:79:6e:db:84:77:e9:2a:25:86:11:
                    35:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6D:8F:47:A5:40:9D:B9:3C:7C:9F:F8:FE:BC:AE:62:78:15:94:80
            X509v3 Authority Key Identifier:
                keyid:50:68:95:29:03:F5:F1:7C:21:FA:5B:2E:C1:BE:47:2D:F3:06:07:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:5b:a3:9d:9f:2f:54:1f:2d:0f:e2:cf:1d:f1:3f:42:2c:79:
         c2:b7:85:bb:32:99:ea:f8:46:2e:b9:06:ad:13:2a:c8:01:40:
         ba:6b:bd:88:c9:fc:c0:82:7b:09:ae:cb:98:3f:49:a7:39:2e:
         f9:38:82:ae:0c:0a:78:1f:64:58:a5:e2:82:7d:c1:31:d9:98:
         56:73:4a:bc:8c:fc:4f:b3:f6:5c:34:24:e5:1c:b5:e8:9c:bb:
         d4:b2:e4:1a:3f:ce:9b:8a:92:e8:98:c9:29:ee:c8:c5:eb:59:
         28:67:14:8e:e6:c8:6f:b5:46:19:df:12:cc:be:02:90:88:bd:
         f5:2e:b4:6e:ba:06:61:ff:61:88:0e:e4:46:a1:4e:1b:d7:47:
         b7:df:c0:93:d7:05:6c:af:ad:5e:b9:99:54:5b:85:c7:1f:55:
         f7:ab:60:d6:19:2b:98:b9:c0:cb:4d:eb:18:b4:7b:79:6f:4f:
         cf:c9:25:68:df:90:dd:14:c7:bd:e2:20:b8:61:1c:06:ed:13:
         da:3c:73:64:f9:07:b4:9c:92:be:75:d6:10:9f:8f:b4:80:a0:
         43:e1:29:a5:2f:03:c5:0e:b4:97:50:cd:1a:1b:01:bf:a2:87:
         c4:e5:19:7b:c4:09:3b:fd:e5:9a:5b:6d:82:32:ac:dd:4d:2c:
         36:98:66:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 06:55:52 2026 by rpki-client