Error: rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.mft
File:                     810076D4984418ED05F03F761B6CBE5D6F00DC86.mft (raw, json)
Hash identifier:          ajx2Ybgv9SEIpo+tummnzg5Le5daeWJCqChAGqkPQMg=
Subject key identifier:   81:31:9B:DF:F5:ED:43:D8:16:69:75:4D:31:08:AC:B8:FD:6E:A4:22
Authority key identifier: 81:00:76:D4:98:44:18:ED:05:F0:3F:76:1B:6C:BE:5D:6F:00:DC:86
Certificate issuer:       /CN=810076D4984418ED05F03F761B6CBE5D6F00DC86
Certificate serial:       3D647F44CD891CC898FE7C14F3C98E75F008CD07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.mft
Manifest number:          0487
Signing time:             Sat 22 Aug 2026 19:14:18 +0000
Manifest this update:     Sat 22 Aug 2026 19:09:18 +0000
Manifest next update:     Sun 23 Aug 2026 22:45:18 +0000
Files and hashes:         1: 810076D4984418ED05F03F761B6CBE5D6F00DC86.crl (hash: S77w7ZFj14m1JN3xuKguslKuHHsr7mBGgCo3UyI2TIo=)
                          2: 323830343a376662383a3a2f33322d3438203d3e20323731373035.roa (hash: VyymUYxLBuq4LNhc03tc5cATTlqQ2WLMAR2Y4LwkkmU=)
                          3: 3137372e32312e3135362e302f32322d3234203d3e20323731373035.roa (hash: rbZYOfJRddAk9LwnFp4nOdPQwEySvJEo6840fEgXSI8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.crl
                          rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 22:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:64:7f:44:cd:89:1c:c8:98:fe:7c:14:f3:c9:8e:75:f0:08:cd:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=810076D4984418ED05F03F761B6CBE5D6F00DC86
        Validity
            Not Before: Aug 22 19:09:18 2026 GMT
            Not After : Aug 23 22:45:18 2026 GMT
        Subject: CN=81319BDFF5ED43D81669754D3108ACB8FD6EA422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:01:14:f6:53:d0:dd:f6:b3:d2:28:73:a4:54:
                    9e:5c:9d:63:38:80:0f:a7:eb:61:cf:70:67:ff:97:
                    9a:9c:fd:4f:7c:83:21:d2:81:8d:28:63:c7:c3:26:
                    4e:1c:11:21:7d:4d:be:a3:09:5b:fb:b6:ab:7c:2c:
                    be:7b:f4:aa:a6:2d:49:73:5e:09:4d:df:24:9a:4a:
                    dd:91:8b:5f:41:25:cc:85:77:40:a6:9e:ba:83:f8:
                    a3:44:d0:3f:95:f0:0b:43:73:17:79:7b:41:c2:7e:
                    f1:f7:f0:2c:b6:50:7f:78:9e:cb:22:31:70:23:d8:
                    5d:71:e2:cb:93:49:cf:e9:df:89:37:dd:78:99:37:
                    94:04:b8:cb:41:af:e8:a7:d8:4d:f1:35:4f:f6:47:
                    97:1e:f5:6b:b1:5c:52:81:67:19:2b:79:1b:af:04:
                    12:6d:e9:13:d2:66:9d:d7:50:c4:71:bd:5a:e8:20:
                    08:b8:db:e0:8b:f2:44:53:bc:1f:21:bb:46:75:bd:
                    ee:35:bd:2f:4c:cb:c4:60:db:b3:42:f5:83:6b:37:
                    58:48:ca:4b:6e:d7:eb:60:6f:50:77:82:1f:b9:d5:
                    0b:83:a0:12:0b:c0:34:61:c9:9f:bf:31:ce:b2:b8:
                    83:aa:a0:93:9c:a0:ba:78:43:07:39:bd:50:c3:2d:
                    1e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:31:9B:DF:F5:ED:43:D8:16:69:75:4D:31:08:AC:B8:FD:6E:A4:22
            X509v3 Authority Key Identifier:
                keyid:81:00:76:D4:98:44:18:ED:05:F0:3F:76:1B:6C:BE:5D:6F:00:DC:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:fb:a7:91:02:0f:68:9f:25:4a:9b:b3:84:b5:8c:7c:80:1e:
         4e:02:58:c4:74:61:fd:6c:7c:c6:97:13:3e:2c:88:e3:e6:7a:
         57:c9:9d:c3:94:bf:bf:68:03:65:03:3c:28:54:1d:84:ea:1d:
         ad:59:b6:b3:94:d7:f0:bd:c2:9f:7e:ff:10:e5:d7:cc:ad:7d:
         c9:5c:09:14:3c:f1:60:87:fa:15:bc:e7:ac:17:66:87:40:43:
         c3:11:1b:77:ac:f7:82:72:4f:7e:ac:23:cf:22:4a:c0:75:2f:
         b3:3c:36:87:0f:07:04:f6:82:77:bf:66:72:d7:7e:20:45:7b:
         af:c8:de:84:a8:59:b3:69:0a:aa:2f:d8:f0:d7:1c:d2:ac:9d:
         af:10:f4:13:6b:e8:67:c6:87:f7:e3:73:a3:b0:55:8e:ca:a7:
         e5:46:e5:14:76:f0:a8:41:61:16:3e:16:c3:f2:24:89:27:5d:
         6b:e1:49:94:3b:42:69:d9:d0:fe:9b:d9:f8:a9:a4:27:2c:62:
         29:ee:73:20:b2:24:dc:b3:f1:dc:c2:f1:1f:5a:43:8d:88:25:
         f1:53:51:4d:af:a6:77:0d:6b:05:d6:ea:b0:58:d6:66:02:77:
         0d:ba:af:9f:e4:be:35:de:c9:fe:fa:58:f7:e5:92:48:e8:9e:
         cd:de:68:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 15:06:11 2026 by rpki-client