Error: rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/783CF2D02131A21E333113BEEE878BC38B6104B6.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/783CF2D02131A21E333113BEEE878BC38B6104B6.mft
File:                     783CF2D02131A21E333113BEEE878BC38B6104B6.mft (raw, json)
Hash identifier:          xP+Mjwwg4Cmo/ZhcUokXD80Pi+nfYjvwWFOraMXCjHE=
Subject key identifier:   DD:19:8F:0F:25:B1:99:64:D3:BE:FC:4B:32:92:BB:97:5B:9B:38:C1
Authority key identifier: 78:3C:F2:D0:21:31:A2:1E:33:31:13:BE:EE:87:8B:C3:8B:61:04:B6
Certificate issuer:       /CN=783CF2D02131A21E333113BEEE878BC38B6104B6
Certificate serial:       60C27EF2E8FB7B642314E544E788AC8AC3E12356
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/783CF2D02131A21E333113BEEE878BC38B6104B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/783CF2D02131A21E333113BEEE878BC38B6104B6.mft
Manifest number:          0327
Signing time:             Wed 14 Oct 2026 04:28:00 +0000
Manifest this update:     Wed 14 Oct 2026 04:23:00 +0000
Manifest next update:     Thu 15 Oct 2026 05:23:00 +0000
Files and hashes:         1: 323830343a313037383a3a2f33322d3438203d3e20323633363337.roa (hash: KBQCdFHplWquuT+kab6DZbpDzKtkvdcAkkBTGtbdW8w=)
                          2: 783CF2D02131A21E333113BEEE878BC38B6104B6.crl (hash: pJYthK6ktE8hcGmseb3VSdwq1ujPskxsX7xrBkylnRU=)
                          3: 3137392e3132372e33322e302f32312d3235203d3e20323633363337.roa (hash: KKtwa53J2lrY3PPRBn6nepAkzXidOs/IwnWWY6AmEXI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/783CF2D02131A21E333113BEEE878BC38B6104B6.crl
                          rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/783CF2D02131A21E333113BEEE878BC38B6104B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/783CF2D02131A21E333113BEEE878BC38B6104B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 05:23:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c2:7e:f2:e8:fb:7b:64:23:14:e5:44:e7:88:ac:8a:c3:e1:23:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=783CF2D02131A21E333113BEEE878BC38B6104B6
        Validity
            Not Before: Oct 14 04:23:00 2026 GMT
            Not After : Oct 15 05:23:00 2026 GMT
        Subject: CN=DD198F0F25B19964D3BEFC4B3292BB975B9B38C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:37:f6:d8:60:37:09:35:72:7d:1f:66:f4:88:
                    8f:87:ee:41:a0:1c:c2:15:18:41:83:e3:2e:f8:87:
                    41:d8:32:81:e7:70:75:73:6d:76:6e:8f:38:48:8e:
                    27:04:a6:52:23:5d:18:02:c8:02:86:20:fd:44:c4:
                    6c:65:40:8a:92:81:a7:18:c1:c1:d7:1d:93:cf:93:
                    a0:3a:db:81:c4:54:85:fd:76:4f:fa:f5:8b:d2:1d:
                    6a:c4:bb:97:48:cf:75:f2:55:16:30:80:51:18:8a:
                    88:ed:c7:d0:19:ae:0c:54:12:03:b4:fe:17:f5:c9:
                    c9:4c:49:dd:7d:bf:e5:a9:0e:d5:8b:d7:b1:d8:46:
                    6c:48:8f:89:38:db:9d:12:11:cc:d1:7c:da:0c:51:
                    e6:0c:60:3a:38:df:bb:26:41:3f:4e:c4:f3:d1:b6:
                    c0:d0:b8:cf:53:a6:59:1f:7f:77:66:4f:7e:91:b0:
                    8d:a3:db:6c:3e:ee:7d:10:6d:3e:44:5d:80:6d:0d:
                    6c:26:b0:bd:23:4c:05:de:45:d7:25:ae:a7:3b:e6:
                    9e:3f:10:9d:36:f9:c9:11:04:5a:b9:ce:93:cd:09:
                    d6:f8:6c:0f:a3:5d:e0:8d:5c:90:9f:ce:e7:33:a3:
                    ff:bc:4d:51:7d:08:a9:21:7f:eb:1c:b9:a4:52:dd:
                    00:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:19:8F:0F:25:B1:99:64:D3:BE:FC:4B:32:92:BB:97:5B:9B:38:C1
            X509v3 Authority Key Identifier:
                keyid:78:3C:F2:D0:21:31:A2:1E:33:31:13:BE:EE:87:8B:C3:8B:61:04:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/783CF2D02131A21E333113BEEE878BC38B6104B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/783CF2D02131A21E333113BEEE878BC38B6104B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/783CF2D02131A21E333113BEEE878BC38B6104B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:de:ab:35:87:8c:6e:8e:3d:48:9e:04:c0:71:d0:69:c9:6c:
         7c:05:87:7d:b0:82:78:81:91:39:e4:47:31:89:14:2b:6b:9a:
         c3:17:99:9f:d8:37:12:6b:9c:c9:8d:b5:aa:7c:80:55:0f:02:
         17:9c:ea:05:ef:db:3c:20:71:1a:cd:5c:d6:e8:f6:5a:28:02:
         d1:2e:6c:40:61:ae:ec:3a:eb:23:4c:dc:17:d1:f5:9d:8c:0d:
         85:74:13:51:b6:60:a2:e3:97:59:eb:30:dc:08:90:4d:59:fa:
         34:3c:fb:1a:1c:3e:2f:91:c9:f8:53:2d:9b:15:bf:18:51:a5:
         df:e6:4c:71:3f:09:55:e9:d9:70:92:87:35:1a:f1:70:d0:6f:
         53:52:19:d9:95:bb:1c:61:4a:0f:ea:e6:ca:2d:b7:b1:2e:fd:
         fb:94:27:3f:8e:4d:fd:85:95:66:de:01:27:51:b6:83:69:b1:
         5a:83:37:07:9d:52:c3:15:d6:cc:86:f9:c4:df:d6:d3:95:b3:
         7c:1b:d5:f0:bf:c7:17:a9:51:95:26:74:ae:c3:49:59:6d:a0:
         13:ad:c9:aa:2a:7e:ab:bd:05:4a:8f:fe:6d:b5:87:0a:9b:29:
         4d:73:38:29:fd:13:62:94:28:d4:fd:f4:0f:0c:d4:a5:90:93:
         84:c6:39:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:15:08 2026 by rpki-client