Error: rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/380AA235F2E5AE2924CB386078A74D1B738D2AB1.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/380AA235F2E5AE2924CB386078A74D1B738D2AB1.mft
File:                     380AA235F2E5AE2924CB386078A74D1B738D2AB1.mft (raw, json)
Hash identifier:          DyLisPXZ1MiVn5vWgJanLh/tdInH+uljUHQZqvahnME=
Subject key identifier:   8B:64:A2:A7:9A:C9:E5:75:AB:2C:80:C3:51:FA:1D:D4:C1:85:6F:48
Authority key identifier: 38:0A:A2:35:F2:E5:AE:29:24:CB:38:60:78:A7:4D:1B:73:8D:2A:B1
Certificate issuer:       /CN=380AA235F2E5AE2924CB386078A74D1B738D2AB1
Certificate serial:       5270D02480298D889ED000AC5C277260934019D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/380AA235F2E5AE2924CB386078A74D1B738D2AB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/380AA235F2E5AE2924CB386078A74D1B738D2AB1.mft
Manifest number:          7E
Signing time:             Sun 23 Aug 2026 06:24:45 +0000
Manifest this update:     Sun 23 Aug 2026 06:19:45 +0000
Manifest next update:     Mon 24 Aug 2026 10:07:45 +0000
Files and hashes:         1: 323830343a383239343a3a2f33322d3438203d3e20323732353237.roa (hash: PPeZCwYYhjbntFYVe2kYlpwUP0g0LR4ZB3Xh9epZMi8=)
                          2: 380AA235F2E5AE2924CB386078A74D1B738D2AB1.crl (hash: 0rhkJkxWns//Yfp0DpJwxsn3WqlU3IIAJIxZq/ugErI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/380AA235F2E5AE2924CB386078A74D1B738D2AB1.crl
                          rsync://rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/380AA235F2E5AE2924CB386078A74D1B738D2AB1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/380AA235F2E5AE2924CB386078A74D1B738D2AB1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 10:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:70:d0:24:80:29:8d:88:9e:d0:00:ac:5c:27:72:60:93:40:19:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380AA235F2E5AE2924CB386078A74D1B738D2AB1
        Validity
            Not Before: Aug 23 06:19:45 2026 GMT
            Not After : Aug 24 10:07:45 2026 GMT
        Subject: CN=8B64A2A79AC9E575AB2C80C351FA1DD4C1856F48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a8:47:6a:e7:31:a6:26:01:91:1f:9e:26:f9:
                    70:0a:34:b1:f3:60:43:f1:e0:54:5b:f6:28:76:40:
                    e9:3e:28:36:00:3a:1d:2e:ef:ba:4d:22:66:b7:df:
                    0d:d6:5e:1e:e7:79:7a:62:51:57:a9:11:c6:5c:f4:
                    1d:fe:7d:3d:fc:3b:87:8b:d5:48:9e:a3:64:65:9e:
                    e2:3c:5a:d9:25:49:a1:18:0a:75:5c:e6:3e:f1:1f:
                    92:84:ca:1d:ca:e1:c6:77:8e:dc:34:0d:7c:ad:72:
                    67:ee:cd:c1:20:41:f9:48:a3:8a:e8:49:ee:d1:3c:
                    15:a8:6f:e3:a6:3d:d6:53:23:ba:e0:86:20:17:02:
                    b8:1d:9c:ad:9a:93:ce:a7:40:7e:2b:a1:60:91:a8:
                    e3:97:3f:ad:51:ba:50:f2:a8:63:b5:9d:fe:66:66:
                    20:91:48:69:ca:c3:c4:42:e6:60:f7:4d:ac:9a:d6:
                    ec:64:1a:70:25:42:92:43:ed:c8:bd:04:fb:3c:d3:
                    b4:06:5a:8f:d1:c2:8b:62:43:c2:de:3c:66:fa:cc:
                    f2:44:a3:2c:ad:8b:d5:63:cc:da:df:2b:a0:6f:15:
                    a5:d6:30:8b:c2:dc:f3:36:50:df:10:14:c5:f8:3f:
                    49:ee:e3:b6:d1:2f:ca:97:3d:47:26:9f:0c:58:b7:
                    2b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:64:A2:A7:9A:C9:E5:75:AB:2C:80:C3:51:FA:1D:D4:C1:85:6F:48
            X509v3 Authority Key Identifier:
                keyid:38:0A:A2:35:F2:E5:AE:29:24:CB:38:60:78:A7:4D:1B:73:8D:2A:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/380AA235F2E5AE2924CB386078A74D1B738D2AB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/380AA235F2E5AE2924CB386078A74D1B738D2AB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/380AA235F2E5AE2924CB386078A74D1B738D2AB1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:29:0b:35:4a:c5:69:ae:87:6a:76:ca:cb:d8:e4:bb:12:dd:
         55:01:6f:2c:d5:e3:c2:c7:a6:5c:7e:6b:d6:b6:a5:2b:fe:35:
         ac:2f:0e:9b:e1:7b:41:5a:b8:c2:c9:0f:7b:4a:80:76:f6:5f:
         3c:e9:c6:0c:d9:98:7c:13:4c:9a:a1:47:3e:58:97:09:a0:00:
         46:e0:ca:df:e4:21:13:ef:34:8f:8c:93:b2:46:b8:69:3f:a8:
         74:cd:88:3b:86:d1:6f:30:76:2d:11:32:78:4b:00:aa:18:74:
         06:7d:39:9e:d0:01:9e:e4:aa:32:45:fa:da:ac:a3:70:40:17:
         ba:0e:e5:93:66:27:1e:e3:db:47:de:81:4e:f5:05:16:64:53:
         b8:1f:04:fd:37:6a:f5:49:64:5c:89:77:56:b0:69:63:36:e5:
         58:75:a3:c3:75:b0:6a:7a:35:d3:51:27:21:c7:e7:ef:8c:31:
         49:32:dc:be:1c:78:68:70:2d:7a:3a:b7:73:e1:87:e3:37:8b:
         27:28:37:67:bc:9b:bb:86:b2:9b:74:23:2e:56:8a:29:2a:3f:
         35:0e:91:14:31:36:07:96:00:49:52:3f:41:fd:9c:2a:1d:25:
         5a:9b:eb:a5:7b:de:c4:4c:57:e6:17:4c:f9:83:e9:84:46:1d:
         20:41:b3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 01:31:51 2026 by rpki-client