Error: rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.mft
File:                     BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.mft (raw, json)
Hash identifier:          goTAaoRQRFx9XcKRCHS8tzlVz2hxG418DRo2BOW2fRA=
Subject key identifier:   EB:6A:7C:3E:81:67:64:47:5D:80:9B:03:2A:24:61:41:8F:89:7B:1B
Authority key identifier: BE:E9:B1:56:E0:F5:87:C9:BA:07:39:28:6F:79:A9:FB:85:C8:0B:C3
Certificate issuer:       /CN=BEE9B156E0F587C9BA0739286F79A9FB85C80BC3
Certificate serial:       099761446C8D3AC38E99003157174B7A494E9A6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.mft
Manifest number:          048A
Signing time:             Sun 23 Aug 2026 12:06:01 +0000
Manifest this update:     Sun 23 Aug 2026 12:01:01 +0000
Manifest next update:     Mon 24 Aug 2026 13:49:01 +0000
Files and hashes:         1: 323830343a363363343a3a2f33322d3438203d3e20323639333832.roa (hash: T1Ym0QDmqhoa/DiNnrEKEkmEgtEn6X5T4uH0U4nQkGM=)
                          2: BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.crl (hash: LUiWtoUjnnVMdUhg1QKJz4waz/37LYpLxM+OMKHXRv4=)
                          3: 34352e3138342e3133362e302f32322d3234203d3e20323639333832.roa (hash: b1bWqdl1nl0hK/R0pp2vlvzY1ea1GeSNUD1Voulpm7c=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.crl
                          rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 13:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:97:61:44:6c:8d:3a:c3:8e:99:00:31:57:17:4b:7a:49:4e:9a:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEE9B156E0F587C9BA0739286F79A9FB85C80BC3
        Validity
            Not Before: Aug 23 12:01:01 2026 GMT
            Not After : Aug 24 13:49:01 2026 GMT
        Subject: CN=EB6A7C3E816764475D809B032A2461418F897B1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6e:c4:90:e9:ce:4b:ca:0d:41:be:a5:64:f5:
                    db:73:5a:59:f8:61:57:be:f5:84:81:ec:03:3a:b5:
                    9a:8a:81:7e:6f:30:fe:cc:0c:5b:53:84:13:3e:99:
                    90:7e:1a:e7:54:32:ec:02:15:3c:bc:22:28:cb:24:
                    99:02:b3:79:8e:9d:cb:13:c7:f2:f5:f4:e2:2e:6a:
                    ac:85:15:16:46:ba:00:28:14:b2:05:43:5e:58:6d:
                    96:29:61:8f:2b:0a:b2:7d:51:4e:b5:1d:32:d6:70:
                    f5:fc:9f:6e:46:44:38:02:8d:f6:9e:af:c2:f1:44:
                    92:a4:4f:f5:1e:b9:fb:c2:9b:15:87:b4:81:f2:1d:
                    34:34:e9:fc:bd:50:37:b6:6e:af:04:b5:e7:f1:33:
                    a0:ef:a9:3f:56:ab:8f:e5:aa:af:64:8a:47:23:f7:
                    05:2b:fc:1f:fc:c2:1c:66:6b:d3:c2:ce:9b:11:69:
                    79:66:7f:e4:f6:22:05:53:c8:d8:cb:15:da:a0:c6:
                    2b:bb:9f:1a:b7:cd:a3:51:27:9a:9c:96:3d:de:cc:
                    b4:89:3e:64:c0:dc:fc:8a:e0:b2:59:29:4f:0f:f6:
                    cf:97:15:57:27:3b:53:a7:b4:90:d0:2c:6d:01:78:
                    ce:61:bd:24:4a:09:b8:f1:01:ff:80:6f:27:0b:c0:
                    17:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:6A:7C:3E:81:67:64:47:5D:80:9B:03:2A:24:61:41:8F:89:7B:1B
            X509v3 Authority Key Identifier:
                keyid:BE:E9:B1:56:E0:F5:87:C9:BA:07:39:28:6F:79:A9:FB:85:C8:0B:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:1d:ae:93:6c:1a:05:12:4b:d8:93:fa:e9:04:81:d1:0e:2c:
         b9:df:94:5c:a4:8b:a2:0e:1b:b9:2e:c0:a9:ef:36:1a:74:fc:
         ca:be:b9:e9:34:f1:f4:2a:5e:89:9c:c7:05:b8:8c:fb:4b:18:
         b5:47:bf:68:12:ae:2b:5a:f6:a8:40:dd:82:32:99:81:1d:a2:
         c1:4b:a6:12:ba:98:6c:ec:c6:5a:1a:93:f5:c7:fd:5e:d8:ed:
         48:c5:b4:14:19:de:f6:a6:b8:a0:07:e4:5a:35:de:c8:27:52:
         b0:c1:58:65:60:12:cd:f1:ac:8d:ef:d4:c6:1e:d5:4b:a9:57:
         2f:2d:bb:93:c9:5a:75:e4:61:37:27:94:75:8b:e8:34:e4:5a:
         dc:9b:98:ec:ae:da:27:42:78:0c:18:52:a9:62:df:86:2a:6d:
         ec:57:2b:d6:ad:bb:74:3b:37:06:ab:15:34:1c:a8:01:26:06:
         68:1e:b1:54:27:81:9b:9b:cf:cd:45:a1:0e:56:ae:e4:e6:ad:
         fb:5b:b8:d4:5d:85:e8:6f:65:b6:1c:a7:61:bd:0f:4f:28:45:
         fa:2b:2f:88:22:ad:ea:51:33:ae:cb:15:b2:dd:9d:44:c9:b4:
         33:0e:f6:3d:e8:f8:ef:c3:4b:ad:78:92:8d:7e:c1:64:66:33:
         1a:7f:42:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 03:32:07 2026 by rpki-client