Error: rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.mft
File:                     6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.mft (raw, json)
Hash identifier:          4nUlWS4oEZh92auyIrXR0amg7K0yEWeqpi5OwAotdHU=
Subject key identifier:   01:0D:B8:81:CA:E1:A6:A2:FC:1C:22:52:BD:F7:EF:CE:8F:42:EC:85
Authority key identifier: 6F:27:B1:96:7A:21:FD:A5:DE:37:AB:7C:FA:6D:85:CD:47:B0:A1:BB
Certificate issuer:       /CN=6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB
Certificate serial:       384B87F238D8495C42705B31D578E2B6150991FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.mft
Manifest number:          0487
Signing time:             Sun 23 Aug 2026 14:13:35 +0000
Manifest this update:     Sun 23 Aug 2026 14:08:35 +0000
Manifest next update:     Mon 24 Aug 2026 15:42:35 +0000
Files and hashes:         1: 3138362e3233332e3136382e302f32322d3232203d3e20323633303738.roa (hash: 2rfTZ3Emr077LpHNtT7G16/t3e+FndeMrNYd67L7CUg=)
                          2: 3138362e3233332e3136382e302f32342d3234203d3e20323633303738.roa (hash: /y/B7Pk/j7US0Iw8/zBjaD1I1VeKFvb8q2R5/H7o/do=)
                          3: 3138362e3233332e3136392e302f32342d3234203d3e20323633303738.roa (hash: NQ8GyaE9/Ypeem/yFWj4C0AvQaLp/jfbu/s7SdKN3cM=)
                          4: 3137302e3234342e3133342e302f32332d3233203d3e20323633303738.roa (hash: GrAXr4DRIgOFVB9EKD4BFqvREpg1yy4XEj1J708C55M=)
                          5: 323830343a3936303a3a2f33322d3332203d3e20323633303738.roa (hash: elHacZbfdt/CA6Wo9TBY4xPH8kPcLXp3HNWmaYVsXYQ=)
                          6: 3138362e3233332e3137302e302f32332d3233203d3e20323633303738.roa (hash: 1/wgbcSy21zaf0DlIc+v1F01ZFJvTFyez60y3pdVEW8=)
                          7: 3137302e3234342e3133342e302f32342d3234203d3e20323633303738.roa (hash: PHU5+/FPtGUBAj5pWaRgLPbWsGnkFzeZZOxj7HxrfXg=)
                          8: 3137302e3234342e3133352e302f32342d3234203d3e20323633303738.roa (hash: J9QD9wNdjcdyB9VDPTZDXx6Xta/1MbuJLXZIResjKX0=)
                          9: 3137302e3234342e3133332e302f32342d3234203d3e20323633303738.roa (hash: W4V/JbMSfyV4u9CaU9qPBH9RwOGCQh1bcfN6FNoEplc=)
                          10: 3138362e3233332e3137312e302f32342d3234203d3e20323633303738.roa (hash: CYcAmocgRAWUAFIICeVnavXAzLXwTBxUkdUEOZ5i3tg=)
                          11: 3137302e3234342e3133322e302f32342d3234203d3e20323633303738.roa (hash: Yi0qQiOBJJJ0x1zVo26WuwsMPum9g4Ry8H2nRjTOjeY=)
                          12: 3138362e3233332e3137302e302f32342d3234203d3e20323633303738.roa (hash: vbmj4SSPMYdbMVQQJqTHuqhTO9ADPSO9kAopfldas7Y=)
                          13: 6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.crl (hash: Pio/9RKATMcsyVoyt0TZvpXtfdPzAEcVPTbl6ra9SHY=)
                          14: 3138362e3233332e3136382e302f32332d3233203d3e20323633303738.roa (hash: XEAo58zWrL7Ftx6hwkrkzBBFUc8jg6Mo96G51GmeSog=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.crl
