Error: rpki-repo.registro.br/repo/Gp8RUjhxTDvLHSAmF5J9ohGErXdKfDTgNCLh9SKoHhbs/1/5EA0A0802D5FBA076B06703D21D6D32026825F6D.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Gp8RUjhxTDvLHSAmF5J9ohGErXdKfDTgNCLh9SKoHhbs/1/5EA0A0802D5FBA076B06703D21D6D32026825F6D.mft
File:                     5EA0A0802D5FBA076B06703D21D6D32026825F6D.mft (raw, json)
Hash identifier:          kTtxs8sNBMwe38oTrFOG1Sa5CWKgcDElgBmB6IqinGc=
Subject key identifier:   A0:BB:83:1F:A5:E4:10:07:06:EE:29:99:73:15:3A:21:3B:27:00:68
Authority key identifier: 5E:A0:A0:80:2D:5F:BA:07:6B:06:70:3D:21:D6:D3:20:26:82:5F:6D
Certificate issuer:       /CN=5EA0A0802D5FBA076B06703D21D6D32026825F6D
Certificate serial:       68679D480FF3367FA7D69AC8A43A0E7F497384A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EA0A0802D5FBA076B06703D21D6D32026825F6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gp8RUjhxTDvLHSAmF5J9ohGErXdKfDTgNCLh9SKoHhbs/1/5EA0A0802D5FBA076B06703D21D6D32026825F6D.mft
Manifest number:          051D
Signing time:             Sun 23 Aug 2026 07:30:00 +0000
Manifest this update:     Sun 23 Aug 2026 07:25:00 +0000
Manifest next update:     Mon 24 Aug 2026 07:30:00 +0000
Files and hashes:         1: 323830343a353134383a3a2f33322d3335203d3e20323638343433.roa (hash: zO9f4DqGnsTM+YIwa7xEs2UaueB35HnunKLWoYhwlmI=)
                          2: 5EA0A0802D5FBA076B06703D21D6D32026825F6D.crl (hash: dE+HJBiS+ciu9+8WvHmakmTrnkXLXL++wTAPf3JiVy8=)
                          3: 34352e3136312e34302e302f32322d3234203d3e20323638343433.roa (hash: pSiI6KFPxpl0ITfEdgVUA0UWCo5isrVWbuBmZKh9pE4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gp8RUjhxTDvLHSAmF5J9ohGErXdKfDTgNCLh9SKoHhbs/1/5EA0A0802D5FBA076B06703D21D6D32026825F6D.crl
                          rsync://rpki-repo.registro.br/repo/Gp8RUjhxTDvLHSAmF5J9ohGErXdKfDTgNCLh9SKoHhbs/1/5EA0A0802D5FBA076B06703D21D6D32026825F6D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EA0A0802D5FBA076B06703D21D6D32026825F6D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 07:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:67:9d:48:0f:f3:36:7f:a7:d6:9a:c8:a4:3a:0e:7f:49:73:84:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EA0A0802D5FBA076B06703D21D6D32026825F6D
        Validity
            Not Before: Aug 23 07:25:00 2026 GMT
            Not After : Aug 24 07:30:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:73:6b:64:57:90:1e:aa:ec:0c:8e:1a:af:84:
                    38:59:6e:ca:7b:36:cf:e0:bb:0e:1b:f9:f5:3b:5a:
