Error: rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.mft
File:                     48EA1B42F1661A0EB03B245D47205E5220A51B65.mft (raw, json)
Hash identifier:          sv98FuhxShJ5vGrW5POtVrdiuK+5t+RV6MOyJstKcOM=
Subject key identifier:   34:7C:B1:50:C5:DF:04:97:48:45:8B:C3:C2:4F:25:6B:CA:61:B6:F7
Authority key identifier: 48:EA:1B:42:F1:66:1A:0E:B0:3B:24:5D:47:20:5E:52:20:A5:1B:65
Certificate issuer:       /CN=48EA1B42F1661A0EB03B245D47205E5220A51B65
Certificate serial:       0C50F37325AF589016C0A25DE0F0A78AA6B392E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.mft
Manifest number:          04DD
Signing time:             Sat 31 Oct 2026 00:16:53 +0000
Manifest this update:     Sat 31 Oct 2026 00:11:53 +0000
Manifest next update:     Sun 01 Nov 2026 03:00:53 +0000
Files and hashes:         1: 34352e3233362e3139372e302f32342d3234203d3e20323638323631.roa (hash: FQHx0WWnTvs1iIOYArYfudqrVh5kqioRWQXIUsiTBpo=)
                          2: 323830343a346537303a666666303a3a2f34342d3434203d3e20323638323631.roa (hash: G3LSwfoNn42eiC4uIcKdnRaLA0pug4gPB1JUvpeVn8k=)
                          3: 34352e3233362e3139382e302f32342d3234203d3e20323638323631.roa (hash: 21wJQt2AmFOLJHnvJd9Lv062apSOfABjgiI2k1PL0F4=)
                          4: 48EA1B42F1661A0EB03B245D47205E5220A51B65.crl (hash: 8Mf1ZnP2APR4Oj8OLuny0G8umzPLXhbCqIBHvL+RbmY=)
                          5: 323830343a346537303a3a2f33322d3332203d3e20323638323631.roa (hash: aFcYdJndS4y3kWfNiOwKfSA/ukqPd7ONlWLAw/xLqvw=)
                          6: 34352e3233362e3139392e302f32342d3234203d3e20323638323631.roa (hash: AKlCOqgNSI/7TxdI2/SmVXO2ih6Iv8Y+iyazUXVD/oI=)
                          7: 323830343a346537303a643030303a3a2f33362d3438203d3e20323638323631.roa (hash: JnUtK9PWnphckpV01iVgI5+A+WSa83zroJMq/EO6K3E=)
                          8: 34352e3233362e3139362e302f32322d3232203d3e20323638323631.roa (hash: oka1py52Ubkft0HyVyy3TssVuDg8vM1+GBo0BALSOGc=)
                          9: 323830343a346537303a383030303a3a2f33332d3333203d3e20323638323631.roa (hash: dOpS+guN8TeRg2aYfo22h1ZbFeA3yFjlimkbo7C0YJs=)
                          10: 323830343a346537303a3a2f33332d3333203d3e20323638323631.roa (hash: 6gB7nDMAVpvfAEnyEMcThuBwMIFUeluj0Y0GrPYQI28=)
                          11: 34352e3233362e3139362e302f32342d3234203d3e20323638323631.roa (hash: dlMTNzoJ7RH0fc/0wu35lEibtsE+IvJYPQINZ+J2oso=)
                          12: 34352e3233362e3139362e302f32332d3233203d3e20323638323631.roa (hash: iw691QVPBY1SEl4XvhxUMKgpLfZBexvJgIl97qYgdBw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl
                          rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 03:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:50:f3:73:25:af:58:90:16:c0:a2:5d:e0:f0:a7:8a:a6:b3:92:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48EA1B42F1661A0EB03B245D47205E5220A51B65
