Error: rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.mft
File:                     5534C39A465F9E5D47762E20F30C75897285DDAF.mft (raw, json)
Hash identifier:          9NzWnNwQhv2VQpu1KLjGY8hA4f11Xc0WxEUjmnKSDjM=
Subject key identifier:   01:0A:CB:8E:03:C2:E1:91:25:1C:95:7F:2D:80:AA:2B:5B:EB:64:BE
Authority key identifier: 55:34:C3:9A:46:5F:9E:5D:47:76:2E:20:F3:0C:75:89:72:85:DD:AF
Certificate issuer:       /CN=5534C39A465F9E5D47762E20F30C75897285DDAF
Certificate serial:       7333FDE4EA50C90B59BFD072DA3A53A34FBD8054
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.mft
Manifest number:          04EC
Signing time:             Sat 31 Oct 2026 20:15:38 +0000
Manifest this update:     Sat 31 Oct 2026 20:10:38 +0000
Manifest next update:     Mon 02 Nov 2026 00:11:38 +0000
Files and hashes:         1: 323830343a326637633a3a2f33352d3335203d3e20323634383934.roa (hash: WItSAVxxJud7NogNMuEIhSy8RX0GaouYknkQOT/SQ4c=)
                          2: 323830343a326637633a343030303a3a2f33342d3334203d3e20323634383934.roa (hash: p37x/ejAgsnREBtNwGuoVkKXAfd1D5B0SFr9MzhvoLg=)
                          3: 323830343a326637633a3a2f33322d3430203d3e20323634383934.roa (hash: 4TXSCUIUEO7Zw09/o5yxTywrm2ZViQqCQ4DatFwELkc=)
                          4: 323830343a326637633a653030303a3a2f33352d3335203d3e20323634383934.roa (hash: kyuU9GJoGKGUFAJN5MejO3LZ+iABRf/mw+Cfx4E1XD8=)
                          5: 323830343a326637633a383030303a3a2f33352d3335203d3e20323634383934.roa (hash: Gx/+EqTleynvLK/tsGKIGJOJyALPZ5kA0OaOWhiRNpE=)
                          6: 323830343a326637633a323030303a3a2f33352d3335203d3e20323634383934.roa (hash: zeGjkxDrktb9XR34Dl4moecfOAh4lOJ+Ww4va1BCnf8=)
                          7: 323830343a326637633a363030303a3a2f33352d3335203d3e20323634383934.roa (hash: cWwAxHKRPk8hXDILH5HMGKId2R9uDDjRimDMy2dY2q4=)
                          8: 323830343a326637633a613030303a3a2f33352d3335203d3e20323634383934.roa (hash: 3P8EtJYW1qX/nZLaDnyoLdYg1gbejoyjEzSCXxRE/4A=)
                          9: 323830343a326637633a633030303a3a2f33352d3335203d3e20323634383934.roa (hash: KwGvsJprB7SDUDOgY/YZhgI21U4YrJo74He5UBtGmU4=)
                          10: 3136382e3232382e302e302f32322d3234203d3e20323634383934.roa (hash: 4SanX7ojwpVsbvHpIzlg0UKYmQzt5QzddUpmykm33sk=)
                          11: 323830343a326637633a383030303a3a2f33342d3334203d3e20323634383934.roa (hash: 3JV+0ygoizMyujciVJPsvli4NULGhGUks0zKy5PcMLI=)
                          12: 323830343a326637633a383030303a3a2f33332d3333203d3e20323634383934.roa (hash: iH9eXi0UxOCaXRmAgRg6KAvzTa+Mv8yvj9v037IofeQ=)
                          13: 5534C39A465F9E5D47762E20F30C75897285DDAF.crl (hash: oe1KJ8U6sPOaeqL9Kx9pnDz4eIAF4D62PUQe4oall5M=)
                          14: 323830343a326637633a633030303a3a2f33342d3334203d3e20323634383934.roa (hash: L9zP1oXAYMmtSLKy4Oo+gisYERFnYYhbV9VKz1EXHOI=)
                          15: 323830343a326637633a343030303a3a2f33352d3335203d3e20323634383934.roa (hash: IE8FnaaEOySRM9BPjaAKiQA/Uhn+IrdPgrOEgzTgP68=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.crl
