Error: rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft
File:                     6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft (raw, json)
Hash identifier:          /h6B91TgmqIsj6htK8rzSrZvgzgTt0OIPZT/b79RK1M=
Subject key identifier:   70:C3:7E:31:B0:FD:FF:DE:15:C3:5C:34:E0:D9:CC:18:41:EB:B0:AC
Authority key identifier: 6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14
Certificate issuer:       /CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
Certificate serial:       40E9331FE854EA1941BB762142ACF0BE0C943502
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft
Manifest number:          04E5
Signing time:             Sun 01 Nov 2026 22:40:02 +0000
Manifest this update:     Sun 01 Nov 2026 22:35:02 +0000
Manifest next update:     Tue 03 Nov 2026 01:07:02 +0000
Files and hashes:         1: 3137302e3135302e3233342e302f32332d3233203d3e203631393138.roa (hash: I0nH6WNoZYq6vD9CdUZFNk3vEWMtpdxvWUjlGcJsQo4=)
                          2: 3137302e3135302e3233322e302f32322d3232203d3e203631393138.roa (hash: KQqNO2dAr6DGUYzi2Mfjy/X96oWjSN2tB04bB9CCVRQ=)
                          3: 323830343a313731343a3a2f33322d3332203d3e203631393138.roa (hash: 5KoFBm8izHkGvxWJP07w+TI86QZt/YACE4VU6SgVOTg=)
                          4: 3137302e3135302e3233322e302f32342d3234203d3e203631393138.roa (hash: UhCtHuZTZGaKLEQtOFgnU7ImjMruubBq7aZyaZeUpzo=)
                          5: 3137372e39322e3136342e302f32322d3232203d3e203631393138.roa (hash: ub8XR4e/GVYaJg8sEKr6dHaKeeUizUiwf9Pag8GL6uo=)
                          6: 3137372e39322e3136342e302f32342d3234203d3e203631393138.roa (hash: QflKVL4gyoZt8h6BeJzE9d1mQeF6TZLetnBU7KJJuR8=)
                          7: 3137372e39322e3136372e302f32342d3234203d3e203631393138.roa (hash: EOZRyBx+X12JgsLaaI+iVhQX7UK4lskQADgqcfVDhnM=)
                          8: 3137302e3135302e3233352e302f32342d3234203d3e203631393138.roa (hash: LXkXpj/k39vHqv9sEVEWX/rh5ZuEppUnYgDxhqN9/Ko=)
                          9: 6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl (hash: Rv2r2uYL4+upyMoZnh9CM4NvMGgZKL73ZjiI7mkaN8E=)
                          10: 3137372e39322e3136362e302f32342d3234203d3e203631393138.roa (hash: 9B2Oe3hiwJvKy2VtQYEstZlAtsFxXOldACf9aQ9nkLc=)
                          11: 3137372e39322e3136352e302f32342d3234203d3e203631393138.roa (hash: A9R+oaZNynvfAacRhEXDQ9mY+3Y33iiHu3RFSE7dVQk=)
                          12: 3137302e3135302e3233322e302f32332d3233203d3e203631393138.roa (hash: RjaaO7igPpS8DQGXaaaiWbfO5/U/Bj00LIq7uO0HmFk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl
                          rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 01:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:e9:33:1f:e8:54:ea:19:41:bb:76:21:42:ac:f0:be:0c:94:35:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
        Validity
            Not Before: Nov  1 22:35:02 2026 GMT
            Not After : Nov  3 01:07:02 2026 GMT
        Subject: CN=70C37E31B0FDFFDE15C35C34E0D9CC1841EBB0AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e5:ec:2d:9f:c4:cd:52:a1:9b:81:86:4f:1f:
                    85:7e:62:3e:fe:2f:3a:85:7b:de:b1:08:aa:c3:36:
                    d6:0b:61:a1:3f:a8:c8:05:54:c9:e0:84:d8:3c:08:
                    2d:8d:a1:0a:99:f4:1d:83:02:0f:fb:4a:3d:e4:3e:
                    e7:1b:a8:de:70:44:d1:98:55:7b:7d:e2:5c:4f:c9:
                    e4:16:02:39:1c:c5:9a:23:c3:d0:c2:17:27:21:cf:
                    0b:77:03:4e:f3:7c:99:58:b1:9a:99:fe:38:d8:cd:
                    a8:c8:c3:d7:f5:fe:5c:aa:76:5f:42:f1:45:b1:f1:
