Error: rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.mft
File:                     48EA1B42F1661A0EB03B245D47205E5220A51B65.mft (raw, json)
Hash identifier:          RvEVXVkTx3XtDj1zPqs0LqIYR5D1PWLsHhDWco9WtrU=
Subject key identifier:   6E:3B:1A:83:69:CF:9C:B0:D2:21:D8:64:CB:7A:C3:01:6D:7B:E9:A0
Authority key identifier: 48:EA:1B:42:F1:66:1A:0E:B0:3B:24:5D:47:20:5E:52:20:A5:1B:65
Certificate issuer:       /CN=48EA1B42F1661A0EB03B245D47205E5220A51B65
Certificate serial:       67ADBB8E8908073E3D53BBD75CDF8D26A2EE0FB0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.mft
Manifest number:          04D8
Signing time:             Tue 27 Oct 2026 06:09:31 +0000
Manifest this update:     Tue 27 Oct 2026 06:04:31 +0000
Manifest next update:     Wed 28 Oct 2026 08:27:31 +0000
Files and hashes:         1: 48EA1B42F1661A0EB03B245D47205E5220A51B65.crl (hash: zw3dXUAAtJF0VwadCC7yg7RZY/6E2uWjR17/ZPKQoh4=)
                          2: 34352e3233362e3139362e302f32322d3232203d3e20323638323631.roa (hash: oka1py52Ubkft0HyVyy3TssVuDg8vM1+GBo0BALSOGc=)
                          3: 34352e3233362e3139392e302f32342d3234203d3e20323638323631.roa (hash: AKlCOqgNSI/7TxdI2/SmVXO2ih6Iv8Y+iyazUXVD/oI=)
                          4: 34352e3233362e3139382e302f32342d3234203d3e20323638323631.roa (hash: 21wJQt2AmFOLJHnvJd9Lv062apSOfABjgiI2k1PL0F4=)
                          5: 34352e3233362e3139372e302f32342d3234203d3e20323638323631.roa (hash: FQHx0WWnTvs1iIOYArYfudqrVh5kqioRWQXIUsiTBpo=)
                          6: 34352e3233362e3139362e302f32342d3234203d3e20323638323631.roa (hash: dlMTNzoJ7RH0fc/0wu35lEibtsE+IvJYPQINZ+J2oso=)
                          7: 323830343a346537303a3a2f33332d3333203d3e20323638323631.roa (hash: 6gB7nDMAVpvfAEnyEMcThuBwMIFUeluj0Y0GrPYQI28=)
                          8: 323830343a346537303a383030303a3a2f33332d3333203d3e20323638323631.roa (hash: dOpS+guN8TeRg2aYfo22h1ZbFeA3yFjlimkbo7C0YJs=)
                          9: 34352e3233362e3139362e302f32332d3233203d3e20323638323631.roa (hash: iw691QVPBY1SEl4XvhxUMKgpLfZBexvJgIl97qYgdBw=)
                          10: 323830343a346537303a666666303a3a2f34342d3434203d3e20323638323631.roa (hash: G3LSwfoNn42eiC4uIcKdnRaLA0pug4gPB1JUvpeVn8k=)
                          11: 323830343a346537303a643030303a3a2f33362d3438203d3e20323638323631.roa (hash: JnUtK9PWnphckpV01iVgI5+A+WSa83zroJMq/EO6K3E=)
                          12: 323830343a346537303a3a2f33322d3332203d3e20323638323631.roa (hash: aFcYdJndS4y3kWfNiOwKfSA/ukqPd7ONlWLAw/xLqvw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl
                          rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 08:27:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ad:bb:8e:89:08:07:3e:3d:53:bb:d7:5c:df:8d:26:a2:ee:0f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48EA1B42F1661A0EB03B245D47205E5220A51B65
