Error: rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft
File:                     2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft (raw, json)
Hash identifier:          HcBrotoNcFQnO7U6SKRRqZp7ivJQXzimFt9I1qiwg7g=
Subject key identifier:   32:2E:0C:E6:77:01:29:AB:8F:3F:31:21:7C:6D:84:46:8C:3E:53:96
Authority key identifier: 28:47:CC:C6:84:CE:30:8C:8C:DB:AF:04:E9:0C:9E:18:DB:33:AC:17
Certificate issuer:       /CN=2847CCC684CE308C8CDBAF04E90C9E18DB33AC17
Certificate serial:       08E28CC3BC169BEC466528067E76A1C890C2DA09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft
Manifest number:          04D6
Signing time:             Wed 14 Oct 2026 07:39:10 +0000
Manifest this update:     Wed 14 Oct 2026 07:34:10 +0000
Manifest next update:     Thu 15 Oct 2026 09:27:10 +0000
Files and hashes:         1: 3137392e3132352e35362e302f32322d3234203d3e20323633303433.roa (hash: TbDFL3gUdNfReddqFUYovFWPHWh7xwus0xT+10cp8M0=)
                          2: 2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl (hash: Xk2yOmQYPpU5Q/tYORaakcF08x45ulUCXm58PIgwhJI=)
                          3: 323830343a3866633a3a2f33322d3438203d3e20323633303433.roa (hash: A2Gpn8ZW5aoEGzgwjPMqPIr4WywGHZsk8HwfwI/eW/o=)
                          4: 3137372e3132392e3139322e302f32322d3234203d3e20323633303433.roa (hash: smY/SAzd2Fuaf2YaSHRlggXrs8poIzwUXt+Sy0fZuxY=)
                          5: 3133382e3132312e3138342e302f32322d3234203d3e20323633303433.roa (hash: dOTcyk/Yg1CLHjEE7CrSkjNRl+YJedBSp33BbqS6EcI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl
                          rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 09:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e2:8c:c3:bc:16:9b:ec:46:65:28:06:7e:76:a1:c8:90:c2:da:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2847CCC684CE308C8CDBAF04E90C9E18DB33AC17
        Validity
            Not Before: Oct 14 07:34:10 2026 GMT
            Not After : Oct 15 09:27:10 2026 GMT
        Subject: CN=322E0CE6770129AB8F3F31217C6D84468C3E5396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:36:a9:41:df:71:73:46:00:78:eb:6a:72:09:
                    d8:cf:a8:41:70:2d:9a:e0:a0:c4:5a:d5:b5:b0:9d:
                    63:b2:ef:5f:d7:0d:7a:7e:23:8a:5e:9d:93:e8:64:
                    d7:f2:fd:96:ba:d1:78:17:55:f4:67:8f:51:ac:38:
                    9d:96:73:48:1f:f1:2b:ef:89:cf:28:7d:cf:25:0a:
                    de:1a:12:0c:b2:5b:75:3e:c2:9a:cc:59:58:25:88:
                    62:ee:13:48:5f:1c:72:ea:fd:e5:47:d8:59:a7:c6:
                    af:62:49:7f:d9:39:4c:78:ac:f4:38:54:4c:68:99:
                    2a:4d:6c:f1:9e:15:d6:42:07:90:84:2a:32:e3:d6:
                    91:0c:1a:83:84:56:20:02:11:c4:11:b0:7a:13:01:
                    85:ad:a2:60:23:a5:61:b9:ff:55:fd:e0:0b:13:56:
                    cf:a2:76:7d:20:eb:a5:77:33:7b:bc:d1:1f:d3:ab:
                    b3:00:03:9c:c2:24:17:e8:bc:56:ed:00:69:eb:e8:
                    8f:f9:4c:43:9c:a4:73:f9:68:01:ab:e5:dd:e4:1d:
                    2d:a3:91:60:6e:ad:82:2d:96:48:23:fd:c3:6c:2a:
                    91:71:96:2b:a7:e2:92:01:df:43:e6:e3:ec:d9:d4:
                    3c:3b:8d:68:3a:5e:2e:c9:a0:a7:73:55:d1:4c:73:
                    e7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2E:0C:E6:77:01:29:AB:8F:3F:31:21:7C:6D:84:46:8C:3E:53:96
            X509v3 Authority Key Identifier:
                keyid:28:47:CC:C6:84:CE:30:8C:8C:DB:AF:04:E9:0C:9E:18:DB:33:AC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:6d:e8:d8:bb:a1:54:f5:d7:ba:df:85:4d:ed:4c:0b:d2:5d:
         3c:67:92:23:9d:4b:79:87:12:ea:cf:52:49:18:78:6a:32:70:
         ec:67:29:d5:ce:e2:61:6e:74:ca:bd:55:61:89:fa:15:43:1a:
         ca:5b:27:be:1d:3e:c9:5e:fa:e9:78:13:e1:8e:58:5c:c9:9a:
         1a:10:73:ae:1e:9e:b3:5b:6d:f7:0b:95:a8:ce:7e:39:b6:bf:
         e0:47:ee:e1:2c:0a:87:9a:49:4d:4a:38:5e:9a:3d:b1:e1:46:
         af:f9:81:bc:a8:00:88:95:0f:08:2c:1a:1d:b4:e3:ae:c1:1a:
         d5:6d:79:db:7a:72:0c:12:98:bb:f0:d5:f7:bf:5a:c9:41:e6:
         fd:7c:e4:b7:7b:26:ac:c0:5e:22:af:c8:a9:72:19:6f:2a:12:
         83:93:d7:36:cd:8f:1c:c1:14:03:e5:d3:75:3d:45:d5:c3:9d:
         e4:96:44:9a:36:9d:6e:a4:ac:35:46:c4:ef:9b:59:41:7b:52:
         9a:d2:28:1f:21:1b:3c:cf:c7:95:09:bf:27:ae:ed:6d:74:9f:
         41:38:3d:6c:de:69:2d:87:32:b8:36:52:44:01:7e:94:77:1a:
         2e:96:76:06:83:d1:6e:4c:6f:b3:a2:84:be:fb:60:3b:43:37:
         ee:eb:7a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 00:25:08 2026 by rpki-client