Error: rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
File:                     F221C31BD2AD9D051303E1E7DE991DC00987A722.mft (raw, json)
Hash identifier:          KnHi4Gx83Z/LkYE2Un5sWyAkTLayIjetWxKypUwEHts=
Subject key identifier:   E2:AB:9F:A1:CF:FC:12:77:C5:D3:9F:FD:26:C3:3A:0B:C2:65:38:D1
Authority key identifier: F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22
Certificate issuer:       /CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
Certificate serial:       25A9D472B8599DED3D9CF90ADBB6C72B896CE07F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
Manifest number:          04C3
Signing time:             Sun 11 Oct 2026 04:54:28 +0000
Manifest this update:     Sun 11 Oct 2026 04:49:28 +0000
Manifest next update:     Mon 12 Oct 2026 05:24:28 +0000
Files and hashes:         1: 323830343a363838343a33303a3a2f34342d3434203d3e20323639363938.roa (hash: 1fgKO80FB4ABL5+b2C+NPG36fsWYtxanVGjxKe312KQ=)
                          2: 34352e3139312e31302e302f32332d3233203d3e20323639363938.roa (hash: diFMCdAXbYPtAa9ysDKcQbCwvQajQlLg1fgD38qWc1A=)
                          3: 323830343a363838343a633030303a3a2f33342d3334203d3e20323639363938.roa (hash: 67NOM4bbT34r60p8Pdul0dsIk/9gxLuYlexifRJExYc=)
                          4: 323830343a363838343a383030303a3a2f33342d3334203d3e20323639363938.roa (hash: oQBAXPZji36RfnVMVJVINpqYcweI93PKAZNd2d5Fqk0=)
                          5: 323830343a363838343a343030303a3a2f33342d3334203d3e20323639363938.roa (hash: +7fdmHrVXXTuZCTniFykVc2VsYq63R69rYZzhIGxaUY=)
                          6: 34352e3139312e382e302f32322d3232203d3e20323639363938.roa (hash: 7dHPuOJKuplhTXbFAzr/aA6hdank/hEJRdp73pWB7SM=)
                          7: 34352e3139312e31312e302f32342d3234203d3e20323639363938.roa (hash: Ny9Fvky013bp8WK5sYukQjlLTzc5ByEuXAzzHBLFDvM=)
                          8: 34352e3139312e392e302f32342d3234203d3e20323639363938.roa (hash: SIqOp4C7cyQZnE8lRZeUR8CavFJ39Zvz6esDq7CWol8=)
                          9: 323830343a363838343a3a2f33332d3333203d3e20323639363938.roa (hash: 8iVmccCObAe8NicDmn1CKO+ITDAM6KsmBd6esHYUw5A=)
                          10: 34352e3139312e31302e302f32342d3234203d3e20323639363938.roa (hash: pyCdUGZA/KCjV2vuJfmjdtjHYaDSd98SlnH0/zdU7AU=)
                          11: 323830343a363838343a383030303a3a2f33332d3333203d3e20323639363938.roa (hash: IUn9Ibzt5h8hvPxl4OpQ9/sJG+I32FM0kwk3S6Jyd+I=)
                          12: 323830343a363838343a3a2f33322d3332203d3e20323639363938.roa (hash: A87ATHnOfq+iPA/HmwNUzY0wG/yof3krOeM5w1KT9tc=)
                          13: 323830343a363838343a3a2f33342d3334203d3e20323639363938.roa (hash: TddILuuim6wsiPeHbiytUjZF+ec63qkswvVMnYreFdA=)
                          14: F221C31BD2AD9D051303E1E7DE991DC00987A722.crl (hash: Ps5eAWxFIORCBQJUqngiQHTfxyf27j7EqLZK/ijEB14=)
                          15: 34352e3139312e382e302f32332d3233203d3e20323639363938.roa (hash: tOyYqXtTx2ap/Bz/m2tLjpFnUbZ6+UZRAdXmlbI4HP8=)
