Error: rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.mft
File:                     F2E351E04CEB2540D88297555ED76E80B91C52F7.mft (raw, json)
Hash identifier:          bDCrt6UeeHv/9yecw51DylR2lT2K0PClj0zkeDIDUzs=
Subject key identifier:   06:B1:B3:31:09:66:E9:54:ED:49:8F:3D:36:05:BF:9C:CC:11:DA:04
Authority key identifier: F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7
Certificate issuer:       /CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
Certificate serial:       45A7F8291F9DAB2A4B014106DFD3658D124C8864
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.mft
Manifest number:          04C0
Signing time:             Fri 16 Oct 2026 00:09:44 +0000
Manifest this update:     Fri 16 Oct 2026 00:04:44 +0000
Manifest next update:     Sat 17 Oct 2026 01:52:44 +0000
Files and hashes:         1: 323830343a353838343a3a2f33322d3332203d3e20323638313334.roa (hash: EnfydbQpZtggwwWmUhO5ChTerULDTHsruvhPe1PEppU=)
                          2: 323830343a353838343a3a2f33342d3334203d3e20323638313334.roa (hash: bD9ALjlOYkF5ZZYYJY6c/7Ke6bAvIabzqGP8v57rsHE=)
                          3: 323830343a353838343a3a2f33332d3333203d3e20323638313334.roa (hash: 6LijlyjyiWLQ7js/4WegN3y/6n0XPvy9nKXiprKHVME=)
                          4: 323830343a353838343a383030303a3a2f33342d3334203d3e20323638313334.roa (hash: RIRSQWvmFL7fwvbcrrdigkwKWr13sIzlrxJPHgVb96M=)
                          5: F2E351E04CEB2540D88297555ED76E80B91C52F7.crl (hash: XCWggZuG2uPf071gSoz3h/uLUA1RrGJrwlTy8XDFAv0=)
                          6: 323830343a353838343a343030303a3a2f33342d3334203d3e20323638313334.roa (hash: gQ0lkMv0KxAkAI1IKMzdjiiCUK+8nt1ATnoZZ5dvEl4=)
                          7: 34352e3136392e3234302e302f32332d3233203d3e20323638313334.roa (hash: NlPh3CNPctcXi0Ffz9wfbUaXif06oGWyWtZ06ySGhfE=)
                          8: 34352e3136392e3234302e302f32322d3232203d3e20323638313334.roa (hash: 0IUjkVy3rrKEDK4mq+JETmt5fLI+OEhRLOlYtvzDAXY=)
                          9: 34352e3136392e3234332e302f32342d3234203d3e20323638313334.roa (hash: LnmAUOJOzaxLeqNpln8ZqiD2odPL5FpG70+UJavV3tY=)
                          10: 323830343a353838343a383030303a3a2f33332d3333203d3e20323638313334.roa (hash: Kc5XKeVH0/filAOJJynHtY5s3C/scAy4+s9W3bzgAjk=)
                          11: 34352e3136392e3234322e302f32342d3234203d3e20323638313334.roa (hash: 3cWyNXk5ENI+OmJ6UHgTU0G6OROqmA+d9oyqFw+Z1dg=)
                          12: 34352e3136392e3234312e302f32342d3234203d3e20323638313334.roa (hash: 2EK2lWRDg1mYh/3svamEYJH8GyA4FFLfs+tQMNlZ7Uo=)
                          13: 323830343a353838343a633030303a3a2f33342d3334203d3e20323638313334.roa (hash: QuB3KGKk1XtnRAzt9Bm0ywqx4lsdn/xHeb4r7Ab8VL8=)
                          14: 34352e3136392e3234322e302f32332d3233203d3e20323638313334.roa (hash: 7/lf4ZZ8tHrQu1s2gb2oNh4B1lx8Zu6LxkGoZk56Udk=)
