Error: rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
File:                     6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft (raw, json)
Hash identifier:          WXQsDg4i6Qi+uoM8hXHJ+o6OTvhvyPNodxXthMlQGLs=
Subject key identifier:   CB:76:B7:60:EA:B1:2A:00:51:CA:82:76:10:A8:9A:AD:BB:53:A9:C2
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       656BE1EF0515F38082333CAD2CD710BEC495B9EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
Manifest number:          057F
Signing time:             Wed 28 Oct 2026 19:00:01 +0000
Manifest this update:     Wed 28 Oct 2026 18:55:01 +0000
Manifest next update:     Thu 29 Oct 2026 19:00:01 +0000
Files and hashes:         1: 34352e362e3232302e302f32322d3234203d3e20323636323438.roa (hash: 2BlvhkrxjLFGLIM21sfLUkssayvw9Wp4CpaGpj7Rfm4=)
                          2: 323830343a336430343a633030303a3a2f33362d3336203d3e20323636323438.roa (hash: y2oBX9K38jB+kOdPsRQX+rPVjuBIqNsD4lrL2/Kj7V4=)
                          3: 323830343a336430343a633030303a3a2f33342d3334203d3e20323636323438.roa (hash: 7nnX/zZV44z0MiTPsblTzr80wYvifx8En3fibNgJIrk=)
                          4: 323830343a336430343a3a2f33322d3332203d3e20323636323438.roa (hash: ZexWaLcY6chtOX10Sush6g2ruh8t1XQbxbaL/KAS/l8=)
                          5: 323830343a336430343a383030303a3a2f33342d3334203d3e20323636323438.roa (hash: JB3YwVZ/SKpjQl08+JVvUT4tV+BZgSb1UFoQjG080s0=)
                          6: 323830343a336430343a613030303a3a2f33362d3336203d3e20323636323438.roa (hash: mEdcZ+6oyHl3OBMFWisX72S/FesyV1HLcTwYPRbTkwo=)
                          7: 323830343a336430343a313030303a3a2f33362d3336203d3e20323636323438.roa (hash: 3kCNRUb4ILjbIZydIkT93uFqBLiIoki3fWZGWQabDVI=)
                          8: 323830343a336430343a3a2f33342d3334203d3e20323636323438.roa (hash: gYYkkuKI+PWpzz05e149mb8rTFtbg5snnklHDYAFeCA=)
                          9: 323830343a336430343a323030303a3a2f33362d3336203d3e20323636323438.roa (hash: Fpw67FtU5uAt11JxVSnglyiFhIKJ4D+GmYDXWZnNr4c=)
                          10: 323830343a336430343a343030303a3a2f33362d3336203d3e20323636323438.roa (hash: 5CaT/gMeeqqkSy144gN+mXHDUFzS/zbTQVd0mr+64W8=)
                          11: 323830343a336430343a643030303a3a2f33362d3336203d3e20323636323438.roa (hash: k/bNV+pmUuKah0YbV5Gs7neSm4lHz9MN1Ofu6zoiN9Y=)
                          12: 323830343a336430343a393030303a3a2f33362d3336203d3e20323636323438.roa (hash: k37Wg1KGRn8QUG7TW7pZsJ8llJJ8bmeqIcJoPT2ehec=)
                          13: 323830343a336430343a3a2f33332d3333203d3e20323636323438.roa (hash: /NJe/+YWZ5rv5jk4M3goV+SBqf5KHiAkDZGK+OAwHuk=)
                          14: 323830343a336430343a343030303a3a2f33342d3334203d3e20323636323438.roa (hash: D55kI3bS+5waEd46chnGqZc/hHagGN/Y7GqN92jEznk=)
                          15: 323830343a336430343a623030303a3a2f33362d3336203d3e20323636323438.roa (hash: 3ZTj+Xmy4kO8+oojafp+cIKRkx/1bEvd/sAswppgBpc=)
                          16: 323830343a336430343a333030303a3a2f33362d3336203d3e20323636323438.roa (hash: FUQdb5k3ZQh9KYe6tlho+K7sqcw/AzTtBsK9zxarq3k=)
                          17: 323830343a336430343a363030303a3a2f33362d3336203d3e20323636323438.roa (hash: /+6hkMagScDLGcK4ftIN+HDbp2RLjUF4mAILJVPkRbs=)
                          18: 323830343a336430343a653030303a3a2f33362d3336203d3e20323636323438.roa (hash: zXh7x0B+LbGECSJaJcIhPUdLCFI8yRZ8J14t0OU40ps=)
                          19: 323830343a336430343a353030303a3a2f33362d3336203d3e20323636323438.roa (hash: Plfrp02fp8nSDpekz4Rn/xwCiuZyP6BB4ah2SDmFGdw=)
