Error: rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.mft
File:                     6E2CFADE0DB965B830D4C92D2183921AE113D2A2.mft (raw, json)
Hash identifier:          w8hk/bcR510h8AnVqjf7/j30RJyip3/+Rcr+cviMDuA=
Subject key identifier:   CA:94:47:1F:03:4A:40:53:1F:31:6C:8C:08:1B:42:A7:42:CB:7C:5F
Authority key identifier: 6E:2C:FA:DE:0D:B9:65:B8:30:D4:C9:2D:21:83:92:1A:E1:13:D2:A2
Certificate issuer:       /CN=6E2CFADE0DB965B830D4C92D2183921AE113D2A2
Certificate serial:       5B69C1254C3E3DB7BDCE8EF84438673DD94EDFB8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.mft
Manifest number:          04D0
Signing time:             Tue 13 Oct 2026 13:17:59 +0000
Manifest this update:     Tue 13 Oct 2026 13:12:59 +0000
Manifest next update:     Wed 14 Oct 2026 16:17:59 +0000
Files and hashes:         1: 323830343a323866343a3a2f33322d3332203d3e20323633393839.roa (hash: OL4yTIfFWutvuCi/F2FZ5ZB/KkCY1Mwa3cCG65c7gKY=)
                          2: 3133382e3235352e3232342e302f32322d3232203d3e20323633393839.roa (hash: Oi7UGngBjE2uJNqLcEFV1dG/L3GxQU5xdmwmkzexwhM=)
                          3: 3133382e3235352e3232342e302f32332d3233203d3e20323633393839.roa (hash: /S+LVIVcR77667x6AK5/KwazuyeYCEpKyJA8LNVBo1Q=)
                          4: 3133382e3235352e3232342e302f32342d3234203d3e20323633393839.roa (hash: NJShx4hVt+OrdpYh6xe52dNX6VfKEODK1YnZImftUvc=)
                          5: 6E2CFADE0DB965B830D4C92D2183921AE113D2A2.crl (hash: 9LPvrLOnvD2BF0cqYDuum1k9AUoluqYgMcOFTy5/238=)
                          6: 323830343a323866343a343030303a3a2f33342d3334203d3e20323633393839.roa (hash: fpXV4gnJlvX9V/H/h8VZs0WnLa6AljZrzr2kL8W5Dqk=)
                          7: 3133382e3235352e3232362e302f32342d3234203d3e20323633393839.roa (hash: TPE8WRPn/ySNMno50RFx2PDkjhQ+jnnzgDGnADx4Elo=)
                          8: 3133382e3235352e3232362e302f32332d3233203d3e20323633393839.roa (hash: lCwNP3HkpIcUd1XparWA246WuqMys0zbejFRxxuaaUQ=)
                          9: 323830343a323866343a3a2f33342d3334203d3e20323633393839.roa (hash: brNKTr/cDi7oaR0W+6nKcaps9sguVcvXkBtPNcljLYE=)
                          10: 323830343a323866343a3a2f33332d3333203d3e20323633393839.roa (hash: lcrUyD5/IXbHEQC4gWiPl37WsmhMcojNDbEIs38M2lA=)
                          11: 3133382e3235352e3232372e302f32342d3234203d3e20323633393839.roa (hash: bJ/dLqqJ5aylVWwMxywpTeTqwxK/cDJCUQz/QJkW/bY=)
                          12: 323830343a323866343a383030303a3a2f33342d3334203d3e20323633393839.roa (hash: clyfAn+4EEJv5lQAmtlVwbOLT4tW7D40WwRpzqMr2fA=)
                          13: 323830343a323866343a383030303a3a2f33332d3333203d3e20323633393839.roa (hash: f2sJTu9vHDI2YXhetlyr0S+7Ho0UDLVAmZVoeWeBNt8=)
                          14: 323830343a323866343a633030303a3a2f33342d3334203d3e20323633393839.roa (hash: BQI2x6vQh7+kF+Uo0XBW2dq4HDbVeQMU4UYWqfvX+1M=)
                          15: 3133382e3235352e3232352e302f32342d3234203d3e20323633393839.roa (hash: lV5cXGE0HuTN1EmMnGpusIeyDU4OTrYX7RiGaOUjLQw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.crl
