Error: rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.mft
File:                     598DA71AEBD137B402470BB062F68BE6315A8ABF.mft (raw, json)
Hash identifier:          M69uBLYJRXHlxQhu1Dkwehc1nDQecqjIjJXzOXm8aw8=
Subject key identifier:   15:DB:27:89:97:C1:C6:A6:0F:EF:A7:9A:6A:04:DA:6D:F5:93:06:AB
Authority key identifier: 59:8D:A7:1A:EB:D1:37:B4:02:47:0B:B0:62:F6:8B:E6:31:5A:8A:BF
Certificate issuer:       /CN=598DA71AEBD137B402470BB062F68BE6315A8ABF
Certificate serial:       3946A94726D9E728F10CD3B1F7FD1ED415E1C700
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.mft
Manifest number:          02BA
Signing time:             Wed 26 Aug 2026 21:47:37 +0000
Manifest this update:     Wed 26 Aug 2026 21:42:37 +0000
Manifest next update:     Fri 28 Aug 2026 12:51:37 +0000
Files and hashes:         1: 598DA71AEBD137B402470BB062F68BE6315A8ABF.crl (hash: /i5ZofRKvXfmewQgGADvZJKZQ0IAivIgLVNe//jx24w=)
                          2: 3134332e3133372e3135322e302f32322d3332203d3e20323634303432.roa (hash: +ODIS3rj5a/W1xNyt4BANN3rh9hpC0w08EOLa1AbDeQ=)
                          3: 323830343a323965343a3a2f33322d313238203d3e20323634303432.roa (hash: shJMztiK/Z6At5lM1piyhbgkvCXIW/lLAgbunfrykLg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.crl
                          rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Aug 2026 01:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:46:a9:47:26:d9:e7:28:f1:0c:d3:b1:f7:fd:1e:d4:15:e1:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=598DA71AEBD137B402470BB062F68BE6315A8ABF
        Validity
            Not Before: Aug 26 21:42:37 2026 GMT
            Not After : Aug 28 12:51:37 2026 GMT
        Subject: CN=15DB278997C1C6A60FEFA79A6A04DA6DF59306AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9c:d5:cf:a1:df:81:d6:e5:6d:f3:8b:d1:a6:
                    eb:16:90:24:38:df:c2:9e:3a:c6:30:4b:b3:45:a6:
                    0d:13:7d:4d:ef:1a:fc:88:d5:20:d5:64:57:e6:88:
                    81:6f:63:c6:73:3f:39:02:cb:bd:ab:ce:f4:ef:71:
                    80:f1:3e:93:78:a1:d3:cf:a9:ba:3a:a7:e7:a7:c9:
                    e2:6a:31:19:12:09:84:fa:c0:8a:a1:53:42:03:c1:
                    50:82:9f:31:22:4c:ee:5d:fa:bc:97:ec:dd:37:0b:
                    d8:48:6d:e4:a1:81:4f:82:7a:39:f4:7b:33:fa:72:
                    6a:5b:87:7e:96:47:52:de:0d:9e:e7:22:51:36:67:
                    35:dc:f0:25:a8:53:da:f3:e2:49:5a:6b:18:b2:e9:
                    d2:ba:3a:bf:09:90:0a:87:db:ad:ee:02:52:85:eb:
                    49:0b:a4:43:f7:ed:7e:26:66:4a:e0:de:11:13:1e:
                    02:39:ee:ae:89:be:60:1c:dd:26:96:db:f9:0f:bc:
                    7e:5c:4d:3d:7b:f2:f7:58:b3:7b:57:2c:7f:76:74:
                    dd:2f:dc:63:6e:b0:de:d6:5e:a0:e7:c1:95:ad:fa:
                    48:0a:30:67:c4:f0:3f:e4:36:77:df:fd:d0:85:53:
                    e3:05:02:31:c6:8e:a8:8e:e1:7e:a7:39:70:41:61:
                    6d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DB:27:89:97:C1:C6:A6:0F:EF:A7:9A:6A:04:DA:6D:F5:93:06:AB
            X509v3 Authority Key Identifier:
                keyid:59:8D:A7:1A:EB:D1:37:B4:02:47:0B:B0:62:F6:8B:E6:31:5A:8A:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:d2:91:34:e1:cb:3d:51:00:66:86:f4:35:7f:d8:bb:50:5c:
         3f:db:8b:e0:8b:08:2c:cf:89:f7:1e:c4:f1:01:af:29:9e:00:
         0c:8f:1a:c0:6e:28:8a:b3:9b:12:8d:73:78:b2:32:1e:98:b9:
         5e:32:da:e9:25:3c:dc:0a:2a:76:4f:a2:2d:1d:0c:be:9d:ba:
         36:09:bb:09:0b:ed:51:a5:37:d0:e4:e4:05:f6:01:f7:cd:0d:
         12:07:86:7c:14:35:49:04:5a:c8:bf:72:8b:2e:35:7a:0b:d1:
         3a:c7:5f:65:93:f0:60:67:4a:62:a9:36:6a:fa:35:fe:64:b6:
         2d:bc:9b:ad:c0:aa:77:a1:d2:50:34:f4:59:27:78:e1:55:05:
         6d:20:a6:19:7c:92:24:e5:c4:41:f2:5a:a9:b8:e8:3c:94:33:
         51:15:4a:1e:3d:78:a1:51:06:05:e0:0d:3f:91:f1:a8:15:b5:
         a2:b1:15:8c:b6:c9:fb:85:03:aa:a1:7a:49:53:7f:23:22:69:
         d6:68:40:b1:83:31:02:cf:a8:0f:af:28:55:72:25:8a:7a:70:
         95:af:da:07:6b:88:83:72:fe:89:a8:e4:ea:58:c4:91:5e:0c:
         ed:83:39:2d:e6:b1:95:fe:b0:7f:4b:71:b9:fe:7a:10:ca:d6:
         9d:20:5e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:22:09 2026 by rpki-client