Error: rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.mft
File:                     48EA1B42F1661A0EB03B245D47205E5220A51B65.mft (raw, json)
Hash identifier:          6Ueb/c8qAAU41SABcQIOVfpVfvFZ8VHHY5gbS7y5u8U=
Subject key identifier:   9E:F0:52:54:93:56:0B:B9:38:61:CF:89:6E:19:47:EE:15:22:07:9D
Authority key identifier: 48:EA:1B:42:F1:66:1A:0E:B0:3B:24:5D:47:20:5E:52:20:A5:1B:65
Certificate issuer:       /CN=48EA1B42F1661A0EB03B245D47205E5220A51B65
Certificate serial:       2D6C7F55063BAC5AE40D785DCF06A09F0176F5D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.mft
Manifest number:          04DC
Signing time:             Fri 30 Oct 2026 05:37:43 +0000
Manifest this update:     Fri 30 Oct 2026 05:32:43 +0000
Manifest next update:     Sat 31 Oct 2026 08:16:43 +0000
Files and hashes:         1: 48EA1B42F1661A0EB03B245D47205E5220A51B65.crl (hash: bJlbB7JSXIFLCRs8iR8BZlkMWIMl99bP4kOXrGViVT4=)
                          2: 323830343a346537303a643030303a3a2f33362d3438203d3e20323638323631.roa (hash: JnUtK9PWnphckpV01iVgI5+A+WSa83zroJMq/EO6K3E=)
                          3: 323830343a346537303a3a2f33322d3332203d3e20323638323631.roa (hash: aFcYdJndS4y3kWfNiOwKfSA/ukqPd7ONlWLAw/xLqvw=)
                          4: 34352e3233362e3139362e302f32332d3233203d3e20323638323631.roa (hash: iw691QVPBY1SEl4XvhxUMKgpLfZBexvJgIl97qYgdBw=)
                          5: 34352e3233362e3139362e302f32342d3234203d3e20323638323631.roa (hash: dlMTNzoJ7RH0fc/0wu35lEibtsE+IvJYPQINZ+J2oso=)
                          6: 34352e3233362e3139382e302f32342d3234203d3e20323638323631.roa (hash: 21wJQt2AmFOLJHnvJd9Lv062apSOfABjgiI2k1PL0F4=)
                          7: 323830343a346537303a666666303a3a2f34342d3434203d3e20323638323631.roa (hash: G3LSwfoNn42eiC4uIcKdnRaLA0pug4gPB1JUvpeVn8k=)
                          8: 323830343a346537303a383030303a3a2f33332d3333203d3e20323638323631.roa (hash: dOpS+guN8TeRg2aYfo22h1ZbFeA3yFjlimkbo7C0YJs=)
                          9: 34352e3233362e3139392e302f32342d3234203d3e20323638323631.roa (hash: AKlCOqgNSI/7TxdI2/SmVXO2ih6Iv8Y+iyazUXVD/oI=)
                          10: 34352e3233362e3139372e302f32342d3234203d3e20323638323631.roa (hash: FQHx0WWnTvs1iIOYArYfudqrVh5kqioRWQXIUsiTBpo=)
                          11: 34352e3233362e3139362e302f32322d3232203d3e20323638323631.roa (hash: oka1py52Ubkft0HyVyy3TssVuDg8vM1+GBo0BALSOGc=)
                          12: 323830343a346537303a3a2f33332d3333203d3e20323638323631.roa (hash: 6gB7nDMAVpvfAEnyEMcThuBwMIFUeluj0Y0GrPYQI28=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl
                          rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 08:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:6c:7f:55:06:3b:ac:5a:e4:0d:78:5d:cf:06:a0:9f:01:76:f5:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48EA1B42F1661A0EB03B245D47205E5220A51B65
        Validity
            Not Before: Oct 30 05:32:43 2026 GMT
            Not After : Oct 31 08:16:43 2026 GMT
        Subject: CN=9EF0525493560BB93861CF896E1947EE1522079D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f5:ae:f4:cf:51:c2:d5:a0:85:ff:4b:db:62:
                    12:bc:09:0f:ad:cc:35:f8:d6:4e:82:22:f4:21:9a:
                    6b:07:ab:83:71:48:7b:bc:22:a0:51:6a:4b:33:68:
                    da:8a:f9:f8:11:6e:33:a7:ca:dd:3a:76:cf:da:d4:
                    82:f6:14:a5:68:c7:c3:11:49:f7:ea:c1:47:e5:aa:
                    6a:15:a6:4d:b9:d0:61:c8:5e:eb:9f:82:f5:e7:49:
                    19:36:99:a3:ce:2d:a4:2e:d7:15:77:c7:49:f9:f2:
                    13:32:c7:7c:00:61:b4:ba:06:29:e0:d2:c2:4e:83:
