Error: rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft
File:                     B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft (raw, json)
Hash identifier:          kppgNj9mQPxUNdBDtVUnhDenfEEuua4MUchu9z1+9cI=
Subject key identifier:   74:95:A7:D6:42:24:FE:D2:62:BF:29:86:F5:4F:E0:D8:C6:5B:01:A8
Authority key identifier: B5:FC:5F:08:B8:C4:86:40:13:DC:3A:4C:A4:7C:22:00:B3:C2:B8:19
Certificate issuer:       /CN=B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819
Certificate serial:       34CB062AF122440BE37B4883C743601D04033DD1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft
Manifest number:          04D1
Signing time:             Wed 14 Oct 2026 05:40:03 +0000
Manifest this update:     Wed 14 Oct 2026 05:35:03 +0000
Manifest next update:     Thu 15 Oct 2026 08:53:03 +0000
Files and hashes:         1: 323830343a333264343a34303a3a2f34382d3438203d3e20323635313030.roa (hash: c9x/IixrLA46R9oqOnvvu1Jek/n6fhR07K83yyiVRus=)
                          2: 323830343a333264343a34313a3a2f34382d3438203d3e20323635313030.roa (hash: Cp3dbohJVcqt37sfTUoMJ3E+bdUhg84eKNROBpdrawk=)
                          3: 3137302e3235342e38302e302f32322d3234203d3e20323635313030.roa (hash: rjzLK3OVuqaSmw/wNvoff+GpB+z6iVTAM2YCsZN8qSY=)
                          4: 323830343a333264343a3a2f33332d3436203d3e20323635313030.roa (hash: DP7VMVTULVPm/t4uYReoBaIU42700EU4VYLJ72yqCDM=)
                          5: B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl (hash: H4rGxooSLd9uefPvothMuAiVrUXGg3++Wq1oLVI+E8c=)
                          6: 323830343a333264343a383030303a3a2f33332d3333203d3e20323635313030.roa (hash: zQQXjp3mj9Ro+jtHpOapxa4PEYrJqPPs6DpcZJN+5E4=)
                          7: 323830343a333264343a3a2f33322d3332203d3e20323635313030.roa (hash: Q9KP5wCh+ZPDTItZbChYfaToBd4KkV1aPEf2axonbTk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl
                          rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 08:53:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:cb:06:2a:f1:22:44:0b:e3:7b:48:83:c7:43:60:1d:04:03:3d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819
        Validity
            Not Before: Oct 14 05:35:03 2026 GMT
            Not After : Oct 15 08:53:03 2026 GMT
        Subject: CN=7495A7D64224FED262BF2986F54FE0D8C65B01A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:72:c6:4d:7b:1c:de:8d:22:9c:bf:28:11:ee:
                    d1:bd:05:69:e8:27:46:82:ca:d9:a0:ab:15:55:91:
                    44:ea:02:4b:2b:92:08:d9:f8:47:2e:83:5a:f5:4e:
                    8b:c5:80:c7:7d:47:bc:3b:41:54:b6:c5:01:bc:f4:
                    cf:f0:0d:a9:76:b1:d2:07:da:23:11:2b:1a:c1:85:
                    52:3a:3e:f1:8a:f8:27:8a:43:a3:d6:b6:fb:e8:ea:
                    dc:1a:85:66:58:7c:19:dd:ba:1d:11:c2:ef:38:81:
                    ab:cb:a1:1e:f0:0f:8e:0e:a6:9e:07:48:72:fd:13:
                    21:38:49:d2:1b:fe:cd:90:7d:45:b9:ee:a4:3c:82:
                    a4:96:d4:b6:a1:be:f2:aa:e2:ba:2c:4e:98:49:7f:
                    11:d0:b2:fc:bc:81:6c:11:88:aa:f7:db:e6:dc:90:
                    8c:51:0d:2d:07:f2:2e:45:9e:a9:d0:7a:49:ec:08:
                    cd:58:6a:9e:a1:d5:de:ce:3b:a1:bf:e4:15:90:f5:
                    c6:1e:e6:ef:46:5e:58:24:28:cd:c4:99:e3:0a:39:
                    7e:79:97:6a:0e:09:a9:01:de:33:39:ed:14:6c:f3:
                    32:22:15:bc:94:be:22:16:d4:2b:68:cc:0d:2f:5e:
                    2d:55:69:18:93:d5:9b:79:aa:e6:5d:73:72:08:af:
                    94:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:95:A7:D6:42:24:FE:D2:62:BF:29:86:F5:4F:E0:D8:C6:5B:01:A8
            X509v3 Authority Key Identifier:
                keyid:B5:FC:5F:08:B8:C4:86:40:13:DC:3A:4C:A4:7C:22:00:B3:C2:B8:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:06:14:71:a2:ef:60:4f:8d:e1:68:9e:e9:e8:53:87:a4:da:
         31:67:dc:91:c7:4a:ae:db:3d:6f:75:34:f7:81:ab:41:04:68:
         31:7c:47:4a:19:d7:b7:ba:7b:fd:e6:aa:de:50:22:e8:e8:d2:
         45:c8:3f:61:c0:ae:e8:46:39:ff:1f:e7:da:47:e5:3c:bf:47:
         56:3b:91:79:0f:dc:2f:b2:0d:fd:01:81:53:17:b2:25:3a:f0:
         e2:1e:ef:bf:54:0b:78:f4:af:9d:da:5b:97:0e:dd:54:8d:48:
         2a:41:c0:86:a2:3f:7e:09:a8:05:64:42:7a:bf:88:e6:5c:3e:
         7a:73:d6:62:65:2b:62:09:55:4d:56:fa:5a:7d:e3:6a:df:40:
         c7:25:66:af:f1:25:12:56:82:14:60:e4:86:ed:32:a1:41:30:
         12:31:9a:84:8e:54:d6:2a:bc:70:d3:7f:cf:5d:b0:cc:95:9f:
         52:ab:c1:b3:3e:20:a6:34:ec:5c:bd:22:6e:70:b1:76:ee:91:
         5b:72:14:37:b7:ca:18:37:40:b3:83:df:b5:fe:7b:06:a4:62:
         d4:a1:b0:8a:12:0a:7f:49:92:f8:fa:de:99:b9:4f:26:e5:b8:
         95:8c:ea:59:a0:71:38:70:18:c6:0b:a2:4e:39:15:cd:b1:13:
         07:54:ba:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:25:10 2026 by rpki-client