Error: rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.mft
File:                     A54DFBD8D106EBB2780BF8D0331AF120305AAB46.mft (raw, json)
Hash identifier:          fgdGYxqGqyNYCnujtbAduSJp5b4meDc1lokY8YsvOzM=
Subject key identifier:   76:AF:96:4C:B0:43:8F:27:7D:81:67:3E:17:B0:96:93:A7:DA:65:FA
Authority key identifier: A5:4D:FB:D8:D1:06:EB:B2:78:0B:F8:D0:33:1A:F1:20:30:5A:AB:46
Certificate issuer:       /CN=A54DFBD8D106EBB2780BF8D0331AF120305AAB46
Certificate serial:       08482852D669063D37BEEBB51B727A5E53BA942B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.mft
Manifest number:          048C
Signing time:             Sun 23 Aug 2026 11:05:49 +0000
Manifest this update:     Sun 23 Aug 2026 11:00:49 +0000
Manifest next update:     Mon 24 Aug 2026 15:03:49 +0000
Files and hashes:         1: 34352e3137322e3233362e302f32322d3234203d3e20323638373831.roa (hash: dywGetQdE1WFQNAS2dULdvegjJOGbgfB+yYjWLIIwNw=)
                          2: 323830343a356139303a3a2f33322d3438203d3e20323638373831.roa (hash: D8vmArp8i6plN5iWQ4omWzWwcZJPEUBq6Pq8sK070lc=)
                          3: A54DFBD8D106EBB2780BF8D0331AF120305AAB46.crl (hash: v8Lv4eAmQZ0CCTL1LqjlJx5xm9mG7888KaE17ZQ6NEs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.crl
                          rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 15:03:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:48:28:52:d6:69:06:3d:37:be:eb:b5:1b:72:7a:5e:53:ba:94:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A54DFBD8D106EBB2780BF8D0331AF120305AAB46
        Validity
            Not Before: Aug 23 11:00:49 2026 GMT
            Not After : Aug 24 15:03:49 2026 GMT
        Subject: CN=76AF964CB0438F277D81673E17B09693A7DA65FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e0:9d:c4:f8:7c:72:58:73:a1:86:e6:d7:a6:
                    3a:75:39:2d:e8:1e:ee:55:b4:09:e7:15:7c:f9:99:
                    08:37:17:90:f3:c4:f5:3d:22:e2:b9:68:69:de:95:
                    98:06:45:71:eb:c8:97:0f:5f:f0:09:bb:b2:8a:fc:
                    ac:9e:e8:ac:02:59:79:bb:40:73:19:e0:6d:a7:f7:
                    ab:53:7e:9c:69:15:a0:06:79:bb:d6:84:fa:33:90:
                    3a:74:4e:f9:71:a2:08:5a:db:5e:1e:95:a1:9d:03:
                    93:5e:58:48:36:6b:ff:bb:be:2c:73:0a:1c:3f:c3:
                    2e:cf:d0:49:fd:a8:db:71:85:ec:f7:7b:44:4c:ce:
                    2b:8e:c3:68:54:9e:fc:e7:e3:be:01:69:99:cf:22:
                    fb:60:68:1e:6c:07:30:5c:60:bc:01:38:2a:09:b2:
                    f0:4f:0a:5b:07:6c:5e:66:08:c7:68:c5:4c:77:1b:
                    f6:f1:55:84:6f:68:eb:a9:96:ec:45:02:af:75:aa:
                    6d:0f:20:41:1d:26:7c:76:90:52:71:37:d5:3d:e0:
                    dc:4c:a2:bb:ce:cc:2a:1c:6b:78:0c:7e:c9:3c:b2:
                    ab:36:4d:3a:88:8c:b1:86:34:75:f9:2f:38:c3:9f:
                    aa:91:01:bd:18:22:62:c2:70:8b:66:87:24:50:ea:
                    8c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:AF:96:4C:B0:43:8F:27:7D:81:67:3E:17:B0:96:93:A7:DA:65:FA
            X509v3 Authority Key Identifier:
                keyid:A5:4D:FB:D8:D1:06:EB:B2:78:0B:F8:D0:33:1A:F1:20:30:5A:AB:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ff:59:21:bc:87:58:9d:12:40:28:95:ac:9d:bd:c6:dc:6a:
         d1:f8:ca:d4:b2:6b:09:27:d0:20:a8:50:3c:f7:30:1b:45:e7:
         af:08:d5:c0:e9:69:6c:f0:69:b0:10:b3:64:7b:9b:71:ff:b0:
         c0:7d:f8:07:aa:a2:37:e4:83:d0:fb:40:af:54:1d:0c:1a:dd:
         b9:73:a9:48:9a:30:52:1b:e9:51:07:65:cf:73:95:db:f3:7a:
         0c:8b:b0:bb:20:a9:de:0c:be:e2:65:34:08:45:ab:4e:16:0e:
         d9:ed:52:68:22:a4:5a:b5:87:b6:f0:d0:57:a8:de:95:ae:2d:
         91:2f:78:23:25:6c:34:51:bd:0d:df:d7:7e:39:2f:f5:7c:b4:
         59:50:90:bc:ba:3d:45:96:c2:f7:06:f2:87:9d:fa:f2:de:c8:
         19:da:67:ee:a7:51:bf:0b:8e:8d:24:f9:6d:55:fa:2c:fd:77:
         72:88:7e:19:96:c3:d1:5e:44:9e:96:6d:40:ed:fb:d8:7d:4a:
         83:9f:eb:54:97:5a:3e:38:2c:79:b7:3e:f7:f9:58:10:ec:a1:
         ac:90:5c:23:f3:93:ac:91:dd:89:f7:5a:63:c5:75:2c:58:0d:
         69:ae:83:9b:fd:6c:44:33:bf:a9:e8:b9:20:25:91:ad:23:10:
         b5:10:a7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 21:23:33 2026 by rpki-client