Error: rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/2/B191F3F408D040D446471CC8A3AEA811CB825DF0.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/2/B191F3F408D040D446471CC8A3AEA811CB825DF0.mft
File:                     B191F3F408D040D446471CC8A3AEA811CB825DF0.mft (raw, json)
Hash identifier:          0dIlpembp4tciqMie87GWQqAI+4lEE5om99dK6u1rBI=
Subject key identifier:   0C:56:A9:36:B9:31:0E:0E:74:48:27:8B:AE:08:0E:C9:B9:29:5F:36
Authority key identifier: B1:91:F3:F4:08:D0:40:D4:46:47:1C:C8:A3:AE:A8:11:CB:82:5D:F0
Certificate issuer:       /CN=B191F3F408D040D446471CC8A3AEA811CB825DF0
Certificate serial:       0B65E031B547110425B5B3EAF0821AF25307A80D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B191F3F408D040D446471CC8A3AEA811CB825DF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/2/B191F3F408D040D446471CC8A3AEA811CB825DF0.mft
Manifest number:          0440
Signing time:             Mon 24 Aug 2026 02:03:14 +0000
Manifest this update:     Mon 24 Aug 2026 01:58:14 +0000
Manifest next update:     Tue 25 Aug 2026 03:12:14 +0000
Files and hashes:         1: 323830343a346338303a3a2f33322d3332203d3e20323637333734.roa (hash: VbMLZYPOyU0MhLQmiVTR6uY5o0hLuLazVKjKNn7AbB0=)
                          2: B191F3F408D040D446471CC8A3AEA811CB825DF0.crl (hash: VyJmQ8x2jR2wBSm1HI25khJPH8/lKMmOuC749CaAx24=)
                          3: 34352e3233342e3132342e302f32322d3234203d3e20323637333734.roa (hash: X5O0vn4SFPaqxdEOdw3LpJLJ+obXUAL5uWCC6VE3Toc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/2/B191F3F408D040D446471CC8A3AEA811CB825DF0.crl
                          rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/2/B191F3F408D040D446471CC8A3AEA811CB825DF0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B191F3F408D040D446471CC8A3AEA811CB825DF0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 03:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:65:e0:31:b5:47:11:04:25:b5:b3:ea:f0:82:1a:f2:53:07:a8:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B191F3F408D040D446471CC8A3AEA811CB825DF0
        Validity
            Not Before: Aug 24 01:58:14 2026 GMT
            Not After : Aug 25 03:12:14 2026 GMT
        Subject: CN=0C56A936B9310E0E7448278BAE080EC9B9295F36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b0:ab:ed:6e:17:a9:6e:6c:3f:ca:8b:24:e6:
                    57:1b:a9:df:49:6f:09:a1:83:1e:43:d6:5e:35:8f:
                    d5:9c:c6:4d:bb:cb:0c:41:f0:19:55:47:08:2c:44:
                    be:ca:93:69:3f:b6:fa:00:15:27:0b:44:e3:75:8c:
                    a6:96:e3:cd:fc:11:c3:21:ed:7f:2a:c1:fa:1f:cc:
                    8b:1a:55:3e:3a:5d:c3:53:0d:38:d9:f1:12:10:01:
                    04:76:19:79:ce:95:5c:3b:2f:50:61:7a:1e:da:00:
                    fa:56:15:15:4f:49:16:45:40:62:17:75:63:a5:6c:
                    29:82:22:da:ba:f1:aa:b2:6f:86:c0:bc:6b:94:7b:
                    e6:68:ab:b1:e8:7f:fb:91:b0:28:d0:f6:9f:26:73:
                    da:e0:c5:de:b4:03:5e:62:46:cb:02:34:cc:76:ee:
                    31:c0:98:28:8a:78:94:5b:4c:8b:51:06:d4:7b:14:
                    4d:fe:c7:2c:08:b0:b6:b7:c8:b7:b4:5a:ab:d6:e1:
                    c6:1d:51:e3:c2:1b:1b:ae:af:a2:3a:39:f5:af:f3:
                    2a:96:67:a9:51:f9:0a:93:cc:37:d5:58:7d:de:ca:
                    23:9f:fa:2a:58:f2:ed:81:6c:a8:48:dc:ae:7e:2b:
                    8c:c3:f9:2a:c9:dc:ae:2f:78:de:53:67:5c:45:17:
                    a0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:56:A9:36:B9:31:0E:0E:74:48:27:8B:AE:08:0E:C9:B9:29:5F:36
            X509v3 Authority Key Identifier:
                keyid:B1:91:F3:F4:08:D0:40:D4:46:47:1C:C8:A3:AE:A8:11:CB:82:5D:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/2/B191F3F408D040D446471CC8A3AEA811CB825DF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B191F3F408D040D446471CC8A3AEA811CB825DF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/2/B191F3F408D040D446471CC8A3AEA811CB825DF0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:6c:78:28:15:6a:9e:4c:8e:4a:6a:25:dd:75:23:10:0e:cf:
         32:ec:fc:97:b0:8c:ae:62:5a:25:6b:96:9a:07:75:9b:a6:f8:
         b4:89:d7:7f:d1:02:fc:5e:ba:c4:d3:9c:f5:c3:97:22:a6:ed:
         2e:09:de:db:c4:80:df:93:8e:71:8b:30:38:d7:88:3e:78:74:
         0b:f1:19:c0:c9:bb:5b:45:45:4f:d9:81:12:e9:2b:62:95:ed:
         b9:b0:0d:29:34:e3:ec:7c:9a:8f:55:bb:7f:b7:84:0b:d4:1b:
         29:01:fe:84:b6:1b:2c:4a:34:20:93:1d:7c:e6:f2:82:7b:c9:
         50:3f:6b:80:4d:de:e4:a0:26:9b:2a:29:e3:ec:78:28:29:d9:
         e2:02:d0:9a:57:7c:53:5e:9b:e7:ab:e9:b7:13:92:18:3a:33:
         12:e0:af:fe:83:22:9a:35:c3:da:e5:0e:9a:a6:96:af:ea:db:
         03:fc:4b:88:8c:87:ec:dd:ad:b1:12:83:88:91:4f:cf:6d:fe:
         41:1e:c6:ea:12:90:ef:26:91:dc:ed:58:96:5c:98:6b:d7:8b:
         66:77:74:ff:0c:b7:0e:95:27:4b:57:15:96:6a:8a:e8:c2:a5:
         64:6f:3d:22:8a:52:8b:73:73:db:86:e1:d1:1c:ea:36:ce:3a:
         84:5f:ee:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 18:03:49 2026 by rpki-client