                          rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 15:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:69:c1:25:4c:3e:3d:b7:bd:ce:8e:f8:44:38:67:3d:d9:4e:df:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E2CFADE0DB965B830D4C92D2183921AE113D2A2
        Validity
            Not Before: Oct 13 13:12:59 2026 GMT
            Not After : Oct 14 16:17:59 2026 GMT
        Subject: CN=CA94471F034A40531F316C8C081B42A742CB7C5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:58:80:4d:84:19:e7:23:84:e7:39:75:f2:1c:
                    24:4f:08:3d:6b:9e:3e:75:4e:c9:aa:4b:e6:b1:7a:
                    0e:de:b5:a8:b8:4d:dc:0b:b3:21:5d:2c:74:40:13:
                    67:31:76:18:ca:6e:b3:eb:b8:6d:95:a8:fb:5b:9a:
                    2b:7b:41:94:c4:c4:e0:7c:d3:bf:48:34:02:35:73:
                    50:78:03:9e:56:1c:74:c8:c2:5a:a6:d0:a0:d4:cd:
                    da:c1:6b:0a:e6:53:be:31:cf:cf:67:98:1e:86:4b:
                    cf:ad:6f:9c:23:0c:4b:c5:35:c9:24:05:65:c7:76:
                    f9:cc:93:e2:40:05:8e:de:9e:29:36:ad:a7:79:c6:
                    4b:78:bf:04:4c:07:71:a5:e3:74:1b:bf:df:70:70:
                    1b:11:67:36:e7:b3:59:5e:76:b9:9e:1e:b2:ad:75:
                    24:81:7f:03:8b:20:e8:1c:dc:76:00:3d:48:1c:bd:
                    78:4f:eb:27:2b:22:87:2a:87:0b:e1:b9:4a:78:36:
                    e5:14:b8:76:7a:89:e0:8c:b2:15:da:30:c1:69:a8:
                    34:52:ce:e2:73:aa:ea:df:c2:76:76:35:fb:68:1d:
                    4c:01:92:3b:58:94:10:f5:6e:c4:a8:18:38:ad:1d:
                    37:25:d1:62:4d:cc:60:c0:c7:ff:9c:85:fc:84:38:
                    e7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:94:47:1F:03:4A:40:53:1F:31:6C:8C:08:1B:42:A7:42:CB:7C:5F
            X509v3 Authority Key Identifier:
                keyid:6E:2C:FA:DE:0D:B9:65:B8:30:D4:C9:2D:21:83:92:1A:E1:13:D2:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:d4:a7:94:6f:6a:c6:ea:a9:32:fd:60:d1:08:de:81:01:b9:
         ee:40:6c:26:9c:f6:2c:22:c0:e9:94:7b:4e:0b:8a:80:47:5e:
         c7:e4:31:c8:1e:7c:6a:df:82:fe:4d:b3:3a:12:95:0f:29:41:
         76:f3:44:58:91:13:cb:b1:18:07:99:7c:d0:85:65:1a:46:53:
         af:c4:37:ca:c3:23:ef:c4:3f:75:6d:3a:49:28:7b:78:ec:da:
         1a:e7:34:3f:02:1a:ea:9b:74:a8:4e:39:17:44:d4:61:3d:62:
         51:0e:65:76:7d:fb:4f:99:49:f7:97:79:28:f6:c5:1c:6a:84:
         91:ae:2b:d4:b2:b7:b0:73:85:73:22:8e:b7:ce:cd:02:95:b3:
         43:a6:b1:86:e2:b3:36:fc:79:e1:17:0d:3f:9d:a6:8e:83:85:
         8e:68:da:46:d6:ec:4c:a2:2d:b9:d2:e7:d4:92:54:ad:87:94:
         fa:c6:c8:eb:a8:ca:54:2f:00:4c:c7:c8:e4:93:a3:bc:44:f1:
         2c:ab:6d:03:69:86:85:de:23:18:44:f5:d9:11:ed:ea:68:da:
         a6:f5:80:eb:89:22:f3:89:b6:5e:60:d7:6a:24:f6:47:c0:2d:
         92:14:42:01:d1:41:29:7c:2e:26:56:3b:22:d1:9b:08:a5:95:
         0a:d3:bf:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:20:49 2026 by rpki-client