        Validity
            Not Before: Oct 31 00:11:53 2026 GMT
            Not After : Nov  1 03:00:53 2026 GMT
        Subject: CN=347CB150C5DF049748458BC3C24F256BCA61B6F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ef:3c:d6:7a:2f:35:4a:9c:98:0c:50:6c:19:
                    52:68:5f:cf:70:27:5b:96:6b:74:11:82:88:8c:34:
                    b5:3f:83:08:0a:e1:79:a8:b1:16:d3:5c:bb:a2:5a:
                    25:5c:49:ae:57:7b:2f:75:16:60:f4:eb:90:99:b8:
                    15:26:0c:cb:93:eb:e8:12:9a:37:ff:54:d0:89:07:
                    7f:ef:35:5b:34:2f:76:3c:54:94:9b:fb:8d:12:d2:
                    d9:3b:b6:06:f0:96:fb:3a:57:1d:73:77:d3:e3:17:
                    4f:44:6c:d8:3d:98:25:ef:b1:6f:20:69:0b:76:3a:
                    fa:b0:a1:0b:a7:1f:13:74:51:c2:0f:76:11:5a:40:
                    6d:01:fb:af:a1:62:e5:e2:23:1a:25:e0:2a:2b:d2:
                    b5:68:da:68:e0:4c:68:fe:8c:fc:a0:57:4c:6c:0b:
                    50:6a:c0:e3:50:0c:f8:c9:9d:e5:5f:a6:ec:51:a2:
                    16:63:36:1c:f5:69:9a:4b:0b:3b:89:4b:37:e7:6f:
                    8f:61:7e:1c:50:2d:44:8a:51:60:43:1c:a0:c4:29:
                    fc:15:5a:05:23:b8:72:0c:e3:90:9e:0b:02:4b:32:
                    19:bd:bc:e3:58:65:fc:93:5a:e9:86:c8:69:c6:b5:
                    f1:f4:14:29:65:98:a0:65:fd:61:14:99:d5:83:04:
                    9c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7C:B1:50:C5:DF:04:97:48:45:8B:C3:C2:4F:25:6B:CA:61:B6:F7
            X509v3 Authority Key Identifier:
                keyid:48:EA:1B:42:F1:66:1A:0E:B0:3B:24:5D:47:20:5E:52:20:A5:1B:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:32:0f:a4:19:92:21:a6:d1:0a:40:29:ab:83:0f:9a:19:30:
         c5:b2:3a:a0:ac:eb:33:ef:61:af:64:f6:9a:92:66:e8:d9:3a:
         e1:3f:2b:a0:98:36:dc:ef:d1:cb:85:65:e7:91:ab:76:c6:3d:
         cd:eb:6e:5b:16:19:17:99:bc:25:5c:56:19:4f:9f:e7:28:4d:
         7e:26:16:29:c3:3d:3b:67:d5:64:26:25:20:bf:52:3d:9f:8d:
         a9:9d:60:98:45:b4:ef:ac:0b:b8:75:82:b5:da:2c:bc:19:ee:
         23:e6:50:5c:05:f7:4b:68:49:75:02:27:6e:61:89:e9:14:92:
         8f:4d:2b:b0:f9:4e:02:1e:3a:ac:e7:34:93:dc:bd:81:a2:3a:
         eb:18:c3:3a:cf:aa:35:0d:fe:78:32:2a:d7:ac:b1:d6:06:2e:
         f2:e6:dd:66:47:75:94:69:99:97:f3:90:ba:f7:f0:ff:55:39:
         63:3d:84:02:1b:49:35:af:71:a2:53:ad:28:0e:42:f2:56:cb:
         68:2c:fb:e2:c9:b0:ba:b5:a3:df:26:ad:d2:24:99:55:c1:08:
         db:6c:c9:3e:bc:c6:f9:2d:11:eb:c6:55:56:ce:33:fa:a0:f6:
         9d:2c:26:fc:dd:0b:ce:b9:e1:b7:11:a1:b5:73:b5:ef:68:a6:
         92:b3:25:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 20:01:43 2026 by rpki-client