Error: rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
File:                     8EAA572CDAB740A56977FFFC602F113E473F2E77.mft (raw, json)
Hash identifier:          0iRwjt392wEyhLp/qvdjxqC3wBRTcUpXIXtqPeBncI0=
Subject key identifier:   85:D0:E1:43:7A:22:C6:DE:95:D4:76:6F:79:F5:3F:EC:6D:92:79:6B
Authority key identifier: 8E:AA:57:2C:DA:B7:40:A5:69:77:FF:FC:60:2F:11:3E:47:3F:2E:77
Certificate issuer:       /CN=8EAA572CDAB740A56977FFFC602F113E473F2E77
Certificate serial:       3C06443A6C0B02BDCB738FE095BF99A44FA9FB64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
Manifest number:          048A
Signing time:             Sun 23 Aug 2026 16:36:58 +0000
Manifest this update:     Sun 23 Aug 2026 16:31:58 +0000
Manifest next update:     Mon 24 Aug 2026 16:42:58 +0000
Files and hashes:         1: 8EAA572CDAB740A56977FFFC602F113E473F2E77.crl (hash: Jggdh/1V7d8QZ+G0qkgno8oAUIXT5oEs+GkjieCs+NQ=)
                          2: 3138362e3230392e3232342e302f32302d3232203d3e203533313534.roa (hash: s5oM/YKgACeZENr2SH18ungMSV8453Z2MUy+KChUs/I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.crl
                          rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 16:42:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:06:44:3a:6c:0b:02:bd:cb:73:8f:e0:95:bf:99:a4:4f:a9:fb:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EAA572CDAB740A56977FFFC602F113E473F2E77
        Validity
            Not Before: Aug 23 16:31:58 2026 GMT
            Not After : Aug 24 16:42:58 2026 GMT
        Subject: CN=85D0E1437A22C6DE95D4766F79F53FEC6D92796B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:54:3b:be:6a:42:60:66:4e:20:de:17:f3:c3:
                    cb:50:98:c5:6f:c5:c8:54:1c:33:02:4b:3f:77:2b:
                    9a:a0:e7:44:63:f2:9d:ed:2c:4c:f8:80:00:f8:04:
                    5e:dc:18:b2:39:44:70:ad:d4:ce:31:7f:12:a1:83:
                    84:16:c0:fe:50:8d:63:ce:50:50:34:e2:22:c9:e8:
                    e6:78:49:78:96:78:04:ca:a4:72:ab:2b:51:ca:e6:
                    fc:e5:f3:1e:aa:36:fc:e1:05:82:df:e9:a8:97:e9:
                    28:b5:34:25:99:35:5e:d5:67:7c:4f:74:23:61:e8:
                    b9:97:2a:a6:1f:35:8c:9c:5f:17:b1:68:15:ad:08:
                    2d:7a:ca:74:93:ea:f4:84:27:7e:0c:10:e5:ed:82:
                    6f:42:9c:98:30:fd:bf:cf:32:26:c8:fb:d9:62:3d:
                    85:11:a0:70:48:cf:20:50:b6:11:77:2d:9a:f2:9c:
                    46:1c:8e:95:26:11:1a:e8:89:4b:70:0c:5a:c0:83:
                    56:9f:dc:63:3b:f3:5c:d6:ee:f2:35:8b:32:6b:96:
                    6a:a4:c0:eb:e1:47:8c:49:34:a8:de:3a:a7:01:6b:
                    2f:da:8e:60:4c:86:48:90:24:2c:a6:35:bb:c8:c8:
                    ed:9f:79:14:a7:dd:20:db:15:b5:83:7f:62:1f:18:
                    e0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D0:E1:43:7A:22:C6:DE:95:D4:76:6F:79:F5:3F:EC:6D:92:79:6B
            X509v3 Authority Key Identifier:
                keyid:8E:AA:57:2C:DA:B7:40:A5:69:77:FF:FC:60:2F:11:3E:47:3F:2E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:a6:f5:48:91:a6:0a:53:de:66:02:18:8e:2a:d7:a6:a1:ac:
         60:28:be:b4:4c:5e:5e:56:24:ee:19:27:29:11:c8:be:d8:2c:
         61:60:6c:cb:50:bd:da:be:b3:72:8a:a5:f9:90:62:65:99:b0:
         eb:af:99:39:70:cc:86:4b:ef:26:9a:83:52:5a:f4:69:8e:12:
         74:8f:9c:5d:c6:86:6d:77:5c:2d:b8:fe:9e:ce:82:50:15:a2:
         3d:68:3f:6b:c4:d3:72:60:93:d8:57:02:22:ee:d5:a9:ec:55:
         6b:c9:49:01:24:61:55:a4:7b:c0:30:0c:19:1c:c3:22:5f:2f:
         81:15:8a:98:68:50:e9:9c:ad:17:bf:9b:75:aa:f8:c7:2a:8a:
         4f:7f:b9:67:8b:8b:13:da:5a:b2:5e:d0:23:d7:5f:5b:74:ae:
         2d:97:99:31:e7:8f:c7:b8:1a:5c:68:16:29:80:4f:4e:fb:d4:
         54:b6:d3:46:cf:dc:d0:b5:7f:ae:f6:2b:bd:c2:36:0c:ad:e0:
         64:55:e5:28:6b:a9:7c:16:e2:27:c6:79:91:64:80:8c:f4:fe:
         72:07:62:4b:1f:50:c5:7b:14:b4:60:bd:6b:fa:bb:1b:6e:22:
         6a:00:86:34:c9:3e:92:48:cd:34:ba:7d:8f:dd:ce:72:f0:c0:
         4b:58:a6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 06:50:52 2026 by rpki-client