                          20: 323830343a336430343a3a2f33362d3336203d3e20323636323438.roa (hash: KU7jvfSHKNEddt0nMvgEFzwO9QXl7lK3dbSbzSVCfCc=)
                          21: 323830343a336430343a383030303a3a2f33362d3336203d3e20323636323438.roa (hash: 8HGl9DKC4csqcsXlOY/sMvnFA39oz8HuqeUy+0bZ9Gc=)
                          22: 323830343a336430343a383030303a3a2f33332d3333203d3e20323636323438.roa (hash: Oz/SZFFCx0bKEgKZgmaiYRMjOBqOTFFB8L+xRFiegBk=)
                          23: 323830343a336430343a373030303a3a2f33362d3336203d3e20323636323438.roa (hash: Qj3rSPjOBGqtdDuSSsoJJZ9/CSOPndU4zl7qmDdAEqg=)
                          24: 323830343a336430343a663030303a3a2f33362d3336203d3e20323636323438.roa (hash: D90o9tRStMZUf8JsQL5Y8PQPtwk0gfz4F/6cVP5VzUg=)
                          25: 6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl (hash: ke7X4nxHx3MBbLXjnVnYjXoUJGmM3ZXDqXwyTnUILLs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl
                          rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 19:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:6b:e1:ef:05:15:f3:80:82:33:3c:ad:2c:d7:10:be:c4:95:b9:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Oct 28 18:55:01 2026 GMT
            Not After : Oct 29 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:94:15:18:b9:d8:31:c4:48:cf:07:fb:5f:4d:
                    0a:15:11:05:2a:91:d0:1e:b8:d1:97:67:e1:36:5d:
                    43:fa:8c:89:72:2c:df:62:23:94:04:19:bc:ab:ba:
                    b4:be:35:88:e4:75:d9:e3:57:f6:07:64:ab:5b:76:
                    b6:64:81:1e:a6:ec:05:ac:e5:d5:52:ba:88:7f:39:
                    d2:af:a7:0a:27:e4:73:7a:db:14:ae:35:14:25:c5:
                    89:16:33:48:ea:a8:17:dc:99:7f:75:dd:5e:d1:50:
                    c3:c2:e4:d5:d5:98:b6:97:ac:7f:49:86:6a:0d:af:
                    0a:17:4e:9b:21:dd:50:75:04:4a:73:55:25:c1:36:
                    1c:14:3e:15:7b:1b:86:15:34:f5:36:3e:0a:ba:c5:
                    a6:ab:7c:f7:c0:a5:08:2b:30:d4:f5:69:8f:d1:ec:
                    af:c7:3d:5d:47:75:3d:7c:7d:49:8f:b1:fc:6c:5b:
                    72:d9:31:ae:d4:bf:b4:60:38:6f:25:82:11:59:ee:
                    14:27:ba:15:81:3f:b6:c0:ef:90:64:49:42:de:c3:
                    9f:e5:d1:da:73:ac:aa:06:04:f0:a6:26:38:a9:19:
                    5c:22:7b:64:9f:93:e3:3a:7d:e5:f6:be:06:e5:69:
                    82:9f:33:86:5c:2b:66:24:11:ac:ee:f2:28:5a:e8:
                    74:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:76:B7:60:EA:B1:2A:00:51:CA:82:76:10:A8:9A:AD:BB:53:A9:C2
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:0e:e2:68:95:c4:b2:30:c6:c6:1b:07:fd:f9:39:3b:22:e2:
         a0:c2:d5:88:9d:80:9f:61:b9:bb:4f:14:3c:90:5c:1d:a6:15:
         90:88:72:dc:73:b4:d5:8f:aa:7b:14:b9:73:ac:0c:54:47:9b:
         6c:76:ed:85:0f:76:b6:fd:a6:d5:d5:74:4e:6f:4b:22:14:2a:
         99:ff:e8:36:a0:86:c5:b2:fb:e0:d6:b8:f0:10:51:b3:66:0e:
         48:e5:e5:2a:a1:5b:b0:2c:b2:e2:a3:b7:58:ca:2a:98:e4:71:
         c6:d8:72:2c:5b:43:2d:2a:10:a7:5b:42:69:5c:41:c5:c3:3e:
         b1:fc:e0:6e:c3:f1:60:32:7f:3a:8c:be:ce:b1:09:f1:1c:8d:
         f1:f2:53:b6:47:7a:79:8e:0a:3a:77:f1:ad:ee:84:19:b3:54:
         91:28:48:48:c4:54:34:ee:dd:09:bd:c0:3c:87:d7:a9:59:54:
         3d:a9:83:93:a9:2b:3c:88:80:c1:9c:06:46:53:ea:f2:48:37:
         da:4e:e1:29:e4:d6:15:90:1e:82:09:f6:c2:aa:b7:8e:d7:30:
         97:ed:ed:0f:6b:5d:3a:74:a8:54:a0:f6:c3:1f:00:01:87:f6:
         1e:14:78:88:6a:40:a5:74:f6:e8:f5:48:6c:d0:d0:80:72:1f:
         40:f2:d0:d6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 28 22:07:38 2026 by rpki-client