Error: rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.mft
File:                     2EC42055AFC59A104B87FD6706375331B8F6BF55.mft (raw, json)
Hash identifier:          GmiTc7vbMa8ZLxqtByNfrCizZ6JoSQxgXqYT8epbX9k=
Subject key identifier:   A9:21:B7:24:D8:C1:83:7E:C1:9E:EE:B5:CD:56:B4:F4:68:4B:CE:7C
Authority key identifier: 2E:C4:20:55:AF:C5:9A:10:4B:87:FD:67:06:37:53:31:B8:F6:BF:55
Certificate issuer:       /CN=2EC42055AFC59A104B87FD6706375331B8F6BF55
Certificate serial:       0E5454E0DE186A1EB164524CBDB9C31368450F2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.mft
Manifest number:          0588
Signing time:             Sat 31 Oct 2026 06:30:00 +0000
Manifest this update:     Sat 31 Oct 2026 06:25:00 +0000
Manifest next update:     Sun 01 Nov 2026 06:30:00 +0000
Files and hashes:         1: 323830343a353738383a3a2f33322d3332203d3e20323638303730.roa (hash: HOllN9HIIDsg2QeLdstoqF1SROuGt8XDtAkgZ3VTqqw=)
                          2: 34352e3136372e3132322e302f32332d3233203d3e20323638303730.roa (hash: 8FcKT5sjSzcIpdGUXcR489mnlzzwIeaMHQfJvhQfVto=)
                          3: 2EC42055AFC59A104B87FD6706375331B8F6BF55.crl (hash: 6Hy8EeovZg09LGP6c3OcimwHj/R8m1X426g2rgkNj94=)
                          4: 34352e3136372e3132322e302f32342d3234203d3e20323638303730.roa (hash: GlAfrG9k3r04oAvKhIuVWAiw7wNnfPdXnIEhxDJp6b4=)
                          5: 323830343a353738383a383030303a3a2f33342d3334203d3e20323638303730.roa (hash: T6v/m7rnySrOGkmBQTXmkH/l9uu8fCMT4yqk7YjnufA=)
                          6: 323830343a353738383a343030303a3a2f33342d3334203d3e20323638303730.roa (hash: 19L0GwxdXz9pF/D6HohnwdpcJZV30B9fVeWKyz4/Dwo=)
                          7: 323830343a353738383a633030303a3a2f33342d3334203d3e20323638303730.roa (hash: a9hAcgCKHPbOP6Vw77oC9CVJ36L1DCRTgDKApGct2q4=)
                          8: 323830343a353738383a3a2f33342d3334203d3e20323638303730.roa (hash: 3daVssIffcCIDQDnfKpYxQBFbKg4RcYGYCc8PkLiRU0=)
                          9: 34352e3136372e3132332e302f32342d3234203d3e20323638303730.roa (hash: +m9GXB2zM1VhfrXl8Z7ZMoMGlO4MllIxiNHqe+vxTUI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.crl
                          rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 06:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:54:54:e0:de:18:6a:1e:b1:64:52:4c:bd:b9:c3:13:68:45:0f:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EC42055AFC59A104B87FD6706375331B8F6BF55
        Validity
            Not Before: Oct 31 06:25:00 2026 GMT
            Not After : Nov  1 06:30:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b5:fb:fe:8d:3a:28:aa:8d:01:15:2f:80:11:
                    49:bc:0d:86:f9:37:61:94:fc:e5:e9:ca:f9:e0:87:
                    53:17:2c:58:12:8b:0b:0d:03:45:63:c0:b1:35:45:
                    1e:93:ce:52:65:18:12:1c:b4:87:f5:58:59:54:87:
                    ed:81:57:97:5f:c5:12:93:34:e8:db:5c:0f:02:81:
                    5e:95:45:18:6c:f8:b0:07:cc:30:25:74:65:56:09:
                    b8:26:37:57:2c:41:98:39:c9:61:a7:07:04:df:ab:
                    8f:0e:9d:cf:9e:32:07:5a:a4:cc:3e:20:33:29:85:
                    2b:ae:d1:82:be:89:be:f0:5e:85:c1:02:89:a0:c4:
                    b2:fd:b0:82:19:50:fc:1f:1b:cd:bf:cb:d1:ab:60:
                    a3:50:8c:79:be:5d:bf:7f:9f:9a:30:9d:6f:61:03:
                    a4:99:8c:45:35:20:54:86:30:07:9e:83:c4:32:6a:
                    76:b5:a8:26:f3:77:b2:0c:a2:5c:6e:33:43:df:47:
                    1a:c3:06:a6:82:60:4f:97:b8:ed:c8:1a:88:34:d6:
                    e0:fe:0c:2e:20:53:c7:ee:57:09:dc:e6:d8:87:ce:
                    79:a7:04:4a:54:af:5e:9c:36:95:04:b5:bb:65:6c:
                    67:88:3c:9c:2b:d1:fa:df:23:ab:3e:a6:22:12:69:
                    60:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:21:B7:24:D8:C1:83:7E:C1:9E:EE:B5:CD:56:B4:F4:68:4B:CE:7C
            X509v3 Authority Key Identifier:
                keyid:2E:C4:20:55:AF:C5:9A:10:4B:87:FD:67:06:37:53:31:B8:F6:BF:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:c0:73:23:b2:80:c1:23:1b:b0:6d:bd:fd:ce:04:75:ca:e0:
         77:e7:ca:42:4c:32:43:f2:ef:52:50:b6:b0:de:62:67:b1:64:
         7b:e8:e6:9c:f8:7b:43:31:19:ae:2b:fd:7c:a7:6d:68:da:02:
         e0:e1:e7:9a:f2:67:c2:87:f3:94:f4:5a:f1:8e:6e:d4:77:8b:
         e9:7e:20:9d:ec:f5:67:aa:41:d1:19:4f:f2:c5:f3:ae:2b:6f:
         c8:db:0b:3f:85:e3:e7:29:7f:6b:d0:6e:aa:d1:8b:82:cf:c5:
         e0:50:8a:93:4f:7b:29:e3:0b:fe:83:75:90:95:7b:8b:e6:aa:
         1f:b0:55:a7:d3:ee:8c:ce:cf:11:72:3a:ce:9f:b9:a1:a3:1b:
         db:25:c5:e3:e7:87:cc:05:6f:da:a8:24:ca:43:72:ff:eb:e3:
         2d:5c:ae:b5:52:a1:4c:b6:e4:a8:73:e1:45:2f:9e:16:52:d4:
         81:76:50:43:06:d0:35:09:8f:42:17:e8:09:d2:3c:0e:65:05:
         57:c9:0f:88:28:15:bf:67:3d:01:b1:de:01:21:64:49:f8:eb:
         cb:08:7b:9c:04:a2:db:ac:16:db:1e:37:67:1d:a5:81:cd:8e:
         20:a3:52:d3:19:21:4a:ad:c4:09:28:52:31:92:f3:5c:33:e1:
         51:c1:b3:78
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 31 12:19:54 2026 by rpki-client