Error: rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.mft
File:                     A5455EE25C6FEB15A12789F15E975474289CE800.mft (raw, json)
Hash identifier:          UB3g+XWKYYRn7bG0dWlIOoObRjnoqC7HsSXvBJ7/NTg=
Subject key identifier:   79:1D:FC:37:86:CA:49:D8:7D:97:50:BD:64:03:FC:25:8B:D1:73:2F
Authority key identifier: A5:45:5E:E2:5C:6F:EB:15:A1:27:89:F1:5E:97:54:74:28:9C:E8:00
Certificate issuer:       /CN=A5455EE25C6FEB15A12789F15E975474289CE800
Certificate serial:       46A3E442BDFC3002D3920699B88AD658D025F052
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5455EE25C6FEB15A12789F15E975474289CE800.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.mft
Manifest number:          0489
Signing time:             Tue 25 Aug 2026 08:45:52 +0000
Manifest this update:     Tue 25 Aug 2026 08:40:52 +0000
Manifest next update:     Wed 26 Aug 2026 09:27:52 +0000
Files and hashes:         1: 3134332e3235352e3132342e302f32322d3234203d3e20323632333433.roa (hash: ys27577PqH66BrurIrEVwQ5tEqgBqr5HUr4Rlja4vfQ=)
                          2: 323830343a3830633a3a2f33322d3438203d3e20323632333433.roa (hash: 4xd5JGaPOnIwdMy1RXiFR3AKjwGlJtBxV2lEsXXQd4c=)
                          3: 3137372e3132362e3132382e302f32302d3234203d3e20323632333433.roa (hash: j+57I9Y1dM/Gzg8JoCGwhAvHA66ijLzKmJrRLGy9ESY=)
                          4: A5455EE25C6FEB15A12789F15E975474289CE800.crl (hash: liYqguILhWiHYQF+OY0KPfQA7wlAylJFW9TLXN8xOMY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.crl
                          rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5455EE25C6FEB15A12789F15E975474289CE800.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 09:27:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a3:e4:42:bd:fc:30:02:d3:92:06:99:b8:8a:d6:58:d0:25:f0:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5455EE25C6FEB15A12789F15E975474289CE800
        Validity
            Not Before: Aug 25 08:40:52 2026 GMT
            Not After : Aug 26 09:27:52 2026 GMT
        Subject: CN=791DFC3786CA49D87D9750BD6403FC258BD1732F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:61:22:58:9c:52:ad:98:46:6f:da:c7:ff:ea:
                    67:02:6c:db:41:96:f9:91:2c:bf:e6:9b:9b:b7:e8:
                    ae:14:13:20:ce:ca:aa:48:d7:15:40:8a:4d:55:22:
                    74:f0:28:45:6b:ae:16:42:23:57:e5:9b:6e:b5:35:
                    05:58:52:4d:ac:9a:36:8e:b9:a6:86:fc:be:69:38:
                    42:47:00:b0:7b:f0:01:29:5c:ed:ba:c4:70:c4:15:
                    4a:4e:71:9f:e6:b3:89:3d:73:a1:c1:77:43:92:fd:
                    33:5c:25:e6:f7:18:2b:3f:57:06:84:2f:68:b6:4d:
                    08:96:81:79:cf:ca:a1:8d:64:a2:17:f5:0e:00:fe:
                    bb:5f:c0:cc:7d:cd:4e:29:4e:e9:f9:60:be:2b:ab:
                    42:aa:d7:3e:31:3b:dd:95:5a:d6:e9:ef:7a:7e:bf:
                    16:dd:d1:7c:65:5c:45:d7:e3:86:c7:f3:37:9e:3e:
                    44:8f:a9:0a:fd:d1:8a:7e:1d:43:2f:68:f1:d6:b6:
                    ae:c1:45:27:2d:46:66:d1:bd:b0:80:06:8f:31:b1:
                    02:b2:27:03:c1:9f:c2:ae:fa:b5:86:20:96:0d:31:
                    e0:5f:a2:a5:89:b5:0c:90:61:b7:e0:63:e8:9c:8c:
                    7d:1e:34:43:8e:2c:6d:0e:c5:d1:52:40:fd:f5:81:
                    91:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:1D:FC:37:86:CA:49:D8:7D:97:50:BD:64:03:FC:25:8B:D1:73:2F
            X509v3 Authority Key Identifier:
                keyid:A5:45:5E:E2:5C:6F:EB:15:A1:27:89:F1:5E:97:54:74:28:9C:E8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5455EE25C6FEB15A12789F15E975474289CE800.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:fd:64:35:d5:a3:87:d8:9b:e0:68:dc:a8:30:6a:32:d5:a7:
         05:25:0a:5c:35:98:48:f2:db:37:8d:bc:e4:93:90:dd:6c:41:
         15:ff:ae:f4:b5:7d:d3:c7:4f:40:b0:44:a6:9d:8c:24:60:57:
         33:d5:08:d0:48:0c:01:db:50:93:24:bc:b9:7b:84:0a:93:64:
         0d:ae:76:60:a3:82:9d:03:df:22:9e:a2:20:b6:26:9a:bb:eb:
         a8:b2:9d:5c:3b:c3:dc:ec:17:9a:d6:2f:2b:ae:a6:8b:e2:5a:
         53:25:c2:81:88:21:e7:82:b6:7b:66:b1:53:df:2a:19:48:f0:
         8a:02:5e:21:95:6e:78:9d:89:35:88:76:0f:30:d7:a9:57:15:
         62:62:05:18:b4:09:74:0c:2a:e2:1a:2e:ab:fc:98:9e:3f:b6:
         b6:d0:fe:f2:60:e3:3d:5b:2f:c8:3d:63:94:e7:62:09:df:63:
         54:f4:8f:d6:1c:1a:5a:ed:cc:9e:6f:2e:30:6d:2d:16:52:b9:
         1a:d3:9a:83:81:73:68:d6:ee:93:02:5f:a2:92:cb:2f:d5:88:
         58:6a:85:63:53:69:ed:b2:f8:28:3e:59:22:68:ea:90:43:f3:
         be:99:8e:dc:92:fe:78:9e:8b:c1:03:b2:d7:4b:0a:8d:d9:ee:
         d6:ed:0f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 21:15:23 2026 by rpki-client