Error: rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.mft
File:                     F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.mft (raw, json)
Hash identifier:          sZDqZIcOlbYAAP/F6nmu5kqK6ZAjPbUhV7lfUQPN/Y0=
Subject key identifier:   94:54:63:C7:3D:78:5D:02:85:51:A9:57:7F:69:B0:D3:F6:60:63:CF
Authority key identifier: F4:50:62:DE:52:8E:3F:9E:B3:E8:78:F8:DE:D6:EB:8B:8D:7E:35:87
Certificate issuer:       /CN=F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587
Certificate serial:       477A8B3EB446D0FECF2B148B13AFD6103E460DC6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.mft
Manifest number:          056A
Signing time:             Tue 13 Oct 2026 15:30:00 +0000
Manifest this update:     Tue 13 Oct 2026 15:25:00 +0000
Manifest next update:     Wed 14 Oct 2026 15:30:00 +0000
Files and hashes:         1: F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.crl (hash: 6d+T0V+VEH6I8eOn/bof+o98cFIF9SAiXtuaWEcGDmA=)
                          2: 323830343a366662343a3a2f33322d3335203d3e20323730363738.roa (hash: rc85CFl6sgDZ5h/dq3oIdbo8WefnMOtaFYgA98s2Wz4=)
                          3: 3137372e3232312e3138382e302f32322d3234203d3e20323730363738.roa (hash: DS3KCq/HmM/Ew0vugtZALaaOxAduHDC1H5b07+jpLaY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.crl
                          rsync://rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 15:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:7a:8b:3e:b4:46:d0:fe:cf:2b:14:8b:13:af:d6:10:3e:46:0d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587
        Validity
            Not Before: Oct 13 15:25:00 2026 GMT
            Not After : Oct 14 15:30:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d2:d6:ff:4f:b1:d3:ff:b1:09:d8:07:a7:1f:
                    10:cc:a1:bf:54:0e:79:23:e3:31:20:67:15:fa:55:
                    8c:a0:c9:bb:23:5d:08:88:90:30:24:8b:eb:ab:60:
                    22:6b:65:d8:cc:35:56:26:59:ae:73:3c:5a:1b:12:
                    e5:05:0b:2f:f4:a2:83:a3:c6:cd:8c:54:eb:ca:54:
                    19:f0:aa:c5:1d:75:89:e1:a2:10:32:4c:fe:23:c4:
                    47:80:6b:68:26:bb:77:f7:6d:c8:da:64:d5:3d:8a:
                    cd:a3:8a:89:f9:92:0b:5e:c2:44:12:b5:20:eb:28:
                    20:b5:6d:f5:a7:96:37:65:41:9c:9c:39:8d:7f:30:
                    84:4e:3b:ee:f4:41:fe:58:46:92:e6:dc:b3:8c:9a:
                    97:a2:a4:08:09:eb:73:11:9c:f5:22:72:75:37:2b:
                    c4:68:d5:13:8b:b5:34:28:6c:8d:f1:95:7f:15:3f:
                    66:43:61:f8:d2:45:6a:a0:a3:e1:2d:90:93:ad:67:
                    19:fc:6f:8c:80:e0:06:e5:3d:f7:f0:96:8e:dd:2b:
                    09:6e:b1:d9:60:20:ca:71:be:cd:09:f4:67:63:7f:
                    92:bd:10:13:09:eb:9e:17:b6:a8:ed:ed:11:2d:9d:
                    a0:de:4d:06:15:f8:a3:83:c1:25:0a:8b:e5:d9:d6:
                    37:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:54:63:C7:3D:78:5D:02:85:51:A9:57:7F:69:B0:D3:F6:60:63:CF
            X509v3 Authority Key Identifier:
                keyid:F4:50:62:DE:52:8E:3F:9E:B3:E8:78:F8:DE:D6:EB:8B:8D:7E:35:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/1/F45062DE528E3F9EB3E878F8DED6EB8B8D7E3587.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:b8:a9:42:f8:70:a7:d8:f0:60:62:b8:0c:28:e7:c5:92:ac:
         1d:3f:8a:d9:33:76:76:70:f7:2b:83:79:23:f3:35:7f:e4:8b:
