Error: rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.mft
File:                     F1C6B7C46075B4144C904B5F483EC1FC29F974FE.mft (raw, json)
Hash identifier:          b9SSt0qbUYgR/7Tbvk2g2D7hNfiJqf+VSjBMXxUwTfo=
Subject key identifier:   5F:13:67:C3:20:7A:55:D5:FF:8C:4F:E7:08:AD:8E:A5:7A:83:DF:A1
Authority key identifier: F1:C6:B7:C4:60:75:B4:14:4C:90:4B:5F:48:3E:C1:FC:29:F9:74:FE
Certificate issuer:       /CN=F1C6B7C46075B4144C904B5F483EC1FC29F974FE
Certificate serial:       715EBDD879584570F532D1444FE8C4A656DA09C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.mft
Manifest number:          0488
Signing time:             Mon 24 Aug 2026 05:06:07 +0000
Manifest this update:     Mon 24 Aug 2026 05:01:07 +0000
Manifest next update:     Tue 25 Aug 2026 05:58:07 +0000
Files and hashes:         1: F1C6B7C46075B4144C904B5F483EC1FC29F974FE.crl (hash: GFN0HnGt3yDaRsviSwiPbW6VqbvNRgn49CQyd3d/Qzw=)
                          2: 3137392e36332e3131362e302f32322d3332203d3e20323731353434.roa (hash: r36UPWC3Vh1GB2DCGEKJx6tfK61tTVpl8QFU827APis=)
                          3: 323830343a376432633a3a2f33322d313238203d3e20323731353434.roa (hash: w1u0JUYAXt5xoO8Keb4QmQeOvbrNLJrLcR9nBkZ9cKQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.crl
                          rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 05:58:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:5e:bd:d8:79:58:45:70:f5:32:d1:44:4f:e8:c4:a6:56:da:09:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C6B7C46075B4144C904B5F483EC1FC29F974FE
        Validity
            Not Before: Aug 24 05:01:07 2026 GMT
            Not After : Aug 25 05:58:07 2026 GMT
        Subject: CN=5F1367C3207A55D5FF8C4FE708AD8EA57A83DFA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:b7:b5:eb:2c:6d:6e:4c:cb:01:97:e7:4e:c9:
                    26:42:b8:a4:00:ce:93:7a:73:6b:5a:7b:08:94:fd:
                    78:77:c4:08:4f:93:f9:62:38:e0:10:d4:cf:08:e9:
                    65:18:30:bc:4e:f6:a8:92:4b:e3:8a:db:a5:2e:25:
                    50:3c:58:ac:6e:7a:3c:e6:6e:89:cc:67:7b:bb:c1:
                    b4:d6:b8:ce:86:8c:35:b2:30:f2:3a:29:ff:21:23:
                    c7:2c:87:fc:f9:f1:f2:9b:35:61:84:d0:f4:11:d3:
                    bd:a4:ff:75:13:6f:a3:50:e1:25:88:1c:44:06:00:
                    08:a4:aa:b0:c8:ad:62:d6:04:9b:7d:c4:af:81:39:
                    17:8f:74:88:fc:3d:62:2e:19:7f:eb:b2:89:3c:b4:
                    b5:81:70:b4:1a:c5:35:19:95:2b:af:85:92:72:4a:
                    12:8b:c2:a1:01:3e:cb:d9:a7:d4:71:74:d1:bc:85:
                    18:4b:7f:50:5d:14:22:fe:3c:f9:d0:c4:8e:73:c8:
                    29:8e:fd:dc:8f:67:e7:7a:0b:96:09:c6:83:3f:db:
                    b0:c7:09:d0:fc:50:a7:92:50:c8:38:61:22:bd:9c:
                    c5:35:b4:e7:94:af:6d:ea:b3:51:87:26:9e:a1:88:
                    4b:8f:3f:fe:bf:02:85:c3:77:83:82:80:ec:49:aa:
