Error: rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.mft
File:                     C27181D3D53BD228B34586DC6F756EBF5695A6B2.mft (raw, json)
Hash identifier:          W5GaXuHhmV2Kl8Ai4LOllOpsL9lOn0cmejM7QL0ZISI=
Subject key identifier:   36:A2:D4:84:AB:71:96:5F:8B:3E:55:6C:22:04:FB:45:71:A8:4C:1A
Authority key identifier: C2:71:81:D3:D5:3B:D2:28:B3:45:86:DC:6F:75:6E:BF:56:95:A6:B2
Certificate issuer:       /CN=C27181D3D53BD228B34586DC6F756EBF5695A6B2
Certificate serial:       0F5ED75DCA7FAC26F995CB15760020B05AA7060F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.mft
Manifest number:          04D6
Signing time:             Tue 03 Nov 2026 02:54:55 +0000
Manifest this update:     Tue 03 Nov 2026 02:49:55 +0000
Manifest next update:     Wed 04 Nov 2026 04:35:55 +0000
Files and hashes:         1: 3136382e3139342e3131362e302f32322d3234203d3e203532393638.roa (hash: m8+D1PZQ3lxSTQ5aW368MNRHdhaLg9UrPJ6zYWUA4zk=)
                          2: 3137372e33382e3131322e302f32312d3234203d3e203532393638.roa (hash: XAyyQG86DF1m/C/R9+kF7EBzwEKXAZea0P5GuXQm6Uo=)
                          3: 3133382e33362e3138342e302f32322d3234203d3e203532393638.roa (hash: pj6HuMvjf10fBS0ysrV5iARC2zt4KSLo89GS4wYpWqc=)
                          4: C27181D3D53BD228B34586DC6F756EBF5695A6B2.crl (hash: 3EQVTn6lVsGbD8FlF1TgRNHrKKnlF5av/ZkBTVSwY4Y=)
                          5: 3230302e3232392e3231322e302f32322d3234203d3e203532393638.roa (hash: Trun0L6FUYD8uUor5Ui+aIo7vmX+0zTEx7IhaKf16rA=)
                          6: 3137392e3130382e36342e302f32312d3234203d3e203532393638.roa (hash: /P0jlRkJ2bEQj0dNSEDK4gwa+wGYNUA7KBk5vEJnThA=)
                          7: 3137372e33382e3132302e302f32312d3234203d3e203532393638.roa (hash: fuBVTBb7rinMwiWCwhJKB80OeutkxB/au5ZrjKtjCy8=)
                          8: 323830343a6561303a3a2f33322d3438203d3e203532393638.roa (hash: xrM+H87TMUneUCw6UrxQqpj8trHTCSvPosAUoKvRYm8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.crl
                          rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 04:35:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:5e:d7:5d:ca:7f:ac:26:f9:95:cb:15:76:00:20:b0:5a:a7:06:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C27181D3D53BD228B34586DC6F756EBF5695A6B2
        Validity
            Not Before: Nov  3 02:49:55 2026 GMT
            Not After : Nov  4 04:35:55 2026 GMT
        Subject: CN=36A2D484AB71965F8B3E556C2204FB4571A84C1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:29:47:c3:00:92:82:f3:d3:55:b2:ba:0e:b4:
                    59:c8:d3:52:63:60:69:74:c0:8a:d0:8f:95:93:da:
                    cf:a3:1e:6d:ec:3d:5d:a9:75:3e:c3:61:51:23:18:
                    25:f4:35:93:53:55:bd:6f:48:80:17:a9:f9:36:9d:
                    ce:b4:9a:a5:03:a0:7a:7e:07:88:4c:38:74:71:fc:
                    38:68:e9:74:df:0f:f8:c8:e6:fe:99:46:60:83:2d:
                    c0:79:1c:53:e6:bc:64:25:18:78:f8:62:76:84:9e:
                    13:4f:1f:90:fd:62:75:f3:32:a7:ac:c1:2a:af:7f:
                    c9:d7:a3:36:7b:cc:a7:83:4e:f8:96:13:23:e0:29:
                    4c:30:fb:e8:66:1d:7f:ca:c4:6d:60:2a:18:56:90:
                    3f:c4:35:64:41:ed:fb:c8:35:09:36:f9:a0:df:91:
                    fb:e7:e0:01:30:77:04:2c:71:6a:f3:25:88:83:ad:
