Error: rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.mft
File:                     D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.mft (raw, json)
Hash identifier:          hiG7F5f6QldQiIoS/Pq4KK661gWNFcQHqDe/cW2gZ6c=
Subject key identifier:   6C:1E:D8:53:36:B9:FC:97:8E:B0:E7:4F:76:59:3F:1C:9E:C8:1F:87
Authority key identifier: D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28
Certificate issuer:       /CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
Certificate serial:       31825F85F8083F4101DBE1060A55248A98A52DEE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.mft
Manifest number:          052E
Signing time:             Sun 23 Aug 2026 16:00:01 +0000
Manifest this update:     Sun 23 Aug 2026 15:55:01 +0000
Manifest next update:     Mon 24 Aug 2026 16:00:01 +0000
Files and hashes:         1: 3138372e36382e302e302f31342d3234203d3e203232303835.roa (hash: N0HUusRKQNTynpisUd8jUCrj47heopu1WU3rgi8NePM=)
                          2: D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl (hash: idYZHbNDPIrj+CtmtXW7Kl23tq6dfvhdpSUJUdYGpoY=)
                          3: 3138372e32342e302e302f31342d3234203d3e203232303835.roa (hash: 5jkgGv6GO8KL+CHi5SxSGom/qHen9JoDabkReP2Fpeo=)
                          4: 323830343a3338383a3a2f33302d3438203d3e203232303835.roa (hash: QX0lp3kEhKWBLR0gz1flhphIY1S+5hSwuC+kdewoYkY=)
                          5: 3137372e35362e302e302f31342d3234203d3e203232303835.roa (hash: V4Ow867P6EEwxrNICCtSxwWx3AHySgC+blz8vIJVnlc=)
                          6: 3139302e3130392e38342e302f32322d3234203d3e203232303835.roa (hash: uVUJ+OAirYepdAuIx8dViMHfFEODYvhQWYUJ5G9bbrQ=)
                          7: 3138392e39322e302e302f31342d3234203d3e203232303835.roa (hash: K1r3QzZCwfr3AQg7T68wnF6Q6VzNFLWx7rDAMle0rL4=)
                          8: 3230302e3134362e3132382e302f31382d3234203d3e203237363532.roa (hash: u+SMsbb34qpFIvQJYA6mEu94p/eDx3pHcGA3c7zgNy0=)
                          9: 3137392e3234302e302e302f31342d3234203d3e203232303835.roa (hash: HCiBNgDPit+VDxe1+XihleE6/GhW1mXIDVH7SvDSy0c=)
                          10: 3230312e37312e36342e302f31382d3234203d3e203237363532.roa (hash: E25DmfEKyRYSubgkB3HE+jBmhe8dE/IB55Lvqo8IsEI=)
                          11: 3230312e32332e3136302e302f31392d3234203d3e203232303835.roa (hash: LltJT2bT9zBM64u1pwWOL7ywyywl1tXdGx21VRSgY6c=)
                          12: 3139312e3234342e302e302f31342d3234203d3e203232303835.roa (hash: ixRHzWGfFZO69hrKmiDqh+nmE3QgaO0qgjiUTaH3Nhg=)
                          13: 3230302e3136392e3131322e302f32302d3234203d3e203232303835.roa (hash: rAAj9F8Xuvpv6ycPKlGrW6Tv7tbbWSvWMo4ee+IUal0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl
