Error: rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.mft
File:                     F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.mft (raw, json)
Hash identifier:          L4WRzwnXDW4pMcVljskNXV66F41z/Ysh7/3+Kyqvcus=
Subject key identifier:   75:A5:A7:8F:3C:08:E2:B1:7D:CA:83:0E:1A:58:80:6D:96:0C:5C:2F
Authority key identifier: F4:50:62:DE:52:8E:3F:9E:B3:E8:78:F8:DE:D6:EB:8B:8D:7E:35:87
Certificate issuer:       /CN=F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587
Certificate serial:       1C0654F454D54420046AF937CC0802483F2FAF57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.mft
Manifest number:          051E
Signing time:             Sun 23 Aug 2026 23:20:01 +0000
Manifest this update:     Sun 23 Aug 2026 23:15:01 +0000
Manifest next update:     Mon 24 Aug 2026 23:20:01 +0000
Files and hashes:         1: 3137372e3232312e3138382e302f32322d3234203d3e20323730363738.roa (hash: DS3KCq/HmM/Ew0vugtZALaaOxAduHDC1H5b07+jpLaY=)
                          2: 323830343a366662343a3a2f33322d3335203d3e20323730363738.roa (hash: rc85CFl6sgDZ5h/dq3oIdbo8WefnMOtaFYgA98s2Wz4=)
                          3: F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.crl (hash: oK1bZBen3frjew7/D9mRxtSb3qhvcOoD2/6HanMnNsA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.crl
                          rsync://rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 23:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:06:54:f4:54:d5:44:20:04:6a:f9:37:cc:08:02:48:3f:2f:af:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587
        Validity
            Not Before: Aug 23 23:15:01 2026 GMT
            Not After : Aug 24 23:20:01 2026 GMT
        Subject: CN=3082010A0282010100B1FBA0F9EEABB91423EE51EF7FD395C5A93438537E829B3B441734172BB6B517C74ACDE26D7507C8BB838EBB0937400D4FC5260697C1FAE1190C50707890192CAC40D47AC9B6A88E9EB0EFBD1D1210EDB6065C706C81A167C8F3B53E975E63479B220D68DBEFBD32348B7531395C52C6E7D10D8E3ACCC4C448CBDBE8797127ECB6BA77C825D511ACA4E10B2DC1194852171A011E87B09A14344112CDA178EE2FBD3503DD35F1328A9D14CE7D5F47764C015A00E1374F06574CD0DFBE587AE0526246FC019542F984BE3E081F2E2898F22211FA0BE720147F58E624E35578BE936694A18DA3FDD235C3941538638EFA9B7272676F994FD05913A0E69CC3A15FC50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fb:a0:f9:ee:ab:b9:14:23:ee:51:ef:7f:d3:
                    95:c5:a9:34:38:53:7e:82:9b:3b:44:17:34:17:2b:
                    b6:b5:17:c7:4a:cd:e2:6d:75:07:c8:bb:83:8e:bb:
                    09:37:40:0d:4f:c5:26:06:97:c1:fa:e1:19:0c:50:
                    70:78:90:19:2c:ac:40:d4:7a:c9:b6:a8:8e:9e:b0:
                    ef:bd:1d:12:10:ed:b6:06:5c:70:6c:81:a1:67:c8:
                    f3:b5:3e:97:5e:63:47:9b:22:0d:68:db:ef:bd:32:
                    34:8b:75:31:39:5c:52:c6:e7:d1:0d:8e:3a:cc:c4:
                    c4:48:cb:db:e8:79:71:27:ec:b6:ba:77:c8:25:d5:
                    11:ac:a4:e1:0b:2d:c1:19:48:52:17:1a:01:1e:87:
                    b0:9a:14:34:41:12:cd:a1:78:ee:2f:bd:35:03:dd:
                    35:f1:32:8a:9d:14:ce:7d:5f:47:76:4c:01:5a:00:
                    e1:37:4f:06:57:4c:d0:df:be:58:7a:e0:52:62:46:
                    fc:01:95:42:f9:84:be:3e:08:1f:2e:28:98:f2:22:
                    11:fa:0b:e7:20:14:7f:58:e6:24:e3:55:78:be:93:
                    66:94:a1:8d:a3:fd:d2:35:c3:94:15:38:63:8e:fa:
                    9b:72:72:67:6f:99:4f:d0:59:13:a0:e6:9c:c3:a1:
                    5f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A5:A7:8F:3C:08:E2:B1:7D:CA:83:0E:1A:58:80:6D:96:0C:5C:2F
            X509v3 Authority Key Identifier:
                keyid:F4:50:62:DE:52:8E:3F:9E:B3:E8:78:F8:DE:D6:EB:8B:8D:7E:35:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:3b:08:a5:d9:6c:46:f1:1b:88:f0:ce:27:49:ae:e6:d0:43:
         13:66:90:6f:f1:e9:06:a6:27:5e:8e:b3:35:33:5b:80:42:6c:
         6a:16:6f:a5:19:7c:08:4b:9e:c4:c6:f3:56:78:93:19:be:4f:
         e6:9b:3f:2d:7e:f6:a8:d5:cb:43:2e:25:c9:06:05:fd:5e:f0:
         3d:c3:b4:f1:00:52:d2:42:d8:d8:79:fa:30:bb:8a:03:6d:6b:
         9c:99:60:9e:d8:83:d5:aa:42:76:91:8a:db:09:ef:2a:78:00:
         bf:5c:49:66:c6:1f:93:4d:b5:8d:fe:3e:ff:a7:71:a8:d2:3a:
         b1:e2:d1:77:b1:6f:20:1f:1e:a6:47:63:e3:6b:2a:f7:8f:cc:
         fd:cf:e5:38:46:48:8f:51:6f:74:99:cd:d9:4f:1b:fd:71:83:
         d0:38:7d:1c:a8:7a:3d:d6:29:06:c3:81:1f:34:c8:e2:f7:ce:
         f6:a5:4e:74:aa:36:a0:b6:b6:6f:83:e4:c1:75:ad:cd:4b:e7:
         92:79:c5:29:64:80:ea:63:24:a3:23:72:23:b1:82:c2:50:1f:
         4e:3c:e7:21:a1:86:48:52:1e:e3:4c:2b:7f:e5:07:cd:e4:29:
         cb:c6:5c:ce:86:89:f6:d3:91:11:a6:28:0b:17:11:90:c4:2f:
         e5:77:71:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 04:28:44 2026 by rpki-client