Error: rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.mft
File:                     605F3702CE23BBC04859766117DBC4F04EC8F430.mft (raw, json)
Hash identifier:          0hqnC7KAMAg225N59ZNIXi+simXBH0fH6aRUdlE7+/M=
Subject key identifier:   BA:93:9B:66:F1:11:8D:F6:B6:CE:34:75:EB:46:D7:94:FD:5F:E1:29
Authority key identifier: 60:5F:37:02:CE:23:BB:C0:48:59:76:61:17:DB:C4:F0:4E:C8:F4:30
Certificate issuer:       /CN=605F3702CE23BBC04859766117DBC4F04EC8F430
Certificate serial:       6DA2F04B5F10454A192868F6049CEE46794D8711
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605F3702CE23BBC04859766117DBC4F04EC8F430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.mft
Manifest number:          1C
Signing time:             Sat 10 Oct 2026 22:48:39 +0000
Manifest this update:     Sat 10 Oct 2026 22:43:39 +0000
Manifest next update:     Mon 12 Oct 2026 01:59:39 +0000
Files and hashes:         1: 3137372e37332e33322e302f32322d3234203d3e20323633383830.roa (hash: qabkfIU7SO5Xyd5cRep2QIYmzN6iTuqS60Pvj2sR+1A=)
                          2: 3138372e312e302e302f32302d3234203d3e20323633383830.roa (hash: ULAqfDUs8st+1sIKNA5s25TKTRaQckh45OnxniCJZRs=)
                          3: 3137302e3234362e31322e302f32322d3234203d3e20323633383830.roa (hash: NPaVaGozOlhQNJNOZjHF0rdpR/Z3lG2k7K7mZukmIGU=)
                          4: 3138362e3235312e3137322e302f32322d3234203d3e20323633383830.roa (hash: cofY/ko2BlL7yt0eG6mWvbj4GYh5TGFc8VC2YxEJKbo=)
                          5: 3137372e39322e3135322e302f32332d3234203d3e20323633383830.roa (hash: Qd3ujbD8SZAH0+ymWaiexWyAOFxOD/i05ECfJ72w25Y=)
                          6: 3137372e39322e3135322e302f32312d3234203d3e20323633383830.roa (hash: ychLWYboTuJoGFClrr/+eeTTwyVGC8Go0lEfitBMyC4=)
                          7: 3133382e3230342e36382e302f32322d3234203d3e20323633383830.roa (hash: LtAc0Hruzk4g8SDc9RiXtJ0CEYtXVQkNSd57BgqRvqw=)
                          8: 3136382e3138312e3133362e302f32322d3234203d3e20323633383830.roa (hash: vH6ANbUyo9w7Czvgy2ilsr52z9BeutlqYk7QvALFP8A=)
                          9: 3230302e3231352e3136342e302f32322d3234203d3e20323633383830.roa (hash: oa/3DtqTCA3q3plB52ivGCwWIOvZTszPk6yiUL9eSHQ=)
                          10: 3133382e3131382e3233322e302f32322d3234203d3e20323633383830.roa (hash: tOQiAdn9y68MUkaib/3hsY5Qb8OZzr6wbIb6t3ibry4=)
                          11: 3136382e3230352e33362e302f32322d3234203d3e20323633383830.roa (hash: 4lknGE9V+/VbjTHyLA8NfmPYpvmoSo19EZlVziNud8k=)
                          12: 323830343a323732383a3a2f33322d3438203d3e20323633383830.roa (hash: e2Egn+R3ufab+wEAtkBbTjcByjWPu6pDqKJql0cRx1U=)
