Error: rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.mft
File:                     6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.mft (raw, json)
Hash identifier:          n1F8trEai8uWJTZlMvMCLlKwm0dyjcjAz1ohAWwog/M=
Subject key identifier:   E4:A8:C9:2D:8C:B1:9C:60:69:FB:0D:80:06:68:11:D9:5A:12:84:B3
Authority key identifier: 6A:0F:81:CD:4B:DD:AA:53:C1:B0:93:1E:51:E8:B1:59:E0:2A:5C:D1
Certificate issuer:       /CN=6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1
Certificate serial:       3A52FCD6E1BE7B5D03185B2C55B9466F20FF098E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.mft
Manifest number:          0484
Signing time:             Mon 24 Aug 2026 13:40:41 +0000
Manifest this update:     Mon 24 Aug 2026 13:35:41 +0000
Manifest next update:     Tue 25 Aug 2026 15:08:41 +0000
Files and hashes:         1: 6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.crl (hash: OQHROwccS2bfFGJ/DpPaLSDuFnUo91iXJrqXCske+Ks=)
                          2: 323830343a313331633a3a2f33322d3438203d3e20323633353136.roa (hash: C5V4zGxvuCL/tqG3clxUoiDlGo969+4XRicFxMWEmg0=)
                          3: 3137372e38342e36302e302f32322d3234203d3e20323633353136.roa (hash: K4pmvdQD7R0fYgybTvwsiJKNbGO44L53lbAav7iRH+M=)
                          4: 3230302e392e3132332e302f32342d3234203d3e20323633353136.roa (hash: OUoy+tYplA3pzPS27m/2zyfI8dfAZYnImzFGMW+KGxQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.crl
                          rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 14:18:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:52:fc:d6:e1:be:7b:5d:03:18:5b:2c:55:b9:46:6f:20:ff:09:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1
        Validity
            Not Before: Aug 24 13:35:41 2026 GMT
            Not After : Aug 25 15:08:41 2026 GMT
        Subject: CN=E4A8C92D8CB19C6069FB0D80066811D95A1284B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5b:dc:d0:b6:34:b1:50:15:83:fc:ac:9e:30:
                    6d:e8:2d:db:b4:50:4f:f2:40:cf:40:32:39:9b:11:
                    7a:99:ba:51:97:54:cd:db:c9:a3:94:d6:1d:81:f7:
                    75:fd:84:eb:ad:7c:ff:ce:07:7c:f6:32:ee:51:f6:
                    d7:b1:1f:1a:9f:76:15:5b:a4:a2:a6:c6:9f:02:28:
                    bc:f1:6e:74:cb:29:01:e3:d5:e4:5c:83:f4:f3:7c:
                    8b:8c:ec:12:9b:f2:e0:2e:3d:47:51:36:84:6a:57:
                    9a:e8:41:cc:35:d2:8b:f9:e1:67:03:b5:ba:84:d8:
                    ac:b9:2b:91:d0:fb:13:f7:30:1d:e8:4e:f9:33:12:
                    33:70:d2:dd:f4:c8:9a:75:5d:e6:14:88:bf:74:89:
                    ef:c0:82:cc:2a:69:d2:e8:6a:4e:fa:19:d1:0f:13:
                    dd:10:48:78:18:29:de:df:e8:9f:f3:42:48:3e:22:
                    56:f0:b3:83:04:74:2c:d3:df:6e:4a:39:88:79:22:
                    7b:dd:8d:25:da:22:63:17:f0:02:56:b4:a9:a0:22:
                    44:90:57:91:cb:5b:00:13:60:4c:8b:22:93:a8:27:
                    fa:7c:f9:1c:53:ed:86:84:9f:01:ef:7c:06:2c:75:
                    9a:50:46:31:69:92:56:90:1f:3d:dd:f2:0b:30:b5:
