Error: rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.mft
File:                     6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.mft (raw, json)
Hash identifier:          1YVasi1Aw/5EcN01mPE3rtf8Bhh82ivoK1iEMcXw5FE=
Subject key identifier:   5A:67:ED:01:96:D2:F9:6B:8A:7C:C0:41:5E:F2:8F:EE:F1:EE:66:AC
Authority key identifier: 6E:0E:6A:39:72:47:D4:96:E3:9C:0A:78:DF:B1:E5:1A:71:DB:AA:B5
Certificate issuer:       /CN=6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5
Certificate serial:       4097B6D575606A3977D02940153D50295AF287CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.mft
Manifest number:          04B6
Signing time:             Thu 29 Oct 2026 14:46:30 +0000
Manifest this update:     Thu 29 Oct 2026 14:41:30 +0000
Manifest next update:     Fri 30 Oct 2026 18:00:30 +0000
Files and hashes:         1: 6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.crl (hash: bY74GHVf6ol5CyAwDVK0BVmFN795BIoGFizZkAdZzXU=)
                          2: 3230302e35322e3233322e302f32322d3232203d3e20323731303139.roa (hash: pREScCb4hEOurpMdC7mgf/geao//Medh+0aw4zOUGs0=)
                          3: 3230302e35322e3233342e302f32342d3234203d3e20323731303139.roa (hash: kwrqZj4zLjCZpzMSrQEHv5X6eTchYKi+kDMFX2UmPR0=)
                          4: 323830343a373530383a383030303a3a2f33332d3333203d3e20323731303139.roa (hash: SPh+1ahVzWbgY2/pveqmlNU+2d4PHM2Trqfm75RurZ0=)
                          5: 3230302e35322e3233322e302f32342d3234203d3e20323731303139.roa (hash: NVCeNal44n/JbCUrW1MgC8SxnzJHai9tZ8zcZ9BUlCI=)
                          6: 3230302e35322e3233352e302f32342d3234203d3e20323731303139.roa (hash: XYXO66+/FC6DhpopgyT7KLulPFSEefrf0eprB6F/v7k=)
                          7: 323830343a373530383a3a2f33332d3333203d3e20323731303139.roa (hash: b93jQA7WGaiFrO9Rcmfe4F09RpDDGosh099miggpERE=)
                          8: 323830343a373530383a3a2f33322d3332203d3e20323731303139.roa (hash: Ae0k5pxS5E217tESj7O8d/7tyGcw+g1P8U408h6CNzo=)
                          9: 3230302e35322e3233332e302f32342d3234203d3e20323731303139.roa (hash: cf65qMwSKd8alqdfCFizlkzOm6OoKCkKfC0NjNu+W3Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.crl
                          rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 18:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:97:b6:d5:75:60:6a:39:77:d0:29:40:15:3d:50:29:5a:f2:87:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5
        Validity
            Not Before: Oct 29 14:41:30 2026 GMT
            Not After : Oct 30 18:00:30 2026 GMT
        Subject: CN=5A67ED0196D2F96B8A7CC0415EF28FEEF1EE66AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:13:9c:09:3e:fd:94:04:4d:55:c7:1c:2b:cf:
                    90:c0:3e:32:8c:e8:b4:c3:d1:63:a2:c5:da:92:62:
                    61:22:19:97:b1:47:d0:db:17:b8:d9:92:09:5b:dc:
                    f1:dd:fd:d9:30:3b:c9:df:ca:f4:1a:07:5c:be:93:
                    2d:45:e2:4c:6d:fd:4e:0c:97:fd:fe:0e:be:3c:e2:
                    ed:ac:18:2a:61:46:29:06:72:91:1e:5c:b3:a0:79:
                    0a:f7:d1:09:88:d8:f3:f8:c5:33:3d:45:20:eb:a6:
                    f5:e5:3e:3d:40:19:82:75:6a:82:60:98:e5:c4:41:
                    c2:b3:9d:0f:e8:75:07:dd:ef:6b:24:99:27:09:c9:
                    67:b2:61:50:85:82:ff:8b:7e:8a:f0:55:1d:a2:75:
                    1b:97:88:38:9b:be:1c:a1:54:84:53:8d:7b:c8:35:
                    c7:70:07:35:cf:cc:46:ed:9c:36:62:46:f5:63:99:
                    36:39:11:d2:a9:af:e5:6c:27:6b:10:68:30:6e:e8:
                    ca:9d:a4:1e:3e:cc:1c:b7:f3:b5:07:f4:13:bb:b8:
                    ab:c0:2a:d6:c5:6d:b7:14:64:43:60:d7:94:c7:96:
                    f1:ef:31:12:04:74:5e:82:85:67:68:b4:ba:50:69:
                    3a:be:1b:a8:a1:8a:e5:73:79:70:f8:6b:12:a4:44:
                    4e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:67:ED:01:96:D2:F9:6B:8A:7C:C0:41:5E:F2:8F:EE:F1:EE:66:AC
            X509v3 Authority Key Identifier:
                keyid:6E:0E:6A:39:72:47:D4:96:E3:9C:0A:78:DF:B1:E5:1A:71:DB:AA:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:c4:b2:b7:82:51:7a:c7:f7:a0:a3:0b:c0:52:f5:4c:f3:14:
         2d:61:aa:9e:00:32:c7:31:4c:7a:ca:14:18:ba:6a:ad:a6:f2:
         0f:c3:59:a9:3f:d6:02:61:bc:1a:e4:5e:bb:a0:bb:b4:0c:df:
         7d:25:cc:04:59:79:47:0e:22:40:a3:bc:26:95:71:df:ba:20:
         b0:17:03:c4:06:31:52:51:fe:ce:2f:b2:79:d0:50:c4:74:78:
         10:01:61:18:14:e6:fc:cd:14:8c:d3:e7:5b:6d:c1:f4:ea:d7:
         b3:c5:fa:ac:89:c4:5a:f0:29:9d:b9:9a:30:3b:1c:0c:78:99:
         97:86:8d:da:08:cf:f4:e8:8b:05:a4:4e:f2:c8:38:77:93:48:
         e6:66:7a:ed:0f:b4:4c:df:51:d3:61:98:c3:f1:ac:1b:94:8a:
         90:d1:51:2d:a9:99:aa:9d:8a:c4:cd:e0:f0:9a:cc:2f:2a:64:
         cc:8b:9d:f0:f1:43:f5:35:5e:12:c6:6f:53:0f:5b:83:cc:b8:
         07:36:b0:0c:fa:5c:40:09:a7:97:4e:09:71:43:22:79:d2:3a:
         97:7d:68:7d:f8:06:4f:fd:48:20:5e:3d:11:5d:e1:f8:49:d6:
         02:e6:b7:21:59:9e:83:9a:12:7a:32:0d:28:04:8d:b7:95:ec:
         9a:89:b3:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQJe21XVgajl30ClAFT1QKVryh8owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkUwRTZBMzk3MjQ3RDQ5NkUzOUMwQTc4REZCMUU1MUE3
MURCQUFCNTAeFw0yNjEwMjkxNDQxMzBaFw0yNjEwMzAxODAwMzBaMDMxMTAvBgNV
BAMTKDVBNjdFRDAxOTZEMkY5NkI4QTdDQzA0MTVFRjI4RkVFRjFFRTY2QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuE5wJPv2UBE1Vxxwrz5DAPjKM
6LTD0WOixdqSYmEiGZexR9DbF7jZkglb3PHd/dkwO8nfyvQaB1y+ky1F4kxt/U4M
l/3+Dr484u2sGCphRikGcpEeXLOgeQr30QmI2PP4xTM9RSDrpvXlPj1AGYJ1aoJg
mOXEQcKznQ/odQfd72skmScJyWeyYVCFgv+LforwVR2idRuXiDibvhyhVIRTjXvI
NcdwBzXPzEbtnDZiRvVjmTY5EdKpr+VsJ2sQaDBu6MqdpB4+zBy387UH9BO7uKvA
KtbFbbcUZENg15THlvHvMRIEdF6ChWdotLpQaTq+G6ihiuVzeXD4axKkRE7hAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUWmftAZbS+WuKfMBBXvKP7vHuZqwwHwYDVR0j
BBgwFoAUbg5qOXJH1JbjnAp437HlGnHbqrUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1RFdGE5TUFjTE1RWUpDVFJiYjM4Mkx3UXFVbjU3aW9DdG9UcHlxd0di
WjUvMC82RTBFNkEzOTcyNDdENDk2RTM5QzBBNzhERkIxRTUxQTcxREJBQUI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZFMEU2QTM5NzI0N0Q0OTZF
MzlDMEE3OERGQjFFNTFBNzFEQkFBQjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q1RFdGE5TUFjTE1RWUpDVFJiYjM4Mkx3UXFVbjU3aW9DdG9UcHlxd0diWjUvMC82
RTBFNkEzOTcyNDdENDk2RTM5QzBBNzhERkIxRTUxQTcxREJBQUI1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAL8Syt4JResf3oKMLwFL1TPMULWGqngAyxzFMesoUGLpqrabyD8NZqT/WAmG8
GuReu6C7tAzffSXMBFl5Rw4iQKO8JpVx37ogsBcDxAYxUlH+zi+yedBQxHR4EAFh
GBTm/M0UjNPnW23B9OrXs8X6rInEWvApnbmaMDscDHiZl4aN2gjP9OiLBaRO8sg4
d5NI5mZ67Q+0TN9R02GYw/GsG5SKkNFRLamZqp2KxM3g8JrMLypkzIud8PFD9TVe
EsZvUw9bg8y4BzawDPpcQAmnl04JcUMiedI6l31offgGT/1IIF49EV3h+EnWAua3
IVmeg5oSejINKASNt5Xsmomzqw==
-----END CERTIFICATE-----
Generated at Thu Oct 29 17:35:13 2026 by rpki-client