Error: rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.mft
File:                     1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.mft (raw, json)
Hash identifier:          W334e48Tx/2bWl4PO8IzkbEXLy3/Bggjm90G6PQi2NM=
Subject key identifier:   63:2F:6F:46:0A:3D:0D:CB:84:7A:54:B9:A9:AB:9D:93:10:63:92:B1
Authority key identifier: 1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30
Certificate issuer:       /CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
Certificate serial:       39F866E3EA876EDC264DCB2E478184B9E4472C09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.mft
Manifest number:          048A
Signing time:             Sun 23 Aug 2026 21:10:00 +0000
Manifest this update:     Sun 23 Aug 2026 21:05:00 +0000
Manifest next update:     Mon 24 Aug 2026 23:31:00 +0000
Files and hashes:         1: 323830343a333630303a633030303a3a2f33342d3334203d3e20323636333230.roa (hash: B0AY3y4oMhTcSBHKaZ3qTJZyiDf8fSO4xoBIBWtmvC8=)
                          2: 3137302e3233382e3133392e302f32342d3234203d3e20323636333230.roa (hash: wReCNSOvpRr55MYLx0kF48lopUIeqRhe1hYSk0MsjVw=)
                          3: 323830343a333630303a343030303a3a2f33342d3334203d3e20323636333230.roa (hash: 3YOSdlF0/WjO9/uxapKu6mRCUft8cRfun1hmMXKISVQ=)
                          4: 3137302e3233382e3133382e302f32332d3233203d3e20323636333230.roa (hash: UIZgcCnzNJV03SgAICDqQgUVoYxGcAsExp0vll6Aqp4=)
                          5: 3137302e3233382e3133362e302f32342d3234203d3e20323636333230.roa (hash: n+W/NzrKCg5hQH+zzZEB5dAHWYdefLqRUMqoPIkQw1g=)
                          6: 1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl (hash: cbYkOCWVyyETiLHrxMcQ92rNETRqanfbbR5qSK87+3Q=)
                          7: 3137302e3233382e3133362e302f32322d3232203d3e20323636333230.roa (hash: uxKcdFDbS/gG4INWDxln+wc1GAs1dDeKIT8aGIu/qCU=)
                          8: 3137302e3233382e3133382e302f32342d3234203d3e20323636333230.roa (hash: kiQjBuQGmQTbmcBRBw8xwAtDVwFuGY8XxZQsqYDcAcc=)
                          9: 323830343a333630303a383030303a3a2f33332d3333203d3e20323636333230.roa (hash: E0ifC3KdDyxAVWQUJDn4mRtfPbFKBjFmnadKNx/UJJ8=)
                          10: 3137302e3233382e3133362e302f32332d3233203d3e20323636333230.roa (hash: FlnQNNut+j/0Vybq1+OCTyV66EdfaaWlQnHDBMZvdfo=)
                          11: 3137302e3233382e3133372e302f32342d3234203d3e20323636333230.roa (hash: XmjulZuIkxaorftiuLH8I4UzSP3J5ABUnFIGEmbiL5A=)
                          12: 323830343a333630303a3a2f33332d3333203d3e20323636333230.roa (hash: pk4pMqMd41bNxhx05Kd3fAZ4Nb7DJqC6I1MCh1tkcBU=)
                          13: 323830343a333630303a383030303a3a2f33342d3334203d3e20323636333230.roa (hash: +KjLadMsgjTBbobRHC1grKlmcpmu0xtrexahEwAWrz8=)
                          14: 323830343a333630303a3a2f33342d3334203d3e20323636333230.roa (hash: bs9qNakZHvN+cmLSwXFt1jhxPd5X7PQQV69Wi/Z2Cz8=)
