Error: rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.mft
File:                     83CE6152C5DC2AF2E628D574237B19843CB8056C.mft (raw, json)
Hash identifier:          ZfepAnwJRJlykUVJyFHsrGLF4EE85cGy6KdW8Vz09Tw=
Subject key identifier:   09:F6:82:41:A0:0B:69:D5:44:53:9C:8A:B2:A2:B3:B4:CF:8F:D8:09
Authority key identifier: 83:CE:61:52:C5:DC:2A:F2:E6:28:D5:74:23:7B:19:84:3C:B8:05:6C
Certificate issuer:       /CN=83CE6152C5DC2AF2E628D574237B19843CB8056C
Certificate serial:       03AE198543C794017CA7F2875942DAA8AE7C1792
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.mft
Manifest number:          0484
Signing time:             Sun 23 Aug 2026 00:18:00 +0000
Manifest this update:     Sun 23 Aug 2026 00:13:00 +0000
Manifest next update:     Mon 24 Aug 2026 03:23:00 +0000
Files and hashes:         1: 34352e3137382e3131362e302f32322d3332203d3e20323639303138.roa (hash: zXr0XmEoUdnPZQrCwmDVQ8gn2VoHln6IDUrhfq8HMSY=)
                          2: 323830343a356533343a3a2f33322d313238203d3e20323639303138.roa (hash: A2yDjfLJVeiIGV4tkqKVmdVhG6rSucBeGjzNJSUgRIc=)
                          3: 83CE6152C5DC2AF2E628D574237B19843CB8056C.crl (hash: fFg9ICrOOUnsHVjhsnaINviRnNX5OWnbJ1YXPiRY4i0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.crl
                          rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 03:23:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ae:19:85:43:c7:94:01:7c:a7:f2:87:59:42:da:a8:ae:7c:17:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83CE6152C5DC2AF2E628D574237B19843CB8056C
        Validity
            Not Before: Aug 23 00:13:00 2026 GMT
            Not After : Aug 24 03:23:00 2026 GMT
        Subject: CN=09F68241A00B69D544539C8AB2A2B3B4CF8FD809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7f:34:12:77:72:3b:9e:ac:1f:ba:ef:f4:18:
                    3e:78:98:ab:ae:f3:95:e3:cc:d8:b4:44:41:a0:54:
                    2e:f5:13:06:06:d0:6e:ad:0d:3f:1e:00:e3:b9:ab:
                    e7:5f:19:9e:7b:71:4c:9a:fe:8c:44:bf:f0:f0:bc:
                    88:ea:40:1e:6e:2b:16:da:ad:3f:05:87:64:82:d7:
                    22:70:37:d4:34:37:1a:e8:13:41:ad:79:a9:65:08:
                    fa:d6:b6:94:b3:30:bb:66:d8:fa:4a:20:6c:2c:32:
                    73:6a:40:46:dc:fc:86:e6:0a:93:69:e5:c8:26:c6:
                    18:f2:d0:44:fd:ea:7c:4c:00:b4:0a:63:a2:0a:c8:
                    a0:fe:d4:8f:db:ef:11:92:56:5a:5e:2e:6d:e8:51:
                    37:cd:cb:0a:1d:bb:41:4d:9d:10:e7:f8:93:29:b8:
                    2f:5c:87:2c:1a:27:b0:eb:0f:7c:ec:6d:0b:47:b6:
                    af:a7:87:c3:3d:be:7f:41:72:26:d1:b2:3d:13:b8:
                    83:3f:ad:f2:e1:26:a7:65:ac:61:d4:c2:c9:37:fa:
                    fd:46:2f:4a:12:22:d2:7c:3a:72:b5:1a:3b:94:b6:
                    a1:73:be:35:99:22:64:eb:b4:48:57:32:26:fc:7d:
                    d2:8d:9d:c1:a5:72:97:82:ee:7d:40:f3:7f:99:d1:
                    c7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F6:82:41:A0:0B:69:D5:44:53:9C:8A:B2:A2:B3:B4:CF:8F:D8:09
            X509v3 Authority Key Identifier:
                keyid:83:CE:61:52:C5:DC:2A:F2:E6:28:D5:74:23:7B:19:84:3C:B8:05:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:89:76:97:86:8b:77:19:25:27:a8:8c:f6:0b:f7:3b:db:0d:
         e0:34:34:2d:0e:ff:19:76:ad:2a:85:7d:4a:ff:46:f1:82:71:
         18:5f:c8:7e:10:26:31:65:e7:05:f5:66:22:47:e0:ad:c7:70:
         cb:14:5a:1c:13:07:84:cd:7c:cc:99:42:fa:ff:be:af:23:cf:
         a2:4e:09:7a:07:00:e1:cb:e7:6b:99:52:89:8f:62:76:03:2a:
         7c:f3:b4:d6:40:19:69:1a:2e:1e:d0:9a:15:5a:83:2f:8a:78:
         21:13:9e:12:af:2f:81:38:34:29:11:cd:40:72:24:1c:11:1c:
         fc:99:c0:79:91:69:52:14:6e:6a:d5:73:1c:0e:e8:eb:42:81:
         45:d0:e1:e3:cd:f6:6c:67:4e:34:41:9c:57:5b:64:fa:18:4f:
         8c:0e:07:40:5b:bf:91:a7:6f:c8:b8:c8:69:76:36:36:e1:f2:
         c9:45:8e:4b:4c:c6:f1:01:b7:9e:c2:d4:6f:f7:18:ad:25:93:
         60:19:5b:07:c8:c1:d5:63:39:51:35:53:d3:6e:eb:11:ed:6e:
         93:31:87:03:eb:cd:5d:df:70:4b:d4:3b:d2:a7:51:9d:b2:98:
         28:d7:90:7b:ec:3f:db:28:18:a4:b5:c4:28:c0:f7:9c:70:16:
         5b:ee:e3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:16:11 2026 by rpki-client