                    81:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:13:67:C3:20:7A:55:D5:FF:8C:4F:E7:08:AD:8E:A5:7A:83:DF:A1
            X509v3 Authority Key Identifier:
                keyid:F1:C6:B7:C4:60:75:B4:14:4C:90:4B:5F:48:3E:C1:FC:29:F9:74:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:59:90:c4:c0:f6:8a:29:01:99:c0:de:28:3c:cb:7c:c7:b0:
         63:63:c7:f8:06:6b:5b:6b:1c:05:1f:4f:6e:b9:b9:5b:cb:8e:
         1c:7e:88:f9:33:fc:67:6d:bb:7e:a1:69:81:3d:c1:01:7b:7f:
         d7:da:8e:b2:a5:31:51:74:b7:07:69:0b:a8:64:d4:99:3e:a5:
         04:9e:1f:1c:a7:ce:1c:3c:7d:15:b1:81:b7:73:7e:31:f5:44:
         6d:68:d1:e7:80:e8:9e:6d:36:36:d8:ac:53:1b:3a:c7:e6:7d:
         4b:97:ad:64:d4:63:eb:24:25:4c:13:93:ff:8b:82:93:b9:cb:
         a7:bf:76:be:bc:cc:48:93:ae:16:f4:42:ab:f0:32:c3:62:ce:
         4f:eb:8a:ec:e9:b0:62:5a:1e:06:ed:cc:35:3e:fb:fc:e3:95:
         08:a4:ff:65:ac:ae:08:75:99:be:a7:08:65:b1:0e:11:a0:22:
         07:80:83:f3:17:98:ff:0f:2f:c5:b8:59:fa:49:5d:db:56:43:
         53:d4:b6:e6:2d:9c:42:97:ee:54:e3:8f:33:b3:cf:7f:03:01:
         1f:3f:10:7b:c8:36:ff:69:0f:72:e4:86:3e:1a:63:31:5a:20:
         e0:bb:98:b3:98:88:8e:d7:b6:12:3a:95:84:12:3d:6a:26:04:
         fe:43:b2:e0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcV692HlYRXD1MtFET+jEplbaCckwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFDNkI3QzQ2MDc1QjQxNDRDOTA0QjVGNDgzRUMxRkMy
OUY5NzRGRTAeFw0yNjA4MjQwNTAxMDdaFw0yNjA4MjUwNTU4MDdaMDMxMTAvBgNV
BAMTKDVGMTM2N0MzMjA3QTU1RDVGRjhDNEZFNzA4QUQ4RUE1N0E4M0RGQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwt7XrLG1uTMsBl+dOySZCuKQA
zpN6c2taewiU/Xh3xAhPk/liOOAQ1M8I6WUYMLxO9qiSS+OK26UuJVA8WKxuejzm
bonMZ3u7wbTWuM6GjDWyMPI6Kf8hI8csh/z58fKbNWGE0PQR072k/3UTb6NQ4SWI
HEQGAAikqrDIrWLWBJt9xK+BORePdIj8PWIuGX/rsok8tLWBcLQaxTUZlSuvhZJy
ShKLwqEBPsvZp9RxdNG8hRhLf1BdFCL+PPnQxI5zyCmO/dyPZ+d6C5YJxoM/27DH
CdD8UKeSUMg4YSK9nMU1tOeUr23qs1GHJp6hiEuPP/6/AoXDd4OCgOxJqoGfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUXxNnwyB6VdX/jE/nCK2OpXqD36EwHwYDVR0j
BBgwFoAU8ca3xGB1tBRMkEtfSD7B/Cn5dP4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjlKQkRtMWhHTkhURVMyZFJoeGIzYXlrTmtZTXdGSmNzclExQjlidjFm
NkovMS9GMUM2QjdDNDYwNzVCNDE0NEM5MDRCNUY0ODNFQzFGQzI5Rjk3NEZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YxQzZCN0M0NjA3NUI0MTQ0
QzkwNEI1RjQ4M0VDMUZDMjlGOTc0RkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RjlKQkRtMWhHTkhURVMyZFJoeGIzYXlrTmtZTXdGSmNzclExQjlidjFmNkovMS9G
MUM2QjdDNDYwNzVCNDE0NEM5MDRCNUY0ODNFQzFGQzI5Rjk3NEZFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnFmQxMD2iikBmcDeKDzLfMewY2PH+AZrW2scBR9Pbrm5W8uOHH6I+TP8Z227
fqFpgT3BAXt/19qOsqUxUXS3B2kLqGTUmT6lBJ4fHKfOHDx9FbGBt3N+MfVEbWjR
54Donm02NtisUxs6x+Z9S5etZNRj6yQlTBOT/4uCk7nLp792vrzMSJOuFvRCq/Ay
w2LOT+uK7OmwYloeBu3MNT77/OOVCKT/ZayuCHWZvqcIZbEOEaAiB4CD8xeY/w8v
xbhZ+kld21ZDU9S25i2cQpfuVOOPM7PPfwMBHz8Qe8g2/2kPcuSGPhpjMVog4LuY
s5iIjte2EjqVhBI9aiYE/kOy4A==
-----END CERTIFICATE-----
Generated at Mon Aug 24 09:08:55 2026 by rpki-client