Error: rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft
File:                     8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft (raw, json)
Hash identifier:          jE29jmiienAT+6P6s8M1vHADGAtai3RgaJnML+DQ7Lo=
Subject key identifier:   96:2D:4B:79:C2:A2:B1:D5:AC:B8:63:B2:B3:44:FF:B5:01:6A:BB:FD
Authority key identifier: 8C:CB:AD:4C:CA:17:0E:31:C6:A6:E2:2B:17:2F:88:4B:22:4E:3C:49
Certificate issuer:       /CN=8CCBAD4CCA170E31C6A6E22B172F884B224E3C49
Certificate serial:       6175CE82033F06934F91FAF9282FC46C8FC23466
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft
Manifest number:          0418
Signing time:             Sat 22 Aug 2026 22:32:07 +0000
Manifest this update:     Sat 22 Aug 2026 22:27:07 +0000
Manifest next update:     Mon 24 Aug 2026 00:40:07 +0000
Files and hashes:         1: 3137392e34392e3133322e302f32322d3332203d3e20323731313936.roa (hash: NZujrVTIXEbJ/ah47MK1vGl3GMmJWho+DffI2Yz4cU4=)
                          2: 8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.crl (hash: 8qTdnZv463OQkfhv7ad1fuHfZ6R27TCGgM1FQc4XEAs=)
                          3: 323830343a373762633a3a2f33322d313238203d3e20323731313936.roa (hash: +TjYpdAsXU+fnV67ojc5JHJAQKNZnNONC8l1uYJW+M8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.crl
                          rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 00:40:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:75:ce:82:03:3f:06:93:4f:91:fa:f9:28:2f:c4:6c:8f:c2:34:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CCBAD4CCA170E31C6A6E22B172F884B224E3C49
        Validity
            Not Before: Aug 22 22:27:07 2026 GMT
            Not After : Aug 24 00:40:07 2026 GMT
        Subject: CN=962D4B79C2A2B1D5ACB863B2B344FFB5016ABBFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:13:63:44:6d:37:ff:93:5f:8e:a5:0f:4c:9c:
                    4e:bd:d0:1a:73:bb:08:c2:60:ac:60:5e:79:9b:25:
                    26:b7:ab:24:73:23:82:f7:99:5a:46:8b:af:31:8d:
                    a5:6b:01:32:0d:4f:0b:a2:fc:34:97:e9:ad:79:3a:
                    20:5d:89:ca:c9:1d:12:17:a7:4f:74:79:a2:75:51:
                    09:eb:07:d5:ac:80:35:17:e5:36:6d:87:e5:eb:ce:
                    1e:1d:8a:2c:74:35:30:66:db:e9:95:34:5f:e4:d9:
                    e5:be:f1:65:17:f6:6e:c0:18:49:18:f5:42:3d:5c:
                    00:e3:8a:4b:e9:5b:87:06:72:32:21:93:bb:97:31:
                    5f:2d:7e:42:14:71:37:a4:88:4d:f6:ec:6f:7a:d9:
                    69:b0:aa:58:cb:a2:90:b7:61:aa:52:6a:5d:45:81:
                    54:74:d9:98:df:67:f3:be:2a:bf:bd:93:b2:3d:56:
                    7f:c2:b4:89:91:fe:39:b3:50:68:26:e8:cb:c7:d8:
                    ca:51:34:e4:d1:95:fd:b4:c9:ed:56:a3:f3:37:72:
                    d5:86:c6:90:6c:ce:2c:d9:03:1d:c9:ee:f7:e7:c9:
                    76:86:d1:17:be:15:c8:87:9a:61:37:61:f1:17:ee:
                    35:e1:d8:b3:b6:e3:53:9c:1e:26:4a:74:d0:62:f2:
                    f5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:2D:4B:79:C2:A2:B1:D5:AC:B8:63:B2:B3:44:FF:B5:01:6A:BB:FD
            X509v3 Authority Key Identifier:
                keyid:8C:CB:AD:4C:CA:17:0E:31:C6:A6:E2:2B:17:2F:88:4B:22:4E:3C:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:a9:78:fc:5f:82:26:a9:ac:95:77:63:99:f8:a9:6d:5a:0d:
         84:a0:c5:1b:db:db:f5:6e:26:4f:17:76:41:55:3b:17:2d:25:
         4f:ad:cc:41:2f:0f:f2:cc:36:9f:55:00:ad:fa:52:a9:cb:16:
         27:e3:9d:a5:83:d4:4a:21:54:3d:3b:f4:ad:ba:d8:66:06:f2:
         d1:f3:42:63:c0:d6:bb:09:ba:bd:be:97:01:59:85:ca:c2:0c:
         ba:d1:77:7f:cb:46:e8:49:37:ee:22:79:b7:f1:7b:60:c8:19:
         ae:a3:1f:fd:e4:42:d4:d2:9a:9c:b0:6f:d7:a5:a0:13:b8:11:
         ff:73:66:5c:20:93:a1:15:b7:c1:a9:0b:cf:a5:a2:78:20:61:
         84:24:fe:6c:a3:72:d0:f2:37:e2:0e:c3:7b:70:1f:45:03:c3:
         63:39:04:5b:76:84:31:24:a7:db:7c:a1:08:e2:89:4f:9c:55:
         d4:42:4d:d5:41:ab:d6:95:38:6b:e3:e1:38:0c:7c:6c:89:11:
         2e:e0:04:d4:23:02:4f:69:fc:45:2f:49:0e:d0:6d:19:c1:aa:
         d4:2b:72:1a:35:0b:c7:bf:78:67:d1:43:69:8f:69:ef:ae:e9:
         ea:ab:c6:ce:64:21:33:62:4a:d9:ef:62:e0:7b:f6:57:10:58:
         91:60:0b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:06:41 2026 by rpki-client