Error: rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/8ADE8116850374B4769C4C4E4353E5E0E9407CD0.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/8ADE8116850374B4769C4C4E4353E5E0E9407CD0.mft
File:                     8ADE8116850374B4769C4C4E4353E5E0E9407CD0.mft (raw, json)
Hash identifier:          FataOmoJMFalB+Cf/qXweJO3C1F+EB3zF1hjHm/D9HU=
Subject key identifier:   96:AC:09:59:DD:E7:C7:FD:2D:6F:1E:0F:7C:8F:00:9D:52:24:41:52
Authority key identifier: 8A:DE:81:16:85:03:74:B4:76:9C:4C:4E:43:53:E5:E0:E9:40:7C:D0
Certificate issuer:       /CN=8ADE8116850374B4769C4C4E4353E5E0E9407CD0
Certificate serial:       43F6A1F546BA688631674E4BCB6E7A5414630BA2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ADE8116850374B4769C4C4E4353E5E0E9407CD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/8ADE8116850374B4769C4C4E4353E5E0E9407CD0.mft
Manifest number:          0188
Signing time:             Wed 26 Aug 2026 10:39:25 +0000
Manifest this update:     Wed 26 Aug 2026 10:34:25 +0000
Manifest next update:     Thu 27 Aug 2026 13:47:25 +0000
Files and hashes:         1: 8ADE8116850374B4769C4C4E4353E5E0E9407CD0.crl (hash: ySIZjI0FJl6wKc/urnvEI/dPa6ohCjiBN4VncUrv3YE=)
                          2: 323830343a313238303a3a2f33322d3438203d3e20323633343830.roa (hash: HT86lFwac3xA5KwQF9AYmpBO77xFDL7FpXmE7N+84+0=)
                          3: 3139312e3234322e3230342e302f32322d3234203d3e20323633343830.roa (hash: m8Ol3QHgQV/NxxerYvPjBh6L24nL+SrudjQ6gSm3HwU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/8ADE8116850374B4769C4C4E4353E5E0E9407CD0.crl
                          rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/8ADE8116850374B4769C4C4E4353E5E0E9407CD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ADE8116850374B4769C4C4E4353E5E0E9407CD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 13:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f6:a1:f5:46:ba:68:86:31:67:4e:4b:cb:6e:7a:54:14:63:0b:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ADE8116850374B4769C4C4E4353E5E0E9407CD0
        Validity
            Not Before: Aug 26 10:34:25 2026 GMT
            Not After : Aug 27 13:47:25 2026 GMT
        Subject: CN=96AC0959DDE7C7FD2D6F1E0F7C8F009D52244152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f6:73:64:45:fb:a4:7b:2d:c6:17:be:cd:1d:
                    4b:f5:8c:4e:33:35:58:9b:80:bf:83:36:f6:e6:c8:
                    73:2e:8d:3d:fb:ca:e3:cc:f6:cb:4f:f9:38:15:6f:
                    fb:60:5e:a3:ba:bf:77:46:96:87:de:b9:ac:40:55:
                    62:ed:f3:71:55:5c:9c:b5:f8:c8:f7:f6:04:3f:4c:
                    c7:fc:31:ac:a6:4d:eb:ef:10:20:d1:c2:10:a8:82:
                    69:02:a0:b8:ee:0b:d4:08:2e:49:6e:70:ec:c2:17:
                    00:b6:26:4c:8d:cc:72:67:dc:48:f9:5f:6f:8b:22:
                    b2:fc:68:a5:a6:69:f8:d4:c7:56:c3:82:02:ce:83:
                    15:9b:62:43:43:5a:64:b8:1c:bc:6f:74:2d:9b:df:
                    1b:d3:bc:11:dc:da:43:69:ec:b2:8e:bb:d6:5a:ba:
                    e0:a2:b7:63:d0:64:90:9c:2d:4b:3f:d6:70:82:f8:
                    19:c3:fe:7e:fa:51:67:69:ef:f9:9f:d7:9e:20:bc:
                    db:8d:f7:27:95:14:b6:32:4a:2d:26:1a:8c:0f:a5:
                    87:47:ee:6e:99:73:fd:fb:c4:be:33:6d:b3:ee:fc:
                    1a:90:77:17:60:1f:74:c9:29:8d:7f:cf:a1:67:0f:
                    73:9d:a4:73:46:3b:54:5d:4f:6c:7f:4b:2e:e1:7b:
                    35:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AC:09:59:DD:E7:C7:FD:2D:6F:1E:0F:7C:8F:00:9D:52:24:41:52
            X509v3 Authority Key Identifier:
                keyid:8A:DE:81:16:85:03:74:B4:76:9C:4C:4E:43:53:E5:E0:E9:40:7C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/8ADE8116850374B4769C4C4E4353E5E0E9407CD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ADE8116850374B4769C4C4E4353E5E0E9407CD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/8ADE8116850374B4769C4C4E4353E5E0E9407CD0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:63:01:2f:30:bb:5b:26:ef:fb:9c:bc:70:60:ba:84:a3:15:
         c6:f7:31:23:25:3d:54:2e:d2:69:bd:3c:12:e8:21:09:78:0a:
         92:1f:cf:37:ce:88:16:6b:8c:84:36:a6:c7:65:d8:7d:69:02:
         68:06:dc:ba:e4:93:e3:ac:50:b0:40:51:2f:c6:30:51:09:ea:
         9f:8b:90:7d:5a:d1:98:48:4f:ec:82:fc:af:77:df:0b:9f:aa:
         e4:40:08:72:6d:35:40:50:33:9b:ef:cb:f3:73:22:56:c5:f7:
         ec:86:54:5c:8d:7c:73:6a:0d:9c:1d:2a:da:4a:9e:dc:30:2b:
         27:50:73:c1:09:99:c3:36:81:b0:f3:8e:59:85:38:f3:2e:46:
         b0:b9:9f:f9:3a:84:11:ca:48:d4:29:54:ac:fc:6c:4c:ff:d3:
         ca:0e:0b:25:20:01:d0:21:a7:13:47:d3:ef:b7:b7:6f:d7:6d:
         00:f1:77:7f:8d:c3:1a:dd:53:df:36:3b:5f:d8:03:1c:20:bc:
         cd:27:88:22:56:85:b6:15:21:6c:1b:fe:c1:92:0f:82:9d:da:
         fe:b7:90:d6:ce:d4:84:12:9c:02:99:4a:9e:46:0a:1b:e0:74:
         42:d1:23:56:61:53:9c:85:3d:f6:b9:dd:dd:1b:d3:2c:d4:c1:
         03:2e:6c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:33:09 2026 by rpki-client