                          rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 16:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:82:5f:85:f8:08:3f:41:01:db:e1:06:0a:55:24:8a:98:a5:2d:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
        Validity
            Not Before: Aug 23 15:55:01 2026 GMT
            Not After : Aug 24 16:00:01 2026 GMT
        Subject: CN=3082010A0282010100A995F1501D756FD0AC0AA11A002E0B51298006260B9979BFB51E50013A4037F636382F78B406D48F3F3DBB631894B54F0EC1C5E4A14B25EDFF9855D032AAC0190503363AA70BDBA0A4FC2D941F14EF1E2A2484CB6C3E2AEBE315F6BCBEBA13089EE3075097D3C1D656B5781A42AF52C5E7728E0C0715C09EB59E45FE17A70725F7EFEF1B4CF86F209A9D95008C62796DE0F03C1D8D4710C7F4E40954C33BC35716675F8198E864D488AFE9DE2877321DEEA886CDE76C49993072BD4A9FE04BA62DB267307D82BD73E05CA27FB1AAB894A34AEA56F2A32FABDE407EF7703AB38DB26DF654A758A3D2F8FF139C3EC49AA3D4C8C9C72E7FE2A98D4B9E321095DFBD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:95:f1:50:1d:75:6f:d0:ac:0a:a1:1a:00:2e:
                    0b:51:29:80:06:26:0b:99:79:bf:b5:1e:50:01:3a:
                    40:37:f6:36:38:2f:78:b4:06:d4:8f:3f:3d:bb:63:
                    18:94:b5:4f:0e:c1:c5:e4:a1:4b:25:ed:ff:98:55:
                    d0:32:aa:c0:19:05:03:36:3a:a7:0b:db:a0:a4:fc:
                    2d:94:1f:14:ef:1e:2a:24:84:cb:6c:3e:2a:eb:e3:
                    15:f6:bc:be:ba:13:08:9e:e3:07:50:97:d3:c1:d6:
                    56:b5:78:1a:42:af:52:c5:e7:72:8e:0c:07:15:c0:
                    9e:b5:9e:45:fe:17:a7:07:25:f7:ef:ef:1b:4c:f8:
                    6f:20:9a:9d:95:00:8c:62:79:6d:e0:f0:3c:1d:8d:
                    47:10:c7:f4:e4:09:54:c3:3b:c3:57:16:67:5f:81:
                    98:e8:64:d4:88:af:e9:de:28:77:32:1d:ee:a8:86:
                    cd:e7:6c:49:99:30:72:bd:4a:9f:e0:4b:a6:2d:b2:
                    67:30:7d:82:bd:73:e0:5c:a2:7f:b1:aa:b8:94:a3:
                    4a:ea:56:f2:a3:2f:ab:de:40:7e:f7:70:3a:b3:8d:
                    b2:6d:f6:54:a7:58:a3:d2:f8:ff:13:9c:3e:c4:9a:
                    a3:d4:c8:c9:c7:2e:7f:e2:a9:8d:4b:9e:32:10:95:
                    df:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:1E:D8:53:36:B9:FC:97:8E:B0:E7:4F:76:59:3F:1C:9E:C8:1F:87
            X509v3 Authority Key Identifier:
                keyid:D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:9c:57:3b:f3:ac:1c:e2:1f:59:35:42:2c:fe:33:8f:84:4d:
         a2:43:37:62:dd:49:1f:a7:aa:a0:5b:f6:26:eb:42:34:93:9a:
         b4:b5:70:3d:f6:10:5c:24:db:b4:b7:df:6d:17:01:c5:58:66:
         1f:9e:48:a9:1d:f7:fe:d9:bf:ce:7f:e7:a3:9a:05:19:5c:2d:
         00:03:68:b8:90:17:43:e1:f4:70:2e:c9:6b:e6:d4:3a:d4:75:
         24:59:30:6a:93:d7:28:34:68:f1:29:0b:94:14:97:ec:ce:fb:
         58:55:25:74:90:c6:a4:64:b5:0d:e2:1b:3e:af:55:e0:bd:01:
         59:51:5e:9d:62:5b:d1:ae:7f:84:91:e0:1b:c9:1f:08:24:34:
         a4:c2:24:d7:8b:64:e3:08:f0:21:3d:f7:8a:39:5d:da:23:7b:
