Error: rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.mft
File:                     6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.mft (raw, json)
Hash identifier:          Ll+s3eLIP6Z74g6R0BmFeFi7VcCtUzrQhVWAhdmm6N0=
Subject key identifier:   31:52:FE:7C:52:9F:CB:ED:53:2D:3C:6A:1A:41:D3:13:AC:A1:3F:C9
Authority key identifier: 6E:0E:6A:39:72:47:D4:96:E3:9C:0A:78:DF:B1:E5:1A:71:DB:AA:B5
Certificate issuer:       /CN=6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5
Certificate serial:       51A52FDA139A8CC2657CF12BCCEE9E3E7C6ECCA1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.mft
Manifest number:          045D
Signing time:             Sun 23 Aug 2026 16:38:06 +0000
Manifest this update:     Sun 23 Aug 2026 16:33:06 +0000
Manifest next update:     Mon 24 Aug 2026 18:55:06 +0000
Files and hashes:         1: 3230302e35322e3233332e302f32342d3234203d3e20323731303139.roa (hash: cf65qMwSKd8alqdfCFizlkzOm6OoKCkKfC0NjNu+W3Q=)
                          2: 323830343a373530383a3a2f33332d3333203d3e20323731303139.roa (hash: b93jQA7WGaiFrO9Rcmfe4F09RpDDGosh099miggpERE=)
                          3: 3230302e35322e3233342e302f32342d3234203d3e20323731303139.roa (hash: kwrqZj4zLjCZpzMSrQEHv5X6eTchYKi+kDMFX2UmPR0=)
                          4: 3230302e35322e3233322e302f32342d3234203d3e20323731303139.roa (hash: NVCeNal44n/JbCUrW1MgC8SxnzJHai9tZ8zcZ9BUlCI=)
                          5: 3230302e35322e3233322e302f32322d3232203d3e20323731303139.roa (hash: pREScCb4hEOurpMdC7mgf/geao//Medh+0aw4zOUGs0=)
                          6: 323830343a373530383a3a2f33322d3332203d3e20323731303139.roa (hash: Ae0k5pxS5E217tESj7O8d/7tyGcw+g1P8U408h6CNzo=)
                          7: 3230302e35322e3233352e302f32342d3234203d3e20323731303139.roa (hash: XYXO66+/FC6DhpopgyT7KLulPFSEefrf0eprB6F/v7k=)
                          8: 6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.crl (hash: hTmsLvj/UzRLO434IJGCnj4kSSyM4vqk0nknY6YHYN8=)
                          9: 323830343a373530383a383030303a3a2f33332d3333203d3e20323731303139.roa (hash: SPh+1ahVzWbgY2/pveqmlNU+2d4PHM2Trqfm75RurZ0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.crl
                          rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 18:55:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a5:2f:da:13:9a:8c:c2:65:7c:f1:2b:cc:ee:9e:3e:7c:6e:cc:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5
        Validity
            Not Before: Aug 23 16:33:06 2026 GMT
            Not After : Aug 24 18:55:06 2026 GMT
        Subject: CN=3152FE7C529FCBED532D3C6A1A41D313ACA13FC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e8:af:11:39:00:d4:9e:16:f8:d3:57:7a:0a:
                    61:a2:6d:32:42:6a:8d:d1:26:0b:d9:e7:85:98:71:
                    bf:aa:d0:cb:9b:83:7d:cc:09:00:43:75:dc:b5:95:
                    d1:69:4d:50:02:03:a5:3a:94:75:d0:d5:24:8d:4f:
                    53:e9:1c:74:37:d0:96:18:00:17:8f:ed:66:18:ca:
                    f2:66:9b:2d:31:7b:b8:df:14:c6:01:5f:b0:e4:48:
                    dc:b6:0b:98:cc:2d:83:cb:e2:1f:e9:ab:50:48:80:
                    02:00:27:e7:6b:fe:7e:65:dd:0f:a3:cf:cb:7d:ab:
                    4e:03:db:d4:17:dc:b0:93:0c:41:98:7d:ea:88:6f:
                    2f:65:4c:eb:a7:df:71:56:6c:20:d5:8f:af:11:8f:
                    cf:be:b2:12:2b:af:20:00:b4:fe:b5:1b:bf:7c:12:
                    7f:8c:c6:60:52:91:5f:f8:11:75:d5:b9:3b:2e:d8:
                    99:ef:91:36:a4:81:33:d2:40:83:c9:52:e1:dd:9b:
                    c3:22:19:d6:ba:48:cb:5d:55:5d:b6:53:77:77:18:
                    4e:7e:09:87:73:46:c7:a0:2d:8b:80:43:f1:5f:dd:
                    1c:49:05:43:2a:d3:ef:9f:c2:b7:38:81:ca:37:70:
                    60:16:62:c0:73:69:f5:d0:b3:50:04:80:35:a8:4b:
                    19:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:52:FE:7C:52:9F:CB:ED:53:2D:3C:6A:1A:41:D3:13:AC:A1:3F:C9
            X509v3 Authority Key Identifier:
                keyid:6E:0E:6A:39:72:47:D4:96:E3:9C:0A:78:DF:B1:E5:1A:71:DB:AA:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:1b:80:63:f1:c8:13:10:e0:81:ec:81:04:31:0a:fb:66:87:
         44:22:db:2b:71:56:2c:e8:d8:37:5b:55:7b:f1:07:24:ac:8b:
         9d:b8:d5:b0:aa:6d:3b:2d:44:be:ba:d4:93:5c:e8:3d:1b:73:
         ac:c2:2d:ac:81:df:f5:d2:70:7f:e0:69:53:e2:42:b3:8d:4b:
         b7:0c:b1:e6:12:82:c2:98:60:4f:f3:09:b2:ab:ee:da:df:5a:
         d0:88:3c:96:90:b1:3a:90:f3:02:a1:19:fc:e4:28:79:7e:15:
         a5:8f:db:a8:db:01:4d:4a:60:91:a2:c6:a5:1e:53:fb:d3:46:
         20:36:1c:57:04:06:5e:49:34:3f:8f:e2:ce:f8:cd:c1:1b:1b:
         44:15:fb:8c:11:9c:91:23:18:32:b4:20:34:47:1b:79:83:c0:
         ac:f7:4c:66:8b:8a:a8:a7:6f:eb:6b:a9:3a:af:0f:b9:8b:dc:
         88:f4:81:8a:79:44:e2:27:06:24:4f:b7:e6:14:b2:ca:8a:f5:
         f4:65:35:65:2d:fe:80:71:f2:77:22:fe:57:db:0d:f0:36:ac:
         1e:1e:b1:b4:48:dd:95:8b:32:37:b8:b2:f0:d2:8e:e6:01:26:
         51:ed:bc:c8:97:07:54:74:10:ab:14:c3:9b:fc:a9:19:03:42:
         cd:47:29:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 07:48:06 2026 by rpki-client