Error: rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft
File:                     6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft (raw, json)
Hash identifier:          qYKCF8FKSYn7pl38jm2Or5vqpWToDoOkxUHGXWztF3k=
Subject key identifier:   80:A6:14:58:36:5D:13:2A:C7:AB:38:27:B0:0C:12:56:E0:BB:CD:12
Authority key identifier: 6F:38:A2:B5:B4:9F:37:25:98:D0:0D:F4:B0:40:EB:EC:6B:DD:17:6C
Certificate issuer:       /CN=6F38A2B5B49F372598D00DF4B040EBEC6BDD176C
Certificate serial:       72D7CDA5A8AF92EDBA83EC47BD5412C7E809ADAA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft
Manifest number:          04CD
Signing time:             Tue 13 Oct 2026 16:14:56 +0000
Manifest this update:     Tue 13 Oct 2026 16:09:56 +0000
Manifest next update:     Wed 14 Oct 2026 19:15:56 +0000
Files and hashes:         1: 3138362e3233322e3137392e302f32342d3332203d3e20323632373732.roa (hash: 6cigMOSfoqE6zvwmb3uMyGKEPSH30r6IbqvU3uHv77s=)
                          2: 3138362e3233322e3137362e302f32332d3332203d3e20323632373732.roa (hash: b/jxd0Ies4lj+Bf7n+iSI15tUeChU2EBazK87gFFNJw=)
                          3: 6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl (hash: 76Tk0YZjxKaevqRrM23rFPHeaPNNU5pyZW8Hg7zBjdY=)
                          4: 323830343a333065343a3a2f33322d313238203d3e20323632373732.roa (hash: ljf3kOKKs3HOJctB53yQDyI5LaBzKELDW+vqP0oDMdM=)
                          5: 3138362e3233332e3233362e302f32322d3332203d3e20323632373732.roa (hash: CZVpE3RS6EdJBL+s1oh+60RO519fUscnAr9C3EvwsPI=)
                          6: 3138362e3233322e3137362e302f32322d3332203d3e20323632373732.roa (hash: rmlEe09mFumzi++BacY6CaQ0WYwjZ9dIki0JAAJknNY=)
                          7: 3138362e3233322e3137382e302f32342d3332203d3e20323632373732.roa (hash: DotHAXvQTJoa5QK/qy1kOU/pMjzxpOXZwIRnyvXUprk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl
                          rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 19:15:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d7:cd:a5:a8:af:92:ed:ba:83:ec:47:bd:54:12:c7:e8:09:ad:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F38A2B5B49F372598D00DF4B040EBEC6BDD176C
        Validity
            Not Before: Oct 13 16:09:56 2026 GMT
            Not After : Oct 14 19:15:56 2026 GMT
        Subject: CN=80A61458365D132AC7AB3827B00C1256E0BBCD12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:17:32:fd:f3:05:ad:d0:ed:8a:b1:6b:8f:0a:
                    4e:de:2c:20:c7:f8:03:a3:3e:c7:bb:d8:24:68:53:
                    18:07:3d:8b:5e:ad:ae:fe:2c:9d:1a:85:5c:40:1e:
                    8f:01:db:ac:d3:01:56:14:4f:de:f5:4c:b1:36:a3:
                    24:c1:65:48:cb:11:46:90:54:82:ed:74:90:40:44:
                    49:65:17:58:77:7b:fc:bf:b6:25:f9:ee:bf:14:3e:
                    2a:d1:04:77:98:53:e0:81:dc:b8:d3:69:33:16:57:
                    46:ab:21:2a:b1:60:a7:59:81:d1:f4:09:89:8e:0a:
                    fe:9c:67:62:93:3f:e1:cb:48:ed:b2:6d:bd:06:7a:
                    93:d8:44:6d:88:ca:b4:22:6c:4c:4d:49:13:91:eb:
                    cc:e8:76:bb:b6:64:d7:de:b7:6a:7e:d7:58:cb:c5:
                    bd:9e:96:8e:bd:7c:69:27:48:ef:a7:4c:60:02:ea:
                    f1:eb:2c:1c:a2:eb:4c:c7:d7:0e:2c:fe:99:75:a5:
                    f5:5e:cf:15:8c:c8:26:71:d4:28:c9:fe:53:41:0d:
                    f8:b2:de:05:22:bb:66:ef:83:08:74:6c:e7:b8:e6:
                    8d:ad:97:c3:00:ec:6a:dd:10:5f:d9:9e:8a:e0:25:
                    22:37:fe:1e:59:8d:93:dc:94:cb:a9:5b:f9:81:bc:
                    8e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A6:14:58:36:5D:13:2A:C7:AB:38:27:B0:0C:12:56:E0:BB:CD:12
            X509v3 Authority Key Identifier:
                keyid:6F:38:A2:B5:B4:9F:37:25:98:D0:0D:F4:B0:40:EB:EC:6B:DD:17:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:d2:fb:a1:31:02:c7:aa:d2:df:d9:6c:bc:b2:56:e8:5d:3d:
         79:52:94:6d:51:a7:40:cd:27:13:fd:e0:b0:9d:7d:cd:0e:2a:
         3e:9e:16:dc:bd:29:a0:dc:c9:3d:34:6d:98:5f:ac:ac:23:f7:
         51:b1:4a:b5:c1:f5:ae:e8:23:e4:bd:58:d3:b1:91:fc:70:82:
         ce:9d:ba:db:44:da:e9:b2:7f:9a:1d:08:40:1f:28:e4:92:17:
         08:0e:46:3a:aa:eb:4b:3b:ac:8b:5d:31:a3:8e:9c:49:b3:6d:
         6c:2f:55:43:3e:d7:48:8f:45:c0:b6:6e:ea:6a:e6:ae:a3:3b:
         c8:ae:7b:82:5a:f0:5d:0b:50:d1:31:4c:25:1e:a8:8f:30:78:
         f5:ab:bd:8b:5b:09:b1:0b:68:98:75:c1:05:aa:d9:ea:8c:53:
         c6:0c:f9:4b:03:37:f4:d6:24:d4:e5:22:30:82:e2:f4:d9:11:
         c3:85:bc:e0:85:d9:77:d4:f0:c9:34:a2:2c:cc:2b:7c:c4:9c:
         e2:a0:dc:90:33:1d:9e:d6:b3:39:dd:e9:02:0e:3a:eb:a6:a6:
         3e:13:41:c7:ab:a4:41:29:80:7e:8c:f2:4d:d8:7d:75:b2:cc:
         85:0a:9f:56:96:f4:3d:8c:fe:ad:c0:49:cb:81:32:94:c1:02:
         18:f4:1a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:44:57 2026 by rpki-client