Error: rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft
File:                     6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft (raw, json)
Hash identifier:          jG8+Ai6fFK7u2/fr3t0TWTRTgXLlceg3Nhjc+JtcCf4=
Subject key identifier:   2A:A6:9B:21:CB:62:77:C4:1F:0F:DF:3C:35:C2:F4:82:EB:A5:D2:AA
Authority key identifier: 6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14
Certificate issuer:       /CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
Certificate serial:       3BBCC8EA8DD4767D339C585AD113E3D255E04568
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft
Manifest number:          04E3
Signing time:             Sat 31 Oct 2026 10:30:03 +0000
Manifest this update:     Sat 31 Oct 2026 10:25:03 +0000
Manifest next update:     Sun 01 Nov 2026 10:58:03 +0000
Files and hashes:         1: 3137372e39322e3136372e302f32342d3234203d3e203631393138.roa (hash: EOZRyBx+X12JgsLaaI+iVhQX7UK4lskQADgqcfVDhnM=)
                          2: 323830343a313731343a3a2f33322d3332203d3e203631393138.roa (hash: 5KoFBm8izHkGvxWJP07w+TI86QZt/YACE4VU6SgVOTg=)
                          3: 3137372e39322e3136342e302f32342d3234203d3e203631393138.roa (hash: QflKVL4gyoZt8h6BeJzE9d1mQeF6TZLetnBU7KJJuR8=)
                          4: 3137302e3135302e3233322e302f32342d3234203d3e203631393138.roa (hash: UhCtHuZTZGaKLEQtOFgnU7ImjMruubBq7aZyaZeUpzo=)
                          5: 3137372e39322e3136362e302f32342d3234203d3e203631393138.roa (hash: 9B2Oe3hiwJvKy2VtQYEstZlAtsFxXOldACf9aQ9nkLc=)
                          6: 3137302e3135302e3233352e302f32342d3234203d3e203631393138.roa (hash: LXkXpj/k39vHqv9sEVEWX/rh5ZuEppUnYgDxhqN9/Ko=)
                          7: 3137302e3135302e3233322e302f32332d3233203d3e203631393138.roa (hash: RjaaO7igPpS8DQGXaaaiWbfO5/U/Bj00LIq7uO0HmFk=)
                          8: 6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl (hash: U3nES01+NkONmacRDfuF2tPD04dVuQVZKJ7SrsoQQdk=)
                          9: 3137372e39322e3136342e302f32322d3232203d3e203631393138.roa (hash: ub8XR4e/GVYaJg8sEKr6dHaKeeUizUiwf9Pag8GL6uo=)
                          10: 3137302e3135302e3233342e302f32332d3233203d3e203631393138.roa (hash: I0nH6WNoZYq6vD9CdUZFNk3vEWMtpdxvWUjlGcJsQo4=)
                          11: 3137302e3135302e3233322e302f32322d3232203d3e203631393138.roa (hash: KQqNO2dAr6DGUYzi2Mfjy/X96oWjSN2tB04bB9CCVRQ=)
                          12: 3137372e39322e3136352e302f32342d3234203d3e203631393138.roa (hash: A9R+oaZNynvfAacRhEXDQ9mY+3Y33iiHu3RFSE7dVQk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl
                          rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 10:58:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:bc:c8:ea:8d:d4:76:7d:33:9c:58:5a:d1:13:e3:d2:55:e0:45:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
        Validity
            Not Before: Oct 31 10:25:03 2026 GMT
            Not After : Nov  1 10:58:03 2026 GMT
        Subject: CN=2AA69B21CB6277C41F0FDF3C35C2F482EBA5D2AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e4:6c:26:ae:30:83:85:2b:48:bf:b0:ac:2c:
                    5e:98:35:62:a2:e6:96:64:b2:68:3c:79:66:70:cf:
                    db:ab:ba:ba:11:6f:5f:dc:ac:3b:ff:5c:87:3f:00:
                    a9:6b:1b:15:16:5b:fa:a3:44:72:fe:30:93:8a:4f:
                    86:58:8b:b8:1d:be:40:0d:2d:b1:0c:e8:3a:5e:ad:
                    b7:7e:7e:d5:b6:68:87:c5:19:15:59:42:f5:20:36:
                    ca:3d:be:56:38:c2:75:0c:d9:0d:0f:56:fb:aa:20:
                    fc:b1:a5:85:12:39:79:3a:ea:5c:77:07:6c:a7:24:
                    db:2c:40:65:68:54:8e:bc:a5:96:bd:e3:13:0f:40:
                    6a:2c:d4:c2:42:ab:3f:fa:48:30:81:28:a0:02:46:
                    ef:44:b8:4e:49:bf:b9:c4:a4:cb:be:48:3b:3e:93:
                    d9:2a:ff:b7:6e:cf:7e:58:5a:d7:4a:5f:f3:98:a0:
                    ac:84:4a:89:f1:84:a2:c8:57:24:a1:09:d9:df:78:
                    a1:e1:33:3f:9f:fe:bb:95:41:6c:de:b7:3a:17:66:
                    eb:92:ec:f8:e3:2a:4a:f6:ce:64:01:cd:3d:43:05:
                    23:4f:0c:d6:8b:6a:e1:b1:0c:80:47:b9:56:80:50:
                    02:36:3f:dd:1f:24:4a:7f:04:a0:fe:be:81:54:57:
                    24:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A6:9B:21:CB:62:77:C4:1F:0F:DF:3C:35:C2:F4:82:EB:A5:D2:AA
            X509v3 Authority Key Identifier:
                keyid:6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:31:fb:d5:94:d3:eb:bd:8a:f1:00:4d:3c:39:1c:f6:78:30:
         c3:3b:f8:43:b0:e8:8f:20:be:6a:8a:c1:a9:dd:ae:a8:17:a9:
         d9:e4:0f:2b:9c:57:e1:64:ef:91:f6:8a:05:b6:02:94:97:aa:
         de:10:f5:e6:9c:6c:e3:cc:05:9b:36:18:e4:6d:a3:37:43:2b:
         6e:5d:11:48:1c:03:f8:a3:eb:fc:88:37:7d:81:ba:1b:b5:15:
         7b:20:4b:66:86:a6:4b:68:1b:6a:d9:55:df:ae:37:30:97:66:
         eb:6e:fd:35:f7:a5:7f:25:a9:0f:2c:ce:8c:31:be:cf:d8:5c:
         66:27:76:d4:95:a4:d5:d7:c9:b5:f2:a2:32:05:b4:14:b9:45:
         ec:b5:64:b4:5e:eb:38:5a:33:7a:4d:58:c6:50:46:54:60:32:
         e6:f3:90:c4:29:72:3a:6b:f7:d5:ef:f6:88:e3:7c:2d:00:03:
         c7:5a:8b:09:44:aa:62:89:28:4f:fa:1f:43:cf:1f:96:23:83:
         f7:f4:e9:8d:78:bc:08:ac:5a:f8:0a:75:89:06:67:8c:22:58:
         60:e8:35:25:f1:d2:1e:93:ef:bb:88:f0:aa:91:a7:87:d9:36:
         a3:6a:ee:92:27:bf:58:44:c9:d4:a5:2c:bd:da:89:d9:70:1f:
         48:73:89:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:39:53 2026 by rpki-client