                          15: 34352e3136392e3234302e302f32342d3234203d3e20323638313334.roa (hash: HxWMbuu/OtLeBTFH4Gp/bByFnkzI70KF2V5TwHxsTyI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl
                          rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 01:52:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:a7:f8:29:1f:9d:ab:2a:4b:01:41:06:df:d3:65:8d:12:4c:88:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
        Validity
            Not Before: Oct 16 00:04:44 2026 GMT
            Not After : Oct 17 01:52:44 2026 GMT
        Subject: CN=06B1B3310966E954ED498F3D3605BF9CCC11DA04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5d:65:29:40:b5:6f:8a:17:33:cd:24:af:9a:
                    67:e5:69:c2:5f:37:89:49:89:85:83:73:f5:2d:55:
                    a7:cb:ad:23:85:8d:3c:4f:3d:07:42:c1:33:aa:50:
                    4a:28:78:51:26:42:9c:51:f1:f0:5a:19:ab:72:ae:
                    24:44:4a:e1:4a:49:09:a3:b8:40:b4:75:37:a8:75:
                    72:25:c8:84:87:06:a2:7b:b0:08:cb:25:ad:eb:e2:
                    0f:61:0f:3c:ed:c4:75:05:f9:b6:2c:72:ca:b5:be:
                    10:8c:42:8e:b8:3f:94:8c:72:1b:b3:dc:60:d2:5b:
                    f7:ae:fc:a3:a9:4f:83:84:59:fe:2b:1c:e4:35:21:
                    4b:d9:45:d0:1a:a2:69:7a:94:78:a2:b3:4c:8a:b1:
                    d4:8c:c3:be:d9:f6:42:fc:f8:9b:ba:22:d5:77:f1:
                    8b:af:d6:aa:d2:9c:ee:c9:09:d1:c9:f0:d6:53:ea:
                    55:90:00:73:9b:5d:5f:37:88:1f:2f:27:fc:87:d3:
                    00:bf:19:4d:46:7c:94:3d:99:d3:70:98:02:df:3e:
                    89:fd:d5:e2:0f:51:ec:ed:6b:b2:6b:82:af:93:4c:
                    ed:b5:5e:e7:5d:bd:51:c8:4d:64:31:6b:34:57:37:
                    85:e7:6a:1a:86:66:6f:32:73:e6:5e:1a:43:9a:11:
                    d9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B1:B3:31:09:66:E9:54:ED:49:8F:3D:36:05:BF:9C:CC:11:DA:04
            X509v3 Authority Key Identifier:
                keyid:F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:3f:31:20:ef:1c:99:45:de:e0:b1:6a:9e:83:5d:a2:6b:d6:
         51:f1:40:c2:80:71:41:66:67:5e:4b:79:91:b7:2d:61:21:ba:
         70:1e:06:75:bb:e3:51:79:7f:b1:4f:67:96:51:53:7e:5e:76:
         3c:f7:c4:76:5a:2c:6c:53:4e:11:43:d9:d9:38:3d:5b:43:4d:
         e6:5d:43:4b:3e:f2:e0:eb:ae:7d:15:07:4e:d4:f5:eb:ca:68:
         d6:f7:0c:4d:2e:c3:49:6d:1a:62:c3:6b:0b:ff:fc:ff:3d:b9:
         46:12:42:05:75:b8:71:4f:62:fc:cb:e7:92:02:21:a0:9b:a9:
         d5:08:ac:c5:a7:14:b6:9e:38:86:1d:99:8d:16:f1:6a:1c:2a:
         13:be:94:bf:32:63:3f:33:34:8a:0b:91:b3:fd:85:08:e7:b0:
         49:a9:cb:78:37:34:10:0f:67:84:de:99:47:df:70:62:b1:80:
         21:8d:da:4b:ed:f2:52:de:ed:43:4b:37:2e:72:41:e1:0d:af:
         7f:d1:38:93:ba:7b:c4:13:a0:1f:c3:f0:b0:00:d6:0d:0d:70:
         77:a1:d6:dd:e8:8a:25:35:d7:a4:69:c6:5c:b3:bf:80:14:85:
         a7:0a:12:a2:d0:ee:ad:bb:8e:33:34:40:e9:ad:07:66:6e:65:
         23:fb:44:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 21:18:52 2026 by rpki-client