Error: rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.mft
File:                     54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.mft (raw, json)
Hash identifier:          byjKT2gGud0D7CbKog64suPfjSYZwWLAN/7l9u0CoUc=
Subject key identifier:   FC:64:CD:52:7F:B0:B4:9F:1A:14:04:43:29:DF:28:ED:22:60:55:98
Authority key identifier: 54:CE:DD:2E:24:96:0D:E5:89:D4:B1:6E:B4:D6:62:38:4C:CC:0F:AF
Certificate issuer:       /CN=54CEDD2E24960DE589D4B16EB4D662384CCC0FAF
Certificate serial:       1D972EF43B11B1C5DC0C4E3769473B2C6F268F97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.mft
Manifest number:          0484
Signing time:             Sun 23 Aug 2026 09:11:12 +0000
Manifest this update:     Sun 23 Aug 2026 09:06:12 +0000
Manifest next update:     Mon 24 Aug 2026 12:00:12 +0000
Files and hashes:         1: 3137392e34382e3134352e302f32342d3234203d3e20323731303930.roa (hash: l8ijLlFxDy4VTXeWkaKe5ejxtJ1VxDg7WWtuhDxEgOo=)
                          2: 54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.crl (hash: Js+gVSw2xpxI6FF9dajm7fC0DayaICxLodHi63erL+U=)
                          3: 3137392e34382e3134372e302f32342d3234203d3e20323731303930.roa (hash: w0fas5m2q4kM+mLqSEyt0jbe16RXzLHXREUTRvROfGQ=)
                          4: 3137392e34382e3134362e302f32342d3234203d3e20323731303930.roa (hash: egXOAoJKr508qK+sG0c7BRTeN4mTGviVXi/4r9H1tFw=)
                          5: 3137392e34382e3134342e302f32332d3233203d3e20323731303930.roa (hash: t53mNfrpGicVjfQ3PiMcXxnSeXT3llEP6nmMQ92ODP4=)
                          6: 3137392e34382e3134342e302f32322d3232203d3e20323731303930.roa (hash: STAv4LccjL0wfTvHBr3skoUwBopW5Q5YujwZDA5P95s=)
                          7: 3137392e34382e3134342e302f32342d3234203d3e20323731303930.roa (hash: aiHmLe3rkXTA639zVGdnSxYb8WGv4hPPepinqLU7uiE=)
                          8: 3137392e34382e3134362e302f32332d3233203d3e20323731303930.roa (hash: hD2d1DFucZOY2ODRVe2+eXov2N0kC4IZnCcz+mydabQ=)
                          9: 323830343a373631633a3a2f33322d3332203d3e20323731303930.roa (hash: dP0fvZDik0ht9qX9QxmLkY1B8KC93f4JzY89YB5hxrc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.crl
                          rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 12:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:97:2e:f4:3b:11:b1:c5:dc:0c:4e:37:69:47:3b:2c:6f:26:8f:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54CEDD2E24960DE589D4B16EB4D662384CCC0FAF
        Validity
            Not Before: Aug 23 09:06:12 2026 GMT
            Not After : Aug 24 12:00:12 2026 GMT
        Subject: CN=FC64CD527FB0B49F1A14044329DF28ED22605598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fa:b9:d3:18:3d:dd:78:11:03:67:87:76:39:
                    0f:e4:20:ba:0d:4a:82:ee:a5:63:be:32:60:28:17:
                    83:ce:8b:e3:5b:58:22:99:bc:39:18:72:c4:84:31:
                    3b:39:ac:fd:68:1f:99:24:7c:97:3e:8a:b8:e1:d0:
                    4e:e1:fc:c9:eb:21:26:3d:83:38:4e:38:b3:dd:8a:
                    d3:38:7c:94:33:f8:a0:4c:77:78:5a:7f:17:78:cd:
                    b7:ca:db:8f:a4:43:6d:de:5c:fc:50:94:70:12:c8:
                    aa:b9:2d:32:04:86:ef:26:f7:8c:18:f0:8b:2f:5f:
                    d4:4b:43:01:77:58:65:b1:59:e5:02:f4:f4:1c:0e:
                    d9:77:91:e8:d7:d5:8a:9d:dc:f1:37:28:16:b8:da:
                    a7:93:d1:eb:31:ab:4c:24:66:f3:79:f5:d4:dd:8d:
                    ad:41:1c:6a:b0:4f:76:59:4d:e1:4e:7a:70:08:7e:
                    0b:9e:d7:23:a0:ce:4c:1d:1c:d7:30:69:dc:55:49:
                    21:5e:e2:a3:9e:b7:9e:41:3f:86:ed:76:3d:0a:36:
                    2e:ab:d1:29:c7:ac:e4:a1:ce:e9:ab:b4:5d:34:1b:
                    5e:8a:cd:5a:f0:3d:e3:5c:7d:8f:3d:97:0f:0a:7b:
                    e8:d9:ef:25:62:47:3c:93:b7:23:ad:e5:fd:3d:91:
                    f8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:64:CD:52:7F:B0:B4:9F:1A:14:04:43:29:DF:28:ED:22:60:55:98
            X509v3 Authority Key Identifier:
                keyid:54:CE:DD:2E:24:96:0D:E5:89:D4:B1:6E:B4:D6:62:38:4C:CC:0F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:42:01:58:01:53:88:51:b5:d8:7d:fa:2b:1f:dc:af:8f:c0:
         63:71:9a:3a:26:2f:7d:bb:f5:d0:eb:9e:a0:9f:73:db:f0:97:
         42:af:b5:57:69:33:1d:aa:7d:f7:46:09:18:92:a1:90:fe:14:
         ba:9d:91:82:3d:53:62:8c:cd:74:86:38:ad:e7:6b:2b:11:4b:
         aa:d7:97:f7:b2:f0:06:aa:31:f3:67:fb:e3:18:55:52:68:d0:
         74:5a:c9:e0:3e:2c:3b:21:f5:0b:2f:03:dc:73:12:2a:44:63:
         5a:e3:81:66:9a:55:5a:6c:0b:ae:5c:ed:37:b4:cc:98:66:69:
         6e:33:ce:24:2b:d6:a6:d4:6b:ba:6e:4a:8a:31:1f:d3:fd:4a:
         ef:5d:e5:6f:20:58:2c:3f:23:57:c9:6a:76:f8:19:5b:45:e3:
         86:99:59:39:88:ec:09:69:e7:dc:1b:cb:20:1c:7e:9f:fc:75:
         e8:e1:19:e7:7c:ac:9c:d9:01:2c:d5:cc:a8:0e:fb:b8:b6:fd:
         24:b4:df:ee:ee:8e:6c:b9:32:d7:40:b8:c0:0b:6e:10:3e:2b:
         2e:1d:9c:3f:cf:72:ba:bd:8a:70:63:ce:4f:ff:3c:d8:21:24:
         3f:14:4c:6f:d2:99:16:56:ce:b6:30:90:ba:c6:9a:f5:60:45:
         b5:48:37:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 03:34:14 2026 by rpki-client