                          rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 00:11:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:33:fd:e4:ea:50:c9:0b:59:bf:d0:72:da:3a:53:a3:4f:bd:80:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5534C39A465F9E5D47762E20F30C75897285DDAF
        Validity
            Not Before: Oct 31 20:10:38 2026 GMT
            Not After : Nov  2 00:11:38 2026 GMT
        Subject: CN=010ACB8E03C2E191251C957F2D80AA2B5BEB64BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:31:1e:f3:fc:b6:a5:fe:f1:87:90:cb:77:9c:
                    20:1f:ef:60:f3:a4:23:ba:3c:64:e6:2a:ab:64:7c:
                    fb:e4:69:db:2d:e8:3e:fa:5e:4e:08:c6:1b:5f:dc:
                    b5:df:f1:a0:b4:30:fb:1b:e6:22:85:d4:6e:2f:7a:
                    2d:7c:ac:15:ec:d7:f9:bf:74:25:d6:2b:0e:e4:68:
                    f3:1d:8c:d1:35:b4:b7:0f:7b:58:88:0a:8c:d0:4d:
                    a8:79:7c:54:13:be:10:5e:42:50:84:78:1e:38:de:
                    3e:db:40:b4:93:54:4e:a8:90:89:f3:a5:a6:d7:e2:
                    aa:f0:f3:ca:3e:03:e9:3c:d2:8a:f8:8a:3e:b0:6b:
                    8b:ef:2f:89:7e:7d:62:d6:3b:7d:43:91:66:e2:05:
                    f0:6c:12:b6:47:ea:1e:2a:32:ed:c1:5a:ca:68:d0:
                    69:9a:63:de:f5:7e:c7:95:b6:26:9e:ea:fa:1b:8b:
                    d7:28:a7:2b:f2:3a:2b:58:94:e3:ef:26:fc:84:59:
                    33:30:58:8e:2e:60:c3:23:3a:a3:75:58:b1:3a:5f:
                    17:c6:1d:52:2c:d6:aa:aa:e4:d9:64:62:51:d5:9d:
                    0b:79:37:91:a0:b3:e2:26:0d:ff:93:c4:5d:20:83:
                    5b:f5:dc:2c:44:f3:2a:3d:83:5c:0d:11:90:aa:08:
                    19:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:0A:CB:8E:03:C2:E1:91:25:1C:95:7F:2D:80:AA:2B:5B:EB:64:BE
            X509v3 Authority Key Identifier:
                keyid:55:34:C3:9A:46:5F:9E:5D:47:76:2E:20:F3:0C:75:89:72:85:DD:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:04:db:75:ca:c5:38:29:10:1c:79:08:d1:97:b9:e8:8c:44:
         29:f3:c0:02:fa:74:10:03:d2:12:db:a3:84:00:f6:01:cb:92:
         88:7f:a9:79:6e:a9:e3:9a:1f:ac:ac:23:3a:1f:83:40:00:3b:
         ac:07:85:b7:eb:9d:88:b7:f1:9a:59:e7:86:2f:fe:50:05:00:
         a0:c6:74:25:d6:99:09:c3:02:4f:e3:ab:62:c1:7a:70:ba:f4:
         30:46:13:fe:7b:3a:d8:8e:09:f0:a3:6e:a3:84:2d:45:d0:77:
         83:28:27:43:fb:1b:b9:dc:84:3a:24:3b:59:cb:aa:ea:5c:ad:
         b0:26:5a:35:de:af:e7:94:aa:12:f5:e3:e1:6b:87:f5:63:f1:
         da:17:19:25:f5:55:d7:b7:c7:06:4b:78:53:f2:10:fb:bd:54:
         0e:31:84:0e:15:5b:5b:e1:1e:bd:79:5d:66:f5:e2:8a:9a:d4:
         96:02:82:c3:85:26:77:59:a7:bd:5b:3c:69:89:9b:54:2f:bf:
         14:74:c8:ab:42:65:d3:44:08:24:44:9e:83:43:8c:ee:62:b3:
         2d:b9:fd:b3:71:74:92:d7:34:fe:b1:db:6c:f9:ac:75:81:09:
         ce:80:6e:9f:29:7e:cc:3b:0b:44:73:79:cb:01:69:eb:f5:7d:
         ed:c5:39:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 09:19:28 2026 by rpki-client