Error: rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft
File:                     DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft (raw, json)
Hash identifier:          pSghPxqdabMpd+rnumLaitOnQ6UyJSfPmvutEPJNuFw=
Subject key identifier:   5E:DB:C4:52:5E:BC:D4:C5:CF:5E:94:91:42:EA:00:6E:BD:17:75:49
Authority key identifier: DD:0E:EA:2C:C8:09:C7:ED:52:CD:2A:24:D1:44:54:39:0A:C2:46:4C
Certificate issuer:       /CN=DD0EEA2CC809C7ED52CD2A24D14454390AC2464C
Certificate serial:       19FACAAABC2F1E3AA1E484B14EE78798CD874C0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft
Manifest number:          051C
Signing time:             Sun 23 Aug 2026 02:50:00 +0000
Manifest this update:     Sun 23 Aug 2026 02:45:00 +0000
Manifest next update:     Mon 24 Aug 2026 02:50:00 +0000
Files and hashes:         1: DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.crl (hash: UHAawK2AqxhyP8mHLIbw6K0eJoOBqTeJKzEpkLHlqJ4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.crl
                          rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 02:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:fa:ca:aa:bc:2f:1e:3a:a1:e4:84:b1:4e:e7:87:98:cd:87:4c:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD0EEA2CC809C7ED52CD2A24D14454390AC2464C
        Validity
            Not Before: Aug 23 02:45:00 2026 GMT
            Not After : Aug 30 02:50:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:71:ba:a0:9b:6a:12:39:d6:bd:0f:c0:46:95:
                    f6:93:33:2f:d0:c3:50:c2:a0:ec:7b:cd:96:8a:fe:
                    e9:08:b2:83:94:fb:19:52:a9:7a:30:a8:84:fe:a6:
                    3a:f7:79:2d:49:c1:23:da:65:83:4e:e1:a5:3f:27:
                    52:5b:2b:03:86:c1:62:01:9c:45:5a:b9:67:ca:3c:
                    df:2e:f4:65:5b:13:90:43:31:cd:80:d2:11:ed:13:
                    e0:1c:f2:c0:e4:72:ce:d8:5a:8f:15:f8:01:b8:ee:
                    a7:3c:e4:c2:dc:33:18:9b:14:9c:c5:36:b8:d7:bf:
                    d3:0e:0d:c4:ea:6e:cf:7d:2f:cb:23:fe:c4:6c:f1:
                    16:1c:8b:22:b1:1d:ff:80:90:04:02:34:c7:fe:8b:
                    e2:36:0a:86:f5:47:72:48:e4:5a:cb:61:c6:cc:be:
                    f9:e1:e4:6e:dc:67:ba:10:35:ad:64:7b:1a:d1:48:
                    c9:db:66:68:3f:9e:ed:c6:d7:f7:04:f8:1a:7e:78:
                    d8:e6:37:4d:35:33:05:69:15:ac:65:e4:b8:3c:5c:
                    40:0e:cd:f8:1d:da:fe:55:4d:02:e6:39:a2:18:c1:
                    f8:16:09:f8:cb:7e:53:63:d7:94:a2:61:34:ec:13:
                    4e:89:c4:31:1b:37:ed:50:f8:a8:41:36:0d:4b:f3:
                    4e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:DB:C4:52:5E:BC:D4:C5:CF:5E:94:91:42:EA:00:6E:BD:17:75:49
            X509v3 Authority Key Identifier:
                keyid:DD:0E:EA:2C:C8:09:C7:ED:52:CD:2A:24:D1:44:54:39:0A:C2:46:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:85:5c:9d:32:f3:1d:a8:d9:be:ad:a4:8c:bf:3c:ce:9a:7a:
         e4:2d:2d:bf:90:ec:0d:4e:94:dc:df:e9:34:b0:d7:cb:2f:6d:
         6a:cb:74:0f:40:5c:6c:49:ca:b9:d3:59:cc:68:87:cc:fe:75:
         da:f7:42:58:29:82:8d:fe:a6:77:b9:52:4d:a9:f7:df:7b:66:
         f6:b9:9e:4a:3a:64:cf:f0:c0:2a:ad:68:6c:1f:18:da:c7:97:
         14:b1:75:38:35:7f:16:b3:6f:13:c6:7f:c4:4a:ec:08:e1:56:
         9c:6e:12:6d:97:be:b5:36:71:97:01:9b:f9:97:54:4f:14:53:
         ee:89:e5:4b:4d:d5:47:cb:79:a2:18:36:77:1c:ad:63:cf:13:
         fb:d7:df:77:d1:c5:53:55:9c:ab:59:59:76:00:9e:94:40:ad:
         c1:a5:ce:6b:72:8c:1a:a7:7e:cd:5e:d1:c7:26:f8:c3:8b:50:
         e1:36:aa:08:8b:70:4b:ec:df:99:74:f7:8e:bc:85:5d:08:8a:
         df:d3:a7:9c:60:38:50:da:2a:55:81:dd:5a:c8:76:4d:ff:e4:
         8b:8a:29:55:8d:5b:90:ca:18:a2:36:83:e3:48:77:04:7a:7a:
         dd:83:66:c2:37:db:fc:f9:25:f0:42:79:14:4d:1d:c2:37:7c:
         05:54:e0:41
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Aug 23 05:09:43 2026 by rpki-client