Error: rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft
File:                     B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft (raw, json)
Hash identifier:          Ff4DGcDKGCL5j2XC2m9laL8qNFYCFd94XlAE6efeR14=
Subject key identifier:   31:5F:EB:7B:77:08:13:92:B8:34:F5:7F:14:CA:0D:07:04:16:81:7E
Authority key identifier: B5:FC:5F:08:B8:C4:86:40:13:DC:3A:4C:A4:7C:22:00:B3:C2:B8:19
Certificate issuer:       /CN=B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819
Certificate serial:       430F8E57D99C1582B0C5A041BCA414A6734E7830
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft
Manifest number:          04EA
Signing time:             Sun 01 Nov 2026 22:30:02 +0000
Manifest this update:     Sun 01 Nov 2026 22:25:02 +0000
Manifest next update:     Tue 03 Nov 2026 02:10:02 +0000
Files and hashes:         1: B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl (hash: PNk49Iff/s6PEQoVkT3n3a/ZsmwFHYvZPbjplUVj26M=)
                          2: 323830343a333264343a34313a3a2f34382d3438203d3e20323635313030.roa (hash: Cp3dbohJVcqt37sfTUoMJ3E+bdUhg84eKNROBpdrawk=)
                          3: 323830343a333264343a383030303a3a2f33332d3333203d3e20323635313030.roa (hash: zQQXjp3mj9Ro+jtHpOapxa4PEYrJqPPs6DpcZJN+5E4=)
                          4: 323830343a333264343a3a2f33332d3436203d3e20323635313030.roa (hash: DP7VMVTULVPm/t4uYReoBaIU42700EU4VYLJ72yqCDM=)
                          5: 323830343a333264343a34303a3a2f34382d3438203d3e20323635313030.roa (hash: c9x/IixrLA46R9oqOnvvu1Jek/n6fhR07K83yyiVRus=)
                          6: 323830343a333264343a3a2f33322d3332203d3e20323635313030.roa (hash: Q9KP5wCh+ZPDTItZbChYfaToBd4KkV1aPEf2axonbTk=)
                          7: 3137302e3235342e38302e302f32322d3234203d3e20323635313030.roa (hash: rjzLK3OVuqaSmw/wNvoff+GpB+z6iVTAM2YCsZN8qSY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl
                          rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 02:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:0f:8e:57:d9:9c:15:82:b0:c5:a0:41:bc:a4:14:a6:73:4e:78:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819
        Validity
            Not Before: Nov  1 22:25:02 2026 GMT
            Not After : Nov  3 02:10:02 2026 GMT
        Subject: CN=315FEB7B77081392B834F57F14CA0D070416817E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:db:3c:e5:a2:b7:02:16:01:84:1d:c3:e1:22:
                    4e:91:c9:b4:b8:77:66:0f:a4:9c:38:00:48:77:e1:
                    5e:e9:65:b8:e8:44:8f:a3:6d:5b:38:8c:e6:15:b6:
                    4e:da:20:bc:c5:6f:25:8e:ff:13:cb:5d:5d:f6:04:
                    64:f4:f2:13:98:31:17:c6:fe:a9:5f:e8:f9:58:63:
                    3f:8e:76:a3:47:77:1d:4c:30:87:f3:28:75:b9:f7:
                    ad:72:5e:8d:09:7b:21:0e:10:cb:4e:4d:20:ee:dc:
                    7d:89:16:28:25:36:e3:f3:8b:64:21:ca:af:40:17:
                    da:1c:45:97:a9:8e:5d:9f:ab:6f:08:2f:e0:3b:e1:
                    c7:e5:87:71:46:75:d2:9f:a3:17:3d:0b:79:3a:61:
                    e5:02:42:a6:ab:0e:45:f0:16:11:f3:d1:94:68:e2:
                    f7:f9:47:b2:b8:1f:11:39:d2:02:70:f0:5e:3a:35:
                    88:bf:5b:ea:61:51:d5:15:d1:bc:61:08:6a:30:89:
                    dd:69:5c:8b:85:26:cf:f3:c8:6c:1c:78:63:9d:78:
                    36:6c:c8:00:8d:86:76:fd:ed:25:6b:29:5b:ca:a0:
                    6b:bb:4d:43:e9:e7:6e:c9:84:fa:20:92:67:a9:b1:
                    39:90:ec:29:88:33:a1:41:87:d2:35:8a:b8:37:23:
                    17:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:5F:EB:7B:77:08:13:92:B8:34:F5:7F:14:CA:0D:07:04:16:81:7E
            X509v3 Authority Key Identifier:
                keyid:B5:FC:5F:08:B8:C4:86:40:13:DC:3A:4C:A4:7C:22:00:B3:C2:B8:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:65:72:76:40:38:90:c9:ec:57:f2:f4:0c:9c:65:b1:5f:c2:
         50:9e:51:a9:f4:7b:38:8b:77:89:67:2c:ac:3a:20:d1:3c:23:
         a1:b8:9f:df:2e:7e:b7:f3:da:a9:01:e0:80:98:fa:cc:ac:fe:
         9b:7e:f0:e3:60:9a:d0:c9:66:89:13:2c:3c:d3:55:76:61:32:
         99:23:e0:49:19:64:84:88:58:46:00:13:c2:a6:d0:57:2e:79:
         7b:89:fb:f1:91:41:22:c3:9b:3c:f5:a2:35:a5:ab:0e:98:fd:
         36:94:44:38:f0:6e:be:90:3f:e6:b0:ee:02:b6:ba:86:d1:bf:
         1a:21:3d:6a:3c:5c:e9:09:0c:77:ab:3a:4c:ae:c8:ff:5a:39:
         54:06:5f:17:90:11:20:7f:50:e8:d1:51:59:f8:e8:ba:43:2d:
         1d:2b:e0:3b:90:41:5a:7f:38:34:4c:91:a8:9d:a2:a6:d5:d6:
         05:14:99:52:ee:2a:ce:e5:ac:58:f1:23:51:7f:b6:ed:26:1b:
         a3:44:3d:85:f8:d8:97:16:06:84:0c:33:28:b3:8c:44:6f:8f:
         57:4d:27:ac:48:d3:fe:24:d6:5b:a3:a6:c3:91:f3:46:32:29:
         d9:82:27:5e:5b:f5:00:f1:ad:95:4a:a1:39:9c:fd:88:ad:6f:
         55:8b:76:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 10:01:55 2026 by rpki-client