Error: rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft
File:                     B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft (raw, json)
Hash identifier:          mkQmBLg46ESXHU6rd0Fn6Epb02b6+0XwrkiIgrI4pxI=
Subject key identifier:   EF:BA:49:67:A3:E2:B9:31:11:14:87:82:F8:A3:8C:8B:F4:D7:5A:23
Authority key identifier: B5:FC:5F:08:B8:C4:86:40:13:DC:3A:4C:A4:7C:22:00:B3:C2:B8:19
Certificate issuer:       /CN=B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819
Certificate serial:       5A1B462F17397CACCF5E55602145E736ABE9A067
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft
Manifest number:          048B
Signing time:             Sat 22 Aug 2026 22:30:02 +0000
Manifest this update:     Sat 22 Aug 2026 22:25:02 +0000
Manifest next update:     Mon 24 Aug 2026 00:54:02 +0000
Files and hashes:         1: 323830343a333264343a34303a3a2f34382d3438203d3e20323635313030.roa (hash: c9x/IixrLA46R9oqOnvvu1Jek/n6fhR07K83yyiVRus=)
                          2: 323830343a333264343a34313a3a2f34382d3438203d3e20323635313030.roa (hash: Cp3dbohJVcqt37sfTUoMJ3E+bdUhg84eKNROBpdrawk=)
                          3: 323830343a333264343a383030303a3a2f33332d3333203d3e20323635313030.roa (hash: zQQXjp3mj9Ro+jtHpOapxa4PEYrJqPPs6DpcZJN+5E4=)
                          4: 3137302e3235342e38302e302f32322d3234203d3e20323635313030.roa (hash: rjzLK3OVuqaSmw/wNvoff+GpB+z6iVTAM2YCsZN8qSY=)
                          5: 323830343a333264343a3a2f33322d3332203d3e20323635313030.roa (hash: Q9KP5wCh+ZPDTItZbChYfaToBd4KkV1aPEf2axonbTk=)
                          6: B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl (hash: 7459xBzbEwqd4F+uRiyq6DMwX+fcomP22sHaRUv38p0=)
                          7: 323830343a333264343a3a2f33332d3436203d3e20323635313030.roa (hash: 5JMhZ4cEqX3OysQlgCAgv6BovY6KpEJinhAlGzZkJNc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl
                          rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 00:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:1b:46:2f:17:39:7c:ac:cf:5e:55:60:21:45:e7:36:ab:e9:a0:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819
        Validity
            Not Before: Aug 22 22:25:02 2026 GMT
            Not After : Aug 24 00:54:02 2026 GMT
        Subject: CN=EFBA4967A3E2B93111148782F8A38C8BF4D75A23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e1:0f:2a:b0:f4:af:03:f0:8c:0f:b6:05:d4:
                    4f:ba:23:41:5b:d2:5f:d4:b3:ab:c4:3a:40:09:d6:
                    1f:c0:55:ad:c1:08:30:e2:9d:89:8f:7d:65:a0:be:
                    3e:e5:11:02:95:93:46:29:80:38:83:57:2e:77:5b:
                    ee:1e:0e:a9:97:69:7e:6d:ca:f9:9d:35:37:4b:7d:
                    3f:dd:4f:3f:90:19:50:db:65:14:cb:0b:67:6f:8d:
                    9d:c8:13:fe:f8:2c:2b:6d:bd:ae:7d:eb:a9:eb:39:
                    e1:c5:69:7a:07:8b:70:31:db:91:92:19:63:a0:5b:
                    45:f2:c1:19:e5:ab:d4:0c:09:a5:2e:50:db:9b:43:
                    cf:94:b4:d3:f3:e1:bb:1b:31:b3:8e:e7:c8:21:d5:
                    79:62:d5:63:c6:10:59:b3:5d:13:b6:76:00:92:af:
                    69:26:71:36:96:78:07:b6:45:16:d0:71:dd:e7:dd:
                    14:0c:9e:aa:c5:db:30:f9:8c:7c:cd:d5:dd:b0:92:
                    5a:05:e1:31:da:7f:15:75:01:34:4a:6c:67:54:e0:
                    63:4d:f9:34:61:2a:41:00:b8:fa:18:43:8d:cc:d8:
                    a1:1f:2e:88:fd:eb:f8:3d:be:87:95:1e:01:6f:dd:
                    b7:5e:3a:b3:bd:5d:e9:61:d8:9d:fa:cf:f7:37:08:
                    d6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:BA:49:67:A3:E2:B9:31:11:14:87:82:F8:A3:8C:8B:F4:D7:5A:23
            X509v3 Authority Key Identifier:
                keyid:B5:FC:5F:08:B8:C4:86:40:13:DC:3A:4C:A4:7C:22:00:B3:C2:B8:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:5c:b8:ac:db:b5:f6:be:22:53:3c:84:f4:e4:25:6c:c7:bd:
         fe:c8:5e:04:b5:9c:02:56:8c:c1:b1:79:8f:c3:e8:56:08:db:
         7f:d8:0d:be:83:33:cb:60:54:95:5f:9a:99:aa:d6:1a:b3:55:
         82:d4:42:92:66:d3:71:16:95:d8:42:04:d5:f3:ce:10:bb:f5:
         57:e6:9d:79:54:5c:32:4c:59:99:9a:4d:ff:c3:99:f4:5a:eb:
         2a:11:7c:98:a1:e0:2a:71:f0:ab:23:54:2e:2e:c7:46:61:67:
         5d:43:ab:fe:27:d6:57:d1:f1:eb:5c:4b:d9:1b:4e:0f:12:70:
         d3:86:3c:df:a0:3a:ac:bd:90:a9:b4:5b:93:91:94:a1:f2:a3:
         5c:8f:df:56:b2:b6:49:65:4f:1f:b8:73:8d:fb:fb:e8:e3:59:
         ee:66:56:bc:b1:bb:39:89:d6:4a:07:09:f9:1c:96:d7:05:81:
         96:b1:78:20:a3:b6:71:e1:f5:11:9a:42:ca:27:37:8e:12:55:
         b4:1d:30:f7:6c:f8:4d:18:5c:2d:55:0f:9e:17:06:11:da:b8:
         7e:9c:83:35:00:cd:e6:61:22:ff:60:ff:f3:ec:af:21:3e:c6:
         19:37:fe:a7:b2:7b:f6:d1:4a:17:2f:74:20:c6:12:fc:5a:2d:
         0a:6e:d6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 10:24:46 2026 by rpki-client