Error: rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.mft
File:                     54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.mft (raw, json)
Hash identifier:          +4CiFGVL4OuNW14nXgFZiRcxYuT5HHqN3zYMzFl81J0=
Subject key identifier:   F5:0B:A2:BD:56:E0:B4:48:39:45:85:A8:FA:79:B9:F5:5F:57:55:E8
Authority key identifier: 54:CE:DD:2E:24:96:0D:E5:89:D4:B1:6E:B4:D6:62:38:4C:CC:0F:AF
Certificate issuer:       /CN=54CEDD2E24960DE589D4B16EB4D662384CCC0FAF
Certificate serial:       1DFD16BD6A59E161BB2959989951E301829F1253
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.mft
Manifest number:          04DE
Signing time:             Thu 29 Oct 2026 20:28:33 +0000
Manifest this update:     Thu 29 Oct 2026 20:23:33 +0000
Manifest next update:     Fri 30 Oct 2026 22:47:33 +0000
Files and hashes:         1: 323830343a373631633a3a2f33322d3332203d3e20323731303930.roa (hash: dP0fvZDik0ht9qX9QxmLkY1B8KC93f4JzY89YB5hxrc=)
                          2: 3137392e34382e3134352e302f32342d3234203d3e20323731303930.roa (hash: l8ijLlFxDy4VTXeWkaKe5ejxtJ1VxDg7WWtuhDxEgOo=)
                          3: 3137392e34382e3134342e302f32342d3234203d3e20323731303930.roa (hash: aiHmLe3rkXTA639zVGdnSxYb8WGv4hPPepinqLU7uiE=)
                          4: 3137392e34382e3134362e302f32342d3234203d3e20323731303930.roa (hash: egXOAoJKr508qK+sG0c7BRTeN4mTGviVXi/4r9H1tFw=)
                          5: 3137392e34382e3134342e302f32332d3233203d3e20323731303930.roa (hash: t53mNfrpGicVjfQ3PiMcXxnSeXT3llEP6nmMQ92ODP4=)
                          6: 3137392e34382e3134342e302f32322d3232203d3e20323731303930.roa (hash: STAv4LccjL0wfTvHBr3skoUwBopW5Q5YujwZDA5P95s=)
                          7: 3137392e34382e3134362e302f32332d3233203d3e20323731303930.roa (hash: hD2d1DFucZOY2ODRVe2+eXov2N0kC4IZnCcz+mydabQ=)
                          8: 3137392e34382e3134372e302f32342d3234203d3e20323731303930.roa (hash: w0fas5m2q4kM+mLqSEyt0jbe16RXzLHXREUTRvROfGQ=)
                          9: 54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.crl (hash: NulSPA5Kp9qfMWt1ZV0/WDIoN8vMXLxoafXFz3c2/UI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.crl
                          rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 22:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:fd:16:bd:6a:59:e1:61:bb:29:59:98:99:51:e3:01:82:9f:12:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54CEDD2E24960DE589D4B16EB4D662384CCC0FAF
        Validity
            Not Before: Oct 29 20:23:33 2026 GMT
            Not After : Oct 30 22:47:33 2026 GMT
        Subject: CN=F50BA2BD56E0B448394585A8FA79B9F55F5755E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:38:6f:44:85:b7:e0:4d:28:f2:01:cf:7d:dd:
                    c2:2c:e6:ac:85:f4:3d:a3:e0:6b:a8:ce:94:9c:4d:
                    af:86:60:6f:37:38:b0:69:45:e7:46:ee:e6:43:cf:
                    b0:10:32:34:eb:71:0d:ed:43:93:bc:8a:d3:20:e1:
                    2d:46:d1:43:15:83:92:06:0b:a9:92:dc:73:92:b2:
                    7f:7e:11:04:34:2b:7f:0f:68:8b:4c:43:8d:59:26:
                    8f:00:ce:78:e1:6c:84:8a:55:d4:9b:d3:ab:f5:0d:
                    e8:f8:ad:70:c9:13:33:04:b4:b4:e6:91:8b:98:a2:
                    e4:b2:81:41:8a:cf:37:7f:da:8d:e7:9d:bb:22:18:
                    7c:f4:24:d0:cc:75:f9:95:a8:dd:2d:96:a8:95:a6:
                    a6:6c:ca:7a:5d:b3:ed:62:95:c1:0c:24:0e:31:a1:
                    f4:c5:cc:9a:e9:8a:02:86:20:be:90:08:73:62:ac:
                    f1:52:c4:f8:61:48:07:46:49:d0:b7:ae:fa:0f:7a:
                    f2:a3:45:0c:aa:db:39:e2:7c:22:aa:45:22:af:14:
                    4e:8e:94:88:12:67:2b:9c:36:11:f6:64:7f:5a:f2:
                    be:28:7a:b6:71:a8:c6:a7:74:ae:b7:fd:9b:16:de:
                    2c:70:02:f2:9f:f8:bb:e0:ce:93:e9:62:fe:e1:43:
                    13:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:0B:A2:BD:56:E0:B4:48:39:45:85:A8:FA:79:B9:F5:5F:57:55:E8
            X509v3 Authority Key Identifier:
                keyid:54:CE:DD:2E:24:96:0D:E5:89:D4:B1:6E:B4:D6:62:38:4C:CC:0F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:84:31:18:00:ca:fc:fc:ea:50:7e:a5:3a:95:97:9c:69:ba:
         92:27:2f:bf:a1:38:d4:4f:cb:81:a8:06:2d:af:b3:5f:e6:71:
         52:d0:52:2f:76:99:00:85:68:b8:b2:5f:dd:66:ed:00:a8:f4:
         3f:b0:cd:3e:a7:77:c6:8b:05:ad:41:ec:b6:ce:07:48:99:53:
         b9:dd:aa:5f:75:44:f5:3c:41:38:75:ae:e2:07:fe:90:17:42:
         6f:5d:22:76:0d:a2:c8:9f:5e:33:21:4d:11:1b:fa:29:d2:67:
         9e:44:21:eb:84:5a:0e:13:9d:23:f9:5a:49:12:b0:f5:19:d1:
         4c:a7:29:02:bf:f4:2b:0f:cd:10:37:44:7e:68:11:6f:e5:92:
         90:a6:9f:43:5c:fe:61:7b:63:89:eb:71:77:51:1e:b6:a7:93:
         c9:13:d1:f7:c7:ac:9b:57:ad:ff:bd:86:ef:cb:78:98:7d:cf:
         95:7e:70:1f:2f:83:ef:45:45:f6:a9:e4:76:ad:ff:5d:f3:44:
         b6:61:be:b1:fc:b6:ca:a0:1d:7d:16:c2:b8:95:05:01:48:7a:
         b4:68:6d:50:f0:30:05:76:84:bd:24:a0:fd:ea:31:06:a1:55:
         ba:c6:a5:f8:89:1a:45:64:e1:f3:77:e7:d2:ca:47:60:a1:30:
         9d:f5:45:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 23:01:06 2026 by rpki-client