Error: rpki-repo.registro.br/repo/Eu2CEGAWLbHEC6wuTncqgjMVuQetsbAz45GypmwirttR/0/AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Eu2CEGAWLbHEC6wuTncqgjMVuQetsbAz45GypmwirttR/0/AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.mft
File:                     AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.mft (raw, json)
Hash identifier:          S98fnmrXghZ/XyiGeCwsE5nIWsDNGoodOGs2UZ0gcBY=
Subject key identifier:   B3:50:6A:5E:4D:15:96:3B:57:C2:48:CB:6A:57:71:8E:EA:72:E5:78
Authority key identifier: AB:14:C8:86:4A:01:BE:3A:A6:1E:37:DC:A3:3A:5F:66:EF:83:14:3B
Certificate issuer:       /CN=AB14C8864A01BE3AA61E37DCA33A5F66EF83143B
Certificate serial:       3047D5F008B5AE2FD25E82C374302F1A3D4B6FBA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eu2CEGAWLbHEC6wuTncqgjMVuQetsbAz45GypmwirttR/0/AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.mft
Manifest number:          0455
Signing time:             Sun 23 Aug 2026 06:40:22 +0000
Manifest this update:     Sun 23 Aug 2026 06:35:22 +0000
Manifest next update:     Mon 24 Aug 2026 08:59:22 +0000
Files and hashes:         1: AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.crl (hash: cMUSqC9wIZ/2dSTV/CF7jyrP28Itx7xcXPlSIdgFpuA=)
                          2: 3138312e3139312e3136342e302f32322d3332203d3e20323637343738.roa (hash: skY15WlSI4tcTncVtazqeblRHAT80w5RYqUax/oiGkQ=)
                          3: 323830343a343231633a3a2f33322d313238203d3e20323637343738.roa (hash: /0QT0wI7+eYcajSYhgsdXO6q1FxmDqkusXthKyF7MTU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eu2CEGAWLbHEC6wuTncqgjMVuQetsbAz45GypmwirttR/0/AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.crl
                          rsync://rpki-repo.registro.br/repo/Eu2CEGAWLbHEC6wuTncqgjMVuQetsbAz45GypmwirttR/0/AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 08:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:47:d5:f0:08:b5:ae:2f:d2:5e:82:c3:74:30:2f:1a:3d:4b:6f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB14C8864A01BE3AA61E37DCA33A5F66EF83143B
        Validity
            Not Before: Aug 23 06:35:22 2026 GMT
            Not After : Aug 24 08:59:22 2026 GMT
        Subject: CN=B3506A5E4D15963B57C248CB6A57718EEA72E578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1b:48:63:17:3d:82:13:46:a6:70:c6:8b:76:
                    04:2b:b7:8b:84:bb:cf:14:a3:57:44:4a:8c:6e:71:
                    d5:b1:94:0d:e3:50:4a:8e:3e:6d:72:41:09:09:cb:
                    35:64:f5:be:39:00:3f:29:a6:33:8c:c0:88:2a:f2:
                    6a:7c:d0:e5:14:0e:67:06:5e:ea:99:d1:58:38:52:
                    ff:36:47:8c:3c:81:87:eb:dc:da:44:b0:70:73:96:
                    73:0b:a5:8f:ad:6b:53:0e:50:f8:b2:ce:0e:ba:51:
                    25:9e:d4:61:9a:b5:50:38:7d:cb:49:10:97:f5:ee:
                    9d:ce:aa:69:50:32:27:1e:50:9d:5c:1a:7f:51:7c:
                    a8:1d:3f:ac:ae:79:4d:48:91:34:d9:19:3d:3b:7a:
                    3d:35:3b:3b:4b:63:8b:8a:b0:b4:0e:38:e7:39:98:
                    0a:6e:49:36:a2:72:bd:b8:42:c9:0e:b1:63:a1:c3:
                    dd:ea:25:de:0a:13:5b:6e:6d:13:8f:7e:6d:8c:c6:
                    ac:34:cb:00:e3:e3:eb:ac:04:7d:8b:ba:55:47:04:
                    b4:93:a7:56:a7:1f:d6:5f:fc:80:ae:e1:06:98:76:
                    32:61:83:4d:79:81:f0:69:19:e7:a9:7c:94:7c:bb:
                    5a:33:dc:92:7c:02:7c:5c:aa:b4:ee:f8:bf:5b:ba:
                    38:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:50:6A:5E:4D:15:96:3B:57:C2:48:CB:6A:57:71:8E:EA:72:E5:78
            X509v3 Authority Key Identifier:
                keyid:AB:14:C8:86:4A:01:BE:3A:A6:1E:37:DC:A3:3A:5F:66:EF:83:14:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eu2CEGAWLbHEC6wuTncqgjMVuQetsbAz45GypmwirttR/0/AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eu2CEGAWLbHEC6wuTncqgjMVuQetsbAz45GypmwirttR/0/AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:9d:65:02:d7:b5:22:1e:62:2e:ae:52:33:1f:0e:18:15:6d:
         d4:f4:73:8f:ea:48:0f:7c:67:7f:31:e4:79:cf:36:07:9a:38:
         f2:23:eb:0e:1e:b0:1c:d4:ec:2b:20:dc:9e:5e:49:f4:62:06:
         97:81:ab:50:5e:82:94:48:2c:fa:a4:30:36:fb:d7:13:c7:37:
         01:b2:18:8a:b6:9e:5e:db:cc:f3:02:8c:7a:fc:cf:11:a7:dc:
         65:05:13:15:d8:33:a0:11:6e:f7:0b:d2:f3:cb:24:ae:63:f7:
         56:23:b5:6a:bf:00:20:83:61:b3:32:d8:38:eb:1f:27:d8:9d:
         51:c0:fa:4f:90:f9:cb:76:4d:23:be:c6:2b:a5:57:12:29:25:
         2d:e3:31:bf:2f:b9:c1:2f:11:db:c4:4a:d4:40:df:ea:b3:8b:
         a0:16:0a:20:be:d0:d7:95:22:56:16:08:49:ce:f6:57:2b:95:
         76:0a:4a:3e:e2:c6:b0:12:67:10:cf:54:cc:ff:5b:ed:32:cf:
         1b:12:76:30:01:55:76:08:2b:e7:4d:9c:e5:f4:ae:25:e3:d5:
         50:84:18:f5:b5:a0:df:3a:15:e1:22:45:b5:86:80:f3:91:7e:
         51:e2:aa:5d:8c:ef:ae:20:51:eb:f4:33:e9:83:9b:3b:05:0f:
         a2:7c:9e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 15:12:44 2026 by rpki-client