Error: rpki-repo.registro.br/repo/HKsDRAXYhgW9W7tABJurc8fGrRvnnV67bt9MFYwHRDd/1/144D8BA24CABA5C71D99AA708E69E7D4F9612435.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/HKsDRAXYhgW9W7tABJurc8fGrRvnnV67bt9MFYwHRDd/1/144D8BA24CABA5C71D99AA708E69E7D4F9612435.mft
File:                     144D8BA24CABA5C71D99AA708E69E7D4F9612435.mft (raw, json)
Hash identifier:          xhw+xaFJZnqsnhXD5+/rUh5lWjZzjub4GFMk3jl7W3I=
Subject key identifier:   7A:E4:DA:78:44:4F:05:0F:13:C6:E6:2B:33:BA:3D:55:4F:5C:7C:95
Authority key identifier: 14:4D:8B:A2:4C:AB:A5:C7:1D:99:AA:70:8E:69:E7:D4:F9:61:24:35
Certificate issuer:       /CN=144D8BA24CABA5C71D99AA708E69E7D4F9612435
Certificate serial:       53798C4E7CBD38633DF7DDA6C847B8571E3636C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/144D8BA24CABA5C71D99AA708E69E7D4F9612435.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HKsDRAXYhgW9W7tABJurc8fGrRvnnV67bt9MFYwHRDd/1/144D8BA24CABA5C71D99AA708E69E7D4F9612435.mft
Manifest number:          051E
Signing time:             Sun 23 Aug 2026 21:30:00 +0000
Manifest this update:     Sun 23 Aug 2026 21:25:00 +0000
Manifest next update:     Mon 24 Aug 2026 21:30:00 +0000
Files and hashes:         1: 323830343a373065303a3a2f33322d3335203d3e20323730373533.roa (hash: mdXg2ljL7B7eMD6LMsrmxi68qWORXWuB34tIyxojtfw=)
                          2: 144D8BA24CABA5C71D99AA708E69E7D4F9612435.crl (hash: R1hIhpyMudhD7lSNrGm9SbdTKANnY3gjJZc1ZDUT38g=)
                          3: 3137392e3130392e39362e302f32322d3234203d3e20323730373533.roa (hash: lZGMkN3GQcud4OEBakx0qvPNgdDqc8vzNYILh6S2/FI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HKsDRAXYhgW9W7tABJurc8fGrRvnnV67bt9MFYwHRDd/1/144D8BA24CABA5C71D99AA708E69E7D4F9612435.crl
                          rsync://rpki-repo.registro.br/repo/HKsDRAXYhgW9W7tABJurc8fGrRvnnV67bt9MFYwHRDd/1/144D8BA24CABA5C71D99AA708E69E7D4F9612435.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/144D8BA24CABA5C71D99AA708E69E7D4F9612435.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 21:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:79:8c:4e:7c:bd:38:63:3d:f7:dd:a6:c8:47:b8:57:1e:36:36:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=144D8BA24CABA5C71D99AA708E69E7D4F9612435
        Validity
            Not Before: Aug 23 21:25:00 2026 GMT
            Not After : Aug 24 21:30:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:49:cb:96:81:a3:27:2e:e9:1f:dc:92:ba:d0:
                    fc:e8:4b:e9:7e:a1:b7:dd:02:12:c8:1f:1d:1d:e0:
                    ea:88:9e:2b:0b:3d:55:e5:73:86:f7:c5:45:c8:a4:
                    0d:70:60:8b:b9:1e:4a:96:ac:54:75:d6:b9:31:f6:
                    f6:11:06:8f:8e:d0:06:6b:f2:4e:57:2e:71:c5:48:
                    fb:a8:08:37:e6:6b:85:8b:db:58:b2:da:7f:f7:3a:
                    7e:db:09:46:26:99:cd:4f:2a:94:4a:09:01:e1:00:
                    48:39:43:2d:fd:71:d6:5b:7b:cf:a9:70:b9:3e:7b:
                    6d:b2:9b:f8:25:bc:b3:3a:1c:b9:37:72:03:bf:18:
                    cb:17:0e:70:15:c6:87:57:c4:d4:03:8e:32:8e:10:
                    11:5c:a1:6e:1e:d6:09:f2:22:1e:58:2b:4b:bc:f6:
                    3f:aa:11:af:ae:c9:0e:68:7d:df:01:f7:9d:fe:07:
                    07:a8:e4:19:44:7c:8b:f7:34:95:0c:0e:cb:4f:1a:
                    96:7c:68:cf:9f:78:6b:72:e4:d4:97:74:7f:a3:22:
                    da:aa:58:df:d8:91:f7:e0:11:cb:38:7e:21:b5:41:
                    52:a0:ca:aa:ca:d1:d6:68:62:49:62:6b:e1:a0:85:
                    e7:47:77:74:44:7b:0e:e2:41:df:4d:50:b5:90:38:
                    da:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E4:DA:78:44:4F:05:0F:13:C6:E6:2B:33:BA:3D:55:4F:5C:7C:95
            X509v3 Authority Key Identifier:
                keyid:14:4D:8B:A2:4C:AB:A5:C7:1D:99:AA:70:8E:69:E7:D4:F9:61:24:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HKsDRAXYhgW9W7tABJurc8fGrRvnnV67bt9MFYwHRDd/1/144D8BA24CABA5C71D99AA708E69E7D4F9612435.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/144D8BA24CABA5C71D99AA708E69E7D4F9612435.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HKsDRAXYhgW9W7tABJurc8fGrRvnnV67bt9MFYwHRDd/1/144D8BA24CABA5C71D99AA708E69E7D4F9612435.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:d4:b8:e7:1c:a9:46:f5:10:81:4b:1d:75:40:0e:13:27:ae:
         31:9a:69:18:9f:01:ad:ab:ea:31:ec:10:68:8d:ea:6a:07:4a:
         ac:5d:0a:ed:6a:50:eb:a2:31:4b:43:69:a7:f6:aa:29:e7:39:
         6d:8d:b7:75:8a:56:37:f6:b0:e1:ed:2c:fe:f5:5c:e5:e2:fe:
         99:66:29:84:38:4b:1e:1c:ad:51:3c:69:d1:48:70:7e:d1:07:
         b4:e3:c2:60:8e:8d:22:a2:62:4a:9e:d5:18:19:22:10:5d:dc:
         d5:cc:f7:d4:65:4d:e4:98:b8:00:16:4e:33:4e:77:89:c6:3d:
         35:47:d5:f0:64:16:51:5a:30:e7:65:34:63:18:81:47:92:81:
         a9:fe:70:7d:cf:50:28:27:f8:8b:f8:54:4e:51:f0:81:ab:29:
         63:de:08:66:59:7d:e6:7f:cd:89:49:7f:4e:6c:44:6a:af:9c:
         13:8b:b2:c7:55:0a:30:d0:02:cc:fd:08:76:37:df:4f:55:d7:
         7d:d6:36:c9:dc:0a:09:86:9f:b4:4a:49:18:90:09:ba:5b:66:
         fd:68:b0:a9:23:74:ee:f2:54:9d:a8:4f:09:9d:eb:a2:43:2d:
         a6:d0:5c:80:a2:b3:49:72:23:3c:8c:3e:64:b0:53:80:b6:68:
         0c:8d:be:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:49:26 2026 by rpki-client