Error: rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.mft
File:                     48EA1B42F1661A0EB03B245D47205E5220A51B65.mft (raw, json)
Hash identifier:          zzpV5aZ0mgOe8k3UngFcxsFU2o7ul5xhvPidA2RrOSo=
Subject key identifier:   3D:76:7F:6D:41:E1:63:D9:BD:07:27:A1:13:8B:55:8B:82:43:45:E9
Authority key identifier: 48:EA:1B:42:F1:66:1A:0E:B0:3B:24:5D:47:20:5E:52:20:A5:1B:65
Certificate issuer:       /CN=48EA1B42F1661A0EB03B245D47205E5220A51B65
Certificate serial:       6B374BE66F29FB2D2749266CC39BBA22547CF1C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.mft
Manifest number:          0482
Signing time:             Sun 23 Aug 2026 09:44:44 +0000
Manifest this update:     Sun 23 Aug 2026 09:39:44 +0000
Manifest next update:     Mon 24 Aug 2026 10:56:44 +0000
Files and hashes:         1: 48EA1B42F1661A0EB03B245D47205E5220A51B65.crl (hash: XB/GVY5BjXO95ohTeXARiZbzI4JyLCJPPt9OAUKxK14=)
                          2: 34352e3233362e3139362e302f32322d3232203d3e20323638323631.roa (hash: oka1py52Ubkft0HyVyy3TssVuDg8vM1+GBo0BALSOGc=)
                          3: 34352e3233362e3139372e302f32342d3234203d3e20323638323631.roa (hash: FQHx0WWnTvs1iIOYArYfudqrVh5kqioRWQXIUsiTBpo=)
                          4: 34352e3233362e3139382e302f32342d3234203d3e20323638323631.roa (hash: 21wJQt2AmFOLJHnvJd9Lv062apSOfABjgiI2k1PL0F4=)
                          5: 34352e3233362e3139362e302f32332d3233203d3e20323638323631.roa (hash: iw691QVPBY1SEl4XvhxUMKgpLfZBexvJgIl97qYgdBw=)
                          6: 34352e3233362e3139392e302f32342d3234203d3e20323638323631.roa (hash: AKlCOqgNSI/7TxdI2/SmVXO2ih6Iv8Y+iyazUXVD/oI=)
                          7: 323830343a346537303a383030303a3a2f33332d3333203d3e20323638323631.roa (hash: dOpS+guN8TeRg2aYfo22h1ZbFeA3yFjlimkbo7C0YJs=)
                          8: 323830343a346537303a3a2f33332d3333203d3e20323638323631.roa (hash: 6gB7nDMAVpvfAEnyEMcThuBwMIFUeluj0Y0GrPYQI28=)
                          9: 34352e3233362e3139362e302f32342d3234203d3e20323638323631.roa (hash: dlMTNzoJ7RH0fc/0wu35lEibtsE+IvJYPQINZ+J2oso=)
                          10: 323830343a346537303a643030303a3a2f33362d3438203d3e20323638323631.roa (hash: JnUtK9PWnphckpV01iVgI5+A+WSa83zroJMq/EO6K3E=)
                          11: 323830343a346537303a3a2f33322d3332203d3e20323638323631.roa (hash: aFcYdJndS4y3kWfNiOwKfSA/ukqPd7ONlWLAw/xLqvw=)
                          12: 323830343a346537303a666666303a3a2f34342d3434203d3e20323638323631.roa (hash: G3LSwfoNn42eiC4uIcKdnRaLA0pug4gPB1JUvpeVn8k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl
                          rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 10:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:37:4b:e6:6f:29:fb:2d:27:49:26:6c:c3:9b:ba:22:54:7c:f1:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48EA1B42F1661A0EB03B245D47205E5220A51B65
