Error: rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.mft
File:                     54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.mft (raw, json)
Hash identifier:          cVb4T/WH+Q9PA+XldB96ajSZ9beHKvZFJBEKqoMPR4s=
Subject key identifier:   13:6C:93:46:17:05:00:64:43:D5:15:2C:10:17:5E:50:E0:67:D8:45
Authority key identifier: 54:CE:DD:2E:24:96:0D:E5:89:D4:B1:6E:B4:D6:62:38:4C:CC:0F:AF
Certificate issuer:       /CN=54CEDD2E24960DE589D4B16EB4D662384CCC0FAF
Certificate serial:       48797631DB5EA03F027D1D6F7463643A6DB639C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.mft
Manifest number:          04DC
Signing time:             Wed 28 Oct 2026 07:41:00 +0000
Manifest this update:     Wed 28 Oct 2026 07:36:00 +0000
Manifest next update:     Thu 29 Oct 2026 09:37:00 +0000
Files and hashes:         1: 3137392e34382e3134362e302f32332d3233203d3e20323731303930.roa (hash: hD2d1DFucZOY2ODRVe2+eXov2N0kC4IZnCcz+mydabQ=)
                          2: 54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.crl (hash: wBz3gEzb2vRhIEeIod4VzJs4WiHPbpJnp4yJkT2PK5I=)
                          3: 3137392e34382e3134342e302f32332d3233203d3e20323731303930.roa (hash: t53mNfrpGicVjfQ3PiMcXxnSeXT3llEP6nmMQ92ODP4=)
                          4: 3137392e34382e3134342e302f32342d3234203d3e20323731303930.roa (hash: aiHmLe3rkXTA639zVGdnSxYb8WGv4hPPepinqLU7uiE=)
                          5: 3137392e34382e3134352e302f32342d3234203d3e20323731303930.roa (hash: l8ijLlFxDy4VTXeWkaKe5ejxtJ1VxDg7WWtuhDxEgOo=)
                          6: 3137392e34382e3134372e302f32342d3234203d3e20323731303930.roa (hash: w0fas5m2q4kM+mLqSEyt0jbe16RXzLHXREUTRvROfGQ=)
                          7: 323830343a373631633a3a2f33322d3332203d3e20323731303930.roa (hash: dP0fvZDik0ht9qX9QxmLkY1B8KC93f4JzY89YB5hxrc=)
                          8: 3137392e34382e3134342e302f32322d3232203d3e20323731303930.roa (hash: STAv4LccjL0wfTvHBr3skoUwBopW5Q5YujwZDA5P95s=)
                          9: 3137392e34382e3134362e302f32342d3234203d3e20323731303930.roa (hash: egXOAoJKr508qK+sG0c7BRTeN4mTGviVXi/4r9H1tFw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.crl
                          rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 09:37:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:79:76:31:db:5e:a0:3f:02:7d:1d:6f:74:63:64:3a:6d:b6:39:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54CEDD2E24960DE589D4B16EB4D662384CCC0FAF
        Validity
            Not Before: Oct 28 07:36:00 2026 GMT
            Not After : Oct 29 09:37:00 2026 GMT
        Subject: CN=136C93461705006443D5152C10175E50E067D845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1b:91:aa:d9:a6:b1:8f:32:d5:5f:73:bc:7e:
                    e2:92:48:2a:f0:70:fa:3d:39:e0:96:fa:ed:7a:a7:
                    aa:b0:ce:a7:03:95:b8:a5:71:06:91:b0:6d:e8:1f:
                    a8:b3:d0:92:a2:55:78:39:42:68:6a:f2:d6:44:32:
                    c7:6f:da:51:25:04:ae:a2:94:ef:37:b4:b6:9c:4a:
                    40:d8:d3:92:de:e8:d2:15:f9:db:db:05:fd:9e:87:
                    47:93:f4:f1:82:83:6f:25:ad:3f:98:fb:f2:21:71:
                    20:6c:c6:35:73:71:61:81:62:54:44:75:29:4e:2c:
                    b7:70:74:22:a2:88:71:38:1e:eb:74:e6:f1:42:24:
                    40:39:64:32:8c:b3:2c:6f:e1:87:ce:cb:cb:31:ae:
                    ab:ce:f8:38:5a:7b:1f:e5:78:fb:42:91:8e:ac:4a:
                    b8:54:82:e7:d7:5f:c4:63:c3:64:1d:61:2a:c1:10:
                    fc:dc:71:12:b5:41:92:19:6b:04:c9:30:cf:cf:09:
                    cc:03:ff:4b:35:d4:11:cf:d3:5d:59:13:03:ef:49:
                    4c:ca:33:d0:fe:90:b3:55:f6:ec:3d:d4:e4:74:d8:
                    16:aa:86:5a:5a:bc:34:0d:d7:50:3e:7c:c4:a0:36:
                    b7:ba:5d:57:80:34:15:a0:a9:50:0d:f3:63:2c:8f:
                    a1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:6C:93:46:17:05:00:64:43:D5:15:2C:10:17:5E:50:E0:67:D8:45
            X509v3 Authority Key Identifier:
                keyid:54:CE:DD:2E:24:96:0D:E5:89:D4:B1:6E:B4:D6:62:38:4C:CC:0F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:bd:55:af:a0:9f:99:29:0c:e7:c6:ba:36:e9:86:17:aa:31:
         da:f7:2c:35:91:e1:b1:60:49:1e:90:7e:7f:33:ec:bb:69:af:
         9f:9a:6e:f0:c6:6a:82:f4:9d:c3:34:66:f7:25:81:ca:6d:af:
         95:1e:27:35:20:33:56:b3:98:7a:0c:f2:b7:d5:31:9a:c9:b2:
         f9:d4:47:6f:b9:02:30:ae:dc:65:96:8f:65:4f:72:fe:60:94:
         cc:21:3c:e2:9c:a4:ad:71:37:56:fd:29:92:41:95:e2:c6:24:
         61:5e:d6:2b:e4:cf:4e:11:21:70:29:3e:62:e7:c2:4d:0a:b8:
         3e:cb:72:69:c0:91:ea:7b:81:27:03:50:b1:ae:0d:6f:f5:2e:
         aa:33:72:14:a8:8d:22:fd:f4:6e:13:ab:f2:6f:36:d2:55:8f:
         f9:21:a3:76:54:2d:e3:73:e9:b9:11:38:e1:cc:36:e7:2e:9a:
         72:0e:f3:d5:17:01:21:70:4e:23:ac:c7:7a:62:d7:f6:03:5c:
         e5:88:23:97:0a:5d:87:0a:b6:9f:2b:4e:a3:45:98:2c:d6:eb:
         7b:84:0b:ba:09:23:0c:10:a4:67:aa:a6:06:5b:0c:75:73:22:
         b6:18:03:f5:d8:12:69:51:85:0d:e6:22:77:97:52:de:02:fb:
         93:6c:5e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 15:32:40 2026 by rpki-client