Error: rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.mft
File:                     561575F60242E48030BC35A771871EB47C6EFF55.mft (raw, json)
Hash identifier:          XMAxu9eznpuNUIwG6TkZw9PnYyO4Hw/G4XmqyLMOsoU=
Subject key identifier:   D2:E4:5B:01:3B:59:76:10:F1:E0:E8:C1:6B:FC:E1:9E:FD:C5:D8:20
Authority key identifier: 56:15:75:F6:02:42:E4:80:30:BC:35:A7:71:87:1E:B4:7C:6E:FF:55
Certificate issuer:       /CN=561575F60242E48030BC35A771871EB47C6EFF55
Certificate serial:       434FE14AEF3D4B5079CA583CED69B6EB65FB11FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/561575F60242E48030BC35A771871EB47C6EFF55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.mft
Manifest number:          0344
Signing time:             Wed 14 Oct 2026 07:43:20 +0000
Manifest this update:     Wed 14 Oct 2026 07:38:20 +0000
Manifest next update:     Thu 15 Oct 2026 09:10:20 +0000
Files and hashes:         1: 3137372e3133362e37332e302f32342d3234203d3e20323633363036.roa (hash: 4H+CxB+EpINq2RjZT91EYiq/DtDn8cQlc/74NWiOQwU=)
                          2: 3137372e3133362e37322e302f32342d3234203d3e20323633363036.roa (hash: 0p5oJNW1u7sbcdTmM4zJyxU4ZM7NUKqBR1aXh8tF8Ps=)
                          3: 3137372e3133362e37352e302f32342d3234203d3e20323633363036.roa (hash: nuck+0kAF3Zd6pXyFdvnR29Zkxz9c+G8kbnTC7qgamU=)
                          4: 3137372e3133362e37342e302f32342d3234203d3e20323633363036.roa (hash: XWBGDS6q88+5UVkXGYmDHRa7wfxLNTeJHNiLkIHR6ec=)
                          5: 3137372e3133362e37322e302f32332d3233203d3e20323633363036.roa (hash: Ltzfx3YxVW1Pa4cq6whSf/IcB1Vnx4DNecq6eVchHTo=)
                          6: 561575F60242E48030BC35A771871EB47C6EFF55.crl (hash: laXbGVmvGGuMfXjDvrJjo8okQEM+uxZNyfCP9e7Zl84=)
                          7: 323830343a6664343a3a2f33322d3332203d3e20323633363036.roa (hash: Yo271OiucLB/aigZDCLUq3cAGSPHW0PFSAiLJnTJVo0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.crl
                          rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/561575F60242E48030BC35A771871EB47C6EFF55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 09:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:4f:e1:4a:ef:3d:4b:50:79:ca:58:3c:ed:69:b6:eb:65:fb:11:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=561575F60242E48030BC35A771871EB47C6EFF55
        Validity
            Not Before: Oct 14 07:38:20 2026 GMT
            Not After : Oct 15 09:10:20 2026 GMT
        Subject: CN=D2E45B013B597610F1E0E8C16BFCE19EFDC5D820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f0:d3:10:65:02:7a:b4:58:69:d4:80:e6:8c:
                    13:9e:9b:e6:cc:3a:b5:5e:96:8a:94:bc:83:6e:a2:
                    51:0b:ff:cb:b2:29:41:b0:a3:fa:b6:d3:ec:52:ee:
                    5b:17:00:e6:56:bd:c2:16:0c:1e:11:6e:5e:0e:79:
                    c2:60:fe:bf:49:8b:2e:3d:18:59:a3:78:fb:5b:2e:
                    66:21:eb:fd:6d:9e:49:f0:0d:56:1d:dc:be:df:ae:
                    da:68:e0:21:9b:bb:c5:9d:46:ae:7f:13:ff:10:c7:
                    aa:c5:2c:44:63:bd:ac:db:58:c6:a3:b9:11:8c:e1:
                    c4:fd:5a:e4:d9:7a:a6:49:e9:68:91:60:f0:99:d6:
                    71:1b:2f:2a:b5:93:55:c4:37:b8:3b:69:19:94:de:
                    a2:c1:59:fe:34:55:5e:62:ec:a8:80:2f:5b:05:97:
                    f9:c0:f9:56:df:6e:2f:fc:ff:0f:a8:2d:2d:63:a2:
                    39:1f:7e:9c:79:02:06:0b:cf:05:4d:41:f8:05:2c:
                    f5:a2:48:13:0e:29:09:b3:f7:8c:70:30:6a:ca:8b:
                    44:b5:bb:b5:55:23:ad:62:af:87:9e:e0:57:92:50:
                    20:62:fe:66:d8:9e:09:1c:19:12:37:ff:25:37:3d:
                    67:5b:42:66:eb:33:ab:f8:18:4d:a4:29:10:6e:be:
                    5f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E4:5B:01:3B:59:76:10:F1:E0:E8:C1:6B:FC:E1:9E:FD:C5:D8:20
            X509v3 Authority Key Identifier:
                keyid:56:15:75:F6:02:42:E4:80:30:BC:35:A7:71:87:1E:B4:7C:6E:FF:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/561575F60242E48030BC35A771871EB47C6EFF55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:8a:de:87:8e:16:ea:6e:b2:bc:23:51:5d:04:3e:4c:60:a1:
         44:ca:91:32:ac:f0:cb:a4:be:08:54:90:b2:93:19:3f:5e:e3:
         74:6b:80:95:3a:d3:e8:15:14:bf:66:19:ab:a7:93:27:93:ca:
         b6:04:e7:c6:9c:ee:7e:60:da:bb:75:d4:d9:f9:a5:67:a0:59:
         a6:f3:61:70:30:94:07:2e:e0:f0:8f:8f:1e:27:81:b1:84:8a:
         e0:46:93:65:f1:b8:18:19:d6:85:57:98:6a:10:81:15:e4:60:
         f2:71:c8:c0:50:b5:31:1e:bb:de:1d:4a:37:91:34:76:11:7e:
         40:7a:5c:fe:d2:74:5a:e6:84:ac:61:ad:45:38:fb:ef:e1:53:
         32:ce:06:0a:d0:93:6c:28:85:3a:87:fb:95:cf:ed:95:37:ad:
         0e:67:0b:3e:a5:0c:2d:df:e0:8d:10:57:6c:67:a9:bc:1a:74:
         f5:11:79:b6:c4:ef:1b:92:2c:3c:0f:14:8a:72:24:76:65:f5:
         6f:1d:93:56:71:d0:53:ed:ca:9a:ce:42:76:9f:e5:d5:35:c5:
         de:f7:43:99:ca:96:32:6d:81:1e:6e:b5:6e:79:15:d4:7c:d4:
         0a:d7:70:3b:32:ac:93:d1:c2:19:d8:bc:fb:15:18:9a:e4:a9:
         19:e8:01:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:06:47 2026 by rpki-client