                    0b:38:15:0c:56:10:75:ff:70:a0:ba:1d:e2:a1:17:
                    74:19:59:a8:ba:6f:2a:c5:b6:0f:be:cf:d3:a6:ca:
                    e4:0b:18:96:c6:be:54:a4:e3:03:c6:72:37:a2:b7:
                    0e:d5:f5:05:41:3f:25:46:aa:22:ab:dd:94:2f:d1:
                    b9:91:cb:9e:57:f7:1b:13:7b:d5:11:e9:d7:65:78:
                    33:b0:ad:9c:22:c8:e7:6f:1c:39:b6:52:d2:14:53:
                    49:5a:56:f8:92:75:9f:ce:04:bf:c3:58:eb:70:e1:
                    7d:7b:3f:26:cc:b3:08:43:a5:ef:d0:7c:02:67:c1:
                    94:8a:7e:dd:78:fa:b8:aa:04:5c:c7:3f:12:b6:a5:
                    48:9c:35:9b:47:14:0e:98:6c:43:70:e9:d2:f4:29:
                    0b:e5:dd:b7:2b:82:18:f5:77:00:f1:13:2e:a0:36:
                    e0:fc:82:f5:ff:4b:88:31:25:cd:11:69:99:fa:38:
                    c0:6a:74:7e:51:38:98:b9:66:73:cc:d5:d3:00:0d:
                    b1:7b:f2:72:04:97:c1:74:1b:67:8f:8a:ba:d4:38:
                    54:10:8f:d2:12:f8:56:d8:66:e4:b7:0d:b5:e8:1b:
                    76:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:BB:83:1F:A5:E4:10:07:06:EE:29:99:73:15:3A:21:3B:27:00:68
            X509v3 Authority Key Identifier:
                keyid:5E:A0:A0:80:2D:5F:BA:07:6B:06:70:3D:21:D6:D3:20:26:82:5F:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gp8RUjhxTDvLHSAmF5J9ohGErXdKfDTgNCLh9SKoHhbs/1/5EA0A0802D5FBA076B06703D21D6D32026825F6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EA0A0802D5FBA076B06703D21D6D32026825F6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gp8RUjhxTDvLHSAmF5J9ohGErXdKfDTgNCLh9SKoHhbs/1/5EA0A0802D5FBA076B06703D21D6D32026825F6D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:9e:89:cf:9f:28:d3:d1:e6:2a:7d:9e:bb:f4:51:b7:1b:0a:
         ef:21:b6:2f:49:1f:49:9e:ba:d2:c8:ab:4b:77:d7:f3:0a:4d:
         5b:25:06:b9:ae:fc:d3:d6:a2:46:68:47:47:5b:e8:f8:ce:fe:
         3a:67:c2:0d:7e:db:89:9e:40:d9:62:0a:a0:5f:7e:56:c5:15:
         f9:9f:93:b9:5c:21:6f:c5:43:bd:3e:46:ba:8a:cf:25:cc:1e:
         38:79:96:e0:52:19:14:be:60:71:a8:aa:cb:cd:38:bb:0e:11:
         0c:45:0b:1a:02:f0:a0:4a:9c:21:05:af:f1:37:54:75:d5:66:
         f8:ca:86:8d:4d:cd:fe:83:c9:b8:a2:66:4a:90:f0:45:bc:f4:
         22:9c:ae:eb:04:2b:19:24:74:d8:c4:35:6c:b2:37:9a:ed:b8:
         29:16:29:45:00:d7:ba:14:f5:08:34:78:7e:83:da:d7:de:21:
         90:58:aa:db:84:23:b9:87:81:27:ed:ae:f0:3e:39:8e:d1:f1:
         d3:e6:4d:5e:30:f7:dd:87:3e:f9:78:71:a3:8c:31:16:ec:cf:
         24:e3:05:0b:c8:1f:46:f0:1e:eb:c9:73:2c:63:b1:4d:3c:df:
