Error: rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/058629EB1C805566CA700E3A2EE9B2B066B42FB4.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/058629EB1C805566CA700E3A2EE9B2B066B42FB4.mft
File:                     058629EB1C805566CA700E3A2EE9B2B066B42FB4.mft (raw, json)
Hash identifier:          GS/2q6OkwUgyJa1S1HyMknO0b+9lM444kJx7C8rLUXU=
Subject key identifier:   F7:9C:7D:66:39:2E:95:49:0C:A1:99:53:BF:B6:DD:37:E1:61:A7:32
Authority key identifier: 05:86:29:EB:1C:80:55:66:CA:70:0E:3A:2E:E9:B2:B0:66:B4:2F:B4
Certificate issuer:       /CN=058629EB1C805566CA700E3A2EE9B2B066B42FB4
Certificate serial:       0D3951CAE95E76126E520EEA480CA1C5486925E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/058629EB1C805566CA700E3A2EE9B2B066B42FB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/058629EB1C805566CA700E3A2EE9B2B066B42FB4.mft
Manifest number:          02A6
Signing time:             Mon 12 Oct 2026 16:47:34 +0000
Manifest this update:     Mon 12 Oct 2026 16:42:34 +0000
Manifest next update:     Tue 13 Oct 2026 16:47:34 +0000
Files and hashes:         1: 323830343a323862303a3a2f33322d3430203d3e203532393332.roa (hash: 0Ep1/BD8sPrgb+/bmSkLh/3priboVAo9Pt8vEsxZlDs=)
                          2: 3137372e3138352e3131322e302f32312d3234203d3e203532393332.roa (hash: BgtHd82mla7YM5k/jYNwff+cYiUekMuPwNjBU952X78=)
                          3: 058629EB1C805566CA700E3A2EE9B2B066B42FB4.crl (hash: Tcxa4eWCdUj5O6wWImIXt03ZFCvIKLfm+rtwblwzc1s=)
                          4: 3138372e38362e32342e302f32312d3234203d3e203532393332.roa (hash: GZ86pjCl2mFcA1htlxXaoWY1DCVrqWxOeAnMjpgNRI4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/058629EB1C805566CA700E3A2EE9B2B066B42FB4.crl
                          rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/058629EB1C805566CA700E3A2EE9B2B066B42FB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/058629EB1C805566CA700E3A2EE9B2B066B42FB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 16:47:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:39:51:ca:e9:5e:76:12:6e:52:0e:ea:48:0c:a1:c5:48:69:25:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=058629EB1C805566CA700E3A2EE9B2B066B42FB4
        Validity
            Not Before: Oct 12 16:42:34 2026 GMT
            Not After : Oct 13 16:47:34 2026 GMT
        Subject: CN=F79C7D66392E95490CA19953BFB6DD37E161A732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b7:d7:74:fa:3d:5b:8c:7b:64:29:26:e3:eb:
                    44:30:fe:42:27:a8:60:73:f1:6f:e4:c7:ad:47:9a:
                    ea:24:01:e5:d5:b2:41:70:96:fc:47:b5:44:93:00:
                    26:e8:53:76:a7:62:e8:61:2f:c4:d1:af:e4:c4:90:
                    a9:da:ad:ab:81:8c:58:94:06:76:71:08:e7:60:70:
                    e6:6f:ce:d7:48:43:1e:ed:e4:0b:24:e4:d3:3c:96:
                    b2:bd:18:20:2c:97:47:7e:83:4c:7b:04:96:96:69:
                    4e:32:9d:34:d2:28:21:f5:85:b5:c8:af:52:c2:b2:
                    3a:65:f5:7f:05:64:85:6e:b4:d3:f5:c6:11:84:2f:
                    e1:d9:c4:9e:68:bd:25:21:26:72:2e:72:21:9f:73:
                    f0:12:1c:9e:c3:45:22:dd:b1:fe:d5:0b:e5:06:56:
                    f4:2a:c3:fe:56:64:10:75:98:73:e4:00:6a:e8:9f:
                    2b:c3:5b:aa:94:b6:a1:10:c7:84:b8:60:7d:bb:40:
                    6e:c4:43:ce:31:13:19:c6:9a:af:d2:ac:96:e0:8b:
                    9a:48:81:5c:52:51:53:cd:23:f9:8c:a3:d0:16:4f:
                    7e:be:0b:59:8f:2e:bc:08:c1:c7:38:56:47:41:5f:
                    3c:6b:42:20:a1:57:50:a0:33:31:52:25:ae:01:3d:
                    86:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:9C:7D:66:39:2E:95:49:0C:A1:99:53:BF:B6:DD:37:E1:61:A7:32
            X509v3 Authority Key Identifier:
                keyid:05:86:29:EB:1C:80:55:66:CA:70:0E:3A:2E:E9:B2:B0:66:B4:2F:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/058629EB1C805566CA700E3A2EE9B2B066B42FB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/058629EB1C805566CA700E3A2EE9B2B066B42FB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/058629EB1C805566CA700E3A2EE9B2B066B42FB4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:f5:59:d9:76:a4:91:bb:39:94:99:ce:4a:54:e5:a4:5d:0b:
         ca:13:64:8c:0a:a3:34:38:8f:2a:1b:c6:64:72:4f:21:01:fb:
         2d:47:63:1c:7a:83:18:e1:a9:46:c6:0a:ca:02:83:ce:45:ac:
         a7:e3:9c:d7:af:2e:2a:9c:94:18:3e:5d:02:13:7c:26:2a:40:
         85:0b:e9:7c:cf:34:10:d0:42:0f:48:7b:a7:ae:44:64:43:86:
         ab:d8:f1:32:05:f7:cd:be:f5:df:78:eb:5c:1e:76:83:4f:1f:
         aa:d7:70:3b:24:4f:45:78:97:4e:e5:7d:b2:ea:e3:fa:43:c9:
         69:a9:3e:92:67:ba:36:af:4e:a5:4e:66:c3:b1:0a:de:db:09:
         84:97:e9:28:3a:95:1d:38:22:5f:5f:d4:18:c2:32:1f:3c:d0:
         f0:b6:da:73:b1:f8:7a:4f:06:04:5b:7d:ff:6c:45:53:c1:1d:
         e0:23:07:49:ec:9d:ab:17:84:b5:05:a7:0a:49:1f:84:42:39:
         2f:fa:bb:5b:ca:5a:14:15:29:a1:f3:f7:a9:f0:ae:cf:98:5b:
         dd:b0:01:8a:3b:5f:21:2e:1b:76:b7:37:58:4f:2d:43:ab:99:
         db:21:22:35:63:84:8b:73:55:bd:77:aa:8f:13:14:62:cb:e6:
         3b:d2:34:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 11:23:21 2026 by rpki-client