Error: rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/1/500BE7BB5F89AF961567F51B45FD813BDFA6B436.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/1/500BE7BB5F89AF961567F51B45FD813BDFA6B436.mft
File:                     500BE7BB5F89AF961567F51B45FD813BDFA6B436.mft (raw, json)
Hash identifier:          fxB4tDbPcHIn31rhZbR/gsG80+chRMymuJrq/Xt9JSg=
Subject key identifier:   AE:47:0D:BD:02:3E:69:55:C8:9F:01:1B:BB:52:91:DD:07:F0:DB:9A
Authority key identifier: 50:0B:E7:BB:5F:89:AF:96:15:67:F5:1B:45:FD:81:3B:DF:A6:B4:36
Certificate issuer:       /CN=500BE7BB5F89AF961567F51B45FD813BDFA6B436
Certificate serial:       07CF80B9F474A853B534B5420936FB5959A50A44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/500BE7BB5F89AF961567F51B45FD813BDFA6B436.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/1/500BE7BB5F89AF961567F51B45FD813BDFA6B436.mft
Manifest number:          0488
Signing time:             Sun 23 Aug 2026 13:06:08 +0000
Manifest this update:     Sun 23 Aug 2026 13:01:08 +0000
Manifest next update:     Mon 24 Aug 2026 13:46:08 +0000
Files and hashes:         1: 3132382e3230312e37322e302f32322d3332203d3e20323636363138.roa (hash: Fl4L51MnBo8Nj2nFJT2yMtW+78P2kjJD7yZnYta/7g8=)
                          2: 323830343a336562633a3a2f33322d313238203d3e20323636363138.roa (hash: Mvd05f87jEjT+ZtXA4vMj/31PWsW0OXzhH65bZHMeuQ=)
                          3: 500BE7BB5F89AF961567F51B45FD813BDFA6B436.crl (hash: 15i/tFejKWMmUEnZAr8thgP3VddI97ppemafGezrTaU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/1/500BE7BB5F89AF961567F51B45FD813BDFA6B436.crl
                          rsync://rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/1/500BE7BB5F89AF961567F51B45FD813BDFA6B436.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/500BE7BB5F89AF961567F51B45FD813BDFA6B436.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 13:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:cf:80:b9:f4:74:a8:53:b5:34:b5:42:09:36:fb:59:59:a5:0a:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500BE7BB5F89AF961567F51B45FD813BDFA6B436
        Validity
            Not Before: Aug 23 13:01:08 2026 GMT
            Not After : Aug 24 13:46:08 2026 GMT
        Subject: CN=AE470DBD023E6955C89F011BBB5291DD07F0DB9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bc:98:b5:b7:c2:cf:9c:05:3c:2e:8c:54:3a:
                    a9:a1:17:a6:51:eb:0f:4a:57:fb:b3:23:1d:7e:ab:
                    5f:ee:4e:21:48:9b:d9:cf:f1:6a:ae:a6:d1:69:f7:
                    e9:bc:3d:bd:7c:e1:2f:66:e8:5a:c8:6d:b4:3e:7a:
                    57:0f:2c:96:7b:ef:8e:a7:99:d6:88:40:01:d4:70:
                    dc:e0:46:a3:eb:98:82:db:4c:e5:58:ff:34:bd:e4:
                    4d:5f:e3:db:6e:a1:a0:38:83:2c:a3:ac:ec:b3:ca:
                    be:fa:a9:0c:5c:fe:8f:0c:4b:78:74:07:3b:54:82:
                    62:58:d0:8c:a9:90:02:02:f1:8b:e4:3f:59:e1:9f:
                    55:e3:24:52:36:98:aa:4a:ac:bc:2c:c9:46:d7:58:
                    a4:42:81:4e:09:87:bf:aa:c2:4a:4c:24:99:9d:2d:
                    22:44:4f:6c:96:98:15:65:fd:90:7a:a2:2b:9d:53:
                    e7:94:a9:fc:50:bc:c3:e7:58:ba:14:09:3e:51:fd:
                    71:1c:dc:1b:e4:fd:d1:24:56:56:b3:38:bc:f4:88:
                    8a:08:65:8c:21:bd:5c:9f:0e:3a:d0:ea:f3:1e:d2:
                    a5:51:fb:f4:86:15:ef:c1:8c:7a:f2:14:cc:c4:f0:
                    ee:e8:46:3d:7b:40:16:38:72:34:2c:c6:52:a8:b5:
                    cb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:47:0D:BD:02:3E:69:55:C8:9F:01:1B:BB:52:91:DD:07:F0:DB:9A
            X509v3 Authority Key Identifier:
                keyid:50:0B:E7:BB:5F:89:AF:96:15:67:F5:1B:45:FD:81:3B:DF:A6:B4:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/1/500BE7BB5F89AF961567F51B45FD813BDFA6B436.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/500BE7BB5F89AF961567F51B45FD813BDFA6B436.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/1/500BE7BB5F89AF961567F51B45FD813BDFA6B436.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a3:9f:dc:58:bf:c8:7d:7f:cd:56:2b:8f:03:07:dc:e9:5f:
         3c:c8:ee:5b:95:db:66:c3:49:b2:16:c2:ae:7f:cb:1a:eb:79:
         ec:28:59:00:7f:11:d9:e2:42:1e:54:c4:a7:2a:91:11:a2:07:
         fa:4f:54:9d:d8:d6:39:91:eb:55:e1:d8:2c:a4:3d:f3:9b:35:
         89:b8:ab:3f:9a:ae:03:b0:86:d2:b7:5e:42:41:7e:ca:b6:14:
         9b:46:0b:0f:82:b5:2e:10:e2:bc:7c:92:5f:e5:87:a8:6d:16:
         a4:d8:23:d5:f2:de:4d:3c:b8:43:03:14:2e:12:3f:71:ad:24:
         ce:94:80:ee:25:da:db:fe:2e:08:ce:b8:58:0a:90:b1:04:ba:
         72:c7:08:20:cd:b4:a5:d7:22:4e:8e:f5:4e:14:1b:0e:60:3e:
         8f:54:d5:ae:3f:6f:29:3a:8e:45:53:af:34:3f:73:cf:8e:0f:
         9d:9a:73:4d:dd:f3:55:b0:9c:8d:c2:56:d9:e8:53:d7:39:1d:
         3e:1e:be:3b:e9:b9:80:52:c2:8d:00:c7:2e:da:df:b0:da:16:
         d2:54:5d:47:e8:3f:bd:5a:db:c6:ba:b3:e5:c0:9f:59:e4:e9:
         3a:aa:40:fa:e0:0f:11:d0:17:2b:00:d4:81:c9:af:33:d7:3c:
         c7:7b:03:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 01:21:16 2026 by rpki-client