                    f5:b9:1d:d7:d1:68:71:41:29:d2:cc:8d:cf:0a:16:
                    d9:2f:10:6f:c5:f3:dc:9d:98:2f:cd:c6:74:a8:1f:
                    cc:8e:e9:b9:67:16:51:67:da:5b:e9:88:f6:c7:75:
                    e9:53:05:9f:00:e0:25:cc:80:85:d8:de:f0:f5:03:
                    b6:96:9f:aa:81:43:3f:d2:fd:a7:43:88:35:67:a2:
                    58:29:33:0a:bb:c9:c4:84:0e:45:f5:e2:23:87:82:
                    16:f8:f0:4e:ab:2a:92:ba:76:cd:be:66:66:81:31:
                    27:cd:71:95:41:8f:1a:9c:ec:87:60:98:c3:fc:38:
                    90:05:2b:7e:10:d9:c4:d5:76:18:3f:fe:7f:ad:66:
                    b6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F0:52:54:93:56:0B:B9:38:61:CF:89:6E:19:47:EE:15:22:07:9D
            X509v3 Authority Key Identifier:
                keyid:48:EA:1B:42:F1:66:1A:0E:B0:3B:24:5D:47:20:5E:52:20:A5:1B:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:e5:09:d0:e4:61:68:cc:a3:7f:52:69:24:05:77:d3:bb:1a:
         b9:64:2f:20:32:43:28:35:fc:c8:32:38:52:f1:48:21:3f:d2:
         95:56:1e:6a:62:f0:5d:28:8e:db:80:60:f5:54:53:2f:1c:0e:
         ed:c6:88:4c:08:db:53:7e:a4:20:08:54:af:21:53:65:21:2a:
         d6:bd:59:04:2a:81:69:ce:61:cf:ae:56:ce:61:25:a2:06:ea:
         e3:fd:73:d3:a9:a4:39:3f:f1:32:37:ba:34:09:95:b2:30:d4:
         22:15:e9:bb:6b:87:44:7e:6e:9b:1d:0d:f3:70:62:c1:ca:27:
         90:46:8b:cb:ad:f6:e0:86:3b:bb:08:08:bb:e7:d2:96:ee:4c:
         a5:2a:b4:5a:7f:9c:cd:70:99:35:12:d9:9c:8a:ac:7b:01:7c:
         65:22:af:f4:61:2f:75:18:0a:86:15:f5:25:5d:3e:3f:89:3c:
         e6:df:4b:c5:61:72:86:c8:f7:05:c6:b9:a2:a6:68:da:fa:a5:
         5f:35:0c:18:c7:51:8d:5d:2f:d9:8c:eb:c3:d6:d5:3d:f3:49:
         00:4b:af:07:b6:61:08:21:6a:1e:d3:6d:8c:4f:a9:a4:c0:6d:
         7e:db:fa:b2:60:a7:2d:84:b1:cf:e4:7a:2f:43:0d:e8:4d:a0:
         20:4f:3b:58
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULWx/VQY7rFrkDXhdzwagnwF29dgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDhFQTFCNDJGMTY2MUEwRUIwM0IyNDVENDcyMDVFNTIy
MEE1MUI2NTAeFw0yNjEwMzAwNTMyNDNaFw0yNjEwMzEwODE2NDNaMDMxMTAvBgNV
BAMTKDlFRjA1MjU0OTM1NjBCQjkzODYxQ0Y4OTZFMTk0N0VFMTUyMjA3OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH9a70z1HC1aCF/0vbYhK8CQ+t
zDX41k6CIvQhmmsHq4NxSHu8IqBRakszaNqK+fgRbjOnyt06ds/a1IL2FKVox8MR
SffqwUflqmoVpk250GHIXuufgvXnSRk2maPOLaQu1xV3x0n58hMyx3wAYbS6Bing
0sJOg/W5HdfRaHFBKdLMjc8KFtkvEG/F89ydmC/NxnSoH8yO6blnFlFn2lvpiPbH
delTBZ8A4CXMgIXY3vD1A7aWn6qBQz/S/adDiDVnolgpMwq7ycSEDkX14iOHghb4
8E6rKpK6ds2+ZmaBMSfNcZVBjxqc7IdgmMP8OJAFK34Q2cTVdhg//n+tZrb7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUnvBSVJNWC7k4Yc+JbhlH7hUiB50wHwYDVR0j
BBgwFoAUSOobQvFmGg6wOyRdRyBeUiClG2UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFc1WHRucXJRckxTVmtUQzFObVZNTFVxUm9YU1VHbm4yTEJYNm5yNzU3
V2cvMS80OEVBMUI0MkYxNjYxQTBFQjAzQjI0NUQ0NzIwNUU1MjIwQTUxQjY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ4RUExQjQyRjE2NjFBMEVC
MDNCMjQ1RDQ3MjA1RTUyMjBBNTFCNjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SFc1WHRucXJRckxTVmtUQzFObVZNTFVxUm9YU1VHbm4yTEJYNm5yNzU3V2cvMS80
OEVBMUI0MkYxNjYxQTBFQjAzQjI0NUQ0NzIwNUU1MjIwQTUxQjY1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAueUJ0ORhaMyjf1JpJAV307sauWQvIDJDKDX8yDI4UvFIIT/SlVYeamLwXSiO
24Bg9VRTLxwO7caITAjbU36kIAhUryFTZSEq1r1ZBCqBac5hz65WzmElogbq4/1z
06mkOT/xMje6NAmVsjDUIhXpu2uHRH5umx0N83BiwconkEaLy6324IY7uwgIu+fS
lu5MpSq0Wn+czXCZNRLZnIqsewF8ZSKv9GEvdRgKhhX1JV0+P4k85t9LxWFyhsj3
Bca5oqZo2vqlXzUMGMdRjV0v2Yzrw9bVPfNJAEuvB7ZhCCFqHtNtjE+ppMBtftv6
smCnLYSxz+R6L0MN6E2gIE87WA==
-----END CERTIFICATE-----
Generated at Fri Oct 30 20:33:57 2026 by rpki-client