Error: rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.mft
File:                     2EC42055AFC59A104B87FD6706375331B8F6BF55.mft (raw, json)
Hash identifier:          HjDgVOUgytwRsYP6JW46gc7u5tseZeWzwVmbRS+j1vA=
Subject key identifier:   06:CE:DA:8F:FA:97:CD:20:26:2C:9F:A4:2C:30:1D:ED:9F:04:64:66
Authority key identifier: 2E:C4:20:55:AF:C5:9A:10:4B:87:FD:67:06:37:53:31:B8:F6:BF:55
Certificate issuer:       /CN=2EC42055AFC59A104B87FD6706375331B8F6BF55
Certificate serial:       6682BF6AA215792082079F57B79AC714911B2709
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.mft
Manifest number:          056B
Signing time:             Sun 11 Oct 2026 22:30:00 +0000
Manifest this update:     Sun 11 Oct 2026 22:25:00 +0000
Manifest next update:     Mon 12 Oct 2026 22:30:00 +0000
Files and hashes:         1: 34352e3136372e3132322e302f32342d3234203d3e20323638303730.roa (hash: GlAfrG9k3r04oAvKhIuVWAiw7wNnfPdXnIEhxDJp6b4=)
                          2: 2EC42055AFC59A104B87FD6706375331B8F6BF55.crl (hash: MwplEBBi29QBOsXL8SBPlA2KZu9WI9ULJDFh49NRc5A=)
                          3: 323830343a353738383a3a2f33342d3334203d3e20323638303730.roa (hash: 3daVssIffcCIDQDnfKpYxQBFbKg4RcYGYCc8PkLiRU0=)
                          4: 323830343a353738383a633030303a3a2f33342d3334203d3e20323638303730.roa (hash: a9hAcgCKHPbOP6Vw77oC9CVJ36L1DCRTgDKApGct2q4=)
                          5: 34352e3136372e3132332e302f32342d3234203d3e20323638303730.roa (hash: +m9GXB2zM1VhfrXl8Z7ZMoMGlO4MllIxiNHqe+vxTUI=)
                          6: 323830343a353738383a383030303a3a2f33342d3334203d3e20323638303730.roa (hash: T6v/m7rnySrOGkmBQTXmkH/l9uu8fCMT4yqk7YjnufA=)
                          7: 323830343a353738383a343030303a3a2f33342d3334203d3e20323638303730.roa (hash: 19L0GwxdXz9pF/D6HohnwdpcJZV30B9fVeWKyz4/Dwo=)
                          8: 323830343a353738383a3a2f33322d3332203d3e20323638303730.roa (hash: HOllN9HIIDsg2QeLdstoqF1SROuGt8XDtAkgZ3VTqqw=)
                          9: 34352e3136372e3132322e302f32332d3233203d3e20323638303730.roa (hash: 8FcKT5sjSzcIpdGUXcR489mnlzzwIeaMHQfJvhQfVto=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.crl
                          rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 22:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:82:bf:6a:a2:15:79:20:82:07:9f:57:b7:9a:c7:14:91:1b:27:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EC42055AFC59A104B87FD6706375331B8F6BF55
        Validity
            Not Before: Oct 11 22:25:00 2026 GMT
            Not After : Oct 12 22:30:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1f:36:23:e6:6e:ba:9d:ba:10:a3:fa:06:0f:
                    50:12:84:c4:91:43:dd:77:1e:97:fb:0c:3b:33:96:
                    c6:88:e5:eb:81:10:8e:a2:aa:a5:71:fa:ae:06:c1:
                    0a:f9:45:dc:a2:21:42:0d:a8:4a:7e:4d:2b:da:ea:
                    3f:63:e4:6a:84:2d:5d:67:91:27:81:8b:6c:bb:46:
                    0d:22:ad:ac:5d:ba:39:37:e9:03:28:d6:5a:b2:ac:
                    0f:fa:b2:58:00:66:4b:d8:22:6b:fa:57:a5:a7:7c:
                    e1:49:bb:ba:d2:95:2a:3f:89:ae:d4:6f:41:23:64:
                    5f:43:9e:1d:4d:91:4b:e4:40:f6:fc:a8:0b:15:00:
                    3e:aa:e9:e8:37:d8:cb:4b:e4:96:b3:fd:68:65:91:
                    18:3a:43:1d:b9:7e:a7:d0:7e:e7:64:96:08:61:1e:
                    0c:b1:04:b3:3f:11:f9:e8:27:50:33:a1:64:62:72:
                    ff:9e:91:03:d4:64:2b:f5:61:ec:6e:95:d3:df:24:
                    ae:67:81:68:96:9e:92:da:2a:f4:09:32:8f:3b:fb:
                    3b:7b:de:00:9f:b1:fa:51:4d:7f:a4:6b:f3:2d:61:
                    cc:3e:77:99:ef:08:34:e7:65:39:23:0f:35:65:ea:
                    5c:64:3a:5c:f9:cf:d5:f0:c7:28:97:83:51:26:82:
                    d5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CE:DA:8F:FA:97:CD:20:26:2C:9F:A4:2C:30:1D:ED:9F:04:64:66
            X509v3 Authority Key Identifier:
                keyid:2E:C4:20:55:AF:C5:9A:10:4B:87:FD:67:06:37:53:31:B8:F6:BF:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:2e:ee:db:71:07:34:f4:a6:d8:ab:bb:8e:93:b8:67:d4:02:
         f2:b1:b4:25:33:53:e2:ec:03:99:1c:d8:dd:19:0c:06:d9:8d:
         28:e5:07:5d:47:3f:58:04:92:e2:a6:07:73:51:c6:94:8e:f7:
         3b:83:21:87:e4:de:e0:aa:a7:27:3b:48:b8:ed:96:f8:4c:5c:
         7a:23:20:b1:7d:71:f0:3c:79:1b:81:57:53:46:3e:58:9e:de:
         f2:dc:c8:a2:7e:3d:be:c7:14:36:19:de:69:c0:41:f8:99:cb:
         3f:13:c8:2c:af:3f:c2:71:d4:b0:1b:12:42:6c:3a:eb:95:6a:
         58:5c:fa:07:80:fa:66:8e:4d:6b:04:29:b4:1c:b4:a8:77:4d:
         5c:f2:d0:5f:dc:6c:d6:36:2c:16:b7:e0:f3:3a:2a:5c:65:cd:
         a5:8c:83:50:8b:b8:9a:2d:cc:af:b4:75:12:1a:2c:3a:b1:9f:
         99:72:12:9e:eb:86:f4:71:d2:59:6b:4a:07:97:ad:f1:79:df:
         e2:67:fc:f1:89:05:f7:4a:bb:a4:4d:be:ae:a4:35:ae:e8:2a:
         ab:c9:1b:a5:07:ed:5e:b7:5f:79:48:ac:13:2b:43:48:5f:f7:
         79:9b:77:52:37:fc:46:9c:a1:4e:1d:49:3d:db:e1:74:ce:cf:
         9d:ab:e3:6c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 12 02:18:17 2026 by rpki-client