                          16: 34352e3139312e382e302f32342d3234203d3e20323639363938.roa (hash: CmPxrqFXNBYAuiTeOwbtYeVu27GG1fvYntO4o7Wna5g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl
                          rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 05:24:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:a9:d4:72:b8:59:9d:ed:3d:9c:f9:0a:db:b6:c7:2b:89:6c:e0:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
        Validity
            Not Before: Oct 11 04:49:28 2026 GMT
            Not After : Oct 12 05:24:28 2026 GMT
        Subject: CN=E2AB9FA1CFFC1277C5D39FFD26C33A0BC26538D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f3:c5:5c:b4:e7:17:92:32:1e:ee:7c:ab:01:
                    e7:14:f7:45:3e:5a:e1:2b:7c:40:d8:73:f7:9d:fc:
                    45:e4:89:15:59:94:25:86:4a:3a:3f:c3:9c:16:57:
                    ca:ca:5a:db:d3:23:71:a6:85:85:46:87:3f:5e:d1:
                    ee:5b:08:b5:a8:81:eb:f9:88:90:b2:7f:44:db:26:
                    ba:69:3c:2b:f1:45:2c:87:83:55:4e:2d:ec:2e:f6:
                    60:96:18:f1:8b:ab:c0:a1:d2:67:08:24:6d:57:97:
                    20:b7:52:30:a1:90:58:08:19:5f:fd:73:a2:74:6c:
                    9c:75:1c:1c:f2:e2:ce:0a:05:6d:78:cb:7c:64:87:
                    51:20:75:38:1d:3f:b5:94:d4:8c:b3:20:93:73:14:
                    2c:a3:2a:f7:df:52:59:55:a6:99:99:a3:e6:ed:74:
                    bb:48:f9:8d:5b:b9:78:02:f3:15:cb:cd:10:58:00:
                    a9:c4:ad:7c:fe:95:8f:c5:61:0d:7b:e5:e6:2f:59:
                    f9:0d:4f:5b:be:67:06:74:93:d3:3d:f4:5a:30:36:
                    44:73:d9:96:73:f2:ce:4b:07:df:41:0e:22:de:ba:
                    84:2a:36:d3:f0:27:ab:d7:c1:b4:a4:cd:c5:fb:60:
                    00:46:d5:56:7d:d8:2a:a7:0f:43:b2:47:ae:3a:5c:
                    34:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:AB:9F:A1:CF:FC:12:77:C5:D3:9F:FD:26:C3:3A:0B:C2:65:38:D1
            X509v3 Authority Key Identifier:
                keyid:F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:a9:0d:21:d0:56:af:59:7f:39:7c:63:1c:af:27:b7:68:c9:
         dc:0a:a2:22:f8:20:56:e2:a4:65:f6:4a:90:57:9a:f9:52:40:
         62:42:65:01:35:9c:9b:94:a4:30:a1:ca:48:bf:f2:54:12:8b:
         07:38:39:d6:6c:c7:d2:b1:1d:cf:8f:fb:9f:68:9c:18:e6:2a:
         8d:4d:2c:f2:4a:bd:0b:b0:58:84:32:26:2e:ac:c6:42:e7:9b:
         17:f2:6b:f9:16:6a:61:b0:06:f5:71:a3:15:50:6b:32:d5:31:
         b2:36:bf:a2:3f:d3:be:31:4d:3d:37:4a:b6:14:71:69:2b:b7:
         8c:9d:31:82:c5:71:6d:b0:e7:83:eb:36:3d:11:d1:03:94:bd:
         13:c0:bc:4b:f9:b4:6a:cd:e3:81:8e:8e:6f:f0:31:23:b1:55:
         97:23:09:f3:fd:8d:71:a3:c7:5f:f6:66:96:b6:ca:20:f5:f8:
         ec:73:59:e9:21:80:81:f6:ee:04:2b:6f:a9:9a:fd:56:aa:40:
         ad:42:0d:5f:72:99:f2:2e:f1:d0:5f:56:c7:db:03:fe:0f:b7:
         a7:d3:e9:64:a5:01:cc:b1:b5:92:bb:44:15:4d:4c:ef:2e:ca:
         c1:a0:1d:f3:12:86:43:55:75:5d:a3:b6:d0:08:fb:ef:1d:93:
         a2:b4:ef:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:31:31 2026 by rpki-client