Error: rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
File:                     59286C095D010494BBABEA22C9AEC94874E4F3C0.mft (raw, json)
Hash identifier:          U0uNVpZ23nz80HYRTfYAQ4Wjnh8GQ8P5azGHcolPNTU=
Subject key identifier:   8F:0C:7A:9A:0F:14:82:E7:06:67:15:A2:52:9F:25:48:32:B9:9F:F6
Authority key identifier: 59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0
Certificate issuer:       /CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
Certificate serial:       237135B88ABEA63894F3130ADA5B1AF77827A18D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
Manifest number:          056C
Signing time:             Tue 13 Oct 2026 19:10:00 +0000
Manifest this update:     Tue 13 Oct 2026 19:05:00 +0000
Manifest next update:     Wed 14 Oct 2026 19:10:00 +0000
Files and hashes:         1: 323830343a343837303a343430303a3a2f33382d3338203d3e20323637313231.roa (hash: vJOk/RO6kMGpIRYjaG3KwOaAXzUcZmNcYsdIGRcusyQ=)
                          2: 323830343a343837303a3163323a3a2f34382d3438203d3e20323637313231.roa (hash: V5u48JUHg0vRr8nG4bKSA5hNxImVT9PKalXDjhIdWPg=)
                          3: 323830343a343837303a3163313a3a2f34382d3438203d3e20323637313231.roa (hash: k75dLDFsZMLa4b3KgnId5Z6mW2wY5/+paKUCIrTDNGI=)
                          4: 323830343a343837303a3162303a3a2f34382d3438203d3e20323637313231.roa (hash: 7CTwJ6yhVSxfHNLn/mAOWz2MiQBNkF0Id8JVButb7zE=)
                          5: 323830343a343837303a333030303a3a2f34302d3430203d3e20323637313231.roa (hash: 5dHPQHEZLbyBkh2oFoWjk9SHb7xuoag4thZeui/ZE24=)
                          6: 323830343a343837303a373030303a3a2f33382d3338203d3e20323637313231.roa (hash: C4KNNLkuA8NDr3kXTESi0EMIoWGVxUXMlmEWwPqPmJg=)
                          7: 323830343a343837303a323030303a3a2f34302d3430203d3e20323637313231.roa (hash: Ee5KXivcsdgY6JOnUrxMI++3DbxXjTpNmNVQfJ9pX2U=)
                          8: 323830343a343837303a3162323a3a2f34382d3438203d3e20323637313231.roa (hash: x+xwUxlQjmdjFdwRXjbdGRZiQWjWQYhBKVDEG4cOJfs=)
                          9: 323830343a343837303a3163303a3a2f34382d3438203d3e20323637313231.roa (hash: uf8oyCG+GKeTE1t9Z/zv2kBG6JLLjAaiex7C01g4JEA=)
                          10: 59286C095D010494BBABEA22C9AEC94874E4F3C0.crl (hash: S2/QcH8eA99lFoZC05c66OzMp0Ec8stnbACO2LYOuf8=)
                          11: 323830343a343837303a326630303a3a2f34302d3430203d3e20323637313231.roa (hash: rDS/XwFY+luUXcH7t0GiZXkeagaJAXuydQpVGJqFdZQ=)
                          12: 34352e3232392e3130342e302f32322d3234203d3e20323637313231.roa (hash: YwcFTn5OCBbU2Ep0Zj2uuG/MnB/lxpKw9ItwdeoPyYg=)
                          13: 323830343a343837303a3162313a3a2f34382d3438203d3e20323637313231.roa (hash: bYoDoQN0Y/cb+6PqtlCtgz2rVRlUyrvvoGpdSQgLGgo=)