         6a:89:39:90:6d:f5:e3:e2:b5:9b:89:41:8b:08:8b:07:e3:ed:
         39:88:b4:f6:91:d4:48:a3:bf:6d:d9:85:72:a0:14:1b:06:ad:
         e0:18:24:a4:04:2e:3d:c9:2d:69:df:49:59:16:93:ce:44:d9:
         a5:00:8e:d5:fc:6e:00:f2:5b:21:da:1c:7b:5d:30:2a:88:ab:
         0c:1f:e4:17:ac:72:32:17:dd:4f:9b:21:e9:e8:5e:c9:d5:26:
         a3:9e:c5:ca
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUMYJfhfgIP0EB2+EGClUkipilLe4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDVFQkVFRkQ0NUEwRDkwQjVFNjBDRDhENEI0Mzg0MDk4
MzUzRTgyODAeFw0yNjA4MjMxNTU1MDFaFw0yNjA4MjQxNjAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTk5NUYxNTAxRDc1NkZEMEFD
MEFBMTFBMDAyRTBCNTEyOTgwMDYyNjBCOTk3OUJGQjUxRTUwMDEzQTQwMzdGNjM2
MzgyRjc4QjQwNkQ0OEYzRjNEQkI2MzE4OTRCNTRGMEVDMUM1RTRBMTRCMjVFREZG
OTg1NUQwMzJBQUMwMTkwNTAzMzYzQUE3MEJEQkEwQTRGQzJEOTQxRjE0RUYxRTJB
MjQ4NENCNkMzRTJBRUJFMzE1RjZCQ0JFQkExMzA4OUVFMzA3NTA5N0QzQzFENjU2
QjU3ODFBNDJBRjUyQzVFNzcyOEUwQzA3MTVDMDlFQjU5RTQ1RkUxN0E3MDcyNUY3
RUZFRjFCNENGODZGMjA5QTlEOTUwMDhDNjI3OTZERTBGMDNDMUQ4RDQ3MTBDN0Y0
RTQwOTU0QzMzQkMzNTcxNjY3NUY4MTk4RTg2NEQ0ODhBRkU5REUyODc3MzIxREVF
QTg4NkNERTc2QzQ5OTkzMDcyQkQ0QTlGRTA0QkE2MkRCMjY3MzA3RDgyQkQ3M0Uw
NUNBMjdGQjFBQUI4OTRBMzRBRUE1NkYyQTMyRkFCREU0MDdFRjc3MDNBQjM4REIy
NkRGNjU0QTc1OEEzRDJGOEZGMTM5QzNFQzQ5QUEzRDRDOEM5QzcyRTdGRTJBOThE
NEI5RTMyMTA5NURGQkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqZXxUB11b9CsCqEaAC4LUSmABiYLmXm/tR5QATpAN/Y2OC94tAbU
jz89u2MYlLVPDsHF5KFLJe3/mFXQMqrAGQUDNjqnC9ugpPwtlB8U7x4qJITLbD4q
6+MV9ry+uhMInuMHUJfTwdZWtXgaQq9SxedyjgwHFcCetZ5F/henByX37+8bTPhv
IJqdlQCMYnlt4PA8HY1HEMf05AlUwzvDVxZnX4GY6GTUiK/p3ih3Mh3uqIbN52xJ
mTByvUqf4EumLbJnMH2CvXPgXKJ/saq4lKNK6lbyoy+r3kB+93A6s42ybfZUp1ij
0vj/E5w+xJqj1MjJxy5/4qmNS54yEJXfvQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FGwe2FM2ufyXjrDnT3ZZPxyeyB+HMB8GA1UdIwQYMBaAFNXr7v1FoNkLXmDNjUtD
hAmDU+goMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hGWXFjckxWdjFKSld6
dlVGZ1I4cVp6cGlkTFFUdGtCa1haczZnZVFkdWllLzEvRDVFQkVFRkQ0NUEwRDkw
QjVFNjBDRDhENEI0Mzg0MDk4MzUzRTgyOC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9ENUVCRUVGRDQ1QTBEOTBCNUU2MENEOEQ0QjQzODQwOTgzNTNF
ODI4LmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hGWXFjckxWdjFKSld6dlVGZ1I4
cVp6cGlkTFFUdGtCa1haczZnZVFkdWllLzEvRDVFQkVFRkQ0NUEwRDkwQjVFNjBD
RDhENEI0Mzg0MDk4MzUzRTgyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIqcVzvzrBziH1k1Qiz+M4+E
TaJDN2LdSR+nqqBb9ibrQjSTmrS1cD32EFwk27S3320XAcVYZh+eSKkd9/7Zv85/
56OaBRlcLQADaLiQF0Ph9HAuyWvm1DrUdSRZMGqT1yg0aPEpC5QUl+zO+1hVJXSQ
xqRktQ3iGz6vVeC9AVlRXp1iW9Guf4SR4BvJHwgkNKTCJNeLZOMI8CE994o5Xdoj
e2qJOZBt9ePitZuJQYsIiwfj7TmItPaR1Eijv23ZhXKgFBsGreAYJKQELj3JLWnf
SVkWk85E2aUAjtX8bgDyWyHaHHtdMCqIqwwf5BescjIX3U+bIenoXsnVJqOexco=
-----END CERTIFICATE-----
Generated at Mon Aug 24 07:07:17 2026 by rpki-client