Error: rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.mft
File:                     BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.mft (raw, json)
Hash identifier:          U8/UkzBmUqrvpz7YvcA/hoPwvhNV7uMOF2UGBXoWNp4=
Subject key identifier:   05:FB:54:D8:E9:74:9E:12:4A:44:D1:7F:2A:6A:13:18:EE:DD:EE:09
Authority key identifier: BA:D4:DC:02:B3:E6:1B:B7:35:8C:5D:0C:DD:45:3B:E3:B4:0C:B8:49
Certificate issuer:       /CN=BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849
Certificate serial:       45B832AC48965F526630160CB10FEBB80DD50BA9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.mft
Manifest number:          EE
Signing time:             Mon 24 Aug 2026 15:49:50 +0000
Manifest this update:     Mon 24 Aug 2026 15:44:50 +0000
Manifest next update:     Tue 25 Aug 2026 18:25:50 +0000
Files and hashes:         1: BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.crl (hash: C/70YmPwPenkp9cfJKQUFTHulTvUgcsQ2S+U0WidWu4=)
                          2: 3136372e3234392e3234352e302f32342d3234203d3e20323635313733.roa (hash: PnXpoQlILp8ZlGXHCrTJh5VRZ4dRdsX3+HByUad9ME8=)
                          3: 323830343a326263303a3a2f33352d3335203d3e20323635313733.roa (hash: nwGjS9/B5qEoHLXErGUrcv/IFcutfvHnP6bx4qn7DJo=)
                          4: 3136372e3234392e3234342e302f32342d3234203d3e20323635313733.roa (hash: RnnqFnuRTJSTCS6yQgDAL5p9xs898xsCSxUZMmK53N8=)
                          5: 3136372e3234392e3234362e302f32342d3234203d3e20323635313733.roa (hash: j9i7ueyvXacjavPPn9Wc1Dq/7mV86dMVB4jymotr/kk=)
                          6: 3136372e3234392e3234342e302f32332d3233203d3e20323635313733.roa (hash: 8a9jBsTXNdA+SDrz+TnIOLbY6+NfBu8aR7zHnFK8wlA=)
                          7: 3136372e3234392e3234372e302f32342d3234203d3e20323635313733.roa (hash: APQeuGOYT6pmdzs0b1zaFGujlKWI5aTsqYse+R+K6Yc=)
                          8: 323830343a326263303a3a2f33322d3332203d3e20323635313733.roa (hash: b8Wq1i8o4CPeAF9m65Zly/n5KxESsVSQEUNDFkSN5W0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.crl
                          rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 18:25:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:b8:32:ac:48:96:5f:52:66:30:16:0c:b1:0f:eb:b8:0d:d5:0b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849
        Validity
            Not Before: Aug 24 15:44:50 2026 GMT
            Not After : Aug 25 18:25:50 2026 GMT
        Subject: CN=05FB54D8E9749E124A44D17F2A6A1318EEDDEE09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:65:bb:29:1d:85:25:1d:01:04:d6:b6:88:12:
                    67:cb:9f:31:0a:98:43:a8:ef:ef:70:c9:6f:a4:c4:
                    0b:4a:5c:15:0f:a5:f9:f6:03:0f:90:17:8b:58:34:
                    75:bc:6c:2c:05:ea:1a:c7:af:66:d6:06:bc:e0:a1:
                    af:dd:68:71:d3:d7:f0:15:c9:8b:9f:8a:84:eb:99:
                    eb:3a:1b:0a:20:91:21:a1:36:31:fd:30:1b:4f:bb:
                    ed:b5:0d:03:70:77:86:82:e0:d8:ad:2a:cf:0f:87:
                    cd:6e:13:f5:52:db:cd:e6:d2:5b:a7:2d:8a:d9:e0:
                    60:de:88:e3:8e:7d:97:1f:37:c5:c4:2c:f8:88:7b:
                    2b:3f:69:95:86:8d:d2:3d:5b:19:a1:21:a7:a3:9f:
                    f7:fb:8d:17:11:43:21:b5:9e:49:92:2b:76:69:ff:
                    d7:d4:4f:ed:22:d6:e1:16:c6:03:a8:b3:32:48:05:
