Error: rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.mft
File:                     D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.mft (raw, json)
Hash identifier:          wqfvTpKuqFr9lrZhr7eV1MuLNUkUC14KSR6uedzn0F4=
Subject key identifier:   FC:9D:B9:A9:4B:0A:D1:F3:3C:3C:6F:D6:F7:1F:BD:7B:86:EF:95:80
Authority key identifier: D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28
Certificate issuer:       /CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
Certificate serial:       604070B5DE56A141C1313F06D26768A2F4AB1A48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.mft
Manifest number:          058F
Signing time:             Tue 27 Oct 2026 08:00:01 +0000
Manifest this update:     Tue 27 Oct 2026 07:55:01 +0000
Manifest next update:     Wed 28 Oct 2026 08:00:01 +0000
Files and hashes:         1: 3138372e36382e302e302f31342d3234203d3e203232303835.roa (hash: N0HUusRKQNTynpisUd8jUCrj47heopu1WU3rgi8NePM=)
                          2: 3138372e32342e302e302f31342d3234203d3e203232303835.roa (hash: 5jkgGv6GO8KL+CHi5SxSGom/qHen9JoDabkReP2Fpeo=)
                          3: 3230302e3134362e3132382e302f31382d3234203d3e203237363532.roa (hash: u+SMsbb34qpFIvQJYA6mEu94p/eDx3pHcGA3c7zgNy0=)
                          4: 323830343a3338383a3a2f33302d3438203d3e203232303835.roa (hash: QX0lp3kEhKWBLR0gz1flhphIY1S+5hSwuC+kdewoYkY=)
                          5: 3230312e37312e36342e302f31382d3234203d3e203237363532.roa (hash: E25DmfEKyRYSubgkB3HE+jBmhe8dE/IB55Lvqo8IsEI=)
                          6: D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl (hash: G4rfFt66VqkULHRdZC3ABhzbupNvBAZwbCP2RfKPuCQ=)
                          7: 3230302e3136392e3131322e302f32302d3234203d3e203232303835.roa (hash: rAAj9F8Xuvpv6ycPKlGrW6Tv7tbbWSvWMo4ee+IUal0=)
                          8: 3139312e3234342e302e302f31342d3234203d3e203232303835.roa (hash: ixRHzWGfFZO69hrKmiDqh+nmE3QgaO0qgjiUTaH3Nhg=)
                          9: 3138392e39322e302e302f31342d3234203d3e203232303835.roa (hash: K1r3QzZCwfr3AQg7T68wnF6Q6VzNFLWx7rDAMle0rL4=)
                          10: 3230312e32332e3136302e302f31392d3234203d3e203232303835.roa (hash: LltJT2bT9zBM64u1pwWOL7ywyywl1tXdGx21VRSgY6c=)
                          11: 3137372e35362e302e302f31342d3234203d3e203232303835.roa (hash: V4Ow867P6EEwxrNICCtSxwWx3AHySgC+blz8vIJVnlc=)
                          12: 3137392e3234302e302e302f31342d3234203d3e203232303835.roa (hash: HCiBNgDPit+VDxe1+XihleE6/GhW1mXIDVH7SvDSy0c=)
                          13: 3139302e3130392e38342e302f32322d3234203d3e203232303835.roa (hash: uVUJ+OAirYepdAuIx8dViMHfFEODYvhQWYUJ5G9bbrQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl
                          rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 08:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:40:70:b5:de:56:a1:41:c1:31:3f:06:d2:67:68:a2:f4:ab:1a:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
        Validity
            Not Before: Oct 27 07:55:01 2026 GMT
            Not After : Oct 28 08:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:23:c1:4c:13:fd:3d:de:3c:44:55:fb:5a:e7:
                    53:4b:06:f2:e6:42:44:74:8b:33:3b:56:59:d7:c6:
                    66:cb:a2:40:64:55:f2:91:b7:85:e9:cc:2f:ab:ac:
                    80:4e:9f:21:c2:28:9c:9c:59:b3:31:fa:96:69:9e:
                    d5:f2:b9:e9:7d:43:39:ab:0c:df:24:bb:25:bf:50:
                    4b:1a:b6:20:46:59:37:72:e3:d8:c0:92:39:8d:48:
                    fa:48:07:c7:bd:bb:51:af:b1:cd:ef:48:14:a5:7f:
                    65:e0:83:0f:23:31:e1:b0:eb:a3:24:af:a4:5c:41:
                    da:bb:ce:90:08:39:75:e6:52:7e:59:0b:2d:3b:1f:
                    04:49:03:ed:b9:3c:2a:c9:3b:14:83:26:c1:9d:f1:
                    b9:64:72:f2:83:76:85:6e:ce:ad:cb:cf:92:54:7c:
                    ec:20:89:64:ca:bf:f1:77:79:07:3d:d7:ee:cc:c2:
                    e2:77:58:63:44:21:b5:c8:ca:e9:1e:b3:1f:d5:95:
                    16:7a:fa:3a:fa:ef:a2:a9:9f:bd:0b:f9:62:7b:8a:
                    a5:a8:e2:e0:0c:e8:de:5b:d0:b8:cf:79:17:2c:06:
                    5d:7a:5e:f5:54:6e:9a:6d:c8:e9:72:fc:b3:94:76:
                    9d:1f:d0:a3:99:07:62:64:59:01:40:8d:cf:3f:23:
                    18:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:9D:B9:A9:4B:0A:D1:F3:3C:3C:6F:D6:F7:1F:BD:7B:86:EF:95:80
            X509v3 Authority Key Identifier:
                keyid:D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:07:8e:1a:9a:3f:d6:45:36:d4:12:23:24:54:f5:63:bc:84:
         fa:33:09:a2:72:a1:be:8b:a6:6f:9c:b6:27:0a:92:30:d4:21:
         e1:fc:e5:b2:36:9f:17:c8:c6:c8:2d:3c:45:1e:46:7b:ac:9d:
         e8:f7:67:48:b1:da:5a:71:77:75:cd:08:b0:03:bd:b3:69:aa:
         1c:77:55:8b:6d:3d:e0:1b:1f:f9:8c:50:b8:94:c0:50:a4:bf:
         85:6e:ae:55:84:33:ff:47:8d:a2:53:5e:f4:a5:63:0c:fa:a8:
         39:ef:9e:cd:4d:99:ec:1a:a8:b3:65:f4:54:26:28:51:ad:1a:
         57:59:d1:d6:76:11:92:96:c1:15:9b:a3:c7:0a:89:51:52:62:
         38:91:8b:b3:43:f3:ce:2e:1c:3d:d9:f3:12:4a:02:e1:a7:79:
         5b:2b:07:d2:4e:27:d3:c5:d2:56:de:8f:23:50:c6:ac:4a:da:
         99:f6:e9:6c:81:75:31:55:14:ea:9c:75:65:0e:50:87:9e:82:
         62:ae:ea:b0:98:8f:30:32:ae:c5:fd:25:1d:ff:7f:09:26:47:
         3f:3e:2c:82:28:b0:f8:0a:ac:20:fe:c1:30:8f:33:26:5b:c5:
         47:88:c5:f1:ba:fc:7b:dc:dc:6d:1a:70:5d:0d:2b:6b:0e:29:
         8c:41:96:91
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 27 18:49:04 2026 by rpki-client