Error: rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft
File:                     B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft (raw, json)
Hash identifier:          LEs6mcKolchOHIZq0y97kK0Sea0VkUzdFI2RTBWA4EU=
Subject key identifier:   89:4B:73:5D:66:92:DA:D1:A6:BC:4E:8B:6F:64:F4:52:EC:B5:96:C7
Authority key identifier: B8:AF:00:84:3C:90:24:B6:8A:E3:EC:43:31:E7:53:B7:B2:B4:22:DF
Certificate issuer:       /CN=B8AF00843C9024B68AE3EC4331E753B7B2B422DF
Certificate serial:       37B18E57B2ADAD150771182664B38C0D3D3B73EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft
Manifest number:          0483
Signing time:             Sun 23 Aug 2026 19:44:38 +0000
Manifest this update:     Sun 23 Aug 2026 19:39:38 +0000
Manifest next update:     Mon 24 Aug 2026 22:36:38 +0000
Files and hashes:         1: B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl (hash: LgWDBrrtcyt7Z0Cj5uGcd3q1fgZLi6LXL4BPta0hB7M=)
                          2: 3137302e302e36382e302f32322d3332203d3e20323634393633.roa (hash: VYej78JcpqPEEZLXLzhwSPB2VlOIApr/1pd6s3ifVWk=)
                          3: 323830343a333039383a3a2f33322d313238203d3e20323634393633.roa (hash: PKGVa0L+swMi+O3jto7r5DSG35H4tJns957ocZd1fek=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl
                          rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 22:36:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b1:8e:57:b2:ad:ad:15:07:71:18:26:64:b3:8c:0d:3d:3b:73:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8AF00843C9024B68AE3EC4331E753B7B2B422DF
        Validity
            Not Before: Aug 23 19:39:38 2026 GMT
            Not After : Aug 24 22:36:38 2026 GMT
        Subject: CN=894B735D6692DAD1A6BC4E8B6F64F452ECB596C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0d:e8:51:9a:89:09:94:09:ee:2f:8f:de:e5:
                    d3:40:62:b9:17:e2:76:d1:75:d9:1b:47:28:b8:27:
                    01:69:6c:3d:d8:d1:b5:6c:86:2b:be:c1:67:fe:98:
                    f7:41:c2:87:d4:3a:77:98:3e:ca:8d:c0:1e:8f:74:
                    75:b4:f0:d3:7e:cc:6b:2c:c5:45:9d:0e:32:01:bb:
                    ab:ca:40:b0:c4:2a:52:d5:c0:24:f4:5c:c6:fb:70:
                    30:11:9c:de:9e:ce:b7:c2:a2:7a:2c:65:b5:00:dc:
                    57:0c:d4:f6:f9:bf:40:85:57:ac:73:51:fd:0e:ae:
                    06:74:d4:ae:9c:cd:20:f6:5b:43:2f:94:63:dd:ed:
                    1e:55:bc:10:99:2b:b3:99:29:66:0a:b8:5c:9c:3a:
                    be:d1:d7:2a:27:1d:ea:34:d6:ed:3b:7e:60:9d:ee:
                    7b:36:00:fc:62:dc:39:3c:23:af:20:eb:70:05:2f:
                    69:2e:d9:c7:00:bb:32:3b:8e:de:25:b0:f8:66:1a:
                    f7:b0:fa:2d:24:99:0d:6b:e4:53:e3:55:af:52:22:
                    ec:6e:d4:df:f7:c2:21:02:ed:91:b6:f5:48:1b:6d:
                    ca:27:e6:40:60:37:2a:28:05:4f:1c:46:0c:51:a3:
                    16:a7:ba:da:3c:61:dc:35:6a:f6:21:63:aa:47:32:
                    c9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:4B:73:5D:66:92:DA:D1:A6:BC:4E:8B:6F:64:F4:52:EC:B5:96:C7
            X509v3 Authority Key Identifier:
                keyid:B8:AF:00:84:3C:90:24:B6:8A:E3:EC:43:31:E7:53:B7:B2:B4:22:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:02:9d:29:24:84:75:0f:e9:cb:76:f7:60:43:1c:2f:cc:05:
         db:de:b2:92:66:a3:73:18:29:ac:3d:54:b7:6a:6e:3f:dd:26:
         9a:28:e4:e5:d0:d7:da:57:79:2f:b6:23:99:ce:9c:49:18:63:
         df:d5:33:fe:ec:37:1a:ac:79:cb:d9:68:09:78:49:e3:2d:cb:
         fc:96:51:31:52:f5:15:92:02:1e:d7:53:95:27:55:2a:75:4e:
         45:d6:2a:23:34:85:51:c7:01:0d:aa:cd:f3:8d:7b:8a:3b:9d:
         0e:c9:9e:db:7f:ca:8f:88:00:b2:f1:fe:06:01:ac:30:6d:84:
         81:c0:90:ec:ee:b9:7e:27:ea:7e:a6:e8:c1:2f:52:ea:bd:f9:
         c9:b4:7a:f2:b5:57:43:73:38:03:92:b7:e7:05:64:80:fe:b9:
         76:08:28:ff:cf:0e:ef:de:e0:1b:a8:d1:cc:db:ad:bf:62:f6:
         5a:5e:e4:dd:71:83:9d:27:22:69:0a:ef:50:d2:07:66:ce:5a:
         dd:76:e0:4f:98:0f:3d:16:4a:b3:92:c0:f3:e2:71:b5:62:1e:
         5e:61:26:64:74:53:ab:48:52:ae:bc:5b:70:ca:04:c4:1a:a3:
         c0:c4:e1:c8:10:df:6a:3b:4f:24:70:57:0c:e9:4f:20:11:9e:
         d9:57:ac:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 06:50:23 2026 by rpki-client