Error: rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
File:                     6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft (raw, json)
Hash identifier:          FhDBUfhTlYabC7B3W8IVWGntkzEMj4DDRxQAbBoN03g=
Subject key identifier:   E4:73:C3:F3:A2:E5:2A:89:AE:7B:1A:4F:64:5D:93:67:42:58:D0:76
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       474D40C9230B84F56F287A61032FB72465509E99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
Manifest number:          056A
Signing time:             Wed 14 Oct 2026 18:30:01 +0000
Manifest this update:     Wed 14 Oct 2026 18:25:01 +0000
Manifest next update:     Thu 15 Oct 2026 18:30:01 +0000
Files and hashes:         1: 323830343a336430343a333030303a3a2f33362d3336203d3e20323636323438.roa (hash: FUQdb5k3ZQh9KYe6tlho+K7sqcw/AzTtBsK9zxarq3k=)
                          2: 323830343a336430343a323030303a3a2f33362d3336203d3e20323636323438.roa (hash: Fpw67FtU5uAt11JxVSnglyiFhIKJ4D+GmYDXWZnNr4c=)
                          3: 323830343a336430343a383030303a3a2f33362d3336203d3e20323636323438.roa (hash: 8HGl9DKC4csqcsXlOY/sMvnFA39oz8HuqeUy+0bZ9Gc=)
                          4: 323830343a336430343a633030303a3a2f33342d3334203d3e20323636323438.roa (hash: 7nnX/zZV44z0MiTPsblTzr80wYvifx8En3fibNgJIrk=)
                          5: 323830343a336430343a653030303a3a2f33362d3336203d3e20323636323438.roa (hash: zXh7x0B+LbGECSJaJcIhPUdLCFI8yRZ8J14t0OU40ps=)
                          6: 323830343a336430343a3a2f33332d3333203d3e20323636323438.roa (hash: /NJe/+YWZ5rv5jk4M3goV+SBqf5KHiAkDZGK+OAwHuk=)
                          7: 323830343a336430343a363030303a3a2f33362d3336203d3e20323636323438.roa (hash: /+6hkMagScDLGcK4ftIN+HDbp2RLjUF4mAILJVPkRbs=)
                          8: 323830343a336430343a383030303a3a2f33332d3333203d3e20323636323438.roa (hash: Oz/SZFFCx0bKEgKZgmaiYRMjOBqOTFFB8L+xRFiegBk=)
                          9: 323830343a336430343a663030303a3a2f33362d3336203d3e20323636323438.roa (hash: D90o9tRStMZUf8JsQL5Y8PQPtwk0gfz4F/6cVP5VzUg=)
                          10: 323830343a336430343a313030303a3a2f33362d3336203d3e20323636323438.roa (hash: 3kCNRUb4ILjbIZydIkT93uFqBLiIoki3fWZGWQabDVI=)
                          11: 323830343a336430343a3a2f33342d3334203d3e20323636323438.roa (hash: gYYkkuKI+PWpzz05e149mb8rTFtbg5snnklHDYAFeCA=)
                          12: 323830343a336430343a353030303a3a2f33362d3336203d3e20323636323438.roa (hash: Plfrp02fp8nSDpekz4Rn/xwCiuZyP6BB4ah2SDmFGdw=)
                          13: 323830343a336430343a643030303a3a2f33362d3336203d3e20323636323438.roa (hash: k/bNV+pmUuKah0YbV5Gs7neSm4lHz9MN1Ofu6zoiN9Y=)
                          14: 323830343a336430343a623030303a3a2f33362d3336203d3e20323636323438.roa (hash: 3ZTj+Xmy4kO8+oojafp+cIKRkx/1bEvd/sAswppgBpc=)
                          15: 323830343a336430343a373030303a3a2f33362d3336203d3e20323636323438.roa (hash: Qj3rSPjOBGqtdDuSSsoJJZ9/CSOPndU4zl7qmDdAEqg=)
                          16: 323830343a336430343a613030303a3a2f33362d3336203d3e20323636323438.roa (hash: mEdcZ+6oyHl3OBMFWisX72S/FesyV1HLcTwYPRbTkwo=)
                          17: 6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl (hash: IIMEUpFnJoke3C/VR0QCxFEIPPhMvNsgFvJ5tfpwVpo=)
                          18: 323830343a336430343a3a2f33322d3332203d3e20323636323438.roa (hash: ZexWaLcY6chtOX10Sush6g2ruh8t1XQbxbaL/KAS/l8=)
                          19: 323830343a336430343a343030303a3a2f33362d3336203d3e20323636323438.roa (hash: 5CaT/gMeeqqkSy144gN+mXHDUFzS/zbTQVd0mr+64W8=)
                          20: 34352e362e3232302e302f32322d3234203d3e20323636323438.roa (hash: 2BlvhkrxjLFGLIM21sfLUkssayvw9Wp4CpaGpj7Rfm4=)
                          21: 323830343a336430343a343030303a3a2f33342d3334203d3e20323636323438.roa (hash: D55kI3bS+5waEd46chnGqZc/hHagGN/Y7GqN92jEznk=)
