Error: rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.mft
File:                     54204F38B6BA00E08F89389BEA820C255D02514C.mft (raw, json)
Hash identifier:          /EdB0Bvi7rIDYV7dfPDUmobMmgR8HAoTLsAe4ijq8Bw=
Subject key identifier:   10:B8:3A:34:FE:E9:C4:AB:34:B5:F8:6C:91:BB:8B:B4:C1:83:B8:F3
Authority key identifier: 54:20:4F:38:B6:BA:00:E0:8F:89:38:9B:EA:82:0C:25:5D:02:51:4C
Certificate issuer:       /CN=54204F38B6BA00E08F89389BEA820C255D02514C
Certificate serial:       65465B70098731FA0B4C14D38588A36F502ACEB0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.mft
Manifest number:          0486
Signing time:             Mon 24 Aug 2026 00:20:01 +0000
Manifest this update:     Mon 24 Aug 2026 00:15:01 +0000
Manifest next update:     Tue 25 Aug 2026 01:45:01 +0000
Files and hashes:         1: 54204F38B6BA00E08F89389BEA820C255D02514C.crl (hash: 5/XM86yzCQK1xo6FrOC7u6H1bskgGTRzv807HaibD/M=)
                          2: 3136382e3139342e36362e302f32342d3234203d3e20323635333739.roa (hash: G85oXijG/zwhf+v4EChTXUxJZW0Gvq16tObU5tEYJ3g=)
                          3: 3136382e3139342e36362e302f32332d3233203d3e20323635333739.roa (hash: 7auQHWsHrnmitHjNjElFOCm0INraF+Uk2XS4yWX4tNo=)
                          4: 3136382e3139342e36342e302f32332d3233203d3e20323635333739.roa (hash: wkQGl/7hQRcPwVdxBBHg9TfA19bT9aDIr0bAxWUWEvQ=)
                          5: 323830343a333332633a383030303a3a2f33332d3333203d3e20323635333739.roa (hash: xmz7f6HuOgzCJE17w/NmzpSFlK+kzw5iJ42F6fydArw=)
                          6: 3136382e3139342e36342e302f32322d3232203d3e20323635333739.roa (hash: KY3AM1X9Hwm85qC+2O3l93gIq68i1b92YpnAJCNiZ/o=)
                          7: 3136382e3139342e36342e302f32342d3234203d3e20323635333739.roa (hash: hInbJWLIwDctS0gBxHiB1RU0EFGwkER7d2MDCyn952c=)
                          8: 3136382e3139342e36352e302f32342d3234203d3e20323635333739.roa (hash: lQxmnj4wMofnrChVAuvge0HS4bsR2Rgl/VnE33UEaZ4=)
                          9: 323830343a333332633a3a2f33332d3333203d3e20323635333739.roa (hash: MEu87hhXFwgdaUnq9WTsiv9FHd2PGyB0wEPxIk+Lt0g=)
                          10: 323830343a333332633a3a2f33322d3332203d3e20323635333739.roa (hash: IfdbtzOCMAvfgX6ggHEGpucSnYJW610sHQPSTKxOWRM=)
                          11: 3136382e3139342e36372e302f32342d3234203d3e20323635333739.roa (hash: 0+9oxKEuTshcJmVSIO+ZxtYLCkSxyo5Jzb7rjLeJ31U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.crl
                          rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 01:45:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:46:5b:70:09:87:31:fa:0b:4c:14:d3:85:88:a3:6f:50:2a:ce:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54204F38B6BA00E08F89389BEA820C255D02514C
        Validity
            Not Before: Aug 24 00:15:01 2026 GMT
            Not After : Aug 25 01:45:01 2026 GMT
        Subject: CN=10B83A34FEE9C4AB34B5F86C91BB8BB4C183B8F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e8:28:f5:75:66:14:f6:05:86:db:c6:2c:3b:
                    33:fe:0a:69:42:45:d4:95:95:7f:d7:25:a7:30:f6:
                    f8:20:14:22:3c:58:8f:91:66:18:36:b4:f7:0a:d9:
                    80:73:6b:96:18:a8:ac:88:04:de:fc:94:e5:a7:2b:
                    59:3a:6f:3b:4b:7e:0a:0c:f6:e6:57:87:05:c3:02:
                    6b:b8:d9:c1:13:09:f7:d4:52:f3:95:44:ce:07:32:
                    2b:9f:bd:bd:1c:c9:b4:48:5f:81:3e:31:12:a6:31:
                    c4:1a:4d:b9:3a:3a:14:ea:70:ea:cd:5f:97:25:27:
                    42:50:88:70:45:39:33:15:c9:f5:5a:42:1e:c6:70:
                    a0:2d:39:3d:49:96:71:45:05:52:1f:e8:91:59:19:
                    ee:44:22:26:53:b7:2b:e8:f8:3d:76:f8:ec:93:c5:
                    6e:56:2b:3e:3e:96:b1:78:10:eb:11:14:f4:8c:1a:
                    0a:03:dc:b0:ce:08:ee:14:c2:76:a2:5e:3c:c2:27:
                    26:c8:34:58:98:df:5d:46:7f:89:5c:4e:bd:b8:c5:
                    b6:08:4c:0f:fa:82:28:a8:ea:73:27:61:55:a7:6e:
                    1f:33:b5:56:a0:b8:66:e4:f8:cc:d9:c1:63:8d:f2:
                    2e:4b:aa:d3:2c:1a:e7:e8:be:ef:b2:72:6a:11:e3:
                    f8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B8:3A:34:FE:E9:C4:AB:34:B5:F8:6C:91:BB:8B:B4:C1:83:B8:F3
            X509v3 Authority Key Identifier:
                keyid:54:20:4F:38:B6:BA:00:E0:8F:89:38:9B:EA:82:0C:25:5D:02:51:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:24:d7:ca:85:df:84:06:d0:4a:c2:54:7f:30:12:3c:53:30:
         ae:bd:89:b8:fd:e1:ae:7c:33:0d:20:db:70:d8:fa:0a:74:ad:
         05:6b:3b:a6:c0:1f:08:87:0d:0c:ef:1c:a5:0a:4e:ea:5f:1b:
         5f:aa:c2:6d:23:54:56:9e:6e:38:99:c6:64:9c:bc:de:49:cf:
         2b:d9:56:0a:ea:f2:9d:ca:de:54:19:03:af:6a:e9:18:e5:f5:
         51:8f:41:ae:e2:15:fb:2b:72:46:b7:ec:90:d3:a4:d5:76:ce:
         e9:48:06:74:33:a7:31:37:2e:c6:40:42:ba:a7:dc:9a:27:20:
         49:55:44:23:fb:1e:d9:18:75:1d:ed:46:98:8c:5f:ef:45:50:
         5e:82:93:6d:b5:d3:c7:5f:8d:77:d7:cb:df:91:41:7d:b1:a2:
         13:6a:5e:ed:f5:8f:7d:fc:84:07:d4:ed:f7:7e:05:81:e0:5a:
         3b:bf:41:1c:c5:07:fa:90:ed:8f:bc:0b:02:ff:3d:cc:a6:70:
         a5:87:ef:4e:7d:d4:de:bd:6a:1b:08:bb:5e:98:5e:86:a1:d8:
         04:2c:52:27:ea:ad:99:3d:47:ec:1a:9e:89:76:ac:39:a1:5f:
         6b:02:a9:14:0c:77:1d:d6:60:11:40:49:4b:6b:3e:cf:c9:46:
         fa:dd:62:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 13:27:31 2026 by rpki-client