Error: rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.mft
File:                     B48A181C2DC4482EF44411B66EBF4E215BD86B5F.mft (raw, json)
Hash identifier:          LqxeVf3khZfPecS5ADp7l1FpQweJhzYfPG5y5zt8gIU=
Subject key identifier:   38:F0:33:22:D8:D4:E3:7E:94:C3:5C:E3:AC:2C:A5:D8:4D:29:72:DF
Authority key identifier: B4:8A:18:1C:2D:C4:48:2E:F4:44:11:B6:6E:BF:4E:21:5B:D8:6B:5F
Certificate issuer:       /CN=B48A181C2DC4482EF44411B66EBF4E215BD86B5F
Certificate serial:       7E0A1B51A77A36F8A385F8A382D1E4FD06357CA6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.mft
Manifest number:          04EF
Signing time:             Mon 02 Nov 2026 05:47:47 +0000
Manifest this update:     Mon 02 Nov 2026 05:42:47 +0000
Manifest next update:     Tue 03 Nov 2026 09:23:47 +0000
Files and hashes:         1: B48A181C2DC4482EF44411B66EBF4E215BD86B5F.crl (hash: 1AwBb9VXd7cA0eFQWj1YNPHjUY02MfCQfveXkg5u+Zw=)
                          2: 3137302e38342e3233362e302f32322d3235203d3e20323634323730.roa (hash: 0WrepVSeoYBhsO+vfNsJrwZBo4IKqKmCCq+cSHnH6cs=)
                          3: 3133382e3131382e3234342e302f32322d3235203d3e20323634323730.roa (hash: pCoK2qAbAIolAKxobGUNo76F7IvEgkhDBJQGYa1enYA=)
                          4: 323830343a323534383a3a2f33322d3634203d3e20323634323730.roa (hash: dcd/jffnQ8mfqylImc/qzpNKqQW5EhB6U+Vo+qx7/Nc=)
                          5: 3138392e33362e3234382e302f32322d3235203d3e20323634323730.roa (hash: /r/6HZqDyFyDTG0Lp0QiFjEWlyJ7VWhgNdKdblzVvsY=)
                          6: 34352e3233342e32342e302f32322d3235203d3e20323634323730.roa (hash: 8/HBmCCbe9AtT2ePPyX3QJ+oov0MTp4M+MyvXjsID6U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.crl
                          rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 09:23:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:0a:1b:51:a7:7a:36:f8:a3:85:f8:a3:82:d1:e4:fd:06:35:7c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B48A181C2DC4482EF44411B66EBF4E215BD86B5F
        Validity
            Not Before: Nov  2 05:42:47 2026 GMT
            Not After : Nov  3 09:23:47 2026 GMT
        Subject: CN=38F03322D8D4E37E94C35CE3AC2CA5D84D2972DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:56:bd:da:3e:15:54:b3:78:d1:d7:6e:a8:d4:
                    4f:50:36:e0:33:30:fc:48:fa:52:65:1f:27:1b:fc:
                    42:98:01:9a:7e:28:05:a3:20:8e:b1:49:72:74:67:
                    77:d0:41:13:e8:06:2b:01:d3:16:54:1d:1a:5c:e7:
                    5f:1f:9c:49:87:55:09:ac:79:8d:3e:66:f0:69:75:
                    25:4f:87:b8:1c:a2:ba:a2:86:0c:aa:02:01:4e:0f:
                    4d:e4:43:dc:24:b6:e8:27:4b:8f:79:c8:c2:e5:ec:
                    fe:24:43:b2:84:67:4e:a1:06:ea:84:15:5f:24:84:
                    22:ac:57:71:68:ac:e2:8a:77:f0:09:cc:77:0d:8d:
                    bd:64:00:d1:aa:1a:eb:80:64:b8:58:70:ec:8f:5c:
                    4e:76:a4:4a:8b:22:87:e7:2c:3d:0c:90:2b:83:27:
                    c9:b4:b8:70:50:8b:6b:51:57:bd:29:bd:39:28:7b:
                    19:65:e3:bf:2b:b3:7c:fb:f2:f2:11:ae:c0:77:ed:
                    11:eb:31:df:df:56:8c:61:02:cb:70:fb:a1:81:19:
                    da:04:e9:7f:64:c8:c3:6a:3f:9d:d7:f1:ec:c5:8e:
                    a7:02:6c:a5:68:80:36:79:5d:6f:b6:b0:35:12:7e:
                    d7:af:29:ef:80:75:47:52:c5:93:99:c9:48:6c:7b:
                    c7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F0:33:22:D8:D4:E3:7E:94:C3:5C:E3:AC:2C:A5:D8:4D:29:72:DF
            X509v3 Authority Key Identifier:
                keyid:B4:8A:18:1C:2D:C4:48:2E:F4:44:11:B6:6E:BF:4E:21:5B:D8:6B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:b7:38:38:8a:d2:dc:42:6e:c1:05:e7:38:f7:77:3e:d7:a2:
         a1:99:08:84:ff:27:5b:0a:c6:1c:d6:d2:57:57:57:8b:ba:49:
         1c:ba:b7:62:d3:0b:92:8b:e1:cf:17:4f:50:c7:ba:0f:99:af:
         37:f8:1f:9a:66:36:9d:3b:5d:78:b7:50:21:be:e6:4a:ed:ed:
         90:f0:bb:50:f4:11:91:47:5d:79:82:0e:4c:07:a5:bc:c2:35:
         48:11:80:2b:e9:2d:62:99:92:fd:34:b2:65:88:6f:fd:9a:ba:
         db:14:69:cd:c6:79:ad:4a:05:87:a6:71:4e:17:ef:bc:85:7b:
         e7:04:fd:05:78:d1:bd:30:6f:b4:5e:bd:c0:f1:15:45:4b:75:
         1e:5f:47:e7:e9:d0:60:af:11:62:4d:22:2a:9d:1f:93:f5:1b:
         10:62:15:50:22:b9:4d:64:d8:2c:ee:9d:69:c6:0a:a2:57:12:
         1f:1a:5a:0d:7c:c7:4c:9c:1b:40:67:de:dc:9b:ac:9a:47:af:
         3d:ee:ff:19:d3:5b:33:6e:d0:f2:27:09:a8:d2:38:ed:43:97:
         5d:ae:8e:bd:7b:e0:e1:d3:ec:ed:4c:d2:c2:e3:9e:a8:37:ea:
         c5:a8:15:3f:b5:fe:cc:c6:50:22:76:9e:98:b1:9d:62:4f:89:
         1d:72:e2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 04:24:57 2026 by rpki-client