Error: rpki-repo.registro.br/repo/E9bnt86bgAA6XNJsagSmGsx6qvhnB5iH4314ijAahADx/0/2832861A32D9BFD5DABB7E0AF9C855AB65A91499.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/E9bnt86bgAA6XNJsagSmGsx6qvhnB5iH4314ijAahADx/0/2832861A32D9BFD5DABB7E0AF9C855AB65A91499.mft
File:                     2832861A32D9BFD5DABB7E0AF9C855AB65A91499.mft (raw, json)
Hash identifier:          D0uAbu+kl8nn8h08hT+opcXFbR3DMpZ+y5C9OwOlE+w=
Subject key identifier:   4F:E2:0C:81:8A:1A:EC:45:FD:B0:7C:81:BC:66:56:23:AB:39:E7:A3
Authority key identifier: 28:32:86:1A:32:D9:BF:D5:DA:BB:7E:0A:F9:C8:55:AB:65:A9:14:99
Certificate issuer:       /CN=2832861A32D9BFD5DABB7E0AF9C855AB65A91499
Certificate serial:       0B122413D1F80D7E66E4DCFEA26567834DFD93BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2832861A32D9BFD5DABB7E0AF9C855AB65A91499.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E9bnt86bgAA6XNJsagSmGsx6qvhnB5iH4314ijAahADx/0/2832861A32D9BFD5DABB7E0AF9C855AB65A91499.mft
Manifest number:          B5
Signing time:             Sun 23 Aug 2026 13:15:31 +0000
Manifest this update:     Sun 23 Aug 2026 13:10:31 +0000
Manifest next update:     Mon 24 Aug 2026 16:21:31 +0000
Files and hashes:         1: 323830343a393834383a3a2f33322d3334203d3e20323735363739.roa (hash: AA3KXA8ukWICbzyRq8gcm4D9riSnRFH2V35QuPvXI2c=)
                          2: 2832861A32D9BFD5DABB7E0AF9C855AB65A91499.crl (hash: rB/eMwzRx6wfI0vfxvXnjwympnopn3EDe3vf9bo2PXk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E9bnt86bgAA6XNJsagSmGsx6qvhnB5iH4314ijAahADx/0/2832861A32D9BFD5DABB7E0AF9C855AB65A91499.crl
                          rsync://rpki-repo.registro.br/repo/E9bnt86bgAA6XNJsagSmGsx6qvhnB5iH4314ijAahADx/0/2832861A32D9BFD5DABB7E0AF9C855AB65A91499.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2832861A32D9BFD5DABB7E0AF9C855AB65A91499.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 16:21:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:12:24:13:d1:f8:0d:7e:66:e4:dc:fe:a2:65:67:83:4d:fd:93:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2832861A32D9BFD5DABB7E0AF9C855AB65A91499
        Validity
            Not Before: Aug 23 13:10:31 2026 GMT
            Not After : Aug 24 16:21:31 2026 GMT
        Subject: CN=4FE20C818A1AEC45FDB07C81BC665623AB39E7A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:59:9f:4b:4d:1a:f1:5a:6f:78:2f:32:00:d0:
                    e4:4a:1b:01:a1:c9:ce:93:6e:e4:62:73:ee:e8:64:
                    56:34:11:e8:04:41:d6:04:c6:5b:0b:3f:64:7f:d2:
                    4a:31:c8:c6:13:93:68:d6:02:60:d2:e9:25:b6:d4:
                    fc:d6:24:64:a8:f9:5a:6b:3e:db:08:39:7d:90:54:
                    50:45:00:e7:90:e4:75:82:2e:fc:3c:ff:7e:4c:74:
                    c4:c4:71:3c:93:bd:fe:94:32:76:5b:78:49:74:49:
                    5c:51:79:eb:01:86:dc:e6:c3:a3:c5:dc:60:1d:f0:
                    d9:15:04:39:96:91:8e:4a:23:38:45:a3:c9:9e:70:
                    af:60:9e:3a:a3:4f:91:db:87:c4:9e:6f:73:37:90:
                    d0:b7:91:2c:dd:31:b3:8c:a0:a1:e3:b1:93:85:81:
                    81:b9:83:9f:71:8d:2f:ad:51:97:ed:63:d9:1b:90:
                    58:8a:90:de:89:34:07:85:a0:0c:d0:62:1e:2c:36:
                    1f:cd:b2:f4:21:58:76:c3:ae:d7:58:35:30:c8:73:
                    00:65:e5:c2:c3:64:a8:04:4c:be:94:23:6e:5c:66:
                    de:af:d1:6e:8a:bb:45:92:35:ff:8d:f5:15:be:a6:
                    36:88:08:cf:7a:1e:ce:6b:f9:86:3e:8f:b0:b2:96:
                    7b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E2:0C:81:8A:1A:EC:45:FD:B0:7C:81:BC:66:56:23:AB:39:E7:A3
            X509v3 Authority Key Identifier:
                keyid:28:32:86:1A:32:D9:BF:D5:DA:BB:7E:0A:F9:C8:55:AB:65:A9:14:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E9bnt86bgAA6XNJsagSmGsx6qvhnB5iH4314ijAahADx/0/2832861A32D9BFD5DABB7E0AF9C855AB65A91499.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2832861A32D9BFD5DABB7E0AF9C855AB65A91499.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E9bnt86bgAA6XNJsagSmGsx6qvhnB5iH4314ijAahADx/0/2832861A32D9BFD5DABB7E0AF9C855AB65A91499.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:ea:0f:d5:46:1d:92:ce:70:40:ff:e8:92:d0:30:0c:63:28:
         14:7b:e0:7e:f9:25:65:56:e3:e1:e7:db:28:45:1d:f9:ee:69:
         97:90:eb:d8:a8:af:fd:e9:42:6b:dc:93:a5:1e:99:11:5d:43:
         24:33:d0:71:3b:d5:c5:e8:7f:b0:0d:9a:67:93:46:e5:78:d7:
         a3:d1:e9:84:2d:3c:07:43:69:56:cc:01:c7:21:55:5c:3c:e7:
         f5:bf:08:b1:e4:b5:d3:1e:82:f8:6a:26:75:5f:b0:51:27:87:
         45:8c:91:1e:fb:9b:5d:b1:99:33:11:b5:57:18:e2:47:10:c9:
         b3:d0:ef:4b:e0:6d:3a:31:e7:9b:42:b3:7c:27:32:4a:8d:db:
         34:f3:3a:bd:fe:22:c8:13:24:34:77:46:44:d5:c6:55:c1:32:
         d5:e0:89:02:d1:b6:79:94:b6:f0:c6:83:2b:9e:ec:88:f5:55:
         a6:69:bd:be:77:0a:1c:07:89:d6:b1:d6:ac:ec:05:01:de:32:
         55:be:12:dd:b2:fc:80:fb:a6:f3:cc:09:61:2c:47:24:8a:53:
         51:b2:e9:5f:39:92:73:5a:9d:ba:18:04:95:fa:a2:86:8b:19:
         10:a8:5d:4f:8d:54:ea:bf:01:64:1f:f9:d1:10:4b:dc:b9:24:
         17:60:08:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 00:24:15 2026 by rpki-client