Error: rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft
File:                     6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft (raw, json)
Hash identifier:          oPMKouoBJ36mfINWGpoPCVKQJvWj39Fdsi2/jJwSnIc=
Subject key identifier:   E9:CA:2F:72:2B:84:05:11:95:DF:DB:43:8E:14:DA:A2:6E:34:22:1C
Authority key identifier: 6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14
Certificate issuer:       /CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
Certificate serial:       0463AB99E1FA0E4D2813CF9F785A77E13983C633
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft
Manifest number:          048A
Signing time:             Mon 24 Aug 2026 17:00:02 +0000
Manifest this update:     Mon 24 Aug 2026 16:55:02 +0000
Manifest next update:     Tue 25 Aug 2026 17:26:02 +0000
Files and hashes:         1: 6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl (hash: 80OoV98t5jflypj7njbMaK/jv0q7GrgsEUg0YQ0ACww=)
                          2: 3137372e39322e3136342e302f32322d3232203d3e203631393138.roa (hash: ub8XR4e/GVYaJg8sEKr6dHaKeeUizUiwf9Pag8GL6uo=)
                          3: 3137372e39322e3136362e302f32342d3234203d3e203631393138.roa (hash: 9B2Oe3hiwJvKy2VtQYEstZlAtsFxXOldACf9aQ9nkLc=)
                          4: 3137302e3135302e3233322e302f32332d3233203d3e203631393138.roa (hash: RjaaO7igPpS8DQGXaaaiWbfO5/U/Bj00LIq7uO0HmFk=)
                          5: 3137302e3135302e3233352e302f32342d3234203d3e203631393138.roa (hash: LXkXpj/k39vHqv9sEVEWX/rh5ZuEppUnYgDxhqN9/Ko=)
                          6: 3137372e39322e3136352e302f32342d3234203d3e203631393138.roa (hash: A9R+oaZNynvfAacRhEXDQ9mY+3Y33iiHu3RFSE7dVQk=)
                          7: 323830343a313731343a3a2f33322d3332203d3e203631393138.roa (hash: 5KoFBm8izHkGvxWJP07w+TI86QZt/YACE4VU6SgVOTg=)
                          8: 3137302e3135302e3233322e302f32322d3232203d3e203631393138.roa (hash: KQqNO2dAr6DGUYzi2Mfjy/X96oWjSN2tB04bB9CCVRQ=)
                          9: 3137372e39322e3136372e302f32342d3234203d3e203631393138.roa (hash: EOZRyBx+X12JgsLaaI+iVhQX7UK4lskQADgqcfVDhnM=)
                          10: 3137302e3135302e3233342e302f32332d3233203d3e203631393138.roa (hash: I0nH6WNoZYq6vD9CdUZFNk3vEWMtpdxvWUjlGcJsQo4=)
                          11: 3137302e3135302e3233322e302f32342d3234203d3e203631393138.roa (hash: UhCtHuZTZGaKLEQtOFgnU7ImjMruubBq7aZyaZeUpzo=)
                          12: 3137372e39322e3136342e302f32342d3234203d3e203631393138.roa (hash: QflKVL4gyoZt8h6BeJzE9d1mQeF6TZLetnBU7KJJuR8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl
                          rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 17:26:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:63:ab:99:e1:fa:0e:4d:28:13:cf:9f:78:5a:77:e1:39:83:c6:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
        Validity
            Not Before: Aug 24 16:55:02 2026 GMT
            Not After : Aug 25 17:26:02 2026 GMT
        Subject: CN=E9CA2F722B84051195DFDB438E14DAA26E34221C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fc:1c:67:b5:aa:31:fe:de:e3:ca:2b:69:a2:
                    2f:61:6b:f3:00:80:be:a3:83:79:1c:ec:16:df:3e:
                    4e:c7:0d:5f:4d:70:91:de:82:17:6c:65:dc:16:ea:
                    f1:8e:80:3f:e6:29:45:2b:4c:fc:cd:5c:63:ef:2b:
                    56:43:bb:07:d4:f0:79:5e:2e:de:55:f3:2f:29:a5:
                    62:0a:a0:2e:bb:14:9d:0c:b8:d1:e9:38:cc:7f:65:
                    ac:1e:40:10:c6:01:80:66:a5:69:34:b1:04:f4:4a:
                    e4:6f:82:d9:51:69:fa:11:7b:ef:ae:99:a2:61:53:
                    62:d4:b1:9d:5e:5a:36:7f:6a:4c:54:7b:85:34:d8:
                    37:ef:25:c8:e3:ec:72:17:88:85:cc:fd:f9:94:5d:
                    3c:3a:77:fc:e7:b9:54:cc:16:a6:2c:d1:38:9e:3a:
                    cd:6e:b9:09:d5:48:20:43:21:f3:db:85:e7:66:5c:
                    f6:d2:ea:21:49:6c:0e:25:c7:4f:a5:11:03:9d:62:
                    0c:72:46:97:cf:63:02:69:32:88:83:e6:75:99:ca:
                    cd:b3:89:0c:b6:a1:f6:3e:56:4b:9e:8d:6a:6b:83:
                    65:b9:1f:db:2e:18:8e:c8:ad:4a:6f:b4:a1:10:83:
                    15:43:b0:52:da:5f:7f:e7:2a:75:13:65:60:e2:9b:
                    e2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CA:2F:72:2B:84:05:11:95:DF:DB:43:8E:14:DA:A2:6E:34:22:1C
            X509v3 Authority Key Identifier:
                keyid:6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:fc:27:6b:90:19:1e:9b:c7:0e:aa:b8:45:07:50:9d:33:ef:
         b5:64:f5:bf:b7:81:0a:ad:8a:f0:b7:a2:22:34:c4:be:13:c8:
         a3:49:38:4c:e8:40:a3:66:96:8b:f5:e8:f3:50:00:d9:6f:bd:
         93:2c:88:bf:6b:3d:77:84:9c:12:92:f0:2e:4f:62:4c:6d:a7:
         c8:c0:f6:1f:08:27:62:9e:8e:c6:1c:5f:09:c0:80:55:5b:ef:
         f4:f6:c0:73:ec:55:dd:e9:7c:ab:4f:51:48:b2:12:a0:ac:89:
         2f:b0:95:27:6f:7d:59:e5:f0:b7:8c:0d:c8:e5:d9:eb:fb:7b:
         f9:0f:12:36:86:75:39:29:eb:0d:e5:bf:bb:a0:ec:49:36:4c:
         76:33:f8:eb:3f:d9:04:2b:7e:b5:53:5d:99:a6:28:12:03:b3:
         02:02:ee:bd:a4:12:19:51:71:7b:63:9a:38:30:84:7d:86:2a:
         05:74:8a:b8:6c:69:8f:35:7e:c7:da:44:c6:55:df:3c:79:67:
         e5:b9:46:09:2b:75:17:66:9b:d4:3a:93:a3:d3:ba:13:db:60:
         c8:82:5a:b0:9b:a2:f4:66:92:25:25:9c:c7:88:2c:d1:79:3d:
         15:45:10:bd:89:eb:3e:2e:8c:aa:30:14:4e:b3:f6:b1:ec:ee:
         aa:33:76:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 23:58:16 2026 by rpki-client