Error: rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
File:                     6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft (raw, json)
Hash identifier:          euY5OhKMCVlU9diXRd3dGk4wmX/y01NqNRxck+os2t8=
Subject key identifier:   AC:DA:DD:F2:58:8C:ED:9B:38:E4:CA:E7:81:A4:A2:AA:FB:BC:E2:C4
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       48BDBA7778EC443AEAAA7B0E098F335D7F9F4F56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
Manifest number:          0582
Signing time:             Fri 30 Oct 2026 19:10:01 +0000
Manifest this update:     Fri 30 Oct 2026 19:05:01 +0000
Manifest next update:     Sat 31 Oct 2026 19:10:01 +0000
Files and hashes:         1: 323830343a336430343a383030303a3a2f33342d3334203d3e20323636323438.roa (hash: JB3YwVZ/SKpjQl08+JVvUT4tV+BZgSb1UFoQjG080s0=)
                          2: 323830343a336430343a343030303a3a2f33362d3336203d3e20323636323438.roa (hash: 5CaT/gMeeqqkSy144gN+mXHDUFzS/zbTQVd0mr+64W8=)
                          3: 323830343a336430343a343030303a3a2f33342d3334203d3e20323636323438.roa (hash: D55kI3bS+5waEd46chnGqZc/hHagGN/Y7GqN92jEznk=)
                          4: 323830343a336430343a613030303a3a2f33362d3336203d3e20323636323438.roa (hash: mEdcZ+6oyHl3OBMFWisX72S/FesyV1HLcTwYPRbTkwo=)
                          5: 323830343a336430343a3a2f33342d3334203d3e20323636323438.roa (hash: gYYkkuKI+PWpzz05e149mb8rTFtbg5snnklHDYAFeCA=)
                          6: 323830343a336430343a373030303a3a2f33362d3336203d3e20323636323438.roa (hash: Qj3rSPjOBGqtdDuSSsoJJZ9/CSOPndU4zl7qmDdAEqg=)
                          7: 323830343a336430343a3a2f33332d3333203d3e20323636323438.roa (hash: /NJe/+YWZ5rv5jk4M3goV+SBqf5KHiAkDZGK+OAwHuk=)
                          8: 323830343a336430343a313030303a3a2f33362d3336203d3e20323636323438.roa (hash: 3kCNRUb4ILjbIZydIkT93uFqBLiIoki3fWZGWQabDVI=)
                          9: 323830343a336430343a663030303a3a2f33362d3336203d3e20323636323438.roa (hash: D90o9tRStMZUf8JsQL5Y8PQPtwk0gfz4F/6cVP5VzUg=)
                          10: 323830343a336430343a393030303a3a2f33362d3336203d3e20323636323438.roa (hash: k37Wg1KGRn8QUG7TW7pZsJ8llJJ8bmeqIcJoPT2ehec=)
                          11: 323830343a336430343a633030303a3a2f33342d3334203d3e20323636323438.roa (hash: 7nnX/zZV44z0MiTPsblTzr80wYvifx8En3fibNgJIrk=)
                          12: 323830343a336430343a633030303a3a2f33362d3336203d3e20323636323438.roa (hash: y2oBX9K38jB+kOdPsRQX+rPVjuBIqNsD4lrL2/Kj7V4=)
                          13: 323830343a336430343a623030303a3a2f33362d3336203d3e20323636323438.roa (hash: 3ZTj+Xmy4kO8+oojafp+cIKRkx/1bEvd/sAswppgBpc=)
                          14: 323830343a336430343a3a2f33322d3332203d3e20323636323438.roa (hash: ZexWaLcY6chtOX10Sush6g2ruh8t1XQbxbaL/KAS/l8=)
                          15: 323830343a336430343a653030303a3a2f33362d3336203d3e20323636323438.roa (hash: zXh7x0B+LbGECSJaJcIhPUdLCFI8yRZ8J14t0OU40ps=)
                          16: 323830343a336430343a323030303a3a2f33362d3336203d3e20323636323438.roa (hash: Fpw67FtU5uAt11JxVSnglyiFhIKJ4D+GmYDXWZnNr4c=)
                          17: 323830343a336430343a333030303a3a2f33362d3336203d3e20323636323438.roa (hash: FUQdb5k3ZQh9KYe6tlho+K7sqcw/AzTtBsK9zxarq3k=)
                          18: 323830343a336430343a3a2f33362d3336203d3e20323636323438.roa (hash: KU7jvfSHKNEddt0nMvgEFzwO9QXl7lK3dbSbzSVCfCc=)
                          19: 323830343a336430343a353030303a3a2f33362d3336203d3e20323636323438.roa (hash: Plfrp02fp8nSDpekz4Rn/xwCiuZyP6BB4ah2SDmFGdw=)