        Validity
            Not Before: Oct 27 06:04:31 2026 GMT
            Not After : Oct 28 08:27:31 2026 GMT
        Subject: CN=6E3B1A8369CF9CB0D221D864CB7AC3016D7BE9A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c4:ff:d5:7c:1e:30:c5:04:02:c0:67:c8:59:
                    d5:2c:4a:de:28:49:75:8a:05:21:c1:28:8d:2b:8f:
                    92:5d:81:0a:1b:e0:9f:42:81:32:5e:e1:10:77:bc:
                    34:05:97:41:d2:86:9e:5b:c6:52:0f:89:44:88:66:
                    26:5c:d0:7b:58:6f:db:ac:b7:bf:41:56:b4:b0:a9:
                    b5:1a:39:c6:b7:4a:73:65:52:18:83:16:86:8a:38:
                    6b:9d:2b:33:72:0e:b0:6a:d8:ae:32:45:bd:bf:cf:
                    68:74:5c:c7:42:4b:79:34:19:48:dc:98:14:83:3b:
                    a4:51:66:56:e0:e6:8a:a3:ba:ab:45:d1:70:0a:7b:
                    db:d3:fc:a9:70:ad:4f:59:c5:d3:4a:a2:b4:ce:79:
                    95:f5:e6:23:01:03:85:9a:38:3c:23:92:79:5c:24:
                    32:0a:2f:a9:ef:54:81:58:bb:ab:19:b3:8f:63:2e:
                    d5:69:ba:64:19:2b:0c:1a:90:86:20:24:e7:11:13:
                    6c:d7:f8:21:d9:7e:50:ac:60:d8:ae:ee:6a:61:9f:
                    a8:66:91:86:1c:0c:90:44:29:35:1b:79:0e:75:c4:
                    2d:c7:91:18:28:94:0d:d6:4f:a7:8d:24:44:63:f5:
                    9a:c2:6e:ce:01:dc:68:7c:cf:9e:24:d5:d8:da:51:
                    f6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:3B:1A:83:69:CF:9C:B0:D2:21:D8:64:CB:7A:C3:01:6D:7B:E9:A0
            X509v3 Authority Key Identifier:
                keyid:48:EA:1B:42:F1:66:1A:0E:B0:3B:24:5D:47:20:5E:52:20:A5:1B:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:52:7a:ee:20:14:d6:ca:4f:f4:27:35:d4:a2:8e:94:93:a4:
         ce:54:18:64:7e:1b:bb:96:d7:b5:25:4e:cd:75:a2:4b:7a:b8:
         08:5f:dd:f5:12:db:d2:af:00:36:1d:fd:9f:75:7d:a3:a1:db:
         83:89:ba:d6:17:37:2b:28:4d:d8:3d:4b:1c:d2:0e:36:82:ca:
         e9:11:92:f0:d1:54:a7:ae:38:b5:7a:91:22:01:8e:73:3b:c1:
         af:19:ab:91:0c:c9:67:7c:39:25:c3:6f:e7:34:c1:28:b0:b3:
         96:69:d8:cb:88:24:03:5c:ab:2b:f0:6c:1a:32:7f:90:92:8e:
         c5:88:ba:22:46:a9:4d:d8:85:44:3d:34:72:0f:44:73:a3:5d:
         8b:f0:81:b4:28:36:0b:42:3d:35:2a:3e:c8:12:35:ae:cc:ae:
         79:11:0a:78:5d:45:56:9c:7a:1e:c7:09:77:95:52:51:c3:6c:
         4c:a1:1b:43:27:bd:dc:8a:68:96:58:1c:ea:44:78:ca:72:30:
         83:1d:ed:61:94:97:2b:e5:3f:f0:43:f2:ae:0b:a8:19:ed:77:
         fb:e8:9f:91:bd:48:b1:07:7c:c3:4f:f4:ce:3c:1d:ee:ee:af:
         6a:92:c5:8b:99:6e:6c:54:36:76:0f:76:f6:ae:41:3e:b8:7c:
         6e:ce:f3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:57:36 2026 by rpki-client