Error: rpki-repo.registro.br/repo/r2MwL5rU82G44ySUdZrovT5pJzbbndpF1UBR7oDBCi8/1/1776B7AE3715D1BD28F30CB4080BA932641F064F.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/r2MwL5rU82G44ySUdZrovT5pJzbbndpF1UBR7oDBCi8/1/1776B7AE3715D1BD28F30CB4080BA932641F064F.mft
File:                     1776B7AE3715D1BD28F30CB4080BA932641F064F.mft (raw, json)
Hash identifier:          hA+0fyrPfUokf4esUTCr5vdvouvh8TQ0Zcf7lo3pCxg=
Subject key identifier:   46:C7:29:33:24:04:87:72:A9:D5:B6:F6:4E:4D:04:39:C3:F8:BB:DA
Authority key identifier: 17:76:B7:AE:37:15:D1:BD:28:F3:0C:B4:08:0B:A9:32:64:1F:06:4F
Certificate issuer:       /CN=1776B7AE3715D1BD28F30CB4080BA932641F064F
Certificate serial:       1D68E32CA374E8C5F434D109BD4F3E7E3358E62E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1776B7AE3715D1BD28F30CB4080BA932641F064F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/r2MwL5rU82G44ySUdZrovT5pJzbbndpF1UBR7oDBCi8/1/1776B7AE3715D1BD28F30CB4080BA932641F064F.mft
Manifest number:          0483
Signing time:             Sat 22 Aug 2026 17:43:38 +0000
Manifest this update:     Sat 22 Aug 2026 17:38:38 +0000
Manifest next update:     Sun 23 Aug 2026 17:51:38 +0000
Files and hashes:         1: 323830343a333532633a3a2f33322d3332203d3e20323632363632.roa (hash: reFooh0kkoItcu2QxqEFccwxnidfgUrvMdEdtT1Uskg=)
                          2: 3138372e36322e3137362e302f32302d3234203d3e20323632363632.roa (hash: i/kl1I+iCJHbzv5GRgPRaie694XBtT5GnjKvlYomS4w=)
                          3: 1776B7AE3715D1BD28F30CB4080BA932641F064F.crl (hash: 1pccU1ZFp7uucQym2C5KUsjHZ5PD9+FRzfFx5ytRStg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/r2MwL5rU82G44ySUdZrovT5pJzbbndpF1UBR7oDBCi8/1/1776B7AE3715D1BD28F30CB4080BA932641F064F.crl
                          rsync://rpki-repo.registro.br/repo/r2MwL5rU82G44ySUdZrovT5pJzbbndpF1UBR7oDBCi8/1/1776B7AE3715D1BD28F30CB4080BA932641F064F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1776B7AE3715D1BD28F30CB4080BA932641F064F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 17:51:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:68:e3:2c:a3:74:e8:c5:f4:34:d1:09:bd:4f:3e:7e:33:58:e6:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1776B7AE3715D1BD28F30CB4080BA932641F064F
        Validity
            Not Before: Aug 22 17:38:38 2026 GMT
            Not After : Aug 23 17:51:38 2026 GMT
        Subject: CN=46C7293324048772A9D5B6F64E4D0439C3F8BBDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f5:f2:5d:a7:1b:7c:a0:20:39:e6:01:7c:cd:
                    bd:50:94:48:69:af:ba:d2:93:14:aa:95:c6:2e:37:
                    e4:3a:1a:53:8b:6d:aa:e3:cb:d3:fc:d6:dd:0d:23:
                    9a:1b:9e:61:10:ca:93:e2:49:b6:57:e9:d7:3b:fa:
                    64:3c:77:d4:0e:9e:4a:c5:dd:e7:91:bf:5c:7a:bf:
                    8e:42:2d:e0:6d:9b:e5:31:46:8e:3c:4b:87:6e:10:
                    47:70:26:72:29:8b:0e:8e:52:4a:74:31:8b:15:b4:
                    0b:10:0a:b7:bf:43:4c:e1:fb:64:95:65:50:19:02:
                    5b:f1:d7:1e:e1:7e:0c:d1:a9:62:80:3f:91:11:05:
                    13:15:8b:a5:42:49:74:d4:8d:91:f8:e2:a8:ab:4d:
                    bf:92:96:54:37:ce:05:02:0a:1d:eb:3a:f2:e5:a7:
                    eb:b3:48:6c:9a:24:1e:7b:c6:af:1a:f8:9d:7b:f4:
                    84:f8:68:10:e1:cb:3b:69:db:69:48:8a:0b:22:89:
                    4f:c3:4d:a5:8a:c1:40:49:92:6e:44:b0:c1:49:98:
                    0f:93:08:70:fd:b4:96:a8:94:f4:4f:ce:db:5b:07:
                    3b:3c:16:c2:f4:ed:43:87:3d:6f:4d:89:0f:64:07:
                    ef:70:11:60:35:a5:28:e2:51:35:c0:3a:74:49:70:
                    7e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C7:29:33:24:04:87:72:A9:D5:B6:F6:4E:4D:04:39:C3:F8:BB:DA
            X509v3 Authority Key Identifier:
                keyid:17:76:B7:AE:37:15:D1:BD:28:F3:0C:B4:08:0B:A9:32:64:1F:06:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/r2MwL5rU82G44ySUdZrovT5pJzbbndpF1UBR7oDBCi8/1/1776B7AE3715D1BD28F30CB4080BA932641F064F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1776B7AE3715D1BD28F30CB4080BA932641F064F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/r2MwL5rU82G44ySUdZrovT5pJzbbndpF1UBR7oDBCi8/1/1776B7AE3715D1BD28F30CB4080BA932641F064F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:ae:e2:eb:a0:0f:2f:dd:39:8a:ba:da:c7:7e:c3:2a:20:6a:
         29:06:4b:0a:87:89:21:7e:59:c0:76:7a:72:f5:ce:62:de:7c:
         2c:70:a0:f5:02:ed:b5:e7:02:da:cc:f9:ff:b2:7b:e5:ef:89:
         de:65:a0:7e:4e:92:f9:a4:c9:40:6a:0f:8f:4b:ed:6c:1f:cd:
         50:f1:f7:9c:20:d2:ac:99:5c:1d:3b:eb:0d:f8:0c:66:75:20:
         5b:e1:6f:f1:f3:d1:cd:f0:f0:29:69:cd:c4:24:2e:b7:5d:55:
         24:e0:54:88:2c:ed:b7:69:ba:84:97:63:8f:95:42:2e:ec:9f:
         d3:b0:b2:43:ea:b8:d9:e3:b7:72:85:ad:82:13:c3:dd:1b:7b:
         09:58:70:a1:fc:f4:2c:bd:2c:cc:46:f5:e5:53:f6:d1:2e:dd:
         12:a0:73:52:83:95:53:dd:62:11:3a:30:51:9e:a7:e7:c2:ca:
         db:df:43:1c:fa:77:da:f6:f3:06:03:d9:cb:7a:94:fe:08:c3:
         25:ff:b3:32:17:88:b3:dc:6f:98:6c:fc:a1:ba:0e:bc:7e:db:
         37:a2:1c:e5:a2:f4:bb:94:2a:40:fe:7a:9b:fb:b1:84:33:d4:
         3b:4f:82:91:3f:35:35:59:fb:e0:84:53:b8:34:34:98:a2:e7:
         e6:c2:9c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 10:25:56 2026 by rpki-client