Error: rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.mft
File:                     638087ED81E6ABF3705A6FE4584C399C4C56720F.mft (raw, json)
Hash identifier:          r/rw4idhcrVImwQsrgcPjMbBmzSiGKaGS/PYRwgi0HQ=
Subject key identifier:   D1:C5:80:10:55:91:92:4B:81:F6:E9:61:1D:5F:DA:91:38:67:B3:B5
Authority key identifier: 63:80:87:ED:81:E6:AB:F3:70:5A:6F:E4:58:4C:39:9C:4C:56:72:0F
Certificate issuer:       /CN=638087ED81E6ABF3705A6FE4584C399C4C56720F
Certificate serial:       056D15416E7F4823EFC27B51C3BB3E90C75C841E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.mft
Manifest number:          048A
Signing time:             Sun 23 Aug 2026 00:38:21 +0000
Manifest this update:     Sun 23 Aug 2026 00:33:21 +0000
Manifest next update:     Mon 24 Aug 2026 03:15:21 +0000
Files and hashes:         1: 34352e3233342e3235322e302f32322d3234203d3e20323637333839.roa (hash: NcX8DmYwOhidfbgXFtgECDJPrZ1DsIjYcSX1IcC6GEo=)
                          2: 323830343a346363303a3a2f33322d3438203d3e20323637333839.roa (hash: 2kr5rfRzMzD1wPmAIdWvagse3SQ92MFtEsM3GOb9H6U=)
                          3: 638087ED81E6ABF3705A6FE4584C399C4C56720F.crl (hash: THu6ua1z1++jK4Dj3QUA5mk2VxMTcbDNYdQ2odjxfvg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.crl
                          rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 03:15:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:6d:15:41:6e:7f:48:23:ef:c2:7b:51:c3:bb:3e:90:c7:5c:84:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=638087ED81E6ABF3705A6FE4584C399C4C56720F
        Validity
            Not Before: Aug 23 00:33:21 2026 GMT
            Not After : Aug 24 03:15:21 2026 GMT
        Subject: CN=D1C580105591924B81F6E9611D5FDA913867B3B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5b:a7:ed:80:fb:51:7e:6b:54:aa:ca:74:f5:
                    9d:f7:44:dc:28:b7:6f:eb:bc:37:33:b1:75:27:0e:
                    72:3b:75:31:6f:b8:07:b3:e0:b4:22:7b:b5:4d:1b:
                    9b:2d:7d:a4:49:08:3d:7c:7e:c8:57:5b:b9:46:8d:
                    ec:64:07:14:36:04:45:2b:2b:38:94:65:a2:2c:fa:
                    74:f7:9c:f2:65:16:75:75:be:a6:fe:c8:b2:e4:d3:
                    73:04:30:37:86:e9:30:45:f1:7d:68:7c:72:40:43:
                    7f:dc:60:58:b1:d9:a6:a8:a1:51:59:4e:1c:d8:83:
                    48:0d:32:db:d5:17:9c:9a:f9:b4:83:71:e7:f1:54:
                    8e:5e:79:f6:19:bc:d1:78:ab:21:e1:dd:0c:f4:7c:
                    43:ce:71:6c:6a:cf:89:63:24:af:c4:53:19:b1:da:
                    ce:59:d5:bc:15:6d:88:da:97:25:99:c2:a9:ba:cf:
                    2f:53:0d:36:73:0b:71:1f:40:a5:67:e4:e9:54:de:
                    f9:e3:ce:e8:05:c8:6d:00:ac:ee:07:55:df:b4:5b:
                    6a:b9:bb:fe:36:9d:e3:de:ae:7d:59:78:45:55:05:
                    ab:34:5f:f7:68:05:b6:fe:ab:00:9f:d5:c4:2e:0f:
                    3f:e4:85:4c:33:24:b3:6e:0c:ad:7c:7f:c7:22:69:
                    64:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C5:80:10:55:91:92:4B:81:F6:E9:61:1D:5F:DA:91:38:67:B3:B5
            X509v3 Authority Key Identifier:
                keyid:63:80:87:ED:81:E6:AB:F3:70:5A:6F:E4:58:4C:39:9C:4C:56:72:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:37:46:8e:7d:8e:c2:b2:1f:9d:80:b5:25:19:26:3b:5e:8f:
         f2:e4:a3:4e:3c:ba:3c:3d:39:3e:0d:b7:78:49:3d:10:e3:21:
         7c:22:fe:f5:8a:f6:8f:a3:1c:10:9b:d7:f0:74:8e:3b:70:b5:
         dc:50:90:f0:78:70:ec:be:b1:d1:11:bb:6f:98:3f:0e:90:af:
         7b:08:8e:65:fa:44:2d:e9:c4:04:b6:eb:f8:a1:3b:d3:11:cc:
         3b:82:20:1c:b3:3f:78:20:e2:36:04:9d:a9:58:00:6f:11:86:
         07:75:9e:86:12:2c:f2:a2:df:ae:84:12:c7:f8:db:a5:cc:75:
         15:07:68:fe:14:24:2f:43:77:ce:7a:63:d7:6a:c7:f7:51:b0:
         db:ae:67:3f:56:27:6d:51:f4:9e:a8:b4:f7:d3:a4:b8:a5:14:
         72:22:d1:17:cd:c7:df:8c:af:13:78:61:9d:8c:cc:fc:84:6d:
         46:34:bf:83:b2:de:da:b7:39:99:93:c6:ba:91:ba:2f:02:43:
         bb:5f:71:17:bf:6e:12:60:7d:c0:c1:fe:6f:9b:d4:d9:d3:ab:
         af:bb:08:41:c8:14:b1:71:fd:ce:d1:29:0f:8c:12:ed:f9:b4:
         dd:89:c5:f8:8f:89:b4:a2:74:9d:3a:58:8f:aa:8d:3f:4b:f4:
         79:ae:6e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 15:32:57 2026 by rpki-client