Error: rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.mft
File:                     6933A3E9616B92D4A6606885C3C206355CC19035.mft (raw, json)
Hash identifier:          WgNpDwFZI13W8Sp0lFUXEY1uG7gF3K1ZxmNbyYyIQ4k=
Subject key identifier:   58:5A:61:BB:60:DB:6B:CF:5F:30:2A:7F:D9:77:8C:3E:43:1B:10:BD
Authority key identifier: 69:33:A3:E9:61:6B:92:D4:A6:60:68:85:C3:C2:06:35:5C:C1:90:35
Certificate issuer:       /CN=6933A3E9616B92D4A6606885C3C206355CC19035
Certificate serial:       246E22CF448DA7BBE2C87865B1CB2E59F927CE5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.mft
Manifest number:          04CE
Signing time:             Tue 13 Oct 2026 10:40:00 +0000
Manifest this update:     Tue 13 Oct 2026 10:35:00 +0000
Manifest next update:     Wed 14 Oct 2026 12:08:00 +0000
Files and hashes:         1: 3133382e3235352e3232322e302f32342d3234203d3e20323633393934.roa (hash: cAzlYh8b6RCiGbn91HtPJeqh7dwk9+M458xJfiyPWy0=)
                          2: 3133382e3235352e3232302e302f32342d3234203d3e20323633393934.roa (hash: 9Sx57ql1F40C5ENOwJlkVsatnAkIhiDktSxmMsuOgzU=)
                          3: 323830343a323930633a3a2f33322d3332203d3e20323633393934.roa (hash: 6ryG52bY6saNhCKesP91VeE/QoLqbPzz9NFkoko9/4o=)
                          4: 3136382e3139362e3134342e302f32322d3234203d3e20323633393934.roa (hash: 1RZzwZyA4JiBFAMr8RcWe8t5k0vTGb9H9oFgGHfcc4M=)
                          5: 3133382e3235352e3232302e302f32322d3232203d3e20323633393934.roa (hash: HUtd2PwavtV/aHVJ5SqtM1p9Ne4ytgJcSvqgVdzUYHk=)
                          6: 6933A3E9616B92D4A6606885C3C206355CC19035.crl (hash: laaFSihyKC7VsGmRpibE858TumRNJZyMqeWTLg8tF1c=)
                          7: 323830343a323930633a3a2f33362d3336203d3e20323633393934.roa (hash: OoFY8c3GVM//33sDtQyF/fuLC3kPOTFUk0efCFmrndM=)
                          8: 3133382e3235352e3232302e302f32332d3233203d3e20323633393934.roa (hash: 2f9g01RESvHHu+LczLkOSZeRFpFhquSwzXumF0RBcqg=)
                          9: 3133382e3235352e3232322e302f32332d3233203d3e20323633393934.roa (hash: HgzPMi+3+vgyYVVXP73g7+2gvE9b5T+7op9Cs+1VLDA=)
                          10: 3133382e3235352e3232312e302f32342d3234203d3e20323633393934.roa (hash: nWVDzNyxapAgU1a6LoX6iJgZ4YlVJFENcaW0t5HXbzc=)
                          11: 3133382e3235352e3232332e302f32342d3234203d3e20323633393934.roa (hash: dS5VtaYDZZdJ7b2jJTA9v5Qu2JIOgrgbW0pzLhX5q88=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.crl
                          rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 12:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:6e:22:cf:44:8d:a7:bb:e2:c8:78:65:b1:cb:2e:59:f9:27:ce:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6933A3E9616B92D4A6606885C3C206355CC19035
        Validity
            Not Before: Oct 13 10:35:00 2026 GMT
            Not After : Oct 14 12:08:00 2026 GMT
        Subject: CN=585A61BB60DB6BCF5F302A7FD9778C3E431B10BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d3:ba:64:e4:03:b7:aa:fc:b0:8b:20:a1:f2:
                    e0:3e:a4:a3:70:90:83:66:c1:89:ca:df:07:f5:8f:
                    9b:10:a9:48:01:09:4d:85:51:c0:8e:55:4e:02:3e:
                    a2:65:f2:f8:9c:dd:71:b1:32:58:c7:ad:f9:2a:5a:
                    05:40:d6:3f:73:14:ae:69:18:35:53:5e:20:bb:99:
                    d4:88:b5:4d:b5:2f:27:f7:e3:a9:00:45:c9:a9:43:
                    0f:c9:22:f4:30:fa:cf:1d:0d:70:5c:fc:18:b2:7d:
                    4c:27:9e:23:bb:0b:2d:9f:e0:44:4c:47:83:52:3b:
                    2c:7f:07:d7:85:b3:61:4d:af:15:5f:7a:24:f8:35:
                    5e:ff:c5:d4:a2:ce:9e:20:b7:17:0f:aa:94:c6:dd:
                    62:25:ad:01:fb:d3:73:f6:c3:a9:4c:a1:0f:e4:cc:
                    6d:b7:d8:1b:97:e2:4b:94:4f:1a:56:6b:f7:2b:d0:
                    80:99:ef:82:50:d1:97:43:d0:f7:7f:54:14:47:2a:
                    f8:66:34:d3:87:af:11:dc:0d:f9:8f:b2:c8:91:70:
                    22:cf:b2:99:76:98:63:76:db:35:c0:62:46:81:2d:
                    15:f8:1d:cf:aa:9a:de:c4:4c:f8:c5:c9:70:9d:b7:
                    36:b7:c0:de:b9:4b:4d:a7:9a:90:cb:84:72:c2:db:
                    2d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:5A:61:BB:60:DB:6B:CF:5F:30:2A:7F:D9:77:8C:3E:43:1B:10:BD
            X509v3 Authority Key Identifier:
                keyid:69:33:A3:E9:61:6B:92:D4:A6:60:68:85:C3:C2:06:35:5C:C1:90:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:62:af:66:98:03:93:34:ff:b0:3e:95:cc:7d:3a:7a:ba:ec:
         a6:cf:b6:03:b7:3b:60:6d:d4:24:fc:9b:75:90:59:67:d7:94:
         56:0d:02:ac:7d:64:b0:cb:bd:d7:19:8a:02:9a:22:1e:91:fa:
         59:8d:64:96:24:65:b0:61:08:22:9b:77:dd:48:b1:6a:ca:26:
         84:af:61:6a:17:e7:16:a5:07:24:b0:f0:28:64:c1:64:82:8e:
         7a:72:0b:b8:36:e1:c0:20:ff:dd:aa:e4:c4:1f:20:02:e8:8a:
         1e:a0:16:68:78:f6:d1:44:b6:69:0e:51:5e:89:bd:3f:2d:06:
         fd:9e:7e:ea:5b:61:ba:c4:18:20:16:9a:f6:43:b1:a5:13:d5:
         bc:a1:da:9e:ed:c2:e3:86:df:7c:ef:5a:c5:88:7a:36:4f:3e:
         fd:9d:cf:b4:d2:b7:86:f8:3b:f9:a9:b5:a7:c5:fa:b9:4a:af:
         0f:c2:df:ea:6e:fa:ab:0c:eb:5d:f9:95:1a:42:53:0a:18:24:
         a5:46:40:46:22:73:5a:54:9c:ab:cc:76:ef:84:7b:04:57:b8:
         0f:cb:a8:dd:96:8a:1f:e9:71:cd:e3:11:1b:21:f2:73:62:dd:
         42:f9:b7:54:d2:73:9a:5f:1e:97:9f:28:54:d1:c7:65:e2:a8:
         7b:41:9f:23
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJG4iz0SNp7viyHhlscsuWfknzl8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjkzM0EzRTk2MTZCOTJENEE2NjA2ODg1QzNDMjA2MzU1
Q0MxOTAzNTAeFw0yNjEwMTMxMDM1MDBaFw0yNjEwMTQxMjA4MDBaMDMxMTAvBgNV
BAMTKDU4NUE2MUJCNjBEQjZCQ0Y1RjMwMkE3RkQ5Nzc4QzNFNDMxQjEwQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo07pk5AO3qvywiyCh8uA+pKNw
kINmwYnK3wf1j5sQqUgBCU2FUcCOVU4CPqJl8vic3XGxMljHrfkqWgVA1j9zFK5p
GDVTXiC7mdSItU21Lyf346kARcmpQw/JIvQw+s8dDXBc/BiyfUwnniO7Cy2f4ERM
R4NSOyx/B9eFs2FNrxVfeiT4NV7/xdSizp4gtxcPqpTG3WIlrQH703P2w6lMoQ/k
zG232BuX4kuUTxpWa/cr0ICZ74JQ0ZdD0Pd/VBRHKvhmNNOHrxHcDfmPssiRcCLP
spl2mGN22zXAYkaBLRX4Hc+qmt7ETPjFyXCdtza3wN65S02nmpDLhHLC2y1pAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUWFphu2Dba89fMCp/2XeMPkMbEL0wHwYDVR0j
BBgwFoAUaTOj6WFrktSmYGiFw8IGNVzBkDUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWhjU1ZnQTdHVUg0cWtBc2tzanJDYlhGdUdOeFdTZmtDTVFaNUxVVTZ4
dmkvMS82OTMzQTNFOTYxNkI5MkQ0QTY2MDY4ODVDM0MyMDYzNTVDQzE5MDM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5MzNBM0U5NjE2QjkyRDRB
NjYwNjg4NUMzQzIwNjM1NUNDMTkwMzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QWhjU1ZnQTdHVUg0cWtBc2tzanJDYlhGdUdOeFdTZmtDTVFaNUxVVTZ4dmkvMS82
OTMzQTNFOTYxNkI5MkQ0QTY2MDY4ODVDM0MyMDYzNTVDQzE5MDM1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAW2KvZpgDkzT/sD6VzH06errsps+2A7c7YG3UJPybdZBZZ9eUVg0CrH1ksMu9
1xmKApoiHpH6WY1kliRlsGEIIpt33UixasomhK9hahfnFqUHJLDwKGTBZIKOenIL
uDbhwCD/3arkxB8gAuiKHqAWaHj20US2aQ5RXom9Py0G/Z5+6lthusQYIBaa9kOx
pRPVvKHanu3C44bffO9axYh6Nk8+/Z3PtNK3hvg7+am1p8X6uUqvD8Lf6m76qwzr
XfmVGkJTChgkpUZARiJzWlScq8x274R7BFe4D8uo3ZaKH+lxzeMRGyHyc2LdQvm3
VNJzml8el58oVNHHZeKoe0GfIw==
-----END CERTIFICATE-----
Generated at Wed Oct 14 04:20:22 2026 by rpki-client