Error: rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/605FEF9057460FEC15E9DF06B37BF20541BC477E.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/605FEF9057460FEC15E9DF06B37BF20541BC477E.mft
File:                     605FEF9057460FEC15E9DF06B37BF20541BC477E.mft (raw, json)
Hash identifier:          3x2U0zR2kCiv5+ofaYv2jjr79Fny4grMbkdhidX1HRc=
Subject key identifier:   EE:0B:1F:D4:45:A6:1E:FA:09:DD:65:CD:38:AA:C3:5B:E0:91:26:4A
Authority key identifier: 60:5F:EF:90:57:46:0F:EC:15:E9:DF:06:B3:7B:F2:05:41:BC:47:7E
Certificate issuer:       /CN=605FEF9057460FEC15E9DF06B37BF20541BC477E
Certificate serial:       57800A2BC51E88B0AD503CFBC252F0FEC1C227C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605FEF9057460FEC15E9DF06B37BF20541BC477E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/605FEF9057460FEC15E9DF06B37BF20541BC477E.mft
Manifest number:          0359
Signing time:             Tue 03 Nov 2026 19:39:33 +0000
Manifest this update:     Tue 03 Nov 2026 19:34:33 +0000
Manifest next update:     Wed 04 Nov 2026 21:26:33 +0000
Files and hashes:         1: 323830343a373061633a633030303a3a2f33342d3334203d3e20323730373431.roa (hash: DD+p1+OtWcFxRM+iNqHsqnbPOR4DF1wfIAJw2QkBJnI=)
                          2: 3137392e3130392e3131322e302f32322d3232203d3e20323730373431.roa (hash: voIQZHhRSrd3iWE2nZ6cLFto3KcMp5aS+j4zV1+NDQw=)
                          3: 3137392e3130392e3131322e302f32332d3233203d3e20323730373431.roa (hash: YyNwLYFhWmCNuKz1GEipm8eoy1KTPkVE7sS8Hm+3eqI=)
                          4: 3137392e3130392e3131352e302f32342d3234203d3e20323730373431.roa (hash: ddgIXVGqjDISYIUWcPfbH1kjRYjWqYTQ09plyFenb/I=)
                          5: 3137392e3130392e3131342e302f32332d3233203d3e20323730373431.roa (hash: AgBo+suxClC1kLvAlHkD7lu17tuiuyJVHCrxXTtBY5o=)
                          6: 605FEF9057460FEC15E9DF06B37BF20541BC477E.crl (hash: eF+hFMHwjfB5Mo/VS43QRLxKihLSLeh9nOLd/Stcg2I=)
                          7: 3137392e3130392e3131332e302f32342d3234203d3e20323730373431.roa (hash: yXbs37vDsmLSb3QSeytCt9J750Cqj9x28HSCkuUX7IQ=)
                          8: 323830343a373061633a383030303a3a2f33332d3333203d3e20323730373431.roa (hash: ATKMpa/hne9lVOuE2rwUVCQf6i3aA5d/sBmmjicFieI=)
                          9: 323830343a373061633a343030303a3a2f33342d3334203d3e20323730373431.roa (hash: MUASXg01Pp2Hd44wmMTYZibeR3B+rObQmmPsR4494Gg=)
                          10: 323830343a373061633a3a2f33322d3332203d3e20323730373431.roa (hash: IOtd2WzUxtph5bVJzHI9021JVzf1hXVLbFb1AmLNHHE=)
                          11: 323830343a373061633a383030303a3a2f33342d3334203d3e20323730373431.roa (hash: t7KQCOrsv5/mj2JYbKdgXH8kQkW4SfC9fojXLOLwjew=)
                          12: 3137392e3130392e3131322e302f32342d3234203d3e20323730373431.roa (hash: d+k6+kAu/XN++g8z7dRSURfRzRr8iYBavYYypx7KGG0=)
                          13: 323830343a373061633a3a2f33332d3333203d3e20323730373431.roa (hash: oMSSpSSlVrvIDfhZ+q3MtI2ZiRYn5aYVdaNJPPn/hH4=)
                          14: 323830343a373061633a3a2f33342d3334203d3e20323730373431.roa (hash: 2ImJ/DnJ7mnGT6YbQHmDTYzgwqgooSdSQaWlejC2ZY0=)
                          15: 3137392e3130392e3131342e302f32342d3234203d3e20323730373431.roa (hash: Y+/qjbT/9cjy6jVJvK5ntsUdXmac56r6C//7Kxq/j1Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/605FEF9057460FEC15E9DF06B37BF20541BC477E.crl