         65:17:11:60:ba:1f:f1:9e:46:2b:ba:eb:30:d4:7e:27:d5:e6:
         af:c0:d9:7f
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUaGedSA/zNn+n1prIpDoOf0lzhKkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUVBMEEwODAyRDVGQkEwNzZCMDY3MDNEMjFENkQzMjAy
NjgyNUY2RDAeFw0yNjA4MjMwNzI1MDBaFw0yNjA4MjQwNzMwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0Q3MzZCNjQ1NzkwMUVBQUVD
MEM4RTFBQUY4NDM4NTk2RUNBN0IzNkNGRTBCQjBFMUJGOUY1M0I1QTBCMzgxNTBD
NTYxMDc1RkY3MEEwQkExREUyQTExNzc0MTk1OUE4QkE2RjJBQzVCNjBGQkVDRkQz
QTZDQUU0MEIxODk2QzZCRTU0QTRFMzAzQzY3MjM3QTJCNzBFRDVGNTA1NDEzRjI1
NDZBQTIyQUJERDk0MkZEMUI5OTFDQjlFNTdGNzFCMTM3QkQ1MTFFOUQ3NjU3ODMz
QjBBRDlDMjJDOEU3NkYxQzM5QjY1MkQyMTQ1MzQ5NUE1NkY4OTI3NTlGQ0UwNEJG
QzM1OEVCNzBFMTdEN0IzRjI2Q0NCMzA4NDNBNUVGRDA3QzAyNjdDMTk0OEE3RURE
NzhGQUI4QUEwNDVDQzczRjEyQjZBNTQ4OUMzNTlCNDcxNDBFOTg2QzQzNzBFOUQy
RjQyOTBCRTVEREI3MkI4MjE4RjU3NzAwRjExMzJFQTAzNkUwRkM4MkY1RkY0Qjg4
MzEyNUNEMTE2OTk5RkEzOEMwNkE3NDdFNTEzODk4Qjk2NjczQ0NENUQzMDAwREIx
N0JGMjcyMDQ5N0MxNzQxQjY3OEY4QUJBRDQzODU0MTA4RkQyMTJGODU2RDg2NkU0
QjcwREI1RTgxQjc2M0YwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzXNrZFeQHqrsDI4ar4Q4WW7KezbP4LsOG/n1O1oLOBUMVhB1/3Cg
uh3ioRd0GVmoum8qxbYPvs/TpsrkCxiWxr5UpOMDxnI3orcO1fUFQT8lRqoiq92U
L9G5kcueV/cbE3vVEenXZXgzsK2cIsjnbxw5tlLSFFNJWlb4knWfzgS/w1jrcOF9
ez8mzLMIQ6Xv0HwCZ8GUin7dePq4qgRcxz8StqVInDWbRxQOmGxDcOnS9CkL5d23
K4IY9XcA8RMuoDbg/IL1/0uIMSXNEWmZ+jjAanR+UTiYuWZzzNXTAA2xe/JyBJfB
dBtnj4q61DhUEI/SEvhW2Gbktw216Bt2PwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FKC7gx+l5BAHBu4pmXMVOiE7JwBoMB8GA1UdIwQYMBaAFF6goIAtX7oHawZwPSHW
0yAmgl9tMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dwOFJVamh4VER2TEhT
QW1GNUo5b2hHRXJYZEtmRFRnTkNMaDlTS29IaGJzLzEvNUVBMEEwODAyRDVGQkEw
NzZCMDY3MDNEMjFENkQzMjAyNjgyNUY2RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS81RUEwQTA4MDJENUZCQTA3NkIwNjcwM0QyMUQ2RDMyMDI2ODI1
RjZELmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dwOFJVamh4VER2TEhTQW1GNUo5
b2hHRXJYZEtmRFRnTkNMaDlTS29IaGJzLzEvNUVBMEEwODAyRDVGQkEwNzZCMDY3
MDNEMjFENkQzMjAyNjgyNUY2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAOeic+fKNPR5ip9nrv0Ubcb
Cu8hti9JH0meutLIq0t31/MKTVslBrmu/NPWokZoR0db6PjO/jpnwg1+24meQNli
CqBfflbFFfmfk7lcIW/FQ70+RrqKzyXMHjh5luBSGRS+YHGoqsvNOLsOEQxFCxoC
8KBKnCEFr/E3VHXVZvjKho1Nzf6DybiiZkqQ8EW89CKcrusEKxkkdNjENWyyN5rt
uCkWKUUA17oU9Qg0eH6D2tfeIZBYqtuEI7mHgSftrvA+OY7R8dPmTV4w992HPvl4
caOMMRbszyTjBQvIH0bwHuvJcyxjsU0832UXEWC6H/GeRiu66zDUfifV5q/A2X8=
-----END CERTIFICATE-----
Generated at Sun Aug 23 15:14:26 2026 by rpki-client