Error: rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.mft
File:                     F8A6A07CCBE742530F38EEDD455AC59480FDA110.mft (raw, json)
Hash identifier:          OPKlGleACHpf1CtWIcf3DwT/IQzcsnVnSqGKU3tLEuw=
Subject key identifier:   53:BF:B0:44:AD:C4:E5:10:34:1B:76:56:FD:FB:D9:49:DA:67:9D:D2
Authority key identifier: F8:A6:A0:7C:CB:E7:42:53:0F:38:EE:DD:45:5A:C5:94:80:FD:A1:10
Certificate issuer:       /CN=F8A6A07CCBE742530F38EEDD455AC59480FDA110
Certificate serial:       6A2838712CE7098237CC1D5C2C28C1826D5D4711
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.mft
Manifest number:          0564
Signing time:             Fri 09 Oct 2026 16:50:00 +0000
Manifest this update:     Fri 09 Oct 2026 16:45:00 +0000
Manifest next update:     Sat 10 Oct 2026 16:50:00 +0000
Files and hashes:         1: 323830343a323334343a3a2f33322d3334203d3e20323634313532.roa (hash: 4UuPMAAMMUOZnzy36P/hvaL9415EQk6nYlZHMIQ3vUM=)
                          2: 3133382e39342e38382e302f32322d3234203d3e20323634313532.roa (hash: HPKHR02vVozS2Jj/a1F+5CNmjtaRdWW4U0uSZClGICw=)
                          3: F8A6A07CCBE742530F38EEDD455AC59480FDA110.crl (hash: CeXvX/Kcc+H9pV5a1G4Q5PkCmZZK0TnuGSENWtN5H+k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.crl
                          rsync://rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 Oct 2026 16:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:28:38:71:2c:e7:09:82:37:cc:1d:5c:2c:28:c1:82:6d:5d:47:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8A6A07CCBE742530F38EEDD455AC59480FDA110
        Validity
            Not Before: Oct  9 16:45:00 2026 GMT
            Not After : Oct 10 16:50:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bb:e4:2a:ae:1a:fe:34:3c:ab:71:25:e4:ec:
                    29:d0:07:b1:a6:73:ac:2f:2b:d3:9c:a9:32:a6:a6:
                    7d:ad:09:2e:26:77:f0:b9:e9:c2:8b:4e:68:86:cd:
                    dd:51:6c:5f:10:38:a5:44:e9:90:4b:54:7d:35:79:
                    62:aa:c7:d6:96:22:f8:e9:c3:86:c9:91:5d:c4:94:
                    72:30:7c:b9:b8:b2:31:de:bc:4d:0c:f4:19:e7:9d:
                    2b:1b:d0:dc:77:5a:ef:bb:af:68:2d:d2:51:4c:e5:
                    29:20:02:54:18:7d:13:43:59:a4:b0:13:8a:12:d2:
                    b5:29:d0:e3:dd:e8:54:15:62:c4:1f:96:44:e4:c8:
                    b9:e5:8c:c8:ae:d9:bc:cc:e1:30:ce:28:0b:c1:af:
                    6b:dd:71:a8:c2:37:71:f7:18:6a:0b:8b:95:dd:a1:
                    65:85:72:b9:12:31:1c:86:ca:96:05:f6:98:0a:62:
                    cc:3b:fc:8b:d1:dc:9f:46:f7:bc:bc:88:eb:30:49:
                    d6:b0:73:4a:20:ff:06:56:8c:95:e5:61:9d:fa:2d:
                    00:e9:64:e2:98:06:cd:23:57:a1:30:2b:94:4f:94:
                    8d:eb:73:0b:6a:b5:17:71:e1:fc:73:82:3f:90:69:
                    8e:d4:7b:d1:0b:d8:98:2d:76:b1:c6:cf:47:20:b2:
                    1e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BF:B0:44:AD:C4:E5:10:34:1B:76:56:FD:FB:D9:49:DA:67:9D:D2
            X509v3 Authority Key Identifier:
                keyid:F8:A6:A0:7C:CB:E7:42:53:0F:38:EE:DD:45:5A:C5:94:80:FD:A1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:df:43:69:18:a5:81:cf:7a:a6:a8:f2:de:be:f3:eb:4a:01:
         37:08:b7:cb:1e:6e:b4:d1:51:1a:90:91:45:8c:15:5a:3f:5b:
         85:a2:8f:b4:62:b1:64:91:1e:a0:86:98:68:0f:8d:25:ea:46:
         14:51:93:a5:f3:64:9e:d3:57:17:f5:2d:37:cb:0a:26:58:71:
         6a:84:db:43:25:37:1f:72:4a:d6:0a:5d:68:65:10:75:e5:b8:
         59:e2:4d:54:ef:34:bc:9b:16:a6:8c:3d:d9:b7:c0:09:f8:f7:
         c9:56:e3:22:f1:ae:41:8f:3f:2d:63:fc:75:e4:f1:e6:c1:eb:
         6e:8e:c7:1c:ca:80:e5:88:82:f7:71:4f:ae:5a:c9:2f:8e:4f:
         40:16:f3:9e:77:cc:d8:4f:8d:1d:5c:ac:d7:36:f0:62:52:54:
         62:4d:e2:33:9c:1b:60:08:f2:fd:1e:2b:4d:85:1a:ac:64:a7:
         3d:d9:ff:7d:e0:90:e8:e0:56:a0:d5:33:a1:fc:e7:91:0a:5e:
         c6:e7:1e:12:01:a8:4b:e5:7a:40:e4:10:b3:25:63:80:fa:6c:
         37:84:63:2e:bd:fa:63:cc:c7:a2:ad:12:60:6b:a9:da:a1:e7:
         d0:4e:b3:e1:78:8e:a8:3b:bc:f6:13:b1:e0:9a:60:1f:6b:58:
         18:c8:58:bd
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUaig4cSznCYI3zB1cLCjBgm1dRxEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhBNkEwN0NDQkU3NDI1MzBGMzhFRURENDU1QUM1OTQ4
MEZEQTExMDAeFw0yNjEwMDkxNjQ1MDBaFw0yNjEwMTAxNjUwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkFCQkU0MkFBRTFBRkUzNDND
QUI3MTI1RTRFQzI5RDAwN0IxQTY3M0FDMkYyQkQzOUNBOTMyQTZBNjdEQUQwOTJF
MjY3N0YwQjlFOUMyOEI0RTY4ODZDRERENTE2QzVGMTAzOEE1NDRFOTkwNEI1NDdE
MzU3OTYyQUFDN0Q2OTYyMkY4RTlDMzg2Qzk5MTVEQzQ5NDcyMzA3Q0I5QjhCMjMx
REVCQzREMENGNDE5RTc5RDJCMUJEMERDNzc1QUVGQkJBRjY4MkREMjUxNENFNTI5
MjAwMjU0MTg3RDEzNDM1OUE0QjAxMzhBMTJEMkI1MjlEMEUzRERFODU0MTU2MkM0
MUY5NjQ0RTRDOEI5RTU4Q0M4QUVEOUJDQ0NFMTMwQ0UyODBCQzFBRjZCREQ3MUE4
QzIzNzcxRjcxODZBMEI4Qjk1RERBMTY1ODU3MkI5MTIzMTFDODZDQTk2MDVGNjk4
MEE2MkNDM0JGQzhCRDFEQzlGNDZGN0JDQkM4OEVCMzA0OUQ2QjA3MzRBMjBGRjA2
NTY4Qzk1RTU2MTlERkEyRDAwRTk2NEUyOTgwNkNEMjM1N0ExMzAyQjk0NEY5NDhE
RUI3MzBCNkFCNTE3NzFFMUZDNzM4MjNGOTA2OThFRDQ3QkQxMEJEODk4MkQ3NkIx
QzZDRjQ3MjBCMjFFNTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAurvkKq4a/jQ8q3El5Owp0AexpnOsLyvTnKkypqZ9rQkuJnfwuenC
i05ohs3dUWxfEDilROmQS1R9NXliqsfWliL46cOGyZFdxJRyMHy5uLIx3rxNDPQZ
550rG9Dcd1rvu69oLdJRTOUpIAJUGH0TQ1mksBOKEtK1KdDj3ehUFWLEH5ZE5Mi5
5YzIrtm8zOEwzigLwa9r3XGowjdx9xhqC4uV3aFlhXK5EjEchsqWBfaYCmLMO/yL
0dyfRve8vIjrMEnWsHNKIP8GVoyV5WGd+i0A6WTimAbNI1ehMCuUT5SN63MLarUX
ceH8c4I/kGmO1HvRC9iYLXaxxs9HILIeUQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FFO/sEStxOUQNBt2Vv372UnaZ53SMB8GA1UdIwQYMBaAFPimoHzL50JTDzju3UVa
xZSA/aEQMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJiM1hQVkI3SlJNcUEx
WkJMckdHYnprVXRHU1g0ZkNCcjI4ZHJnU0dNN1h2LzEvRjhBNkEwN0NDQkU3NDI1
MzBGMzhFRURENDU1QUM1OTQ4MEZEQTExMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9GOEE2QTA3Q0NCRTc0MjUzMEYzOEVFREQ0NTVBQzU5NDgwRkRB
MTEwLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJiM1hQVkI3SlJNcUExWkJMckdH
YnprVXRHU1g0ZkNCcjI4ZHJnU0dNN1h2LzEvRjhBNkEwN0NDQkU3NDI1MzBGMzhF
RURENDU1QUM1OTQ4MEZEQTExMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABffQ2kYpYHPeqao8t6+8+tK
ATcIt8sebrTRURqQkUWMFVo/W4Wij7RisWSRHqCGmGgPjSXqRhRRk6XzZJ7TVxf1
LTfLCiZYcWqE20MlNx9yStYKXWhlEHXluFniTVTvNLybFqaMPdm3wAn498lW4yLx
rkGPPy1j/HXk8ebB626OxxzKgOWIgvdxT65ayS+OT0AW8553zNhPjR1crNc28GJS
VGJN4jOcG2AI8v0eK02FGqxkpz3Z/33gkOjgVqDVM6H855EKXsbnHhIBqEvlekDk
ELMlY4D6bDeEYy69+mPMx6KtEmBrqdqh59BOs+F4jqg7vPYTseCaYB9rWBjIWL0=
-----END CERTIFICATE-----
Generated at Sat Oct 10 01:21:49 2026 by rpki-client