         ae:80:ea:b4:6c:43:e7:80:1c:0c:95:2d:74:1d:4a:71:79:a0:
         d4:68:94:67:63:85:73:87:66:49:7b:73:63:88:43:18:50:8f:
         12:f6:ad:2c:6b:99:f8:84:2d:a0:0a:0a:17:5c:c1:8e:6b:e3:
         7a:c8:b5:7d:e8:23:c9:a7:47:4d:f3:c8:a6:e2:fa:d0:d6:e5:
         23:87:eb:af:df:3a:79:d9:e6:c1:f6:a3:71:12:48:d8:b4:24:
         c5:cb:ff:f9:44:d8:f8:f5:f4:14:40:88:d4:a0:74:c7:8d:39:
         09:d7:94:b3:a8:a1:b5:9f:aa:2b:23:66:a6:02:76:43:c2:50:
         10:c5:05:77:ad:02:ef:ad:c8:7e:3b:0a:25:de:6c:ac:00:87:
         9d:a4:11:0a:5d:00:fb:4e:02:90:21:3c:c4:9f:de:85:8e:07:
         56:b0:15:fe:79:b5:db:5c:88:08:bd:cb:17:5f:56:64:75:99:
         b2:92:4f:4a:b6:e9:fc:3e:6f:92:de:d2:d0:55:e9:df:33:88:
         04:aa:c6:6f:fa:61:51:84:b1:34:3a:2a:5b:e9:b3:07:6c:49:
         4b:c6:c5:bb
-----BEGIN CERTIFICATE-----
MIIHSDCCBjCgAwIBAgIUR3qLPrRG0P7PKxSLE6/WED5GDcYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQ1MDYyREU1MjhFM0Y5RUIzRTg3OEY4REVENkVCOEI4
RDdFMzU4NzAeFw0yNjEwMTMxNTI1MDBaFw0yNjEwMTQxNTMwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkVEMkQ2RkY0RkIxRDNGRkIx
MDlEODA3QTcxRjEwQ0NBMUJGNTQwRTc5MjNFMzMxMjA2NzE1RkE1NThDQTBDOUJC
MjM1RDA4ODg5MDMwMjQ4QkVCQUI2MDIyNkI2NUQ4Q0MzNTU2MjY1OUFFNzMzQzVB
MUIxMkU1MDUwQjJGRjRBMjgzQTNDNkNEOEM1NEVCQ0E1NDE5RjBBQUM1MUQ3NTg5
RTFBMjEwMzI0Q0ZFMjNDNDQ3ODA2QjY4MjZCQjc3Rjc2REM4REE2NEQ1M0Q4QUNE
QTM4QTg5Rjk5MjBCNUVDMjQ0MTJCNTIwRUIyODIwQjU2REY1QTc5NjM3NjU0MTlD
OUMzOThEN0YzMDg0NEUzQkVFRjQ0MUZFNTg0NjkyRTZEQ0IzOEM5QTk3QTJBNDA4
MDlFQjczMTE5Q0Y1MjI3Mjc1MzcyQkM0NjhENTEzOEJCNTM0Mjg2QzhERjE5NTdG
MTUzRjY2NDM2MUY4RDI0NTZBQTBBM0UxMkQ5MDkzQUQ2NzE5RkM2RjhDODBFMDA2
RTUzREY3RjA5NjhFREQyQjA5NkVCMUQ5NjAyMENBNzFCRUNEMDlGNDY3NjM3Rjky
QkQxMDEzMDlFQjlFMTdCNkE4RURFRDExMkQ5REEwREU0RDA2MTVGOEEzODNDMTI1
MEE4QkU1RDlENjM3RDcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvtLW/0+x0/+xCdgHpx8QzKG/VA55I+MxIGcV+lWMoMm7I10IiJAw
JIvrq2Aia2XYzDVWJlmuczxaGxLlBQsv9KKDo8bNjFTrylQZ8KrFHXWJ4aIQMkz+
I8RHgGtoJrt3923I2mTVPYrNo4qJ+ZILXsJEErUg6yggtW31p5Y3ZUGcnDmNfzCE
Tjvu9EH+WEaS5tyzjJqXoqQICetzEZz1InJ1NyvEaNUTi7U0KGyN8ZV/FT9mQ2H4
0kVqoKPhLZCTrWcZ/G+MgOAG5T338JaO3SsJbrHZYCDKcb7NCfRnY3+SvRATCeue
F7ao7e0RLZ2g3k0GFfijg8ElCovl2dY31wIDAQABo4ICVjCCAlIwHQYDVR0OBBYE
FJRUY8c9eF0ChVGpV39psNP2YGPPMB8GA1UdIwQYMBaAFPRQYt5Sjj+es+h4+N7W
64uNfjWHMA4GA1UdDwEB/wQEAwIHgDCBkgYDVR0fBIGKMIGHMIGEoIGBoH+GfXJz
eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vcEVFaUNTd3RyanlZdjlt
akVtazJpUGR3TWhQN212VHpWYmt3RFA5V1JTby8xL0Y0NTA2MkRFNTI4RTNGOUVC
M0U4NzhGOERFRDZFQjhCOEQ3RTM1ODcuY3JsMHgGCCsGAQUFBwEBBGwwajBoBggr
BgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNi
cl9yZXBvLzEvRjQ1MDYyREU1MjhFM0Y5RUIzRTg3OEY4REVENkVCOEI4RDdFMzU4
Ny5jZXIwgZwGCCsGAQUFBwELBIGPMIGMMIGJBggrBgEFBQcwC4Z9cnN5bmM6Ly9y
cGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9wRUVpQ1N3dHJqeVl2OW1qRW1rMmlQ
ZHdNaFA3bXZUelZia3dEUDlXUlNvLzEvRjQ1MDYyREU1MjhFM0Y5RUIzRTg3OEY4
REVENkVCOEI4RDdFMzU4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABO4qUL4cKfY8GBiuAwo58WSrB0/
itkzdnZw9yuDeSPzNX/ki66A6rRsQ+eAHAyVLXQdSnF5oNRolGdjhXOHZkl7c2OI
QxhQjxL2rSxrmfiELaAKChdcwY5r43rItX3oI8mnR03zyKbi+tDW5SOH66/fOnnZ
5sH2o3ESSNi0JMXL//lE2Pj19BRAiNSgdMeNOQnXlLOoobWfqisjZqYCdkPCUBDF
BXetAu+tyH47CiXebKwAh52kEQpdAPtOApAhPMSf3oWOB1awFf55tdtciAi9yxdf
VmR1mbKST0q26fw+b5Le0tBV6d8ziASqxm/6YVGEsTQ6KlvpswdsSUvGxbs=
-----END CERTIFICATE-----
Generated at Wed Oct 14 00:44:18 2026 by rpki-client