Error: rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.mft
File:                     B45683C1BB4344BEACD72830DD6175D3188D8B0A.mft (raw, json)
Hash identifier:          Tn/jaFdJGFiYX01i18tlYzaA7tYpCXEfA0CneOgUYhM=
Subject key identifier:   89:BD:5D:14:5D:26:CC:BB:32:7D:B6:DF:F3:98:75:A0:4B:C1:5E:18
Authority key identifier: B4:56:83:C1:BB:43:44:BE:AC:D7:28:30:DD:61:75:D3:18:8D:8B:0A
Certificate issuer:       /CN=B45683C1BB4344BEACD72830DD6175D3188D8B0A
Certificate serial:       67F9244865E5F19BD5B604D938873D13F00D6DD0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.mft
Manifest number:          0523
Signing time:             Tue 25 Aug 2026 20:20:00 +0000
Manifest this update:     Tue 25 Aug 2026 20:15:00 +0000
Manifest next update:     Wed 26 Aug 2026 20:20:00 +0000
Files and hashes:         1: 3133312e302e342e302f32322d3234203d3e203631383535.roa (hash: Y5Z0CQaEr/dwqDkaTrRESskpnXsYVXiY/jjRgICP5UQ=)
                          2: 323830343a316135383a3a2f33322d3335203d3e203631383535.roa (hash: N1TSHRs4e3yyYcCA+FN3Ea1ZRsQUiFJ3yNsDsim5UDI=)
                          3: B45683C1BB4344BEACD72830DD6175D3188D8B0A.crl (hash: y3FzNxWa+TQ45x6MpdXTqvWWvaYqHpwd3TlJjfKXe8w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.crl
                          rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 20:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f9:24:48:65:e5:f1:9b:d5:b6:04:d9:38:87:3d:13:f0:0d:6d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B45683C1BB4344BEACD72830DD6175D3188D8B0A
        Validity
            Not Before: Aug 25 20:15:00 2026 GMT
            Not After : Aug 26 20:20:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:84:b9:7f:ad:f3:b6:9f:86:a2:10:05:67:fc:
                    ad:77:6e:ca:cd:ab:20:1b:1c:15:2f:ee:3f:28:8c:
                    3e:3f:f6:67:e6:e9:77:52:4b:84:86:ae:71:43:24:
                    28:18:41:2e:36:02:de:13:67:6c:b3:d7:71:87:4b:
                    09:ca:6e:d8:1c:2a:e0:33:14:be:96:7c:95:a0:41:
                    d5:89:81:42:94:05:f9:a5:a2:ee:f3:ab:32:2d:5e:
                    3f:1e:d7:a3:ad:5b:55:04:a6:2b:fe:f4:96:37:e7:
                    f4:14:37:2e:81:82:09:61:d2:bc:5e:27:96:8a:46:
                    ae:eb:89:fb:6f:39:b8:b8:93:79:ad:51:7e:53:29:
                    99:d7:b5:15:20:4d:80:84:fe:bc:da:87:80:f3:18:
                    5b:d9:84:17:88:31:a7:31:3b:02:34:99:49:7f:98:
                    11:76:2a:4e:98:ad:3b:17:a9:37:f6:a5:68:8d:d5:
                    96:61:e2:38:90:3c:eb:49:f3:72:79:23:b7:12:7d:
                    6e:e0:15:0a:bc:ef:67:d0:d4:b2:c2:e5:78:d8:72:
                    44:c7:ca:98:b9:39:1f:39:d6:f1:ff:aa:f5:19:db:
                    25:8b:1a:cc:d3:94:d8:9b:18:40:bc:e4:4c:cd:5f:
                    06:d4:66:52:ee:e4:08:4d:da:f1:be:c2:b8:a4:b5:
                    d4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:BD:5D:14:5D:26:CC:BB:32:7D:B6:DF:F3:98:75:A0:4B:C1:5E:18
            X509v3 Authority Key Identifier:
                keyid:B4:56:83:C1:BB:43:44:BE:AC:D7:28:30:DD:61:75:D3:18:8D:8B:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:9b:59:2c:39:ac:3c:52:f1:a4:a0:03:8c:dc:f6:a4:f6:24:
         52:f7:47:cf:7c:e3:77:ad:b5:0c:6a:95:12:cf:a9:92:d1:f5:
         43:d6:3b:f0:91:65:04:bb:52:ab:93:c6:58:97:c2:12:e3:c3:
         86:a2:01:cb:7c:5b:b9:a1:25:60:f5:52:e9:61:ea:c9:98:22:
         ef:dd:d7:c1:42:1c:6a:e4:20:81:d3:26:c2:71:23:cc:ee:1d:
         db:58:21:75:64:04:a9:77:14:25:8a:54:86:ae:1b:41:a4:b8:
         6a:c7:0a:f2:70:28:a4:13:35:44:0a:ce:bb:f5:ff:b1:5e:41:
         79:ad:13:a9:d5:45:f2:d0:38:c5:60:a1:a7:f4:b2:24:34:77:
         a8:65:d1:a0:5d:e3:07:7d:50:51:f8:6e:60:3b:c9:cf:aa:42:
         97:aa:b7:5e:26:a3:06:f3:f7:68:aa:df:aa:98:a6:d7:85:cd:
         b6:56:bf:52:ba:f9:c6:e9:c1:f9:91:e8:2b:78:b3:fc:f2:af:
         5b:ab:4c:c1:87:16:61:fe:35:84:b6:37:75:df:90:4e:e6:83:
         5f:ef:da:53:18:87:c8:68:00:d5:6c:31:d9:f7:ff:48:fa:f6:
         32:b1:64:83:c5:b8:8f:dd:f1:5c:e2:44:58:cb:15:da:9c:64:
         f7:c5:e2:2a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 26 02:44:37 2026 by rpki-client