Error: rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft
File:                     3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft (raw, json)
Hash identifier:          NVyd7qEcJ1q3zp+BlAB1Ns9c3eExEqWJpcJvvBKBRNI=
Subject key identifier:   F7:0A:F9:8A:E9:F5:76:12:73:5A:F6:1F:93:9F:FA:03:B8:69:DF:3D
Authority key identifier: 3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0
Certificate issuer:       /CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
Certificate serial:       66BE60C604ECFA467E52E306E13402C42947050D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft
Manifest number:          04C0
Signing time:             Fri 16 Oct 2026 20:49:51 +0000
Manifest this update:     Fri 16 Oct 2026 20:44:51 +0000
Manifest next update:     Sat 17 Oct 2026 21:54:51 +0000
Files and hashes:         1: 323830343a363031383a383030303a3a2f33332d3333203d3e20323639313435.roa (hash: KivaW3ZlK69l+y9q+bdg0FUrxGdXfuK1ZNEbBCDZre4=)
                          2: 3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl (hash: I13HFBYHcF0DzbHBPaQhLTAq8JHN9TvG+y9OvPgnUwY=)
                          3: 34352e3138302e3138342e302f32322d3232203d3e20323639313435.roa (hash: 3EpRMfCJQ/oplvoRy8WV3jeX247HTwGAj4R/48Hj6x4=)
                          4: 34352e3138302e3138362e302f32332d3233203d3e20323639313435.roa (hash: boYO6tOGQgroLgW6ULNmJAn4NcrWCrbNrFuebeCiBpM=)
                          5: 323830343a363031383a3a2f33322d3332203d3e20323639313435.roa (hash: GEfn4Bl00zdhGTYrW9jbA0jPa3LwMFFlV00DI8uLXIg=)
                          6: 323830343a363031383a3a2f33322d3334203d3e20323639313435.roa (hash: M0LcOOmMZo8QOyi2wAEmMI1eLKe5vGXnwQKZCmnT6zo=)
                          7: 323830343a363031383a3a2f33332d3333203d3e20323639313435.roa (hash: QNu3N4Q6fO05gIGJMeAaG22Ov/LtiCeuvFBnnuXQaow=)
                          8: 34352e3138302e3138342e302f32332d3233203d3e20323639313435.roa (hash: a8haySQUKnVEPYwnbcI28rS2mFG3JY2FDkGLXbuMBEw=)
                          9: 34352e3138302e3138342e302f32322d3234203d3e20323639313435.roa (hash: oiE0Qu8gWI7bULJP3gSoQxHTCyZGoiRgn0Zt7+FNk6M=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl
                          rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 21:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:be:60:c6:04:ec:fa:46:7e:52:e3:06:e1:34:02:c4:29:47:05:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
        Validity
            Not Before: Oct 16 20:44:51 2026 GMT
            Not After : Oct 17 21:54:51 2026 GMT
        Subject: CN=F70AF98AE9F57612735AF61F939FFA03B869DF3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a7:07:75:cc:ce:f4:3e:1f:47:6a:45:35:d1:
                    42:c7:5a:32:5b:cc:8e:d2:27:63:a2:d3:8a:4f:45:
                    13:de:7e:9e:d2:ac:02:2d:96:14:5f:52:3c:e9:29:
                    ac:bd:e5:26:c1:a9:59:37:b0:91:e4:09:90:94:7a:
                    54:5d:32:06:d6:c8:de:1b:e2:b2:f7:b0:ff:4b:e9:
                    3b:9b:c1:29:5f:21:32:68:de:98:f9:3f:cf:46:c5:
                    d1:20:40:93:32:47:a7:62:51:ed:d6:d0:b2:9a:fb:
                    b9:96:da:98:09:28:eb:d5:97:30:ea:1e:22:fa:cd:
                    f2:30:db:bb:51:58:3b:2e:7a:ab:8f:2d:14:ed:f4:
                    2d:36:a8:84:03:84:7e:3b:35:d0:d3:9f:5c:18:8b:
                    cb:db:7c:2c:62:ec:f8:5c:f0:35:f9:51:a9:5d:0d:
                    a2:a2:66:83:18:5a:55:97:ef:df:e9:b0:64:b3:ed:
                    39:c9:1f:2f:2c:3a:2d:47:4e:3d:78:a3:f8:64:4d:
                    21:48:c5:87:d1:f9:40:62:f6:db:fe:52:24:f6:03:
                    ea:bd:57:30:cf:07:ae:1d:d4:09:6f:70:72:3f:89:
                    7e:f9:ea:9c:7c:f1:cb:2d:58:25:ae:08:2b:cb:97:
                    5d:77:3f:5c:1a:dc:e0:2d:72:bc:05:ba:f9:eb:6c:
                    23:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:0A:F9:8A:E9:F5:76:12:73:5A:F6:1F:93:9F:FA:03:B8:69:DF:3D
            X509v3 Authority Key Identifier:
                keyid:3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:f5:f7:04:86:42:84:9e:c8:31:7e:e7:75:04:79:20:c2:49:
         b0:40:81:65:76:de:34:5e:b9:d5:b9:dd:84:33:4e:2a:e8:65:
         75:e5:df:5e:a2:84:c0:57:f4:46:1c:06:ba:4b:27:6f:86:c0:
         c9:bf:2c:97:ab:dd:fc:00:a4:01:96:62:f2:f0:77:89:a1:5e:
         92:00:65:8b:61:58:06:bd:f7:a3:65:7e:46:cf:68:ec:32:f8:
         03:59:68:e1:27:6f:e0:1f:de:f3:e7:a9:5d:ae:b7:9c:b4:04:
         b4:a2:c9:a1:d3:33:3c:a3:65:65:09:25:d3:22:98:d9:cc:84:
         67:88:12:a5:70:b2:69:1b:16:b1:d3:68:ba:9d:b6:31:2b:11:
         2c:a7:80:60:c6:68:59:93:23:b6:65:e1:4e:02:42:be:b2:37:
         0b:9b:85:31:54:0b:11:ad:a9:c5:ff:8d:7e:bd:0a:77:6b:54:
         f6:a2:fe:d9:a3:ef:43:af:50:b9:2a:af:93:1a:7a:a1:65:41:
         b8:2c:a7:d1:61:47:da:e2:97:6c:2f:72:69:08:a2:4a:44:74:
         cd:78:a1:fc:d0:80:81:0e:54:f9:eb:af:8f:6e:8e:aa:5e:d3:
         c1:f9:7d:bf:77:f8:78:87:19:8e:ae:63:79:b5:b7:a0:9e:c4:
         ea:69:92:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 09:03:04 2026 by rpki-client