Error: rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.mft
File:                     B87E403FD04360E1BA519D841853FF5C9E675A23.mft (raw, json)
Hash identifier:          QRVYNOIA7VcygcpG4WfI1q9d+9qxSu6MVJAnecnWDt8=
Subject key identifier:   00:4B:2F:7D:7B:45:4C:75:C6:53:17:F7:43:0A:AE:5A:C3:F4:64:9F
Authority key identifier: B8:7E:40:3F:D0:43:60:E1:BA:51:9D:84:18:53:FF:5C:9E:67:5A:23
Certificate issuer:       /CN=B87E403FD04360E1BA519D841853FF5C9E675A23
Certificate serial:       577975C4EE525B0DDDC15F91C980A5787BCC423B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87E403FD04360E1BA519D841853FF5C9E675A23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.mft
Manifest number:          0487
Signing time:             Mon 24 Aug 2026 05:40:00 +0000
Manifest this update:     Mon 24 Aug 2026 05:35:00 +0000
Manifest next update:     Tue 25 Aug 2026 06:12:00 +0000
Files and hashes:         1: 3138362e3232352e3232342e302f32302d3234203d3e203533313735.roa (hash: 3xgsu1pHTWuTWQdqHsbtS5Wo+t3AhSOEF8+FR+NOUm4=)
                          2: 3136382e39302e3132302e302f32322d3234203d3e203533313735.roa (hash: eBYBxMd1wYKS09u/vcHU+DE6KqA3Wgb8IV6A4CbZ+88=)
                          3: 323830343a3161633a3a2f33322d3634203d3e203533313735.roa (hash: EyC6TVD2WdgqtF+jmhfm0vmhVQV+xzcDk5GfxuG3x7g=)
                          4: 3138362e3232352e3234302e302f32302d3234203d3e203533313735.roa (hash: OchuggbZCjy6aWRSohSZHYvtyblQRmHfPSa4qlAIHho=)
                          5: B87E403FD04360E1BA519D841853FF5C9E675A23.crl (hash: J2OZ9Blu7ee1naaLhZgLiwMBI5XpPBNuDUYCU9AmCik=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.crl
                          rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87E403FD04360E1BA519D841853FF5C9E675A23.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 06:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:79:75:c4:ee:52:5b:0d:dd:c1:5f:91:c9:80:a5:78:7b:cc:42:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B87E403FD04360E1BA519D841853FF5C9E675A23
        Validity
            Not Before: Aug 24 05:35:00 2026 GMT
            Not After : Aug 25 06:12:00 2026 GMT
        Subject: CN=004B2F7D7B454C75C65317F7430AAE5AC3F4649F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:be:e2:d0:ad:ac:4c:56:cc:52:36:47:7d:e7:
                    df:ec:bd:59:f7:8b:7e:1b:d1:74:71:df:f9:3f:e3:
                    f0:6c:72:6c:24:1e:11:61:11:a1:76:99:b7:0a:d1:
                    8e:23:b2:13:09:4f:e8:be:d6:98:19:99:8a:8d:99:
                    22:7f:9b:84:71:38:ad:e3:ab:90:1a:43:5d:dc:6b:
                    0c:17:de:ac:de:de:1d:e1:2e:91:7c:a8:72:ac:ab:
                    b4:fb:8c:26:0d:13:91:fc:44:e2:da:d5:2c:8f:ad:
                    69:f0:98:53:77:61:b0:94:a6:67:7d:1e:67:41:42:
                    d2:e4:13:1d:8b:b7:79:e4:e4:ab:2d:4b:e3:44:d2:
                    d5:03:6c:37:56:79:25:56:7b:87:a2:97:47:80:02:
                    b8:82:8a:cb:24:2b:d6:28:60:59:a1:d5:32:48:07:
                    be:7f:6f:c1:53:ca:95:6c:6a:51:dd:1b:ab:b6:39:
                    e0:0f:8c:3e:2a:f2:0b:02:66:19:59:36:ed:0a:b9:
                    02:85:5f:bf:cb:10:c9:03:15:fe:8c:0f:38:72:b0:
                    4a:ec:b6:a3:47:6a:52:0a:49:e3:f7:5f:1d:e7:39:
                    92:27:b2:91:68:d1:bc:1e:9e:b6:b8:f9:1f:6a:08:
                    cb:9e:01:f6:2e:db:f4:c3:f0:47:a0:69:85:20:15:
                    40:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:4B:2F:7D:7B:45:4C:75:C6:53:17:F7:43:0A:AE:5A:C3:F4:64:9F
            X509v3 Authority Key Identifier:
                keyid:B8:7E:40:3F:D0:43:60:E1:BA:51:9D:84:18:53:FF:5C:9E:67:5A:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87E403FD04360E1BA519D841853FF5C9E675A23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:55:ab:ab:b8:d5:13:7a:76:52:d5:16:35:98:c1:b1:5a:70:
         90:d7:dd:4a:c2:86:f5:b7:9b:39:03:2d:71:6c:b2:f7:5d:ab:
         f9:d1:32:ae:30:12:e2:0a:84:b4:f0:d1:4a:5a:8b:d1:9f:7c:
         af:62:4c:54:11:a6:e0:70:fc:90:90:eb:90:7b:3f:dc:03:c6:
         61:0b:78:9d:5f:e0:12:49:1c:fc:32:f9:de:ba:5f:e3:27:48:
         c7:b8:f4:15:46:9c:1c:94:83:95:72:5f:cf:12:ef:b5:dc:8a:
         f5:d3:c4:77:95:97:f9:af:df:21:66:84:d2:ce:b3:ba:34:7d:
         cd:ed:75:bb:75:64:4a:6a:e0:bd:d1:83:00:5a:b2:44:80:8c:
         e1:14:71:d6:0b:68:2f:b5:9f:9b:6e:a7:68:6e:f7:96:6e:ec:
         10:8d:e3:46:3a:ed:d9:91:d7:e8:32:05:bf:3a:f4:cb:66:50:
         23:22:d8:6e:e0:c1:a8:3e:90:dd:c4:4a:d3:81:f9:c8:30:89:
         91:40:e5:5d:7a:6b:ea:17:65:e7:a8:1a:b8:d5:78:9d:40:e6:
         87:50:aa:4c:a9:b0:56:ad:c4:2c:38:a5:46:90:3b:52:f1:fd:
         9c:3a:2d:d9:25:59:94:f2:81:62:88:1c:21:ef:af:02:ee:40:
         cd:89:f6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 00:09:09 2026 by rpki-client