Error: rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft
File:                     6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft (raw, json)
Hash identifier:          Or9Y0Fo+fnMud5dunN2QjvtxGqBK0pMBOTsehwYO1a4=
Subject key identifier:   59:40:68:BD:89:34:9B:0E:8A:AE:67:FC:28:87:E4:14:DE:CC:26:43
Authority key identifier: 6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14
Certificate issuer:       /CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
Certificate serial:       567332137EEADD832D1297326169EE95F661DAD4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft
Manifest number:          04E6
Signing time:             Mon 02 Nov 2026 17:10:02 +0000
Manifest this update:     Mon 02 Nov 2026 17:05:02 +0000
Manifest next update:     Tue 03 Nov 2026 17:46:02 +0000
Files and hashes:         1: 3137302e3135302e3233322e302f32322d3232203d3e203631393138.roa (hash: KQqNO2dAr6DGUYzi2Mfjy/X96oWjSN2tB04bB9CCVRQ=)
                          2: 3137302e3135302e3233322e302f32342d3234203d3e203631393138.roa (hash: UhCtHuZTZGaKLEQtOFgnU7ImjMruubBq7aZyaZeUpzo=)
                          3: 323830343a313731343a3a2f33322d3332203d3e203631393138.roa (hash: 5KoFBm8izHkGvxWJP07w+TI86QZt/YACE4VU6SgVOTg=)
                          4: 3137372e39322e3136372e302f32342d3234203d3e203631393138.roa (hash: EOZRyBx+X12JgsLaaI+iVhQX7UK4lskQADgqcfVDhnM=)
                          5: 3137302e3135302e3233342e302f32332d3233203d3e203631393138.roa (hash: I0nH6WNoZYq6vD9CdUZFNk3vEWMtpdxvWUjlGcJsQo4=)
                          6: 3137372e39322e3136362e302f32342d3234203d3e203631393138.roa (hash: 9B2Oe3hiwJvKy2VtQYEstZlAtsFxXOldACf9aQ9nkLc=)
                          7: 3137372e39322e3136352e302f32342d3234203d3e203631393138.roa (hash: A9R+oaZNynvfAacRhEXDQ9mY+3Y33iiHu3RFSE7dVQk=)
                          8: 3137302e3135302e3233352e302f32342d3234203d3e203631393138.roa (hash: LXkXpj/k39vHqv9sEVEWX/rh5ZuEppUnYgDxhqN9/Ko=)
                          9: 3137302e3135302e3233322e302f32332d3233203d3e203631393138.roa (hash: RjaaO7igPpS8DQGXaaaiWbfO5/U/Bj00LIq7uO0HmFk=)
                          10: 6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl (hash: sJA7qLyBmhVZI22MW78qk8t3Vwp8rnRaaGHNKmZE0n4=)
                          11: 3137372e39322e3136342e302f32342d3234203d3e203631393138.roa (hash: QflKVL4gyoZt8h6BeJzE9d1mQeF6TZLetnBU7KJJuR8=)
                          12: 3137372e39322e3136342e302f32322d3232203d3e203631393138.roa (hash: ub8XR4e/GVYaJg8sEKr6dHaKeeUizUiwf9Pag8GL6uo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl
                          rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 17:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:73:32:13:7e:ea:dd:83:2d:12:97:32:61:69:ee:95:f6:61:da:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
        Validity
            Not Before: Nov  2 17:05:02 2026 GMT
            Not After : Nov  3 17:46:02 2026 GMT
        Subject: CN=594068BD89349B0E8AAE67FC2887E414DECC2643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2a:d5:77:cb:95:e6:70:d8:13:f8:79:d8:90:
                    c1:79:30:8c:a4:99:ef:ad:37:6b:83:dc:71:b6:c2:
                    2c:14:47:4f:e6:05:18:70:0e:6f:9b:51:8b:06:c9:
                    4a:7a:ea:af:4a:d4:72:3d:56:fb:7f:48:92:50:c4:
                    8e:b1:ea:3e:84:73:36:7f:96:66:f0:19:e3:d0:e1:
                    c3:21:8c:c1:e3:d1:98:9b:64:4b:5d:bb:a2:8a:04:
                    70:6e:37:40:16:f8:ae:7e:0d:62:a2:c9:7b:01:f6:
                    9c:6e:59:1e:c1:35:3d:fc:49:8c:2c:95:2f:03:01:
                    33:e0:fd:0d:a8:6b:01:ee:c8:29:97:9a:1c:a7:ee:
                    d3:5f:87:4c:1f:51:6b:a7:e9:c1:29:f3:90:ce:09:
                    39:c8:7c:12:d4:58:63:53:64:33:39:71:f1:8c:f4:
                    62:50:c8:74:69:e3:bf:d0:24:4c:52:f0:70:36:75:
                    0c:71:53:f5:1b:ea:53:a4:ce:e7:36:03:70:83:32:
                    84:ed:c4:6b:5e:8e:6b:2a:d2:67:87:d4:7d:c3:6d:
                    02:7b:d0:22:fd:ff:60:68:5a:bc:90:f5:1d:bc:1e:
                    f4:f4:5f:7c:59:87:71:54:a3:4a:28:11:ca:23:9b:
                    a4:42:ec:0a:71:b1:5f:5e:d3:db:ec:9f:be:74:f1:
                    7f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:40:68:BD:89:34:9B:0E:8A:AE:67:FC:28:87:E4:14:DE:CC:26:43
            X509v3 Authority Key Identifier:
                keyid:6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:44:e5:3f:c2:ef:05:1c:ce:22:5d:77:e3:e3:49:2c:8f:c7:
         84:73:df:1d:d6:fd:c3:9a:ec:60:a4:5a:4d:a7:57:2d:18:35:
         54:d1:a2:7d:65:b6:6b:d5:8a:5c:2d:d2:45:85:04:9f:5e:ac:
         83:33:94:74:f2:28:b5:71:1c:a2:54:21:05:ae:b7:06:4d:29:
         43:4e:e6:2d:a0:84:c4:ef:b3:2e:18:6a:5d:02:b9:fe:96:28:
         cd:46:c4:16:ee:6f:5e:67:1f:38:62:22:fb:06:36:60:a8:d5:
         b2:14:70:09:e6:e8:d3:f7:b7:f9:1a:76:e2:f5:6d:b8:ee:25:
         a6:43:43:b5:0b:73:b2:07:fb:fd:7b:ab:bc:6f:85:55:2a:48:
         21:14:d0:c5:f2:01:f5:6d:93:83:7a:42:fc:fd:f6:16:50:8e:
         f3:53:98:cb:d0:41:0d:ad:e8:01:18:79:20:52:45:89:e6:e3:
         ef:62:32:d0:1f:d8:eb:92:0f:07:12:9b:23:2e:f3:08:fc:3b:
         0f:28:a6:76:90:3a:81:6f:f3:b5:4b:ce:63:68:09:3b:b7:2e:
         3e:4a:d7:4f:ec:72:b4:c0:b9:b5:ec:27:0c:06:60:bc:f8:ec:
         fe:25:4a:7c:f0:e0:73:4c:ef:d6:15:0b:b9:fd:96:8c:4e:a2:
         20:4a:7c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:01:40 2026 by rpki-client