                          rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/605FEF9057460FEC15E9DF06B37BF20541BC477E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605FEF9057460FEC15E9DF06B37BF20541BC477E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 21:26:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:80:0a:2b:c5:1e:88:b0:ad:50:3c:fb:c2:52:f0:fe:c1:c2:27:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605FEF9057460FEC15E9DF06B37BF20541BC477E
        Validity
            Not Before: Nov  3 19:34:33 2026 GMT
            Not After : Nov  4 21:26:33 2026 GMT
        Subject: CN=EE0B1FD445A61EFA09DD65CD38AAC35BE091264A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:21:2b:c5:e8:a4:d9:a9:db:65:43:86:69:1f:
                    86:20:f7:39:a7:e0:5c:66:76:7b:18:9a:7c:ed:8d:
                    c9:12:83:b3:25:25:2b:89:6f:98:ce:b6:31:f0:f9:
                    86:33:f6:02:e4:8d:b5:7c:2d:f4:97:3d:87:8f:43:
                    80:7f:86:d1:2f:33:95:92:a3:c2:da:78:79:b5:0d:
                    60:32:4d:b8:10:fe:77:d4:be:af:a2:f7:a0:a5:18:
                    5a:79:45:9a:e7:62:19:e5:69:ff:44:9e:aa:29:7e:
                    f0:c7:43:aa:7f:07:3d:18:f0:3a:de:01:f9:e6:c7:
                    df:35:9d:a6:1a:36:37:d2:1e:a1:06:0b:d4:6e:aa:
                    c8:5c:4f:cf:67:c0:92:df:bd:24:98:ec:5f:5a:06:
                    7d:4c:80:4d:dc:94:df:80:05:1e:1b:9b:dc:d7:7e:
                    1f:0a:9c:86:65:4d:ac:1c:d8:46:e2:6f:68:0b:bc:
                    51:e1:bc:1f:db:d8:15:d0:c5:fc:a3:9d:44:c8:79:
                    bc:4a:92:4d:8b:fb:10:d9:93:bc:53:20:36:ae:a7:
                    a0:dd:d5:65:a5:88:b1:5d:86:4e:5c:16:aa:da:89:
                    b0:34:60:62:c8:e9:35:d8:b1:73:bd:22:ad:e3:ff:
                    34:05:4a:3d:82:26:cb:e2:70:8a:7f:c5:b4:46:b3:
                    cb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0B:1F:D4:45:A6:1E:FA:09:DD:65:CD:38:AA:C3:5B:E0:91:26:4A
            X509v3 Authority Key Identifier:
                keyid:60:5F:EF:90:57:46:0F:EC:15:E9:DF:06:B3:7B:F2:05:41:BC:47:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/605FEF9057460FEC15E9DF06B37BF20541BC477E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605FEF9057460FEC15E9DF06B37BF20541BC477E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/605FEF9057460FEC15E9DF06B37BF20541BC477E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:23:3d:a1:7f:ff:5b:3d:0b:28:be:e2:8d:dc:17:60:db:a1:
         36:55:95:b0:b0:b2:c2:ce:3d:88:93:f1:75:ea:3b:f5:44:eb:
         14:5a:1a:db:6a:38:2f:36:d9:e1:d2:75:52:d6:85:4c:91:cc:
         72:99:e7:93:ed:8a:d0:95:31:be:b4:ed:c1:ad:9a:e0:53:c9:
         63:6b:e8:03:61:c2:50:9c:df:8a:42:28:3e:7c:d0:0a:a0:38:
         dd:21:fa:c9:01:2a:6b:1a:aa:97:2e:5a:dc:fd:b9:64:20:4b:
         8e:bb:3d:b0:9f:15:3b:38:49:09:66:a6:6f:4c:91:97:ab:61:
         f2:92:1a:19:72:98:53:78:b5:3a:22:75:7e:7c:45:53:f1:5d:
         a5:16:e1:90:4b:8a:78:61:67:cd:b8:9b:3c:57:9a:75:ed:4e:
         cf:f0:3f:c7:3c:4e:6d:69:2c:36:fc:1e:6e:8d:70:95:9e:85:
         ab:48:43:fa:91:83:a4:59:6f:18:94:21:5c:e6:45:37:80:b0:
         25:ab:7f:f6:10:2d:58:00:ac:5e:db:56:19:05:bb:82:55:4e:
         98:2f:a7:d3:b3:e0:1c:94:03:56:78:7d:ad:e4:4b:c6:55:c6:
         58:18:b1:93:8c:4e:d3:9d:10:cb:4b:2d:7b:6b:3c:b5:a1:e4:
         24:d8:37:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 00:49:27 2026 by rpki-client