Error: rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.mft
File:                     6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.mft (raw, json)
Hash identifier:          9AlUMZu8aD6sZHOx3TEEwPQvJ3+ZZSNU5ZtcxUuOhh8=
Subject key identifier:   97:1A:00:FE:CC:1C:05:FF:25:FB:26:E1:16:48:84:01:DD:C2:F3:5F
Authority key identifier: 6E:0E:6A:39:72:47:D4:96:E3:9C:0A:78:DF:B1:E5:1A:71:DB:AA:B5
Certificate issuer:       /CN=6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5
Certificate serial:       21B972E0C4EA8CF557A6B6A372D3B2552AB62B90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.mft
Manifest number:          04B2
Signing time:             Mon 26 Oct 2026 13:25:27 +0000
Manifest this update:     Mon 26 Oct 2026 13:20:27 +0000
Manifest next update:     Tue 27 Oct 2026 16:09:27 +0000
Files and hashes:         1: 6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.crl (hash: m/7qNftP/FuMHy+9aVLJL4XruF9cyFxf2H1B4UdMmpE=)
                          2: 3230302e35322e3233342e302f32342d3234203d3e20323731303139.roa (hash: kwrqZj4zLjCZpzMSrQEHv5X6eTchYKi+kDMFX2UmPR0=)
                          3: 3230302e35322e3233322e302f32322d3232203d3e20323731303139.roa (hash: pREScCb4hEOurpMdC7mgf/geao//Medh+0aw4zOUGs0=)
                          4: 3230302e35322e3233322e302f32342d3234203d3e20323731303139.roa (hash: NVCeNal44n/JbCUrW1MgC8SxnzJHai9tZ8zcZ9BUlCI=)
                          5: 323830343a373530383a383030303a3a2f33332d3333203d3e20323731303139.roa (hash: SPh+1ahVzWbgY2/pveqmlNU+2d4PHM2Trqfm75RurZ0=)
                          6: 3230302e35322e3233332e302f32342d3234203d3e20323731303139.roa (hash: cf65qMwSKd8alqdfCFizlkzOm6OoKCkKfC0NjNu+W3Q=)
                          7: 323830343a373530383a3a2f33332d3333203d3e20323731303139.roa (hash: b93jQA7WGaiFrO9Rcmfe4F09RpDDGosh099miggpERE=)
                          8: 323830343a373530383a3a2f33322d3332203d3e20323731303139.roa (hash: Ae0k5pxS5E217tESj7O8d/7tyGcw+g1P8U408h6CNzo=)
                          9: 3230302e35322e3233352e302f32342d3234203d3e20323731303139.roa (hash: XYXO66+/FC6DhpopgyT7KLulPFSEefrf0eprB6F/v7k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.crl
                          rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Oct 2026 16:09:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b9:72:e0:c4:ea:8c:f5:57:a6:b6:a3:72:d3:b2:55:2a:b6:2b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5
        Validity
            Not Before: Oct 26 13:20:27 2026 GMT
            Not After : Oct 27 16:09:27 2026 GMT
        Subject: CN=971A00FECC1C05FF25FB26E116488401DDC2F35F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:38:48:f4:28:9d:a9:07:e4:1f:04:aa:8e:55:
                    ec:4b:ad:19:6c:7c:36:2c:b9:53:ed:e8:f6:fb:33:
                    db:9b:15:72:e0:c0:bb:57:ac:6c:d7:98:7c:a9:d9:
                    6f:cc:38:e5:ad:b8:45:54:70:f9:62:b7:c3:33:7a:
                    4f:e2:43:65:c9:40:53:30:47:d8:80:97:51:8e:b9:
                    0a:68:82:96:38:59:af:10:d2:3e:f5:13:87:f5:55:
                    8e:59:b9:1b:c1:e8:65:e6:32:c4:20:d9:65:99:86:
                    ca:5e:54:33:92:cc:35:e3:15:40:20:88:bb:2b:84:
                    96:d3:2c:7d:39:fc:8f:b6:e8:43:7b:c8:12:6f:2e:
                    ac:9c:53:a5:f0:da:0e:e1:7e:68:da:22:48:1c:d9:
                    41:50:8f:d4:b1:db:05:25:ce:8e:13:7c:80:db:51:
                    d5:bd:40:17:18:dd:64:5c:2b:6a:3d:70:86:2b:fc:
                    ac:16:ad:1c:08:3f:58:dd:48:c1:2f:48:a3:8e:4c:
                    54:b2:46:13:98:77:52:b3:45:7a:81:0f:0e:5f:9a:
                    07:38:69:34:67:c9:61:dd:d8:01:45:9b:53:d8:6e:
                    14:34:45:99:6d:f6:19:67:56:1e:58:44:4d:4b:2b:
                    6c:c2:7e:91:c0:8f:48:ae:37:d5:f1:69:fa:52:97:
                    54:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:1A:00:FE:CC:1C:05:FF:25:FB:26:E1:16:48:84:01:DD:C2:F3:5F
            X509v3 Authority Key Identifier:
                keyid:6E:0E:6A:39:72:47:D4:96:E3:9C:0A:78:DF:B1:E5:1A:71:DB:AA:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:47:e3:e7:12:75:c9:94:52:f2:10:fe:b6:ea:03:df:05:fa:
         56:90:57:dc:05:a9:fd:14:52:9f:0f:1e:10:e0:95:91:6f:86:
         d3:b9:ce:97:44:8b:22:77:da:fb:12:a0:c9:39:03:f7:84:63:
         11:77:3e:30:2c:0c:59:d2:c2:cf:0a:5c:57:ae:87:e9:55:93:
         3d:a3:e3:b0:59:41:d7:f9:ab:34:71:47:b5:ca:c6:eb:c2:f0:
         74:0e:51:c9:e5:96:83:0d:6d:ca:c2:c3:22:d9:0d:ce:81:3b:
         1b:23:d8:9f:e5:f2:30:3d:40:a5:a8:14:58:f1:34:18:19:c8:
         60:3e:24:31:56:4c:6b:5e:f0:1f:d2:9b:f7:a3:d6:1d:9d:df:
         80:3f:e6:3d:37:1b:68:f0:02:ee:db:de:e3:3b:49:42:79:a4:
         24:3c:d1:51:fa:99:f9:8b:cb:09:7a:b5:ce:fc:3d:30:d6:1c:
         c2:6e:ad:94:38:9f:42:90:32:3c:ac:05:c1:57:6f:f8:8e:95:
         e6:5f:b6:73:b5:69:27:96:62:33:e5:b4:9b:c2:bb:e0:3f:e4:
         bd:67:25:35:bd:3f:0d:32:17:1b:08:6f:2b:da:b9:9b:66:5a:
         e1:b5:26:66:6d:19:ed:cf:5a:15:b7:55:9a:4e:3b:a5:4a:91:
         03:0b:ed:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIbly4MTqjPVXprajctOyVSq2K5AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkUwRTZBMzk3MjQ3RDQ5NkUzOUMwQTc4REZCMUU1MUE3
MURCQUFCNTAeFw0yNjEwMjYxMzIwMjdaFw0yNjEwMjcxNjA5MjdaMDMxMTAvBgNV
BAMTKDk3MUEwMEZFQ0MxQzA1RkYyNUZCMjZFMTE2NDg4NDAxRERDMkYzNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrOEj0KJ2pB+QfBKqOVexLrRls
fDYsuVPt6Pb7M9ubFXLgwLtXrGzXmHyp2W/MOOWtuEVUcPlit8Mzek/iQ2XJQFMw
R9iAl1GOuQpogpY4Wa8Q0j71E4f1VY5ZuRvB6GXmMsQg2WWZhspeVDOSzDXjFUAg
iLsrhJbTLH05/I+26EN7yBJvLqycU6Xw2g7hfmjaIkgc2UFQj9Sx2wUlzo4TfIDb
UdW9QBcY3WRcK2o9cIYr/KwWrRwIP1jdSMEvSKOOTFSyRhOYd1KzRXqBDw5fmgc4
aTRnyWHd2AFFm1PYbhQ0RZlt9hlnVh5YRE1LK2zCfpHAj0iuN9XxafpSl1QpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUlxoA/swcBf8l+ybhFkiEAd3C818wHwYDVR0j
BBgwFoAUbg5qOXJH1JbjnAp437HlGnHbqrUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1RFdGE5TUFjTE1RWUpDVFJiYjM4Mkx3UXFVbjU3aW9DdG9UcHlxd0di
WjUvMC82RTBFNkEzOTcyNDdENDk2RTM5QzBBNzhERkIxRTUxQTcxREJBQUI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZFMEU2QTM5NzI0N0Q0OTZF
MzlDMEE3OERGQjFFNTFBNzFEQkFBQjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q1RFdGE5TUFjTE1RWUpDVFJiYjM4Mkx3UXFVbjU3aW9DdG9UcHlxd0diWjUvMC82
RTBFNkEzOTcyNDdENDk2RTM5QzBBNzhERkIxRTUxQTcxREJBQUI1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvUfj5xJ1yZRS8hD+tuoD3wX6VpBX3AWp/RRSnw8eEOCVkW+G07nOl0SLInfa
+xKgyTkD94RjEXc+MCwMWdLCzwpcV66H6VWTPaPjsFlB1/mrNHFHtcrG68LwdA5R
yeWWgw1tysLDItkNzoE7GyPYn+XyMD1ApagUWPE0GBnIYD4kMVZMa17wH9Kb96PW
HZ3fgD/mPTcbaPAC7tve4ztJQnmkJDzRUfqZ+YvLCXq1zvw9MNYcwm6tlDifQpAy
PKwFwVdv+I6V5l+2c7VpJ5ZiM+W0m8K74D/kvWclNb0/DTIXGwhvK9q5m2Za4bUm
Zm0Z7c9aFbdVmk47pUqRAwvtiQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 05:24:23 2026 by rpki-client