                          rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 15:42:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:4b:87:f2:38:d8:49:5c:42:70:5b:31:d5:78:e2:b6:15:09:91:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB
        Validity
            Not Before: Aug 23 14:08:35 2026 GMT
            Not After : Aug 24 15:42:35 2026 GMT
        Subject: CN=010DB881CAE1A6A2FC1C2252BDF7EFCE8F42EC85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b4:14:eb:34:c4:68:66:a5:67:c1:f4:b8:b3:
                    b6:a2:61:59:80:9e:2d:ea:5f:59:eb:7f:c4:2b:00:
                    4a:4c:1f:a8:2b:13:31:5e:97:cc:af:03:36:e1:9e:
                    20:4c:8a:3f:c6:e8:49:cf:8f:3a:d0:21:d0:e6:85:
                    fb:0a:77:07:23:91:a1:14:21:0b:45:94:16:d2:8b:
                    24:82:af:2d:6e:20:56:90:23:6d:07:b2:87:e7:73:
                    cc:b5:4f:b0:bb:8b:df:d5:4f:ab:b5:02:16:39:23:
                    ca:25:33:0e:8a:34:d6:8c:53:23:82:85:5a:39:71:
                    7a:d4:78:7f:a3:f4:d2:c8:88:d3:7d:94:c9:ab:e0:
                    86:26:12:40:b1:50:e9:53:c8:f8:2b:a8:7d:b6:4c:
                    cd:f4:90:51:77:28:43:7a:1a:11:20:2e:cb:9d:a4:
                    a0:80:5e:9f:ef:c7:47:26:d4:01:40:c5:e2:38:e0:
                    cc:3f:e4:0a:f9:96:6b:67:e9:d0:a8:3f:7e:02:ef:
                    ab:ae:33:e8:97:b5:85:57:67:ca:01:9a:fd:b2:a9:
                    a2:54:44:1c:93:8c:c9:14:2f:02:f0:e4:00:cc:cd:
                    c3:a6:e5:5e:5e:d3:91:08:0f:ba:93:7f:13:29:78:
                    89:4e:66:28:49:1c:0f:30:35:15:85:22:a5:06:93:
                    bb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:0D:B8:81:CA:E1:A6:A2:FC:1C:22:52:BD:F7:EF:CE:8F:42:EC:85
            X509v3 Authority Key Identifier:
                keyid:6F:27:B1:96:7A:21:FD:A5:DE:37:AB:7C:FA:6D:85:CD:47:B0:A1:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:d1:f5:5a:f8:0a:6e:7e:f2:e5:b2:38:e0:43:88:7e:d9:36:
         90:33:71:fa:85:dc:5c:19:e7:77:73:2e:97:38:f0:c5:4e:54:
         d7:de:34:69:3e:7a:3a:41:04:e6:48:e1:5f:b0:61:ce:6c:6d:
         a5:7d:39:20:73:b9:e0:76:b1:5e:61:d0:c1:47:14:e6:ac:1d:
         44:7b:19:e1:f3:c8:c7:cd:04:84:1d:b6:3d:08:15:b5:9a:84:
         10:a0:1c:e9:7f:f6:e6:f4:15:7c:88:f9:28:9a:3e:a6:82:4e:
         09:a1:94:ec:e3:2f:ed:6c:62:c0:fc:f7:5d:d1:3f:f5:97:aa:
         fa:7a:d5:22:86:44:14:01:87:d5:07:35:2f:c7:77:92:8b:99:
         b2:15:8c:1c:fc:a5:16:2a:ad:da:c5:a4:c6:1e:d7:09:2b:56:
         b0:26:2b:17:22:0e:71:47:d6:e2:0d:03:31:6f:08:69:ad:42:
         89:e3:36:20:41:85:08:ef:70:6f:d4:bd:3b:04:f8:c2:e9:66:
         4f:c2:64:14:b3:75:92:0a:4b:16:82:6a:f3:d5:e0:a4:e1:20:
         c4:6d:1c:86:1e:6d:21:d9:41:cc:7c:28:c9:9a:c5:f6:60:4f:
         bf:51:a8:cc:31:94:fe:54:49:68:ac:14:78:c7:9b:cd:8c:6b:
         da:5f:0d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:17:55 2026 by rpki-client