Error: rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.mft
File:                     8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.mft (raw, json)
Hash identifier:          zICLoelchg9waK7GJ+XTwqqgRWRIfCM7Vh0M0BIRQes=
Subject key identifier:   9A:CE:AD:FE:71:EC:32:87:18:86:79:33:B3:5F:B4:35:02:49:B6:50
Authority key identifier: 8B:8B:4E:1F:32:9B:88:F7:0D:E3:5D:A3:30:FC:1F:9C:A2:B9:20:84
Certificate issuer:       /CN=8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084
Certificate serial:       48C4466505FE883F754CA5701EE0071F87D97971
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.mft
Manifest number:          048B
Signing time:             Sun 23 Aug 2026 23:49:59 +0000
Manifest this update:     Sun 23 Aug 2026 23:44:59 +0000
Manifest next update:     Tue 25 Aug 2026 01:52:59 +0000
Files and hashes:         1: 3133382e3132312e33362e302f32322d3332203d3e20323731363233.roa (hash: taUthDkXb559JFkuYYUIjfPQojbwy6bDjriNa6ge/y8=)
                          2: 323830343a376536633a3a2f33322d313238203d3e20323731363233.roa (hash: NRvkX7IEEwE6eVFepi0Bg0vTFbpt/3Mqhz4YmkSq8+w=)
                          3: 8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.crl (hash: E4RiJJQ/j5JaLi4iDG625VZXrctFIRESNFVgU79icCk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.crl
                          rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 01:52:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c4:46:65:05:fe:88:3f:75:4c:a5:70:1e:e0:07:1f:87:d9:79:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084
        Validity
            Not Before: Aug 23 23:44:59 2026 GMT
            Not After : Aug 25 01:52:59 2026 GMT
        Subject: CN=9ACEADFE71EC328718867933B35FB4350249B650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:00:20:dd:02:6f:72:8b:3e:c4:13:1a:1d:af:
                    8a:54:30:d4:18:90:cc:e8:3e:fc:2f:07:53:94:3e:
                    24:b2:73:19:bd:89:54:a4:13:54:97:ff:67:bb:d5:
                    2b:96:08:55:9a:86:18:d4:2c:2a:b3:6a:0c:4f:3e:
                    37:a6:d8:b8:6f:b9:25:c8:0a:22:2c:fc:f1:82:df:
                    29:64:51:4a:d4:eb:b2:1b:dc:cb:47:7c:06:d7:88:
                    29:20:63:19:25:71:29:1c:41:0b:42:88:a8:58:38:
                    76:d0:12:0f:a9:eb:63:22:a0:55:bb:95:f2:73:98:
                    4a:3d:48:78:89:c6:65:45:6a:f9:2d:95:b8:1a:87:
                    77:69:1f:d6:77:59:17:f0:5e:41:6d:76:1f:60:77:
                    b0:e4:ed:33:73:18:f3:38:ae:d3:1f:1e:d4:2d:16:
                    42:e1:93:07:31:ad:cd:36:84:70:ac:3c:90:d8:e8:
                    f9:be:db:73:1a:b1:f3:c7:32:27:60:16:9d:94:8c:
                    3d:2c:a1:9f:32:51:e7:61:f5:a8:0c:b3:d8:e4:4a:
                    ed:c3:c3:34:14:47:ab:f3:5f:0a:db:c4:25:e8:a6:
                    8f:17:25:80:48:ed:73:c2:ac:14:4f:69:f0:45:81:
                    1a:15:e1:3d:f9:0f:c8:21:86:fe:0f:de:1d:a4:8e:
                    ca:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:CE:AD:FE:71:EC:32:87:18:86:79:33:B3:5F:B4:35:02:49:B6:50
            X509v3 Authority Key Identifier:
                keyid:8B:8B:4E:1F:32:9B:88:F7:0D:E3:5D:A3:30:FC:1F:9C:A2:B9:20:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:a9:12:c3:5e:c1:5d:01:ae:2a:a0:aa:c6:2b:cc:40:6f:ce:
         c9:ec:21:70:79:e8:50:52:6b:e6:56:33:6e:65:41:d2:41:2b:
         a7:ae:16:f7:73:36:2c:58:c3:df:92:ef:f9:e6:f1:ae:29:af:
         6c:dd:21:16:37:0a:7b:2f:b9:f7:b9:85:ab:17:2d:1a:a4:de:
         e1:07:2d:42:e1:af:d8:c3:71:41:12:20:a6:4e:3d:50:15:84:
         15:1c:4a:99:74:3f:60:8d:b4:4b:49:ac:ff:f2:39:c9:c6:cb:
         f3:52:5c:95:8d:c6:ab:60:b3:77:1c:34:3b:a1:fa:e0:95:55:
         96:dd:71:1f:29:10:ed:fb:fb:d3:a6:76:c0:a4:13:1f:0f:79:
         8d:df:54:c4:35:38:3b:51:4a:1e:1b:bf:2a:59:02:46:58:61:
         37:16:e8:b8:b9:c3:cc:75:53:40:cb:04:91:aa:03:1d:01:5b:
         b8:d7:69:38:34:ec:aa:d7:d0:db:63:cd:51:17:f3:af:5c:45:
         f7:3a:0b:ec:66:a6:ee:0e:0a:76:4e:14:e6:d7:5e:f1:6f:38:
         e1:75:bd:3b:5b:f4:89:3b:73:08:8b:84:f1:9e:cd:20:7a:e6:
         98:3c:0a:04:ba:20:8a:93:d9:db:f8:83:1a:e6:bc:c0:59:eb:
         ae:53:e5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 05:17:48 2026 by rpki-client