        Validity
            Not Before: Aug 23 09:39:44 2026 GMT
            Not After : Aug 24 10:56:44 2026 GMT
        Subject: CN=3D767F6D41E163D9BD0727A1138B558B824345E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:52:3b:e1:7f:fe:fd:16:2a:86:7c:ab:61:03:
                    ce:2a:5f:b2:c6:d7:aa:6e:61:44:7d:5a:d6:ff:aa:
                    cc:e5:0d:17:48:be:95:4d:df:c8:42:14:f5:7c:c3:
                    e7:49:c4:ab:e8:a6:cb:3a:30:04:4e:90:01:28:e7:
                    9c:42:e6:a8:9b:31:97:37:58:79:22:0d:b8:e8:66:
                    29:14:d9:e7:b5:aa:e9:86:ab:ea:f0:e9:c6:11:c6:
                    d9:e9:af:61:ce:6e:38:16:9d:bd:33:b7:0d:83:96:
                    45:2c:b8:ba:d1:b0:f0:6c:f2:15:d5:be:ea:36:98:
                    cb:4f:ae:e3:09:c0:45:b7:a3:1c:65:14:80:26:a3:
                    3b:91:23:0d:10:45:33:4f:21:6d:e9:5f:43:f8:c5:
                    c3:6a:46:6d:b0:21:c8:0d:64:18:e5:89:9f:d1:4c:
                    9f:33:5c:e2:45:56:3b:ef:e3:c2:e3:a4:02:b8:dc:
                    30:04:84:8a:ce:69:a4:84:63:17:21:43:30:95:5b:
                    19:9b:75:6f:cd:97:84:6f:e6:17:53:17:74:e7:d3:
                    9c:5d:36:75:1b:cd:c3:37:a9:0f:df:e4:94:e1:1c:
                    d1:56:da:30:51:dc:35:35:46:ad:fd:49:c1:8e:50:
                    63:49:c3:21:7e:99:e7:b4:a6:10:09:d3:26:6c:64:
                    bd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:76:7F:6D:41:E1:63:D9:BD:07:27:A1:13:8B:55:8B:82:43:45:E9
            X509v3 Authority Key Identifier:
                keyid:48:EA:1B:42:F1:66:1A:0E:B0:3B:24:5D:47:20:5E:52:20:A5:1B:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:4e:50:5c:e1:c6:a5:bd:2c:5d:f7:e9:2a:21:33:d2:9e:7a:
         07:17:d6:f9:4f:5a:18:b9:87:e5:02:7e:5c:69:08:4f:e2:99:
         32:0a:be:fb:eb:b6:ce:8d:bf:72:06:d0:a4:dc:5a:0d:82:25:
         bd:48:e7:67:e1:8e:fb:b5:91:ea:b5:e4:b3:3c:e6:5d:25:70:
         f3:7b:ee:df:66:ce:7e:aa:a9:f8:fc:db:b1:8e:b1:83:ba:49:
         3a:c8:13:38:75:76:ee:68:fa:20:60:38:c3:cf:7d:d9:09:87:
         90:6a:d0:eb:51:af:99:d5:63:bb:98:0c:97:98:8c:f3:97:4a:
         16:51:7a:5c:76:94:9e:19:c6:9d:50:21:2a:5a:4b:c7:45:bb:
         07:27:d3:4f:d8:17:d4:50:33:93:ce:53:6a:12:bc:47:c3:28:
         1e:83:ca:d9:1a:2e:ab:6b:05:7c:ad:3f:f1:eb:57:bc:34:83:
         2a:4f:58:91:70:7d:b9:48:eb:ba:b0:7e:9a:30:65:9e:ab:72:
         16:5d:36:b4:5e:1b:7d:66:51:aa:d5:e0:d9:7b:9b:ff:84:4c:
         71:88:71:2f:2f:2a:dc:a3:f9:79:c9:39:1e:45:e6:ca:45:cb:
         5e:9f:42:9a:44:1e:59:36:de:56:c9:8d:dd:2d:45:1f:57:53:
         de:bf:ff:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 22:18:15 2026 by rpki-client