                    f7:30:08:64:03:00:25:ae:79:6f:c9:94:9c:d6:96:
                    d4:19:3b:db:6b:05:42:a4:60:d0:02:1f:8a:72:59:
                    2d:a8:45:00:98:d1:f1:1e:8e:76:21:09:a6:88:60:
                    dd:60:3e:35:0d:55:f5:55:1f:a4:0f:09:39:ad:d4:
                    04:a5:38:69:57:a0:44:6b:cd:22:0c:cf:2a:6b:0d:
                    aa:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A2:D4:84:AB:71:96:5F:8B:3E:55:6C:22:04:FB:45:71:A8:4C:1A
            X509v3 Authority Key Identifier:
                keyid:C2:71:81:D3:D5:3B:D2:28:B3:45:86:DC:6F:75:6E:BF:56:95:A6:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:e5:fa:46:6a:cd:3d:3a:bc:e1:ba:18:3b:5a:78:8e:0c:f0:
         34:3a:84:33:25:1c:3e:75:6c:54:8e:01:32:a9:82:ba:41:ce:
         b8:83:5c:14:42:f6:83:26:7e:e9:2c:ae:f8:c7:d7:73:77:ed:
         ae:f1:3a:99:a4:a1:de:c5:21:32:c0:11:2d:b7:41:6b:fe:bc:
         3e:ca:cb:11:de:85:22:2e:93:b5:2b:4e:e4:80:fc:38:80:2d:
         d6:7a:43:d1:8a:b9:01:02:43:f5:7a:33:2f:b3:89:2e:c0:d5:
         b2:60:31:31:6a:b1:da:19:8f:f4:ea:f3:98:41:86:e8:07:37:
         66:8f:33:c1:5b:a8:ea:11:75:1e:d7:75:d2:a4:4f:af:32:f4:
         29:04:20:4c:c8:4f:23:1b:65:1a:94:e8:12:f7:3b:11:7f:cb:
         e4:31:12:31:1b:e1:73:6b:29:4b:50:3a:ac:e9:9a:22:3f:9e:
         0e:82:6c:d8:29:91:53:dd:2e:01:5c:01:53:59:92:7a:36:82:
         44:a3:bc:24:43:2a:53:d3:2c:e9:62:d6:ab:22:76:0c:cc:f2:
         53:8d:ca:ed:88:41:f0:24:ae:c7:d7:5e:96:3d:43:76:a8:95:
         df:08:a5:b8:c0:21:54:02:31:8e:cf:a4:b7:00:40:bc:65:58:
         84:b9:5f:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUD17XXcp/rCb5lcsVdgAgsFqnBg8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI3MTgxRDNENTNCRDIyOEIzNDU4NkRDNkY3NTZFQkY1
Njk1QTZCMjAeFw0yNjExMDMwMjQ5NTVaFw0yNjExMDQwNDM1NTVaMDMxMTAvBgNV
BAMTKDM2QTJENDg0QUI3MTk2NUY4QjNFNTU2QzIyMDRGQjQ1NzFBODRDMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRKUfDAJKC89NVsroOtFnI01Jj
YGl0wIrQj5WT2s+jHm3sPV2pdT7DYVEjGCX0NZNTVb1vSIAXqfk2nc60mqUDoHp+
B4hMOHRx/Dho6XTfD/jI5v6ZRmCDLcB5HFPmvGQlGHj4YnaEnhNPH5D9YnXzMqes
wSqvf8nXozZ7zKeDTviWEyPgKUww++hmHX/KxG1gKhhWkD/ENWRB7fvINQk2+aDf
kfvn4AEwdwQscWrzJYiDrfcwCGQDACWueW/JlJzWltQZO9trBUKkYNACH4pyWS2o
RQCY0fEejnYhCaaIYN1gPjUNVfVVH6QPCTmt1ASlOGlXoERrzSIMzyprDapxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUNqLUhKtxll+LPlVsIgT7RXGoTBowHwYDVR0j
BBgwFoAUwnGB09U70iizRYbcb3Vuv1aVprIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXNrMTVaeUxXVjdNUVoxa3VXWkp3UHBvYTIxUmEyN1JXTkJuYmQzQkRy
R2IvMS9DMjcxODFEM0Q1M0JEMjI4QjM0NTg2REM2Rjc1NkVCRjU2OTVBNkIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MyNzE4MUQzRDUzQkQyMjhC
MzQ1ODZEQzZGNzU2RUJGNTY5NUE2QjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NXNrMTVaeUxXVjdNUVoxa3VXWkp3UHBvYTIxUmEyN1JXTkJuYmQzQkRyR2IvMS9D
MjcxODFEM0Q1M0JEMjI4QjM0NTg2REM2Rjc1NkVCRjU2OTVBNkIyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOOX6RmrNPTq84boYO1p4jgzwNDqEMyUcPnVsVI4BMqmCukHOuINcFEL2gyZ+
6Syu+MfXc3ftrvE6maSh3sUhMsARLbdBa/68PsrLEd6FIi6TtStO5ID8OIAt1npD
0Yq5AQJD9XozL7OJLsDVsmAxMWqx2hmP9OrzmEGG6Ac3Zo8zwVuo6hF1Htd10qRP
rzL0KQQgTMhPIxtlGpToEvc7EX/L5DESMRvhc2spS1A6rOmaIj+eDoJs2CmRU90u
AVwBU1mSejaCRKO8JEMqU9Ms6WLWqyJ2DMzyU43K7YhB8CSux9delj1DdqiV3wil
uMAhVAIxjs+ktwBAvGVYhLlf+w==
-----END CERTIFICATE-----
Generated at Tue Nov 3 16:41:50 2026 by rpki-client