Error: rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
File:                     98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft (raw, json)
Hash identifier:          YQAFbo9v2tQV3jfnuuvWArCGLCObpKBUAdRzY3mMIio=
Subject key identifier:   A4:A4:9F:0A:6C:18:14:85:80:9C:15:A2:67:22:A5:D6:11:1B:06:9E
Authority key identifier: 98:D7:07:DA:0F:6D:72:1C:A9:05:6A:E0:B7:12:6E:DD:21:4A:D7:D5
Certificate issuer:       /CN=98D707DA0F6D721CA9056AE0B7126EDD214AD7D5
Certificate serial:       4830C0481D27CA4F8C234B8C661C2FAAE92D7266
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
Manifest number:          0482
Signing time:             Sun 23 Aug 2026 09:51:59 +0000
Manifest this update:     Sun 23 Aug 2026 09:46:59 +0000
Manifest next update:     Mon 24 Aug 2026 13:26:59 +0000
Files and hashes:         1: 34352e37302e34302e302f32322d3332203d3e20323637353436.roa (hash: aFrAdZ+heX1JwAjk9+yLnN++Dbt7GfogZYb5E5HDg3k=)
                          2: 3139312e3234312e38382e302f32312d3332203d3e20323637353436.roa (hash: MunMWcGE4HETc/fx/wWttkjb6NqvPHceVVID/y0HOao=)
                          3: 323830343a343331303a3a2f33322d313238203d3e20323637353436.roa (hash: dTA3boB0PEjWqE5HcDP10vdCzoKwoMf1WNjQhWymjFk=)
                          4: 34352e3136362e3231322e302f32322d3332203d3e20323637353436.roa (hash: mbA18wNYwlSwgf+rnxvU0zp+nQhkLa27TRyV/C7qbao=)
                          5: 98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl (hash: el5NR2cq9xj+25ZiNzXZBloUCgFcD4LAa/24jU8Ef1A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl
                          rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 13:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:30:c0:48:1d:27:ca:4f:8c:23:4b:8c:66:1c:2f:aa:e9:2d:72:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98D707DA0F6D721CA9056AE0B7126EDD214AD7D5
        Validity
            Not Before: Aug 23 09:46:59 2026 GMT
            Not After : Aug 24 13:26:59 2026 GMT
        Subject: CN=A4A49F0A6C181485809C15A26722A5D6111B069E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:92:2d:aa:df:c1:12:ef:f3:d8:59:52:4f:15:
                    b6:f6:76:97:fd:1f:99:3a:16:af:ab:46:5a:56:23:
                    69:8f:58:36:5b:d0:63:6f:5c:c7:37:15:d2:c0:96:
                    3e:58:e2:3d:87:c5:93:c4:f3:41:18:36:d4:02:68:
                    e6:f7:8a:f5:63:15:8a:8f:38:18:8f:ee:03:f3:f9:
                    54:20:9a:0f:d5:f6:ff:2d:d8:b9:e9:b7:fe:78:0a:
                    2e:ea:f4:f3:02:a6:42:ff:59:35:dd:4f:6f:0c:ab:
                    06:d9:26:b5:97:56:dc:cc:cc:58:91:73:1b:79:9d:
                    f4:45:30:10:e3:d9:b6:86:4e:68:51:36:42:08:0d:
                    80:b1:f7:d8:98:cb:ca:b8:fc:02:ab:d6:ef:60:d6:
                    d5:13:91:08:99:74:d0:58:fb:3e:e7:64:a5:77:30:
                    08:2d:da:69:f6:fb:02:92:84:dd:c2:0b:88:2a:99:
                    c4:5c:f4:c3:02:5a:70:30:89:01:c5:13:d1:3f:28:
                    65:6d:43:50:71:b6:50:cc:89:70:6b:30:e8:92:ce:
                    6e:f1:bd:d6:ca:72:ad:89:55:56:8d:1a:6d:fa:a3:
                    98:57:52:56:68:16:ed:a7:2a:c2:f5:1c:87:4b:fc:
                    fd:2f:80:2a:e8:73:b4:b6:d1:ca:90:3e:25:13:6e:
                    ac:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A4:9F:0A:6C:18:14:85:80:9C:15:A2:67:22:A5:D6:11:1B:06:9E
            X509v3 Authority Key Identifier:
                keyid:98:D7:07:DA:0F:6D:72:1C:A9:05:6A:E0:B7:12:6E:DD:21:4A:D7:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:87:c5:b9:d7:c4:86:42:49:0a:0b:b4:63:77:10:8d:e3:36:
         9e:66:9f:49:6a:ab:be:cf:ba:1d:2e:ec:83:1a:09:39:7f:b7:
         92:b9:e4:8b:fe:59:0c:94:b6:98:a2:62:4c:9f:50:da:50:29:
         b3:f1:63:19:55:98:8d:80:92:80:5c:b6:c0:d7:d8:93:72:3f:
         9b:84:62:6a:09:47:39:03:3b:fa:36:f2:9d:de:97:28:66:2c:
         ca:12:67:aa:c0:e5:2e:00:41:30:e8:9f:f2:74:58:dc:1d:34:
         7b:2e:e5:63:5c:5d:f4:f1:73:35:1b:7b:c4:11:5f:40:0b:bb:
         26:d0:60:56:f8:9e:b3:fd:46:ea:24:ba:fb:57:56:19:31:f4:
         8a:5c:07:8a:1f:02:37:26:d3:1c:10:a4:47:e5:8a:f4:8a:3d:
         e5:b1:0f:ed:04:65:d3:14:e6:c0:3a:e8:ce:65:70:ea:a1:55:
         58:4b:25:f4:94:60:31:21:b1:1d:dc:d2:a9:32:02:09:42:99:
         d2:73:68:d0:f4:0c:11:ed:d3:fd:d0:c2:cc:81:98:18:54:0b:
         d5:73:39:b4:d7:e0:2e:f8:f8:b1:59:3e:49:54:d3:f5:2e:f1:
         64:41:52:dc:05:f9:e4:20:39:ad:42:99:c0:e6:8a:ae:ad:fe:
         82:56:bb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 12:09:59 2026 by rpki-client