Error: rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.mft
File:                     ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.mft (raw, json)
Hash identifier:          JSUEed6GJb+lq3mZqN4tSHMzzJBguONWDSOMPREii4Y=
Subject key identifier:   47:97:FB:70:A2:60:75:12:BB:A9:09:E2:DB:26:2F:70:BB:46:49:F0
Authority key identifier: ED:5B:37:FD:E1:A3:03:C3:A4:BD:5A:1C:26:E0:08:AA:C9:11:35:41
Certificate issuer:       /CN=ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541
Certificate serial:       0764BF91FA73F82C466D454BAE97D2321C66EFA4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.mft
Manifest number:          048B
Signing time:             Sun 23 Aug 2026 15:14:43 +0000
Manifest this update:     Sun 23 Aug 2026 15:09:43 +0000
Manifest next update:     Mon 24 Aug 2026 15:34:43 +0000
Files and hashes:         1: 34352e3138342e3137362e302f32332d3233203d3e20323639333932.roa (hash: AHfHPvEd6pJ7+ew8+MDw961/4ZAx2XTKZXD6+MDoiWs=)
                          2: 34352e3138342e3137372e302f32342d3234203d3e20323639333932.roa (hash: bB/go3NHbpvMU8ef1I08zM4O+lUXiwQSfi19JDmqUqU=)
                          3: 34352e3138342e3137362e302f32342d3234203d3e20323639333932.roa (hash: yt4flrkj2IQqJIVEek32zlyTxZTwXRzp5PDl/5RWQX0=)
                          4: 34352e3138342e3137382e302f32342d3234203d3e20323639333932.roa (hash: yq51d/I7z/Z7vT+a3exrUETwcj1uhtsAxNUSZQdeC6k=)
                          5: 34352e3138342e3137382e302f32332d3233203d3e20323639333932.roa (hash: I3k2FU5rjgkyCg8M0pvsts88eHOrvPjWx/m7qdU1BpE=)
                          6: 34352e3138342e3137392e302f32342d3234203d3e20323639333932.roa (hash: WGcQX6mQ9sZyzuM2Wo7zck9+FBL+AsEv87XjRGpfS6c=)
                          7: 34352e3138342e3137362e302f32322d3232203d3e20323639333932.roa (hash: 2fGm3RU6J5MMi2lURJQBA5wKnPzaCcs62HqcYVDlays=)
                          8: ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.crl (hash: RDMiDu3elRLGhHJmssjyj/qv2/hgTpsDB2Q05ktiaiE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.crl
                          rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 15:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:64:bf:91:fa:73:f8:2c:46:6d:45:4b:ae:97:d2:32:1c:66:ef:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541
        Validity
            Not Before: Aug 23 15:09:43 2026 GMT
            Not After : Aug 24 15:34:43 2026 GMT
        Subject: CN=4797FB70A2607512BBA909E2DB262F70BB4649F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2b:ae:61:0a:f6:28:7f:4e:4e:6d:cc:75:00:
                    ed:d6:09:0e:48:e6:73:b1:70:5a:6f:22:15:4d:43:
                    b7:3a:90:e4:1f:3c:01:df:b6:ad:29:a8:86:9d:01:
                    0f:bb:4e:e7:24:59:96:be:29:3c:c2:9b:03:cd:6a:
                    b7:2a:dd:19:86:ae:29:25:ea:cd:10:d2:47:43:cd:
                    21:63:12:7f:e9:f9:67:1c:2c:d2:cc:8d:cb:73:e5:
                    3c:ae:01:43:d5:5c:dd:d3:b2:45:52:c2:38:23:7e:
                    58:d5:93:b9:a6:9b:4c:7f:36:59:31:25:c7:65:a4:
                    a5:d8:82:42:75:17:e5:bf:2b:53:6a:99:fb:d0:40:
                    75:76:e9:80:61:66:dd:cf:b5:e2:30:11:fa:91:ae:
                    9e:84:3b:58:1e:da:26:01:1c:73:6d:73:94:a4:5b:
                    a3:8b:44:c8:50:50:cb:f3:00:7f:2f:ab:9d:5c:29:
                    19:d6:c3:04:c7:a1:a4:62:04:bf:43:cd:93:d1:38:
                    3a:5a:9d:b8:d6:3c:4b:71:27:6d:c7:42:49:84:51:
                    e4:31:31:cf:7f:7e:27:b9:c5:94:da:41:88:16:ff:
                    06:22:8a:8b:0f:0b:57:08:33:b3:0c:c6:ae:48:24:
                    38:f2:73:fb:13:bb:23:b9:57:c3:80:15:ed:5c:c0:
                    48:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:97:FB:70:A2:60:75:12:BB:A9:09:E2:DB:26:2F:70:BB:46:49:F0
            X509v3 Authority Key Identifier:
                keyid:ED:5B:37:FD:E1:A3:03:C3:A4:BD:5A:1C:26:E0:08:AA:C9:11:35:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:cb:c9:46:c4:8d:f1:d7:ea:05:7b:f0:47:64:99:de:18:1e:
         0f:5d:35:52:86:5b:43:8d:3c:68:46:2e:7d:07:42:6a:1d:1b:
         bb:d2:08:9c:f2:b5:c5:0b:39:55:94:b6:4e:7d:a8:c9:d6:0d:
         b1:33:2d:60:e3:3e:36:28:29:a3:17:d4:5d:27:b3:c6:55:99:
         a5:72:1b:26:48:86:74:8d:ce:49:2a:4d:2e:55:77:d6:a2:95:
         00:10:23:38:8c:ec:4e:4e:36:72:d8:c6:21:21:dd:f8:88:27:
         28:e4:59:f0:85:aa:4b:a5:10:7f:9e:f3:00:8c:5d:08:06:98:
         a7:2a:5e:36:2c:a3:5a:cb:49:10:30:01:22:02:6d:5a:ab:92:
         be:e1:07:23:5a:05:ec:78:15:6f:96:45:14:3c:6c:0e:5f:91:
         30:91:27:58:e4:89:c6:91:c1:b7:9d:54:e6:68:8f:79:a0:6a:
         e0:d2:9e:26:43:fc:38:5a:6f:52:a6:2f:2a:14:76:01:b0:cf:
         d1:51:03:d7:c0:d0:41:1d:b1:2b:ec:e5:3a:5c:9e:de:5b:3a:
         69:6a:5e:eb:6c:89:06:6c:77:10:38:c3:df:eb:4b:35:18:82:
         57:0d:c8:7c:79:41:f6:62:74:ea:a1:e8:2c:4a:5d:71:4e:bd:
         87:99:71:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:43:45 2026 by rpki-client