                    e3:f3:f2:f2:8b:84:15:2d:b1:40:7f:a9:42:bc:bb:
                    3e:72:fa:df:32:b7:ca:ee:bb:ba:f6:8a:89:75:bd:
                    ec:d8:1f:25:46:b2:10:db:6f:c1:84:2c:6d:fa:26:
                    e6:9e:19:44:c3:30:85:97:6b:99:6c:59:61:c8:13:
                    79:31:c9:68:10:cc:98:7e:20:3d:b3:ef:a9:96:56:
                    4c:bc:65:33:99:58:73:c0:b2:dc:a7:cb:55:99:a8:
                    fb:62:43:86:17:0f:dc:2e:4e:ba:8d:ce:1a:13:34:
                    5b:c4:71:2c:ed:4d:19:33:17:e6:e6:7c:2e:ed:39:
                    4d:1f:cc:a8:26:94:d8:bb:e4:41:ea:26:dc:b9:1e:
                    a6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C3:7E:31:B0:FD:FF:DE:15:C3:5C:34:E0:D9:CC:18:41:EB:B0:AC
            X509v3 Authority Key Identifier:
                keyid:6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:e0:46:5a:02:2f:14:b7:3e:26:9e:b8:e7:6b:f2:31:a6:1e:
         69:75:26:e9:a2:61:9f:84:80:78:ad:a0:76:98:f1:a3:44:02:
         37:b1:2a:94:be:d6:87:8f:9a:ec:31:55:d7:d6:f5:ca:52:f7:
         81:1f:64:7a:26:63:75:8b:6f:73:75:9b:9c:66:11:12:eb:3e:
         b2:13:09:e4:75:5b:00:43:9d:a8:0d:b2:c7:87:1a:24:58:10:
         5b:61:45:f6:41:3a:32:e5:c2:30:4b:5f:2c:e1:95:62:c0:52:
         09:cd:27:95:fd:4e:72:fe:93:e8:28:c8:ba:a2:46:e7:86:94:
         95:f8:19:89:53:a2:13:aa:f6:7f:72:06:bf:58:25:d0:63:08:
         b6:16:51:34:8b:c0:f9:ef:61:9f:cb:a1:29:63:ac:e0:da:bf:
         20:8a:ae:35:e8:0b:41:f6:ee:3f:19:bb:d2:e1:70:29:0f:4c:
         4c:bb:fe:fe:6a:4a:df:f0:19:b1:fb:3b:ee:24:1d:2d:33:48:
         ad:30:1e:15:a6:0e:b2:90:80:90:1b:dd:29:86:a8:54:5c:7c:
         c3:d4:2e:cd:03:27:e1:20:6a:8c:fb:cd:00:a6:2b:c6:19:89:
         30:39:5f:9c:13:91:90:46:53:94:28:0d:00:76:af:dd:51:42:
         e7:5c:8f:ad
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQOkzH+hU6hlBu3YhQqzwvgyUNQIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkYzNkVDMzM0ODcwOTA4QTAxQ0JGN0I1OUJDQjA1QTNB
NTZCM0QxNDAeFw0yNjExMDEyMjM1MDJaFw0yNjExMDMwMTA3MDJaMDMxMTAvBgNV
BAMTKDcwQzM3RTMxQjBGREZGREUxNUMzNUMzNEUwRDlDQzE4NDFFQkIwQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi5ewtn8TNUqGbgYZPH4V+Yj7+
LzqFe96xCKrDNtYLYaE/qMgFVMnghNg8CC2NoQqZ9B2DAg/7Sj3kPucbqN5wRNGY
VXt94lxPyeQWAjkcxZojw9DCFychzwt3A07zfJlYsZqZ/jjYzajIw9f1/lyqdl9C
8UWx8ePz8vKLhBUtsUB/qUK8uz5y+t8yt8ruu7r2iol1vezYHyVGshDbb8GELG36
JuaeGUTDMIWXa5lsWWHIE3kxyWgQzJh+ID2z76mWVky8ZTOZWHPAstyny1WZqPti
Q4YXD9wuTrqNzhoTNFvEcSztTRkzF+bmfC7tOU0fzKgmlNi75EHqJty5HqbrAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUcMN+MbD9/94Vw1w04NnMGEHrsKwwHwYDVR0j
BBgwFoAUbzbsM0hwkIoBy/e1m8sFo6VrPRQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUdKcENUUW52NmhDeEZzSzg4NzVwM3ZBQ1F6NjdBTUwxRGFRM1Z3ZFFj
NHovMS82RjM2RUMzMzQ4NzA5MDhBMDFDQkY3QjU5QkNCMDVBM0E1NkIzRDE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGMzZFQzMzNDg3MDkwOEEw
MUNCRjdCNTlCQ0IwNUEzQTU2QjNEMTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NUdKcENUUW52NmhDeEZzSzg4NzVwM3ZBQ1F6NjdBTUwxRGFRM1Z3ZFFjNHovMS82
RjM2RUMzMzQ4NzA5MDhBMDFDQkY3QjU5QkNCMDVBM0E1NkIzRDE0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKeBGWgIvFLc+Jp6452vyMaYeaXUm6aJhn4SAeK2gdpjxo0QCN7EqlL7Wh4+a
7DFV19b1ylL3gR9keiZjdYtvc3WbnGYREus+shMJ5HVbAEOdqA2yx4caJFgQW2FF
9kE6MuXCMEtfLOGVYsBSCc0nlf1Ocv6T6CjIuqJG54aUlfgZiVOiE6r2f3IGv1gl
0GMIthZRNIvA+e9hn8uhKWOs4Nq/IIquNegLQfbuPxm70uFwKQ9MTLv+/mpK3/AZ
sfs77iQdLTNIrTAeFaYOspCAkBvdKYaoVFx8w9QuzQMn4SBqjPvNAKYrxhmJMDlf
nBORkEZTlCgNAHav3VFC51yPrQ==
-----END CERTIFICATE-----
Generated at Mon Nov 2 06:53:01 2026 by rpki-client