Error: rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.mft
File:                     F5053681E4FFFE993EC674A211C8BBC7FB338987.mft (raw, json)
Hash identifier:          WwOsauWjUiYZPN7LPYX8KrUoUWVTqNys8k6yzpN4IFU=
Subject key identifier:   94:C9:E3:98:E1:E6:9F:12:C4:C1:F8:64:91:C1:35:80:4A:23:0E:C8
Authority key identifier: F5:05:36:81:E4:FF:FE:99:3E:C6:74:A2:11:C8:BB:C7:FB:33:89:87
Certificate issuer:       /CN=F5053681E4FFFE993EC674A211C8BBC7FB338987
Certificate serial:       3F9B4080A9DB27C7668B64C52B6043DE6D0B1090
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.mft
Manifest number:          04CC
Signing time:             Wed 14 Oct 2026 23:00:06 +0000
Manifest this update:     Wed 14 Oct 2026 22:55:06 +0000
Manifest next update:     Fri 16 Oct 2026 01:10:06 +0000
Files and hashes:         1: F5053681E4FFFE993EC674A211C8BBC7FB338987.crl (hash: 5ZAiA/eDOqWdkekwmA7E4dIZ8iFv0wILS6U6Qti82jI=)
                          2: 3137372e3135342e32342e302f32342d3234203d3e20323632393435.roa (hash: jpvUHw1k6Yonih+Mx5OtnUQjDRU5Li/0myrSCDkWhF0=)
                          3: 3137372e3135342e32372e302f32342d3234203d3e20323632393435.roa (hash: aYB0XdZc7hKnBEbH9npq0n8zHwd8qFtLR013VA6UMKg=)
                          4: 3137372e3135342e32352e302f32342d3234203d3e20323632393435.roa (hash: QUI3IEbXHKRLo/fjbrfoIrhliy0lcvaHdNa9rBV+v2o=)
                          5: 3137372e3135342e32342e302f32322d3232203d3e20323632393435.roa (hash: J6fubIDMZIhXgbGjGFoqjXC5ZXY2VWfKFkbI7M0QoRc=)
                          6: 3137372e3135342e32362e302f32342d3234203d3e20323632393435.roa (hash: qeKZYz8TsU24rEt+xkPG9PAhw624NiCxkbd/SW85vu0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.crl
                          rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 01:10:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:9b:40:80:a9:db:27:c7:66:8b:64:c5:2b:60:43:de:6d:0b:10:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5053681E4FFFE993EC674A211C8BBC7FB338987
        Validity
            Not Before: Oct 14 22:55:06 2026 GMT
            Not After : Oct 16 01:10:06 2026 GMT
        Subject: CN=94C9E398E1E69F12C4C1F86491C135804A230EC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:62:aa:8f:43:9d:0e:7c:3e:18:16:18:ef:25:
                    89:8d:67:d1:9a:54:da:c0:c1:7c:ce:5a:64:16:8f:
                    d3:ef:f5:34:7d:f6:02:77:90:91:98:78:12:8a:51:
                    97:96:a6:a4:3e:fe:1e:c3:fe:2b:3d:57:f5:f2:f4:
                    a5:d1:cd:57:1a:a5:d8:47:69:6f:61:6d:8e:0d:ca:
                    8c:83:97:97:b2:70:b7:2f:96:fc:0d:c8:df:85:2e:
                    fb:53:e1:f8:91:f0:9d:dc:f6:0b:37:8d:3f:7e:90:
                    83:c4:8b:e9:e0:d5:d9:6a:f7:87:71:27:10:fe:c2:
                    31:49:08:4b:ff:13:5a:80:56:37:53:0b:9c:e2:eb:
                    a1:c2:bf:eb:fd:6a:ff:65:d1:d7:cb:88:3b:58:72:
                    f7:ab:6d:ad:f1:b7:d0:1e:5e:08:0e:90:e1:e1:03:
                    c6:98:6e:d7:89:d6:c4:5c:85:24:2b:76:ab:8a:7b:
                    6e:eb:12:47:e8:19:2c:c5:47:88:49:2c:2b:e3:80:
                    8a:73:8f:73:65:cf:7c:e9:61:ec:63:4b:be:a8:42:
                    ce:c7:56:05:42:40:1d:7c:8d:0f:75:3e:fd:75:11:
                    d9:89:95:ec:c8:07:0c:7e:6f:61:9e:80:cc:ee:e2:
                    45:aa:3e:b2:18:c4:bc:06:81:d4:b9:e5:59:ec:e5:
                    e5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C9:E3:98:E1:E6:9F:12:C4:C1:F8:64:91:C1:35:80:4A:23:0E:C8
            X509v3 Authority Key Identifier:
                keyid:F5:05:36:81:E4:FF:FE:99:3E:C6:74:A2:11:C8:BB:C7:FB:33:89:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:cd:08:80:dc:55:d8:bb:13:43:64:fa:1a:65:e8:b2:7d:b1:
         e4:cc:e2:a4:d0:83:12:ae:1d:7b:04:40:1b:4d:ed:de:e5:e1:
         7e:9c:42:11:f0:74:8e:a3:10:69:1b:ff:d8:af:4b:5d:15:53:
         44:8c:c7:e4:20:e7:9b:d8:d6:b4:6d:78:e6:3d:ea:34:6c:7f:
         03:af:40:dd:85:dd:11:a5:ca:fe:94:ac:e1:71:f1:ef:a6:2e:
         62:24:82:e1:ce:69:f5:6b:3a:ae:68:44:ea:68:d9:b7:49:6f:
         7f:47:2c:28:04:4d:4d:04:9b:10:ea:46:35:92:87:f1:9a:0b:
         86:a8:c4:9f:c8:73:e4:fc:db:8c:21:82:7a:0e:c6:b0:c2:e4:
         25:f8:6d:87:a9:29:c9:8f:79:f0:67:51:98:d2:c0:79:6d:93:
         57:f1:f5:a2:0c:75:ed:f5:c7:91:9f:65:89:6d:cf:bd:de:c9:
         bb:72:d7:13:49:5c:a1:1f:b2:30:00:85:57:f6:37:47:b1:6d:
         1e:cd:44:9f:c1:4d:d1:dd:b7:0a:96:d2:c6:ea:95:e5:77:00:
         57:68:62:6e:36:2d:c9:70:21:dc:22:b8:5c:ee:7a:fa:9e:a7:
         90:1b:ff:e7:66:88:8f:a5:0a:1a:d0:4a:a4:b3:32:5f:4e:21:
         9f:fe:6b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:23:16 2026 by rpki-client