Error: rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft
File:                     6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft (raw, json)
Hash identifier:          PlQQjx+PeGjiBpSAFIVH93Lt30gGg0ynD7spS64anyE=
Subject key identifier:   5E:53:67:36:B0:BD:E0:79:7C:C9:EB:95:17:F4:46:86:5C:DC:17:5C
Authority key identifier: 6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14
Certificate issuer:       /CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
Certificate serial:       69EC4F43FA8A2B431694CAC69A4868C586FD9A74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft
Manifest number:          04DF
Signing time:             Wed 28 Oct 2026 09:50:02 +0000
Manifest this update:     Wed 28 Oct 2026 09:45:02 +0000
Manifest next update:     Thu 29 Oct 2026 11:48:02 +0000
Files and hashes:         1: 3137372e39322e3136342e302f32322d3232203d3e203631393138.roa (hash: ub8XR4e/GVYaJg8sEKr6dHaKeeUizUiwf9Pag8GL6uo=)
                          2: 3137302e3135302e3233322e302f32322d3232203d3e203631393138.roa (hash: KQqNO2dAr6DGUYzi2Mfjy/X96oWjSN2tB04bB9CCVRQ=)
                          3: 323830343a313731343a3a2f33322d3332203d3e203631393138.roa (hash: 5KoFBm8izHkGvxWJP07w+TI86QZt/YACE4VU6SgVOTg=)
                          4: 3137372e39322e3136372e302f32342d3234203d3e203631393138.roa (hash: EOZRyBx+X12JgsLaaI+iVhQX7UK4lskQADgqcfVDhnM=)
                          5: 3137302e3135302e3233322e302f32342d3234203d3e203631393138.roa (hash: UhCtHuZTZGaKLEQtOFgnU7ImjMruubBq7aZyaZeUpzo=)
                          6: 3137372e39322e3136352e302f32342d3234203d3e203631393138.roa (hash: A9R+oaZNynvfAacRhEXDQ9mY+3Y33iiHu3RFSE7dVQk=)
                          7: 6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl (hash: rAQhFFvP+Ei77s5qfQGEvuL1xvolb1f8S0HSeD+1hLk=)
                          8: 3137302e3135302e3233352e302f32342d3234203d3e203631393138.roa (hash: LXkXpj/k39vHqv9sEVEWX/rh5ZuEppUnYgDxhqN9/Ko=)
                          9: 3137302e3135302e3233342e302f32332d3233203d3e203631393138.roa (hash: I0nH6WNoZYq6vD9CdUZFNk3vEWMtpdxvWUjlGcJsQo4=)
                          10: 3137372e39322e3136362e302f32342d3234203d3e203631393138.roa (hash: 9B2Oe3hiwJvKy2VtQYEstZlAtsFxXOldACf9aQ9nkLc=)
                          11: 3137302e3135302e3233322e302f32332d3233203d3e203631393138.roa (hash: RjaaO7igPpS8DQGXaaaiWbfO5/U/Bj00LIq7uO0HmFk=)
                          12: 3137372e39322e3136342e302f32342d3234203d3e203631393138.roa (hash: QflKVL4gyoZt8h6BeJzE9d1mQeF6TZLetnBU7KJJuR8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl
                          rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 11:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ec:4f:43:fa:8a:2b:43:16:94:ca:c6:9a:48:68:c5:86:fd:9a:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
        Validity
            Not Before: Oct 28 09:45:02 2026 GMT
            Not After : Oct 29 11:48:02 2026 GMT
        Subject: CN=5E536736B0BDE0797CC9EB9517F446865CDC175C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4d:88:11:ad:a9:08:04:11:48:99:78:e5:0f:
                    cd:ee:84:ed:47:0c:0e:e8:b3:2e:2c:14:45:8b:ee:
                    24:92:81:3c:6d:23:7a:45:9e:86:e5:b8:8e:4b:5f:
                    29:8a:6b:8f:db:e1:c3:04:9a:ed:1c:0d:a8:9a:b9:
                    f5:91:bc:d8:40:0f:44:0c:5c:c4:f4:fc:d6:97:37:
                    3f:c8:ed:28:d9:e7:e9:65:51:f9:04:1b:67:19:04:
                    64:f3:8c:ea:68:b9:1a:04:4c:68:fd:61:22:e6:a3:
                    0d:7a:37:4e:bb:41:b1:d6:68:8e:ed:a1:16:cc:9b:
                    d3:2a:c8:c1:4c:c9:b8:84:96:34:1c:c8:3e:ca:d9:
                    4b:ef:6d:ed:41:4c:28:c5:c5:21:8a:35:c0:72:b9:
                    70:f0:27:9a:dd:30:c9:6d:68:9e:29:cb:d4:64:d8:
                    9a:9f:d0:17:17:44:4e:43:2a:c3:13:5c:6f:6b:c2:
                    cf:6e:2a:15:ee:78:a9:e7:3c:e8:eb:52:81:18:90:
                    16:3a:d7:c7:1c:92:35:67:80:e8:4c:fd:85:e5:c1:
                    b0:23:5c:0e:56:e5:93:00:e3:c5:94:e0:b1:91:01:
                    0a:02:09:39:f9:a2:a1:17:fe:ca:fc:95:e3:e4:5d:
                    72:35:a3:5e:32:bb:16:0b:7c:a8:80:88:2d:00:9c:
                    8c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:53:67:36:B0:BD:E0:79:7C:C9:EB:95:17:F4:46:86:5C:DC:17:5C
            X509v3 Authority Key Identifier:
                keyid:6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:8d:3f:22:24:79:fc:1b:ab:bc:15:c1:5a:80:e2:1b:e9:0d:
         cc:ad:d7:2d:11:08:4c:94:a7:69:70:90:23:b3:24:d6:f8:7e:
         ec:cd:af:6c:4a:27:90:d3:97:98:5d:be:0b:36:e3:47:2b:a8:
         b0:ea:9e:3a:a0:92:4b:ba:a7:a5:bb:08:30:a2:1c:e6:00:b3:
         13:fd:d2:99:18:4f:0c:54:62:a8:7e:33:f9:bd:49:1c:bc:48:
         98:b2:5f:1b:41:d6:b5:5d:6f:3a:c4:81:7a:9c:95:b2:69:b4:
         10:8a:28:70:4a:fb:f4:36:dc:f5:a0:da:41:26:b9:3d:52:ec:
         5e:dc:da:8b:d2:0d:1e:b1:7e:fc:20:73:b6:9d:ac:9b:49:a8:
         94:40:16:21:a3:e5:c0:33:2c:0b:39:8d:7d:51:fb:9e:9b:7a:
         1b:d7:f9:e3:6e:9c:6c:73:81:e3:19:0e:1f:2c:9b:24:bb:c7:
         d4:25:e1:8f:d8:4d:69:8c:42:d9:65:bf:7d:90:fa:6f:d7:87:
         a2:de:93:0a:32:fc:8f:cc:c7:ce:8c:a0:85:04:0c:d5:13:5b:
         a8:ae:21:9f:86:1a:aa:66:46:d3:36:cb:b4:17:94:d3:48:9d:
         f6:da:a1:96:fd:a6:e5:31:d0:d7:ff:fb:bf:93:75:2f:82:ad:
         2d:b0:38:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 02:05:47 2026 by rpki-client