                          13: 323830343a3264343a3a2f33322d3438203d3e20323633383830.roa (hash: cNf2r63+MMIuUOyZ8nYxWU64t0pExKQhpg2l2Le0opU=)
                          14: 3137302e37392e33322e302f32322d3234203d3e20323633383830.roa (hash: VLTHOpNdswTj4bzKKzzkY9lOoZl+jwkj8D6zJeVMIN8=)
                          15: 605F3702CE23BBC04859766117DBC4F04EC8F430.crl (hash: hDb2C8lACxxBJe2QPV+WClNJ3LlfUuLlTDdFgofU+hs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.crl
                          rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605F3702CE23BBC04859766117DBC4F04EC8F430.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 01:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a2:f0:4b:5f:10:45:4a:19:28:68:f6:04:9c:ee:46:79:4d:87:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605F3702CE23BBC04859766117DBC4F04EC8F430
        Validity
            Not Before: Oct 10 22:43:39 2026 GMT
            Not After : Oct 12 01:59:39 2026 GMT
        Subject: CN=BA939B66F1118DF6B6CE3475EB46D794FD5FE129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:61:1c:7f:e3:7b:69:57:1a:97:33:b9:20:22:
                    69:43:86:17:7d:99:32:7b:c6:28:43:be:25:c3:01:
                    89:e5:11:10:02:af:ef:51:37:2f:9a:35:05:7e:85:
                    68:3c:52:0f:be:e8:02:a3:5d:9d:c8:61:ac:9e:e3:
                    cc:c6:a6:63:92:e7:4f:a6:51:90:d0:6a:08:b8:cd:
                    0b:b4:fa:31:d1:32:ef:ac:05:e9:f8:82:82:7b:b6:
                    42:6f:8f:0c:39:48:76:72:23:ea:21:2c:93:9f:3b:
                    b9:96:bb:80:1b:ea:06:64:bf:80:7c:30:ac:ec:a3:
                    ae:44:0e:dd:c1:69:81:b1:8f:ca:32:cf:a8:ac:78:
                    20:99:7a:39:d4:e9:58:6d:91:52:34:75:0a:72:46:
                    eb:64:5e:f1:83:f7:14:60:12:72:d5:a8:e3:8e:d4:
                    6e:16:e2:66:f9:42:5c:f0:5e:12:b7:54:ac:3a:51:
                    97:84:9e:c2:ce:e0:90:b8:f6:f3:bb:00:21:fa:44:
                    13:9f:63:10:30:d0:a8:e8:24:f9:9d:4e:d8:ec:0c:
                    a7:c8:5c:28:04:e5:d1:dd:72:16:f4:1c:b3:20:53:
                    cd:33:9d:79:13:69:a5:8d:93:86:19:e2:ba:a8:b7:
                    b4:9c:4c:ee:20:d5:61:d4:e4:dd:42:50:87:da:34:
                    3e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:93:9B:66:F1:11:8D:F6:B6:CE:34:75:EB:46:D7:94:FD:5F:E1:29
            X509v3 Authority Key Identifier:
                keyid:60:5F:37:02:CE:23:BB:C0:48:59:76:61:17:DB:C4:F0:4E:C8:F4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605F3702CE23BBC04859766117DBC4F04EC8F430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:67:b2:62:61:ee:f7:82:19:b7:b8:ba:d4:10:2f:55:90:19:
         44:18:14:74:1a:aa:42:07:f2:12:3f:09:d2:fc:da:4f:ed:60:
         b1:4f:9f:c0:42:fc:f5:fa:c7:2e:ae:aa:29:15:43:0a:10:ac:
         84:ae:06:f2:eb:90:bf:23:a9:ef:b4:8a:c2:d3:00:fe:6a:99:
         78:14:c9:8a:d1:d9:39:e0:78:a2:87:34:04:01:5d:d6:7a:e0:
         2b:ec:be:46:43:9c:53:d6:ec:f4:69:90:d1:1c:23:65:d0:10:
         80:30:2b:2b:d3:25:5e:f8:cd:48:93:37:5e:de:5f:0b:bb:7c:
         00:41:4f:5d:db:e4:2c:53:77:09:32:3f:5a:87:d2:68:98:ad:
         58:c9:1c:21:b6:d8:fd:6e:4d:e3:c1:29:43:49:3e:4d:45:2b:
         03:82:26:90:c5:ca:05:dd:95:cf:f0:f3:44:ba:37:c4:91:e0:
         fd:82:47:a5:0f:23:78:ec:80:ce:8d:2f:c8:03:4f:aa:3e:74:
         4e:6b:a4:0e:26:c3:c9:6e:b7:13:78:06:c8:ee:c6:2a:ab:d2:
         ca:eb:68:8e:95:17:4a:8a:00:9c:40:6b:bb:ec:61:3c:ba:30:
         d8:e7:b1:ff:19:01:a4:b7:50:92:e4:1d:89:1d:d6:9b:7e:87:
         b8:b5:c3:2a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUbaLwS18QRUoZKGj2BJzuRnlNhxEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1RjM3MDJDRTIzQkJDMDQ4NTk3NjYxMTdEQkM0RjA0
RUM4RjQzMDAeFw0yNjEwMTAyMjQzMzlaFw0yNjEwMTIwMTU5MzlaMDMxMTAvBgNV
BAMTKEJBOTM5QjY2RjExMThERjZCNkNFMzQ3NUVCNDZENzk0RkQ1RkUxMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEYRx/43tpVxqXM7kgImlDhhd9
mTJ7xihDviXDAYnlERACr+9RNy+aNQV+hWg8Ug++6AKjXZ3IYaye48zGpmOS50+m
UZDQagi4zQu0+jHRMu+sBen4goJ7tkJvjww5SHZyI+ohLJOfO7mWu4Ab6gZkv4B8
MKzso65EDt3BaYGxj8oyz6iseCCZejnU6VhtkVI0dQpyRutkXvGD9xRgEnLVqOOO
1G4W4mb5QlzwXhK3VKw6UZeEnsLO4JC49vO7ACH6RBOfYxAw0KjoJPmdTtjsDKfI
XCgE5dHdchb0HLMgU80znXkTaaWNk4YZ4rqot7ScTO4g1WHU5N1CUIfaND6lAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUupObZvERjfa2zjR160bXlP1f4SkwHwYDVR0j
BBgwFoAUYF83As4ju8BIWXZhF9vE8E7I9DAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDlMREJpQ3Y5VWhOZENvQ2diTk5UZGZOWXlwbVg0QjM5QnBjZ1hROWhK
dkovMS82MDVGMzcwMkNFMjNCQkMwNDg1OTc2NjExN0RCQzRGMDRFQzhGNDMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwNUYzNzAyQ0UyM0JCQzA0
ODU5NzY2MTE3REJDNEYwNEVDOEY0MzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RDlMREJpQ3Y5VWhOZENvQ2diTk5UZGZOWXlwbVg0QjM5QnBjZ1hROWhKdkovMS82
MDVGMzcwMkNFMjNCQkMwNDg1OTc2NjExN0RCQzRGMDRFQzhGNDMwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAC2eyYmHu94IZt7i61BAvVZAZRBgUdBqqQgfyEj8J0vzaT+1gsU+fwEL89frH
Lq6qKRVDChCshK4G8uuQvyOp77SKwtMA/mqZeBTJitHZOeB4ooc0BAFd1nrgK+y+
RkOcU9bs9GmQ0RwjZdAQgDArK9MlXvjNSJM3Xt5fC7t8AEFPXdvkLFN3CTI/WofS
aJitWMkcIbbY/W5N48EpQ0k+TUUrA4ImkMXKBd2Vz/DzRLo3xJHg/YJHpQ8jeOyA
zo0vyANPqj50TmukDibDyW63E3gGyO7GKqvSyutojpUXSooAnEBru+xhPLow2Oex
/xkBpLdQkuQdiR3Wm36HuLXDKg==
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:29:23 2026 by rpki-client