                          22: 323830343a336430343a393030303a3a2f33362d3336203d3e20323636323438.roa (hash: k37Wg1KGRn8QUG7TW7pZsJ8llJJ8bmeqIcJoPT2ehec=)
                          23: 323830343a336430343a633030303a3a2f33362d3336203d3e20323636323438.roa (hash: y2oBX9K38jB+kOdPsRQX+rPVjuBIqNsD4lrL2/Kj7V4=)
                          24: 323830343a336430343a3a2f33362d3336203d3e20323636323438.roa (hash: KU7jvfSHKNEddt0nMvgEFzwO9QXl7lK3dbSbzSVCfCc=)
                          25: 323830343a336430343a383030303a3a2f33342d3334203d3e20323636323438.roa (hash: JB3YwVZ/SKpjQl08+JVvUT4tV+BZgSb1UFoQjG080s0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl
                          rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 18:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:4d:40:c9:23:0b:84:f5:6f:28:7a:61:03:2f:b7:24:65:50:9e:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Oct 14 18:25:01 2026 GMT
            Not After : Oct 15 18:30:01 2026 GMT
        Subject: CN=3082010A0282010100B45C31895C372588B638AB874ABB3EDB760666C21218BA159D83798383FB10AEB192D2175B60705D6198D813C4B0C8A98ED361A46166A01F5AD5E06EA9C8737E6ED90E70C029A2B777AE1278A8BBC4F9047153A6784EA85B23EE2395A83104E2575BE1193DB03AAB42FF2FA31AAF9A2ACAFF233231945BD18349CD5A59A8ACD94C3534297BC06262EF95A4D028E4F18ECC007B2A469B766F7820B780125DB4C67A48F4B531F01CE3B23FBA0DFA9601F3A14BB65388834614E42E011D4B1215F0D624DDABA62C5D63981451F006F5AC3869C9E663B2B1A50B9498068B5F77104570CFCD3FCABC1BBC9A78073CC3F252DF75CD3F04BF2809603952C26E44D4F00D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5c:31:89:5c:37:25:88:b6:38:ab:87:4a:bb:
                    3e:db:76:06:66:c2:12:18:ba:15:9d:83:79:83:83:
                    fb:10:ae:b1:92:d2:17:5b:60:70:5d:61:98:d8:13:
                    c4:b0:c8:a9:8e:d3:61:a4:61:66:a0:1f:5a:d5:e0:
                    6e:a9:c8:73:7e:6e:d9:0e:70:c0:29:a2:b7:77:ae:
                    12:78:a8:bb:c4:f9:04:71:53:a6:78:4e:a8:5b:23:
                    ee:23:95:a8:31:04:e2:57:5b:e1:19:3d:b0:3a:ab:
                    42:ff:2f:a3:1a:af:9a:2a:ca:ff:23:32:31:94:5b:
                    d1:83:49:cd:5a:59:a8:ac:d9:4c:35:34:29:7b:c0:
                    62:62:ef:95:a4:d0:28:e4:f1:8e:cc:00:7b:2a:46:
                    9b:76:6f:78:20:b7:80:12:5d:b4:c6:7a:48:f4:b5:
                    31:f0:1c:e3:b2:3f:ba:0d:fa:96:01:f3:a1:4b:b6:
                    53:88:83:46:14:e4:2e:01:1d:4b:12:15:f0:d6:24:
                    dd:ab:a6:2c:5d:63:98:14:51:f0:06:f5:ac:38:69:
                    c9:e6:63:b2:b1:a5:0b:94:98:06:8b:5f:77:10:45:
                    70:cf:cd:3f:ca:bc:1b:bc:9a:78:07:3c:c3:f2:52:
                    df:75:cd:3f:04:bf:28:09:60:39:52:c2:6e:44:d4:
                    f0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:73:C3:F3:A2:E5:2A:89:AE:7B:1A:4F:64:5D:93:67:42:58:D0:76
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:0d:79:77:e4:0d:61:7c:76:83:c9:33:58:24:ff:a5:19:62:
         9c:80:8b:89:a4:2a:f5:7b:48:72:c3:ed:9d:33:6a:8b:f0:83:
         bb:5b:1c:3f:ba:83:71:06:14:b6:b9:eb:cb:ae:eb:48:8d:35:
         96:a3:2c:9e:a9:3e:ea:f8:73:b2:b2:c5:98:a2:47:a5:10:c0:
         11:5e:6f:56:8f:1e:97:f9:cb:f4:44:97:76:15:d5:90:cd:50:
         e2:ac:26:63:b9:d0:1e:1f:2c:81:f3:45:70:d7:56:11:c8:b2:
         ff:8a:9b:df:7d:d7:06:95:f8:06:ab:51:b3:63:f7:3b:cc:8b:
         0a:e1:df:c7:96:88:ac:4d:a6:99:4d:32:64:64:81:c3:45:d2:
         7f:20:85:b0:8c:2f:36:53:8b:70:e3:eb:17:5d:cc:ef:b8:30:
         82:95:f1:d9:56:42:19:ad:54:fa:b8:3b:69:82:a8:ed:54:45:
         4c:97:84:90:be:a6:fc:2d:7e:80:eb:e4:e3:f1:24:30:75:2a:
         5e:87:a3:49:af:92:b5:a0:74:09:06:68:87:a6:5f:79:aa:81:
         bf:4b:54:4e:d4:de:94:b4:c1:e2:70:78:ad:1c:1a:42:83:5b:
         d7:6c:81:ed:51:cc:4c:58:87:2b:ae:44:b8:1e:ba:e6:67:1b:
         a2:11:0b:1f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Oct 15 06:08:39 2026 by rpki-client