                    2e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A8:C9:2D:8C:B1:9C:60:69:FB:0D:80:06:68:11:D9:5A:12:84:B3
            X509v3 Authority Key Identifier:
                keyid:6A:0F:81:CD:4B:DD:AA:53:C1:B0:93:1E:51:E8:B1:59:E0:2A:5C:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ae:9d:ca:8e:a2:fa:33:df:89:6d:a1:8c:f7:17:33:e7:b8:
         6a:bb:ed:79:97:b3:d5:30:cb:55:68:fc:88:32:ec:79:2a:66:
         c4:c2:01:f7:fb:b4:d9:9e:44:d5:73:17:75:e9:a4:0a:57:c3:
         b5:3d:80:cc:1b:51:42:a8:02:f4:ad:85:8a:6a:87:7d:8f:a7:
         d8:26:b2:ba:ad:e2:ef:06:d7:31:ce:ec:d3:3d:ac:26:d3:08:
         24:1f:d2:df:6e:4a:5e:37:98:be:50:ff:a9:dd:b8:3b:7a:b2:
         5b:8d:41:75:28:07:ca:4b:e3:3f:15:72:d3:04:b6:94:5c:e2:
         d2:49:9e:8d:40:07:59:06:08:74:2d:fa:b8:7b:02:c0:19:8e:
         48:33:0a:77:78:af:a0:87:30:21:3c:37:3f:56:fe:1d:9a:21:
         c3:58:39:25:c2:6d:a8:d1:40:94:ca:60:f3:5a:ac:f2:16:93:
         7f:dc:1d:66:69:e0:ab:62:c8:c1:33:55:51:ba:21:aa:7f:a8:
         10:0d:73:76:3e:16:8c:14:c2:c6:e8:53:7e:67:26:97:14:c0:
         9e:1a:3d:35:10:0d:c5:71:65:13:f0:e3:0e:1d:9d:e7:b2:4f:
         71:b5:8c:9b:f0:84:dd:b8:07:c4:00:42:31:c3:d9:9f:84:c6:
         a7:c0:41:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOlL81uG+e10DGFssVblGbyD/CY4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkEwRjgxQ0Q0QkREQUE1M0MxQjA5MzFFNTFFOEIxNTlF
MDJBNUNEMTAeFw0yNjA4MjQxMzM1NDFaFw0yNjA4MjUxNTA4NDFaMDMxMTAvBgNV
BAMTKEU0QThDOTJEOENCMTlDNjA2OUZCMEQ4MDA2NjgxMUQ5NUExMjg0QjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFW9zQtjSxUBWD/KyeMG3oLdu0
UE/yQM9AMjmbEXqZulGXVM3byaOU1h2B93X9hOutfP/OB3z2Mu5R9texHxqfdhVb
pKKmxp8CKLzxbnTLKQHj1eRcg/TzfIuM7BKb8uAuPUdRNoRqV5roQcw10ov54WcD
tbqE2Ky5K5HQ+xP3MB3oTvkzEjNw0t30yJp1XeYUiL90ie/AgswqadLoak76GdEP
E90QSHgYKd7f6J/zQkg+Ilbws4MEdCzT325KOYh5InvdjSXaImMX8AJWtKmgIkSQ
V5HLWwATYEyLIpOoJ/p8+RxT7YaEnwHvfAYsdZpQRjFpklaQHz3d8gswtS6ZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU5KjJLYyxnGBp+w2ABmgR2VoShLMwHwYDVR0j
BBgwFoAUag+BzUvdqlPBsJMeUeixWeAqXNEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM202OW5qS1BtRFZ6b3FXTkpzZTFYTW11YXFjRk04RjV4cU1HUjhCWnI0
Zm8vMS82QTBGODFDRDRCRERBQTUzQzFCMDkzMUU1MUU4QjE1OUUwMkE1Q0QxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZBMEY4MUNENEJEREFBNTND
MUIwOTMxRTUxRThCMTU5RTAyQTVDRDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M202OW5qS1BtRFZ6b3FXTkpzZTFYTW11YXFjRk04RjV4cU1HUjhCWnI0Zm8vMS82
QTBGODFDRDRCRERBQTUzQzFCMDkzMUU1MUU4QjE1OUUwMkE1Q0QxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJ66dyo6i+jPfiW2hjPcXM+e4arvteZez1TDLVWj8iDLseSpmxMIB9/u02Z5E
1XMXdemkClfDtT2AzBtRQqgC9K2FimqHfY+n2Cayuq3i7wbXMc7s0z2sJtMIJB/S
325KXjeYvlD/qd24O3qyW41BdSgHykvjPxVy0wS2lFzi0kmejUAHWQYIdC36uHsC
wBmOSDMKd3ivoIcwITw3P1b+HZohw1g5JcJtqNFAlMpg81qs8haTf9wdZmngq2LI
wTNVUbohqn+oEA1zdj4WjBTCxuhTfmcmlxTAnho9NRANxXFlE/DjDh2d57JPcbWM
m/CE3bgHxABCMcPZn4TGp8BBqw==
-----END CERTIFICATE-----
Generated at Mon Aug 24 15:59:02 2026 by rpki-client