                          15: 323830343a333630303a3a2f33322d3332203d3e20323636333230.roa (hash: KoZmD/idQKS3R1BDmhm+ffCJi5A4XJF92B3jhKYnqtc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl
                          rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 23:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f8:66:e3:ea:87:6e:dc:26:4d:cb:2e:47:81:84:b9:e4:47:2c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
        Validity
            Not Before: Aug 23 21:05:00 2026 GMT
            Not After : Aug 24 23:31:00 2026 GMT
        Subject: CN=632F6F460A3D0DCB847A54B9A9AB9D93106392B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:29:b3:2f:9f:4d:87:39:f1:6e:a0:51:d7:5d:
                    3b:2d:3f:b8:98:07:ef:66:71:ee:57:f5:b1:61:2d:
                    a4:a1:3d:d8:bd:17:7a:08:ca:83:42:3c:11:db:66:
                    d4:93:a7:43:9d:97:36:a4:af:c4:8d:58:c0:9e:ee:
                    17:22:a2:6f:44:00:c3:d3:d9:98:34:4c:a2:8e:a4:
                    75:64:4b:d0:d0:0a:2e:35:2b:bd:90:d5:e3:17:14:
                    42:46:c5:16:1d:f8:15:3a:d3:b5:e7:a2:31:2f:e4:
                    20:8e:f9:aa:0a:75:45:5a:81:2b:ba:9a:04:86:f4:
                    d7:78:38:52:2d:cc:6a:77:59:e6:c6:5f:90:c3:00:
                    20:f2:a2:59:e9:54:6a:e3:42:90:70:74:58:f1:d6:
                    52:a9:15:3c:b9:f0:79:c2:2a:de:b7:a5:f3:b2:7a:
                    26:8e:c5:bf:ab:9f:63:ad:40:0f:97:60:c8:f6:68:
                    22:f0:0d:da:49:fc:9e:eb:db:39:12:75:e1:04:2d:
                    8d:7d:c6:e1:df:1e:e4:55:9a:da:55:13:4f:3e:fe:
                    ba:a2:57:ff:35:c6:87:f9:9d:57:17:da:48:bf:be:
                    72:5e:ad:bc:ac:54:26:ee:68:f7:63:f9:f1:c0:bb:
                    89:b7:8f:2f:9d:bd:82:67:db:bb:bf:4b:2b:36:2e:
                    ce:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2F:6F:46:0A:3D:0D:CB:84:7A:54:B9:A9:AB:9D:93:10:63:92:B1
            X509v3 Authority Key Identifier:
                keyid:1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:a8:f9:a5:97:61:88:e0:21:e7:14:21:f3:69:23:bd:42:fc:
         19:c6:79:e9:e4:a7:18:e3:a9:4d:1a:e2:0e:79:f1:16:69:83:
         c3:7c:30:f9:dd:bc:ce:79:eb:c3:bb:10:1b:b7:24:bb:4f:71:
         54:34:4d:f3:51:fb:e5:dd:9a:63:e8:7e:83:05:7b:5f:28:8e:
         3f:90:05:a9:fd:cb:d8:9b:d6:ad:20:fe:ed:cf:c5:8b:12:2a:
         23:49:c9:a6:ad:b4:2e:7f:7e:e0:27:d3:80:d3:2a:9d:2c:bd:
         3c:c6:de:fd:a0:43:47:2d:c6:72:1c:af:9f:0a:5e:90:89:19:
         31:3e:6d:82:99:a8:a4:c4:58:67:5e:1a:b5:78:ff:b8:34:53:
         15:26:ed:3e:dd:b4:f2:70:52:ce:c8:04:ae:8f:db:27:64:ed:
         64:65:50:38:63:13:50:ed:53:c1:54:42:bf:bb:d8:99:47:82:
         f1:64:23:b7:89:2c:07:aa:88:4b:b9:2c:e9:59:a9:44:3b:cc:
         44:23:72:87:f3:36:dc:8c:88:d0:d1:f7:a0:5b:87:a3:2b:44:
         f2:b9:5b:6f:a4:8f:37:5d:65:a2:4c:d2:f3:cf:51:b7:cc:c0:
         c3:75:34:d8:27:3a:cd:44:bc:bd:c7:a5:4b:08:23:3a:65:65:
         02:6b:2e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 13:24:11 2026 by rpki-client