                          14: 323830343a343837303a3a2f33322d3332203d3e20323637313231.roa (hash: CbJX+uwfbWl1q+ePfG8kkTcVCod+h4DtRjKzQrUVrBw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl
                          rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:71:35:b8:8a:be:a6:38:94:f3:13:0a:da:5b:1a:f7:78:27:a1:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
        Validity
            Not Before: Oct 13 19:05:00 2026 GMT
            Not After : Oct 20 19:10:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:48:5a:7d:a2:a5:a4:21:f6:f1:26:2a:5d:ca:
                    2f:b7:50:87:8e:8a:7f:5a:d5:5c:30:a7:0a:f8:e4:
                    b5:7c:e5:97:95:fa:f9:f5:c4:fd:a3:bf:8c:66:79:
                    00:ad:c1:57:5c:3f:a7:d7:60:e4:95:2e:fa:1e:88:
                    7a:d0:57:1c:27:47:23:32:ee:5b:63:a2:64:9b:1d:
                    60:e2:b0:94:25:0d:ba:44:be:61:e1:e8:99:e2:68:
                    b8:ad:8b:d6:52:b9:60:6c:fb:9d:cd:84:a3:61:1a:
                    54:c2:33:1c:97:db:e5:20:8b:57:3b:19:11:2d:3c:
                    14:45:ad:b1:73:02:a7:cb:fa:9f:2f:6d:3f:01:ac:
                    05:e4:21:df:c7:bd:64:9c:79:25:3f:05:a0:70:74:
                    9f:e5:8d:47:45:02:fe:44:63:c4:b1:48:bd:74:31:
                    3b:f2:35:19:40:d4:dc:1b:9c:a5:00:06:28:3f:97:
                    13:ef:17:2d:79:c7:0f:50:11:a8:11:cf:e8:07:2a:
                    f6:01:f4:02:e1:86:8d:63:66:b7:2d:40:cb:80:41:
                    fa:b9:fb:1d:82:aa:80:f0:28:be:7f:f9:25:c1:62:
                    6e:9c:23:e5:a6:e9:69:3f:fb:32:8a:62:54:98:6d:
                    77:97:ad:f0:f1:82:c1:ad:bd:73:ec:4e:d1:4f:f1:
                    ab:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:0C:7A:9A:0F:14:82:E7:06:67:15:A2:52:9F:25:48:32:B9:9F:F6
            X509v3 Authority Key Identifier:
                keyid:59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:64:1a:0a:6a:2f:a2:0b:7a:44:ea:ee:6b:5a:de:40:12:8d:
         a6:43:71:4c:c5:31:0f:ff:31:0f:a4:87:0a:fe:e6:bd:f3:e8:
         92:16:f9:47:df:e8:16:37:84:af:41:00:83:58:56:e6:e7:8f:
         3d:5b:22:d1:36:43:bc:ce:f3:32:36:f9:0f:4f:1f:95:23:35:
         0b:a0:43:4c:c1:a6:a1:e8:2b:d0:d3:4d:90:43:24:e6:d9:df:
         c6:fc:6a:7f:c8:87:13:fa:c1:ed:81:fa:7d:71:62:91:55:c0:
         f2:36:e7:05:07:7e:60:1d:6f:2f:5e:b8:85:53:19:8e:b4:67:
         ac:09:e1:0c:f1:a2:a4:54:06:05:ae:3d:36:0f:b4:1b:1a:db:
         2b:e8:43:f7:0b:e7:a0:75:ed:00:64:6e:7b:68:c5:36:e7:d0:
         9a:f2:fb:42:7d:7a:32:8b:c7:a3:c4:ce:ee:b3:a6:4e:73:5d:
         02:f7:40:3e:fb:95:6d:55:9f:53:10:ca:9f:59:02:94:7a:a9:
         94:75:b7:94:b8:eb:c8:7e:02:73:ed:08:6f:dd:11:5b:7e:57:
         26:2d:72:bb:9a:22:2d:4d:36:14:b1:af:4d:7d:2b:3d:88:88:
         57:3d:0a:ab:1f:f3:dc:64:99:81:42:8f:fc:83:ff:7c:56:dd:
         3b:3b:fc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 11:48:02 2026 by rpki-client