                          20: 323830343a336430343a363030303a3a2f33362d3336203d3e20323636323438.roa (hash: /+6hkMagScDLGcK4ftIN+HDbp2RLjUF4mAILJVPkRbs=)
                          21: 323830343a336430343a383030303a3a2f33332d3333203d3e20323636323438.roa (hash: Oz/SZFFCx0bKEgKZgmaiYRMjOBqOTFFB8L+xRFiegBk=)
                          22: 323830343a336430343a383030303a3a2f33362d3336203d3e20323636323438.roa (hash: 8HGl9DKC4csqcsXlOY/sMvnFA39oz8HuqeUy+0bZ9Gc=)
                          23: 34352e362e3232302e302f32322d3234203d3e20323636323438.roa (hash: 2BlvhkrxjLFGLIM21sfLUkssayvw9Wp4CpaGpj7Rfm4=)
                          24: 323830343a336430343a643030303a3a2f33362d3336203d3e20323636323438.roa (hash: k/bNV+pmUuKah0YbV5Gs7neSm4lHz9MN1Ofu6zoiN9Y=)
                          25: 6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl (hash: uD1zMYCL7//lbejM/y+b+lEwrtrP0xSIlRuxlJfNdi0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl
                          rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:bd:ba:77:78:ec:44:3a:ea:aa:7b:0e:09:8f:33:5d:7f:9f:4f:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Oct 30 19:05:01 2026 GMT
            Not After : Oct 31 19:10:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:17:47:53:e2:09:1a:5d:86:b1:f1:ca:9e:f6:
                    fe:87:44:37:25:ae:3c:0e:80:ad:ad:fb:52:e2:1e:
                    67:42:84:a3:57:c1:46:9b:df:56:b2:60:9a:64:f9:
                    ff:77:67:f5:7f:68:0d:8e:4d:79:6b:46:10:eb:8b:
                    d5:e6:2f:37:aa:17:4f:01:a7:73:af:c2:5b:b4:e8:
                    91:b7:c2:b4:e9:63:b8:c7:9c:47:10:bf:0c:e2:43:
                    0d:dd:9c:1e:65:b0:65:64:08:e8:ad:d3:17:d3:45:
                    c7:09:41:e2:41:b2:a6:3c:97:da:03:27:82:4c:bd:
                    9a:ea:dd:f0:f2:a6:1a:58:fb:73:bd:2b:73:35:95:
                    aa:25:56:b4:98:4b:45:10:a8:c2:63:e7:89:ec:ae:
                    70:74:d7:61:bb:5b:46:5e:95:d5:f7:1e:b9:74:af:
                    35:ba:28:f6:a5:0a:8e:5b:e1:83:91:c6:65:ed:23:
                    d6:0d:db:7b:bb:ac:a2:32:84:3e:f2:53:a5:81:c1:
                    df:cb:02:03:bb:40:f0:46:95:1d:cd:76:09:8a:49:
                    3b:28:25:54:8e:42:43:1c:43:60:76:39:6b:5d:77:
                    53:ac:64:e6:b2:36:2d:95:91:22:e2:3b:1c:17:b9:
                    0f:6b:03:d7:c2:b6:22:03:35:17:02:f3:28:9f:4c:
                    88:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:DA:DD:F2:58:8C:ED:9B:38:E4:CA:E7:81:A4:A2:AA:FB:BC:E2:C4
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:36:f5:37:ce:84:3d:66:75:d2:fe:b5:92:ac:7f:a1:f0:7c:
         3c:8f:9a:b9:db:3f:b8:5d:1f:54:b9:73:bf:14:4b:bf:e6:10:
         84:3d:dd:32:de:e2:e8:99:d8:f0:46:3f:ef:df:98:5d:4b:7d:
         72:cd:f1:cf:16:ba:a8:27:0e:4e:12:19:70:65:ca:a5:00:ce:
         94:48:c4:13:53:ce:44:94:6f:c9:63:6e:08:06:80:92:6e:4a:
         74:9d:44:6d:11:85:e3:b1:c4:25:ff:96:ed:b6:c8:c0:9b:14:
         f3:03:87:f3:6e:9e:f3:4e:eb:12:f7:b0:10:80:72:06:57:69:
         ba:4d:bc:37:41:19:06:cf:9d:4c:31:f0:66:fc:ce:8b:a7:e1:
         12:d9:25:59:79:01:1a:f8:d9:f2:ac:b3:91:57:6f:cc:38:fe:
         98:c5:8b:1c:d8:90:04:16:41:a6:2b:c2:2d:97:1b:90:8d:bb:
         69:39:45:59:ef:9e:69:42:6f:c8:40:75:b1:7d:bd:e5:87:52:
         f7:66:5a:23:6d:a0:5e:0d:91:5b:bd:9f:c6:d2:86:99:97:0c:
         50:af:3f:7a:bb:af:e2:1a:3f:ab:09:94:1e:27:23:40:c8:f5:
         59:ed:64:31:5b:78:29:c2:8a:1b:44:8e:5a:0f:fd:a7:8a:ea:
         8c:ea:db:f8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 31 11:06:59 2026 by rpki-client