                    0d:27:1b:cc:05:f3:ee:73:e6:0a:90:68:1c:0f:05:
                    cd:66:c6:13:5c:dc:59:1f:a6:68:cd:0e:51:1b:e8:
                    a4:e5:6b:b4:40:5b:8d:6b:d9:11:83:a2:39:5d:fa:
                    11:a5:27:48:11:81:39:aa:af:23:22:4d:21:56:a3:
                    b8:75:a3:00:0c:2d:1c:ab:fa:bb:bb:52:4f:cb:ce:
                    9b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:FB:54:D8:E9:74:9E:12:4A:44:D1:7F:2A:6A:13:18:EE:DD:EE:09
            X509v3 Authority Key Identifier:
                keyid:BA:D4:DC:02:B3:E6:1B:B7:35:8C:5D:0C:DD:45:3B:E3:B4:0C:B8:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:86:68:6c:ae:e4:b3:b6:69:db:b6:be:05:94:a9:79:5f:bd:
         7d:89:e5:c9:35:65:e9:1f:65:a7:33:63:3e:6d:69:e0:ce:ea:
         89:86:35:05:36:15:f8:89:b7:ca:63:2c:b4:8a:78:fc:f5:2b:
         55:63:ba:22:fa:c9:5c:64:94:b2:67:15:62:85:fd:f2:65:2b:
         4b:dd:c4:22:1e:3b:92:9b:72:9e:5f:02:f5:42:69:58:16:b0:
         9c:7f:26:03:07:a0:2c:19:8e:2d:ea:6c:bd:0b:a6:da:3a:84:
         ec:8a:b4:e4:84:ba:a4:11:1b:8f:4f:da:33:fa:ea:66:9f:c8:
         cd:c4:b9:a9:ad:d4:cf:60:f0:03:e5:dc:f1:29:17:03:a6:2b:
         99:12:13:2e:61:0f:1f:8c:34:cb:9f:b8:0a:fd:ef:e2:17:6d:
         ae:31:0e:55:73:81:a1:6f:fb:f1:c0:da:ac:82:0e:90:1d:76:
         c1:87:6a:63:9d:cc:47:dc:60:bc:49:c7:6e:9c:25:0e:8a:72:
         9d:4a:c4:c9:80:22:d1:b0:ba:b5:e5:6d:2f:14:ef:32:dc:be:
         37:3d:33:10:02:26:62:a2:77:9a:e7:7f:0f:fa:76:f6:32:11:
         96:51:80:e4:5d:42:af:26:8d:a4:9c:b6:e6:1f:22:ef:e3:59:
         f0:e0:eb:37
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURbgyrEiWX1JmMBYMsQ/ruA3VC6kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFENERDMDJCM0U2MUJCNzM1OEM1RDBDREQ0NTNCRTNC
NDBDQjg0OTAeFw0yNjA4MjQxNTQ0NTBaFw0yNjA4MjUxODI1NTBaMDMxMTAvBgNV
BAMTKDA1RkI1NEQ4RTk3NDlFMTI0QTQ0RDE3RjJBNkExMzE4RUVEREVFMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuZbspHYUlHQEE1raIEmfLnzEK
mEOo7+9wyW+kxAtKXBUPpfn2Aw+QF4tYNHW8bCwF6hrHr2bWBrzgoa/daHHT1/AV
yYufioTrmes6GwogkSGhNjH9MBtPu+21DQNwd4aC4NitKs8Ph81uE/VS283m0lun
LYrZ4GDeiOOOfZcfN8XELPiIeys/aZWGjdI9WxmhIaejn/f7jRcRQyG1nkmSK3Zp
/9fUT+0i1uEWxgOoszJIBQ0nG8wF8+5z5gqQaBwPBc1mxhNc3FkfpmjNDlEb6KTl
a7RAW41r2RGDojld+hGlJ0gRgTmqryMiTSFWo7h1owAMLRyr+ru7Uk/LzpspAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUBftU2Ol0nhJKRNF/KmoTGO7d7gkwHwYDVR0j
BBgwFoAUutTcArPmG7c1jF0M3UU747QMuEkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEJoZnZLZ0hwTWVoRVg3RFNucUtXelpoNlRCV1NhNXlzRFFLU1lVM2F1
cUUvMC9CQUQ0REMwMkIzRTYxQkI3MzU4QzVEMENERDQ1M0JFM0I0MENCODQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBRDREQzAyQjNFNjFCQjcz
NThDNUQwQ0RENDUzQkUzQjQwQ0I4NDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SEJoZnZLZ0hwTWVoRVg3RFNucUtXelpoNlRCV1NhNXlzRFFLU1lVM2F1cUUvMC9C
QUQ0REMwMkIzRTYxQkI3MzU4QzVEMENERDQ1M0JFM0I0MENCODQ5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfIZobK7ks7Zp27a+BZSpeV+9fYnlyTVl6R9lpzNjPm1p4M7qiYY1BTYV+Im3
ymMstIp4/PUrVWO6IvrJXGSUsmcVYoX98mUrS93EIh47kptynl8C9UJpWBawnH8m
AwegLBmOLepsvQum2jqE7Iq05IS6pBEbj0/aM/rqZp/IzcS5qa3Uz2DwA+Xc8SkX
A6YrmRITLmEPH4w0y5+4Cv3v4hdtrjEOVXOBoW/78cDarIIOkB12wYdqY53MR9xg
vEnHbpwlDopynUrEyYAi0bC6teVtLxTvMty+Nz0zEAImYqJ3mud/D/p29jIRllGA
5F1CryaNpJy25h8i7+NZ8ODrNw==
-----END CERTIFICATE-----
Generated at Mon Aug 24 18:39:39 2026 by rpki-client