Error: rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.mft
File:                     6295613937297D5F10674AC45D3ACAB7545474C7.mft (raw, json)
Hash identifier:          ROt5a58YZZaRlHGPAzMhIqPeoq/W60hq0cvpFYEvDE8=
Subject key identifier:   A6:DC:E6:6C:5A:61:E2:A2:CE:2E:66:2F:49:10:4F:6C:08:50:B7:7B
Authority key identifier: 62:95:61:39:37:29:7D:5F:10:67:4A:C4:5D:3A:CA:B7:54:54:74:C7
Certificate issuer:       /CN=6295613937297D5F10674AC45D3ACAB7545474C7
Certificate serial:       4FBA0BCE0CC8141C9F331DFF26D1F90A18C889DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.mft
Manifest number:          0402
Signing time:             Thu 15 Oct 2026 07:28:23 +0000
Manifest this update:     Thu 15 Oct 2026 07:23:23 +0000
Manifest next update:     Fri 16 Oct 2026 07:55:23 +0000
Files and hashes:         1: 323830343a326637303a343030303a3a2f34302d3430203d3e20323634383931.roa (hash: VP6/e/nSazzAd3NSpgJsMRQi3AVLS8uz2+P6rpSOKnQ=)
                          2: 323830343a326637303a363030303a3a2f34302d3430203d3e20323634383931.roa (hash: 1CpLJgBZ+6FadzIOEkLyZf4imc+8bSemfgOHonLEeNk=)
                          3: 3136382e3232372e3131342e302f32342d3234203d3e20323634383931.roa (hash: /4fWziM9U3nSmPZfElZTP8yOZy+fUtdGWWJ2QyWcDoA=)
                          4: 3136382e3232372e3131332e302f32342d3234203d3e20323634383931.roa (hash: 2CT1TO4QjqGBz/WOvyMPoesL2w/fqtFMGSzr1NvhqiM=)
                          5: 6295613937297D5F10674AC45D3ACAB7545474C7.crl (hash: bSUWE2AQd+pdZhLlgXwGg7DHoI2IIGuFolMUg2X3Yao=)
                          6: 3136382e3232372e3131352e302f32342d3234203d3e20323634383931.roa (hash: +7Jjrw9LTrceEbHh8Jj+E2YrvPalObU6+roW77Z/+cs=)
                          7: 3136382e3232372e3131322e302f32322d3232203d3e20323634383931.roa (hash: 3PT21yrRFXoWY+Lj38++Fa++0QLs7YZDxWRp/vVTEDs=)
                          8: 323830343a326637303a353030303a3a2f34382d3438203d3e20323634383931.roa (hash: lEf3nD38rzvArDc679LvkbZXO4qLP9HX/TVtFey+paA=)
                          9: 323830343a326637303a3a2f33322d3332203d3e20323634383931.roa (hash: gw2kr8iqC2erMFHK8E4vmWOtw1TP0lHRX0o/CnJ8QUI=)
                          10: 323830343a326637303a373030303a3a2f34382d3438203d3e20323634383931.roa (hash: g3okiz+2/0bL2vB6BSWdwfxNP+lWUYkW1h1TDK3da/c=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.crl
                          rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 07:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ba:0b:ce:0c:c8:14:1c:9f:33:1d:ff:26:d1:f9:0a:18:c8:89:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6295613937297D5F10674AC45D3ACAB7545474C7
        Validity
            Not Before: Oct 15 07:23:23 2026 GMT
            Not After : Oct 16 07:55:23 2026 GMT
        Subject: CN=A6DCE66C5A61E2A2CE2E662F49104F6C0850B77B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ca:11:24:f1:20:9d:ca:30:4c:73:52:8d:6e:
                    34:26:2a:86:78:08:c0:1e:e2:6b:89:d9:8b:08:85:
                    b5:ca:a1:82:be:05:4e:da:12:e8:de:8a:b2:0e:3f:
                    b4:fe:c8:c4:4e:72:38:00:ba:8f:4a:cc:93:45:a6:
                    41:6f:2b:ea:d8:8c:2d:44:51:73:c2:c9:c1:8a:ce:
                    eb:70:58:a0:fd:55:ad:db:c9:3f:5d:ed:f2:0b:94:
                    4c:b0:23:3d:68:10:ec:19:63:70:7c:7e:54:c9:22:
                    07:0e:e6:d9:d7:8e:e6:ff:eb:49:17:49:07:78:ac:
                    e6:8a:ca:b9:61:01:a4:01:0f:15:44:24:01:5d:9f:
                    2c:e1:b9:ca:05:4f:0b:cd:60:69:75:03:b4:a4:ed:
                    32:f7:9d:50:a8:02:2c:96:50:18:6f:99:52:90:eb:
                    81:2b:7a:8e:aa:cf:3f:33:d7:e9:d0:e4:31:b2:06:
                    1d:0c:00:f8:fb:05:93:4d:dd:35:35:f1:43:08:35:
                    dc:f2:63:64:1e:bc:33:b6:5f:97:6e:19:63:af:f6:
                    f4:af:88:f0:b1:10:24:af:f2:f8:56:eb:97:93:ac:
                    6a:84:57:97:86:ac:99:30:81:16:a2:13:3d:b2:6d:
                    2f:86:3d:25:d9:c4:24:f7:24:2d:09:56:41:f8:17:
                    42:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:DC:E6:6C:5A:61:E2:A2:CE:2E:66:2F:49:10:4F:6C:08:50:B7:7B
            X509v3 Authority Key Identifier:
                keyid:62:95:61:39:37:29:7D:5F:10:67:4A:C4:5D:3A:CA:B7:54:54:74:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:0a:12:4e:7e:d9:44:4a:bb:fe:9f:a2:70:6f:81:df:c3:69:
         23:0f:4e:a7:2c:13:0d:53:c6:84:92:81:fa:b3:ec:69:ec:cb:
         a4:61:83:46:b2:66:91:5e:11:a4:a9:c9:09:cd:fd:62:93:1f:
         75:ae:1d:33:d5:8e:cb:23:5e:d3:c8:83:37:5d:20:03:03:14:
         f6:f8:ce:ec:33:2a:16:e0:bf:53:b7:a5:0b:42:7e:35:ed:25:
         24:80:8e:2f:e0:40:0a:d0:f8:07:e8:b0:cc:3e:57:2c:45:68:
         f0:b1:f6:e0:a7:a5:6c:71:e9:91:87:ef:07:e1:89:65:7c:6a:
         56:5d:78:79:46:04:41:4d:21:39:81:80:92:9e:ea:94:39:88:
         c3:09:c9:e6:0a:9a:22:78:c2:85:46:9f:c5:c7:cc:2e:47:35:
         bb:96:85:a8:4b:b2:5a:57:39:1c:ed:d8:82:e7:6b:b3:39:86:
         68:cf:68:d3:bf:c1:1e:e0:95:7a:07:d5:6c:01:25:9a:30:c1:
         49:c5:70:6a:b7:84:66:31:d4:88:15:30:e1:f2:79:ba:77:a7:
         ec:6e:a5:5f:c1:c0:96:7b:79:86:66:e2:c2:14:53:58:da:e2:
         aa:00:90:c5:79:0e:65:d9:17:a9:0e:83:13:cc:54:de:79:1e:
         ae:da:c9:c2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUT7oLzgzIFByfMx3/JtH5ChjIidwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjI5NTYxMzkzNzI5N0Q1RjEwNjc0QUM0NUQzQUNBQjc1
NDU0NzRDNzAeFw0yNjEwMTUwNzIzMjNaFw0yNjEwMTYwNzU1MjNaMDMxMTAvBgNV
BAMTKEE2RENFNjZDNUE2MUUyQTJDRTJFNjYyRjQ5MTA0RjZDMDg1MEI3N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMyhEk8SCdyjBMc1KNbjQmKoZ4
CMAe4muJ2YsIhbXKoYK+BU7aEujeirIOP7T+yMROcjgAuo9KzJNFpkFvK+rYjC1E
UXPCycGKzutwWKD9Va3byT9d7fILlEywIz1oEOwZY3B8flTJIgcO5tnXjub/60kX
SQd4rOaKyrlhAaQBDxVEJAFdnyzhucoFTwvNYGl1A7Sk7TL3nVCoAiyWUBhvmVKQ
64Ereo6qzz8z1+nQ5DGyBh0MAPj7BZNN3TU18UMINdzyY2QevDO2X5duGWOv9vSv
iPCxECSv8vhW65eTrGqEV5eGrJkwgRaiEz2ybS+GPSXZxCT3JC0JVkH4F0I1AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUptzmbFph4qLOLmYvSRBPbAhQt3swHwYDVR0j
BBgwFoAUYpVhOTcpfV8QZ0rEXTrKt1RUdMcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnhhYUtCa1JSUEw1QVRHcldCMXdYR0RmVE51QnFWQ1VRWmVtdzhZcXUx
TTEvMC82Mjk1NjEzOTM3Mjk3RDVGMTA2NzRBQzQ1RDNBQ0FCNzU0NTQ3NEM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYyOTU2MTM5MzcyOTdENUYx
MDY3NEFDNDVEM0FDQUI3NTQ1NDc0QzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QnhhYUtCa1JSUEw1QVRHcldCMXdYR0RmVE51QnFWQ1VRWmVtdzhZcXUxTTEvMC82
Mjk1NjEzOTM3Mjk3RDVGMTA2NzRBQzQ1RDNBQ0FCNzU0NTQ3NEM3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA4QoSTn7ZREq7/p+icG+B38NpIw9OpywTDVPGhJKB+rPsaezLpGGDRrJmkV4R
pKnJCc39YpMfda4dM9WOyyNe08iDN10gAwMU9vjO7DMqFuC/U7elC0J+Ne0lJICO
L+BACtD4B+iwzD5XLEVo8LH24KelbHHpkYfvB+GJZXxqVl14eUYEQU0hOYGAkp7q
lDmIwwnJ5gqaInjChUafxcfMLkc1u5aFqEuyWlc5HO3YgudrszmGaM9o07/BHuCV
egfVbAElmjDBScVwareEZjHUiBUw4fJ5unen7G6lX8HAlnt5hmbiwhRTWNriqgCQ
xXkOZdkXqQ6DE8xU3nkertrJwg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 15:45:16 2026 by rpki-client