Error: rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
File:                     59286C095D010494BBABEA22C9AEC94874E4F3C0.mft (raw, json)
Hash identifier:          HLRMePi+m/F6pZzrhvKGF9f3A+VT0y0EiuKd91SCFX0=
Subject key identifier:   C4:42:3C:DC:AB:FE:17:EE:0C:E6:37:2A:F8:26:B2:A7:AF:CD:DB:70
Authority key identifier: 59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0
Certificate issuer:       /CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
Certificate serial:       71EEC144919B685CD4638F1E5259CE510E68402B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
Manifest number:          0568
Signing time:             Sun 11 Oct 2026 03:10:00 +0000
Manifest this update:     Sun 11 Oct 2026 03:05:00 +0000
Manifest next update:     Mon 12 Oct 2026 03:10:00 +0000
Files and hashes:         1: 323830343a343837303a333030303a3a2f34302d3430203d3e20323637313231.roa (hash: 5dHPQHEZLbyBkh2oFoWjk9SHb7xuoag4thZeui/ZE24=)
                          2: 323830343a343837303a3162323a3a2f34382d3438203d3e20323637313231.roa (hash: x+xwUxlQjmdjFdwRXjbdGRZiQWjWQYhBKVDEG4cOJfs=)
                          3: 323830343a343837303a3162313a3a2f34382d3438203d3e20323637313231.roa (hash: bYoDoQN0Y/cb+6PqtlCtgz2rVRlUyrvvoGpdSQgLGgo=)
                          4: 323830343a343837303a3a2f33322d3332203d3e20323637313231.roa (hash: CbJX+uwfbWl1q+ePfG8kkTcVCod+h4DtRjKzQrUVrBw=)
                          5: 323830343a343837303a3163303a3a2f34382d3438203d3e20323637313231.roa (hash: uf8oyCG+GKeTE1t9Z/zv2kBG6JLLjAaiex7C01g4JEA=)
                          6: 323830343a343837303a3163323a3a2f34382d3438203d3e20323637313231.roa (hash: V5u48JUHg0vRr8nG4bKSA5hNxImVT9PKalXDjhIdWPg=)
                          7: 323830343a343837303a343430303a3a2f33382d3338203d3e20323637313231.roa (hash: vJOk/RO6kMGpIRYjaG3KwOaAXzUcZmNcYsdIGRcusyQ=)
                          8: 323830343a343837303a373030303a3a2f33382d3338203d3e20323637313231.roa (hash: C4KNNLkuA8NDr3kXTESi0EMIoWGVxUXMlmEWwPqPmJg=)
                          9: 323830343a343837303a3162303a3a2f34382d3438203d3e20323637313231.roa (hash: 7CTwJ6yhVSxfHNLn/mAOWz2MiQBNkF0Id8JVButb7zE=)
                          10: 59286C095D010494BBABEA22C9AEC94874E4F3C0.crl (hash: s+KboihdTcTrG5MfeX1jrYup6gsuCqWwBEQ7gFvUGAg=)
                          11: 323830343a343837303a323030303a3a2f34302d3430203d3e20323637313231.roa (hash: Ee5KXivcsdgY6JOnUrxMI++3DbxXjTpNmNVQfJ9pX2U=)
                          12: 34352e3232392e3130342e302f32322d3234203d3e20323637313231.roa (hash: YwcFTn5OCBbU2Ep0Zj2uuG/MnB/lxpKw9ItwdeoPyYg=)
                          13: 323830343a343837303a3163313a3a2f34382d3438203d3e20323637313231.roa (hash: k75dLDFsZMLa4b3KgnId5Z6mW2wY5/+paKUCIrTDNGI=)
                          14: 323830343a343837303a326630303a3a2f34302d3430203d3e20323637313231.roa (hash: rDS/XwFY+luUXcH7t0GiZXkeagaJAXuydQpVGJqFdZQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl
                          rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 03:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ee:c1:44:91:9b:68:5c:d4:63:8f:1e:52:59:ce:51:0e:68:40:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
        Validity
            Not Before: Oct 11 03:05:00 2026 GMT
            Not After : Oct 18 03:10:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:14:c1:01:39:49:bf:08:a1:0f:f6:4f:07:fd:
                    0d:b3:d3:77:75:5f:8b:fc:ed:00:a2:b3:52:f5:cf:
                    be:da:db:5b:cb:34:2a:5f:d2:7f:12:14:a9:5e:b4:
                    02:38:82:01:a1:09:6d:06:e8:9c:04:af:45:60:ba:
                    c9:c0:a0:1c:c8:30:77:6c:33:07:e0:14:c1:2a:d3:
                    36:ed:61:3d:12:b9:76:3b:ea:8f:99:e3:a9:93:cc:
                    f6:e4:fa:5d:d9:2e:34:84:8d:44:48:d1:04:f7:73:
                    ac:eb:7c:7a:1e:b8:f5:6d:ea:d4:46:e1:78:61:81:
                    4d:65:8f:fd:15:3e:43:95:1d:9b:43:41:35:11:27:
                    48:96:6e:69:c0:b2:a1:ba:fe:7d:9d:97:59:6a:ee:
                    22:fc:18:31:53:9e:a9:e4:e5:fe:24:b6:5c:68:ca:
                    9a:9a:31:a7:dd:ce:30:d0:00:b1:d5:79:c8:82:e5:
                    ef:0b:01:f9:65:f7:16:d4:fb:90:32:8b:c0:bc:3b:
                    9e:32:dd:8c:6f:96:1f:49:56:1f:7f:54:ac:f2:78:
                    f8:01:e6:aa:9e:fa:29:f2:d4:20:ae:36:11:15:b6:
                    0b:71:bd:4f:ae:09:1a:06:91:45:82:68:ac:b1:60:
                    0b:04:45:5f:d0:ce:9f:fd:84:db:fc:79:2b:dd:13:
                    71:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:42:3C:DC:AB:FE:17:EE:0C:E6:37:2A:F8:26:B2:A7:AF:CD:DB:70
            X509v3 Authority Key Identifier:
                keyid:59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:07:8d:c8:83:35:b5:02:0a:c0:af:75:94:bd:48:14:3b:4f:
         7e:ea:3a:02:50:98:94:52:ad:8c:11:67:e2:97:39:37:2a:6c:
         75:c7:bc:dc:99:16:e6:09:76:31:b0:81:91:a1:3c:10:b2:54:
         db:31:0c:2f:a0:b2:80:ea:08:43:de:9d:9e:fe:1f:7c:e6:27:
         83:1a:e2:7d:1a:f3:4b:c9:1d:4b:4d:10:fa:bf:88:45:7a:97:
         70:cf:d1:e8:0d:9c:50:e0:c8:c3:40:6d:42:eb:80:95:4e:5a:
         0c:90:9b:01:a2:e0:d3:d6:2e:eb:fb:9c:aa:b3:3b:fc:9c:a3:
         73:f1:3b:b1:a7:69:54:91:74:5a:73:b1:75:16:65:1c:3d:d9:
         12:51:f2:fe:22:cf:21:99:d7:39:c4:25:44:35:9a:fe:0d:d5:
         bd:62:2a:f8:79:c9:f7:60:52:1b:58:1c:52:0a:de:2d:02:c7:
         ee:dd:dc:99:9a:f9:f7:03:1d:31:45:6e:b0:2a:fb:88:89:0f:
         30:76:61:30:be:b0:47:ac:e7:36:88:e6:4d:e3:52:76:3e:97:
         ae:50:3b:a3:e6:44:06:e0:55:d8:85:36:b6:aa:4c:8b:19:e9:
         10:75:91:00:b4:03:50:67:bc:f7:c7:a4:55:b9:6c:93:fd:bb:
         86:68:40:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:42:09 2026 by rpki-client