Error: rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/E6F5848D2F1E7564C1201124AD1D8A679DADCDD5.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/E6F5848D2F1E7564C1201124AD1D8A679DADCDD5.mft
File:                     E6F5848D2F1E7564C1201124AD1D8A679DADCDD5.mft (raw, json)
Hash identifier:          2RfoxNL0bwPA0wVwbQTZp4TLoOPCAvGyYnxGFE9CKAQ=
Subject key identifier:   68:A6:46:8E:64:04:CC:48:31:12:70:9B:09:C8:AE:0B:45:D4:3F:B6
Authority key identifier: E6:F5:84:8D:2F:1E:75:64:C1:20:11:24:AD:1D:8A:67:9D:AD:CD:D5
Certificate issuer:       /CN=E6F5848D2F1E7564C1201124AD1D8A679DADCDD5
Certificate serial:       7EA8C53452A19AE154C3F1AE8D1AD03CDACC15F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6F5848D2F1E7564C1201124AD1D8A679DADCDD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/E6F5848D2F1E7564C1201124AD1D8A679DADCDD5.mft
Manifest number:          021B
Signing time:             Fri 30 Oct 2026 17:44:13 +0000
Manifest this update:     Fri 30 Oct 2026 17:39:12 +0000
Manifest next update:     Sat 31 Oct 2026 21:36:12 +0000
Files and hashes:         1: 323830343a356539303a3a2f33322d3332203d3e20323639303431.roa (hash: DMmi1rm26cTOuYlcu4HfTng1uYw6lrBikYRYzUoP0uE=)
                          2: 34352e3137382e3136392e302f32342d3234203d3e20323639303431.roa (hash: YYSDrus5mg2YKlpfZhcgZw9D9Gd2OdCUPy5HZwg3oQE=)
                          3: E6F5848D2F1E7564C1201124AD1D8A679DADCDD5.crl (hash: NthkEFkjHYlTROBC2xdDeEFvaw4eajCgznmglmZhs14=)
                          4: 34352e3137382e3136382e302f32332d3233203d3e20323639303431.roa (hash: a+/1Td5DIiJV8VVUqxAy0YBebZlXaFSInbYaZhrSvXs=)
                          5: 34352e3137382e3136382e302f32342d3234203d3e20323639303431.roa (hash: jT1HFNN6FLiPgJFrQ0lsUOGBhsz8UQ97npD+rYJcXso=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/E6F5848D2F1E7564C1201124AD1D8A679DADCDD5.crl
                          rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/E6F5848D2F1E7564C1201124AD1D8A679DADCDD5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6F5848D2F1E7564C1201124AD1D8A679DADCDD5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 21:36:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:a8:c5:34:52:a1:9a:e1:54:c3:f1:ae:8d:1a:d0:3c:da:cc:15:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6F5848D2F1E7564C1201124AD1D8A679DADCDD5
        Validity
            Not Before: Oct 30 17:39:12 2026 GMT
            Not After : Oct 31 21:36:12 2026 GMT
        Subject: CN=68A6468E6404CC483112709B09C8AE0B45D43FB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:50:03:cd:a6:ef:e2:b4:27:2b:7b:ad:3b:42:
                    00:2d:61:9c:7c:be:59:87:fa:4e:79:10:8a:07:58:
                    e5:99:44:61:6a:37:af:32:ce:5c:66:e8:f9:b5:ce:
                    ec:58:9c:55:60:40:6f:40:63:e8:bd:38:18:64:11:
                    5b:07:28:1c:46:a9:6a:35:64:2e:a7:9b:01:c8:8d:
                    1c:c3:a7:6b:e5:01:74:5d:78:e1:d2:c3:4b:15:31:
                    2c:d1:9e:92:6e:1c:63:76:38:f7:b9:3f:b1:de:51:
                    2e:ba:1e:10:e8:f8:28:6b:64:fe:93:83:22:5a:35:
                    e8:13:4a:37:b3:43:92:b3:5f:e1:ff:81:58:3d:cd:
                    10:76:70:2b:90:72:2d:5f:a2:c8:61:10:2d:16:4c:
                    02:e3:18:2c:e6:88:64:92:d1:25:95:cc:53:9f:a8:
                    90:57:9f:30:b6:c9:43:43:30:e6:cd:48:26:3d:2b:
                    6e:94:81:9e:df:2c:b1:e5:a0:7e:44:04:3d:0d:08:
                    da:5b:a5:f3:ff:59:c4:26:f9:72:1f:af:0c:4b:67:
                    94:13:2d:36:ab:b7:29:c8:59:4b:bf:6a:3c:48:ec:
                    ef:57:ff:8a:23:34:2f:8e:5b:83:33:cb:d7:1d:b7:
                    71:ae:10:e3:db:c8:0e:0a:7f:f5:2d:d2:3e:4b:94:
                    69:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A6:46:8E:64:04:CC:48:31:12:70:9B:09:C8:AE:0B:45:D4:3F:B6
            X509v3 Authority Key Identifier:
                keyid:E6:F5:84:8D:2F:1E:75:64:C1:20:11:24:AD:1D:8A:67:9D:AD:CD:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/E6F5848D2F1E7564C1201124AD1D8A679DADCDD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6F5848D2F1E7564C1201124AD1D8A679DADCDD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/E6F5848D2F1E7564C1201124AD1D8A679DADCDD5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:a2:5c:50:ab:ec:6f:aa:b1:ab:d5:12:d7:99:2c:b8:b5:14:
         25:48:69:23:65:a0:05:34:95:84:ff:75:0d:78:73:df:b3:d6:
         ed:ea:3a:c3:e3:6b:e5:df:cf:07:36:1b:3c:f1:a2:6b:83:13:
         3f:e2:d2:b4:df:4e:0e:0e:d3:ae:8f:16:f4:bb:6e:cd:01:aa:
         a5:a2:98:5b:df:bf:0a:54:ec:e8:76:91:6f:28:9b:6a:e3:eb:
         96:8c:78:cf:4e:b4:8c:04:c8:d7:c5:57:ae:fb:cc:dd:ae:90:
         b1:87:da:c0:63:62:9f:e8:9b:61:bf:21:d0:dd:f1:ec:cb:0a:
         d7:73:25:04:f7:34:71:2e:56:e2:19:a2:a4:b8:aa:11:e4:f0:
         32:43:f1:30:03:3c:18:da:81:b5:15:d1:1c:28:77:bb:ae:ab:
         14:82:6c:99:21:82:63:e4:27:a4:cf:0f:20:1d:b0:8e:67:b4:
         2a:cf:e5:6e:ef:1d:d5:64:c9:5b:a4:0b:04:da:2f:80:47:b2:
         6d:ce:fb:cf:20:ac:ed:8f:f2:93:4f:ee:ab:12:c5:dc:2c:32:
         91:61:be:27:38:4f:6a:16:8b:f0:f8:0a:f1:a5:7b:dd:19:ec:
         d5:74:52:b1:fa:ea:0a:7e:43:73:cd:b9:93:48:12:a1:07:18:
         6c:b8:20:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:46:38 2026 by rpki-client