Error: rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.mft
File:                     54395A545D0008C7F4CB034DD9D90CDC41D95AE4.mft (raw, json)
Hash identifier:          sgOOJfntZCys79822Gr/Odaur6j//BFeG8gjYS0cBkQ=
Subject key identifier:   1D:32:DF:3D:86:1D:24:31:4D:FE:3A:04:44:29:C3:6E:C2:83:CC:F6
Authority key identifier: 54:39:5A:54:5D:00:08:C7:F4:CB:03:4D:D9:D9:0C:DC:41:D9:5A:E4
Certificate issuer:       /CN=54395A545D0008C7F4CB034DD9D90CDC41D95AE4
Certificate serial:       1E3EB39E15A0D8528B8F8F4EAC1840441B4928F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.mft
Manifest number:          0453
Signing time:             Mon 12 Oct 2026 19:47:21 +0000
Manifest this update:     Mon 12 Oct 2026 19:42:21 +0000
Manifest next update:     Tue 13 Oct 2026 23:06:21 +0000
Files and hashes:         1: 34352e3233362e3235342e302f32332d3233203d3e20323638323532.roa (hash: +NjPpPOTUWcaPd46eun4rmunjuHjWIoErAzcgbBFM0Q=)
                          2: 34352e3233362e3235342e302f32342d3234203d3e20323638323532.roa (hash: ZmacUlpxsj5PMburFdPJmkiGlnelA6RREDAeTP5akUU=)
                          3: 34352e3233362e3235352e302f32342d3234203d3e20323638323532.roa (hash: J2PR9+qwwz1wPuDzC5XfcutNurjdw3sQSC/QNpljoDI=)
                          4: 34352e3233362e3235332e302f32342d3234203d3e20323638323532.roa (hash: s8kBdXiA8WDFJzv9MWilnbsivhax9CxNel21K26QJeE=)
                          5: 34352e3233362e3235322e302f32322d3232203d3e20323638323532.roa (hash: p4tD1PxBjbv73aRQ3aitf8BXNeik2cOaBMqC3WvDrf0=)
                          6: 34352e3233362e3235322e302f32342d3234203d3e20323638323532.roa (hash: iAg6BQ8+02suZ13TvkbSftIFdn5CHFxtrXnfSju+t7w=)
                          7: 54395A545D0008C7F4CB034DD9D90CDC41D95AE4.crl (hash: /AiAi7twdwhYkj6FmVHB+t23/oAj2HW3KtntaO4IgXk=)
                          8: 34352e3233362e3235322e302f32332d3233203d3e20323638323532.roa (hash: otaYD80AipTCatXsqgPzIw01Sj0yS2QXvqvQ/Lz/LV4=)
                          9: 323830343a346534633a3a2f33322d3332203d3e20323638323532.roa (hash: 1ueOxg5gx5cXOrdcVlMrqkQFVQnRZbR/SupmdoO/WLI=)
                          10: 323830343a346534633a3a2f33332d3333203d3e20323638323532.roa (hash: Edx3/GtpUTbv8Fhc02CDq2pKUlgFhRXhgObPBxQOIA4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.crl
                          rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 23:06:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:3e:b3:9e:15:a0:d8:52:8b:8f:8f:4e:ac:18:40:44:1b:49:28:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54395A545D0008C7F4CB034DD9D90CDC41D95AE4
        Validity
            Not Before: Oct 12 19:42:21 2026 GMT
            Not After : Oct 13 23:06:21 2026 GMT
        Subject: CN=1D32DF3D861D24314DFE3A044429C36EC283CCF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:80:71:88:e7:b9:d1:d4:20:1e:61:7f:25:f6:
                    a9:2c:22:17:8b:89:60:20:1a:91:0e:ed:4d:d0:29:
                    2c:5c:82:4b:ad:ae:9f:10:7e:4b:df:04:09:b0:51:
                    5a:05:c6:b4:73:03:9c:47:0f:18:00:26:1c:3c:72:
                    cc:18:2b:30:19:fe:db:cc:9f:bd:2e:33:ca:bd:0a:
                    bc:08:15:ab:c3:5d:81:bc:a7:62:0a:48:18:0c:e5:
                    ca:7a:b5:76:4a:5b:ef:e1:39:e4:f5:1c:81:44:af:
                    2b:75:06:11:bb:9b:29:8f:99:9a:6e:b7:b0:a3:c0:
                    fd:9a:31:8e:50:0b:3e:8b:34:b2:e4:cd:91:3d:e4:
                    56:cd:d7:b9:c3:12:bf:76:ad:ca:92:bc:3b:41:a4:
                    fe:83:cb:6f:ab:f2:c2:01:4b:35:11:43:4c:46:40:
                    8d:25:18:da:87:fc:9d:dc:99:71:a6:64:e4:c7:2b:
                    2c:c1:16:71:dd:13:45:ac:b8:cc:cf:99:a9:45:ff:
                    14:c0:e8:d7:ac:5f:a8:3e:bc:ff:8b:35:5e:92:3c:
                    f2:f0:23:2f:01:79:e0:3e:ce:2a:49:83:95:4e:c6:
                    95:0c:81:13:60:fb:32:10:11:d1:dd:5f:40:a4:7b:
                    c4:ea:69:8c:5a:02:b8:d9:7a:d0:86:ac:7e:92:5b:
                    b1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:32:DF:3D:86:1D:24:31:4D:FE:3A:04:44:29:C3:6E:C2:83:CC:F6
            X509v3 Authority Key Identifier:
                keyid:54:39:5A:54:5D:00:08:C7:F4:CB:03:4D:D9:D9:0C:DC:41:D9:5A:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:b7:f7:ae:c3:3d:10:4f:19:2f:60:b4:29:b5:de:bb:78:2d:
         95:09:6c:08:09:6c:be:3f:60:14:33:0b:76:ab:3f:d7:70:75:
         5d:75:11:e6:76:45:b9:1b:c0:38:2d:73:d7:f0:58:6f:96:17:
         9d:ed:34:b2:5a:a6:84:fc:27:24:04:95:e4:f8:f4:be:fa:c2:
         36:b9:6f:5e:4d:25:fe:48:6c:56:42:77:67:a4:dd:74:77:1a:
         4a:1b:65:69:c3:72:6f:73:cb:84:8f:cc:92:a4:d7:4b:b7:81:
         64:7b:68:d3:c2:7d:11:d3:1c:58:3d:fd:26:3e:1e:17:43:31:
         f1:25:69:f4:d6:a9:f8:ab:7a:25:ce:b8:83:41:78:db:80:cb:
         61:7c:2c:f5:79:f9:6c:13:bb:10:f1:82:9c:57:be:f9:1c:4e:
         25:91:5d:0f:32:12:96:0e:c9:7d:d4:e2:63:cf:38:64:ea:9e:
         09:05:23:0c:9c:b9:26:21:5a:20:d6:1a:97:b4:d7:c2:7b:39:
         6a:83:28:76:8c:0d:2a:aa:89:f8:85:79:6d:4f:96:ac:c2:cd:
         14:81:2f:c6:11:56:e5:e8:b2:38:ef:3b:ff:19:d1:4c:94:3d:
         b3:44:91:22:5d:63:df:26:f1:f2:7d:a9:0a:3f:85:b4:78:50:
         83:a9:79:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:59:03 2026 by rpki-client