Error: rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/783CF2D02131A21E333113BEEE878BC38B6104B6.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/783CF2D02131A21E333113BEEE878BC38B6104B6.mft
File:                     783CF2D02131A21E333113BEEE878BC38B6104B6.mft (raw, json)
Hash identifier:          PyAMbujwiioPMyMJKA9af03csAGpdhPqQ8l2DCJn2qk=
Subject key identifier:   26:4B:DA:18:23:C5:57:25:91:89:F2:12:AE:8E:7D:45:B5:72:2A:02
Authority key identifier: 78:3C:F2:D0:21:31:A2:1E:33:31:13:BE:EE:87:8B:C3:8B:61:04:B6
Certificate issuer:       /CN=783CF2D02131A21E333113BEEE878BC38B6104B6
Certificate serial:       2A70A4C1AB6B9D185B4D7F82DBEA925A5919B3F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/783CF2D02131A21E333113BEEE878BC38B6104B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/783CF2D02131A21E333113BEEE878BC38B6104B6.mft
Manifest number:          0354
Signing time:             Mon 02 Nov 2026 03:17:57 +0000
Manifest this update:     Mon 02 Nov 2026 03:12:57 +0000
Manifest next update:     Tue 03 Nov 2026 06:21:57 +0000
Files and hashes:         1: 3137392e3132372e33322e302f32312d3235203d3e20323633363337.roa (hash: KKtwa53J2lrY3PPRBn6nepAkzXidOs/IwnWWY6AmEXI=)
                          2: 323830343a313037383a3a2f33322d3438203d3e20323633363337.roa (hash: KBQCdFHplWquuT+kab6DZbpDzKtkvdcAkkBTGtbdW8w=)
                          3: 783CF2D02131A21E333113BEEE878BC38B6104B6.crl (hash: mhEa94dKajHfa02SUbOodF96YqG/TxxXmG3n0yuwMOQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/783CF2D02131A21E333113BEEE878BC38B6104B6.crl
                          rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/783CF2D02131A21E333113BEEE878BC38B6104B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/783CF2D02131A21E333113BEEE878BC38B6104B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 06:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:70:a4:c1:ab:6b:9d:18:5b:4d:7f:82:db:ea:92:5a:59:19:b3:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=783CF2D02131A21E333113BEEE878BC38B6104B6
        Validity
            Not Before: Nov  2 03:12:57 2026 GMT
            Not After : Nov  3 06:21:57 2026 GMT
        Subject: CN=264BDA1823C557259189F212AE8E7D45B5722A02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:95:08:68:6a:14:e0:1d:b9:47:d8:e9:db:fb:
                    63:2b:d5:42:f2:90:02:d7:81:67:e2:58:6e:79:ea:
                    6f:bb:34:9b:b7:f7:8f:0a:e1:9d:0a:48:e2:6c:50:
                    32:bb:68:46:5f:56:68:2a:54:6a:4c:bb:cc:43:2a:
                    d1:78:9c:da:bb:1a:da:7c:38:17:ab:86:70:6b:e1:
                    ee:fb:21:10:ac:e0:37:1e:91:4b:41:d0:e7:b5:0c:
                    f8:97:57:09:be:59:de:e8:20:1c:a7:36:35:02:e4:
                    53:77:35:61:4e:c8:01:ae:42:8e:d5:7a:b8:3e:67:
                    ba:e0:ef:8b:74:e2:25:6f:2f:9f:62:1f:38:88:f8:
                    df:30:6d:34:01:e2:2f:bc:ec:a0:c7:bc:0f:c2:1a:
                    82:b4:53:58:5c:5f:cc:1d:7e:a1:6e:21:25:14:f3:
                    a1:ef:3a:80:94:ab:ae:21:68:cf:ea:1a:cd:7d:23:
                    19:47:38:1c:de:d2:58:cd:35:62:9d:60:21:92:15:
                    d3:09:42:8a:cd:b4:f9:5e:e3:30:93:bb:57:f5:94:
                    b3:e5:2f:e9:02:62:85:35:f5:80:e1:ef:d3:2d:05:
                    b1:4f:0a:9f:58:fa:e6:f7:3c:af:01:b1:3d:4f:b4:
                    71:03:b9:2c:4a:65:b8:7f:d0:b8:8c:0c:cd:4b:ff:
                    89:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4B:DA:18:23:C5:57:25:91:89:F2:12:AE:8E:7D:45:B5:72:2A:02
            X509v3 Authority Key Identifier:
                keyid:78:3C:F2:D0:21:31:A2:1E:33:31:13:BE:EE:87:8B:C3:8B:61:04:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/783CF2D02131A21E333113BEEE878BC38B6104B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/783CF2D02131A21E333113BEEE878BC38B6104B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/783CF2D02131A21E333113BEEE878BC38B6104B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:7b:c4:f8:24:e8:ee:97:7a:13:d2:0d:1d:1e:9b:f3:b7:bf:
         08:f5:7b:eb:c1:05:84:36:a9:8a:d8:9c:70:a5:88:df:8e:fa:
         26:e1:c1:01:7c:25:14:45:1b:d0:15:9e:de:f4:cf:f0:94:66:
         64:ae:7b:c8:20:9f:69:e9:d9:69:5f:bf:04:12:5a:ee:37:a5:
         44:0b:92:09:aa:5e:1f:4d:0d:c2:3a:63:3d:04:53:84:19:ec:
         36:17:e1:9a:d9:76:d4:09:da:7b:3f:73:c7:2a:d2:2a:52:13:
         3d:72:ed:b0:45:69:34:45:9f:0b:6a:2f:85:ee:56:82:9d:fa:
         2e:c8:ed:58:29:75:b3:c9:f3:48:5b:a8:ca:fd:05:d0:23:60:
         b3:f7:2f:30:17:2c:e9:65:a4:83:57:57:ba:34:dc:e2:a1:cf:
         c9:c9:22:f3:c6:38:6e:85:dd:8f:e1:8a:41:15:24:f0:7d:44:
         8a:2e:a7:f4:78:1b:ee:27:78:3a:19:70:2a:0e:1c:2c:e7:71:
         a3:19:12:94:b2:69:53:8e:d9:ff:13:08:c4:9b:8f:30:73:1c:
         77:69:63:ba:4c:9c:41:ad:f6:40:8d:45:aa:96:2f:84:5c:5d:
         56:54:9c:d1:e0:12:7d:9b:1c:94:65:52:eb:06:95:80:9a:4d:
         65:14:16:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 14:38:25 2026 by rpki-client