Error: rpki-repo.registro.br/repo/6UZysAyTjx2NJrkHbunyrSpdEkCM69Efmns52PN6QHvC/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/6UZysAyTjx2NJrkHbunyrSpdEkCM69Efmns52PN6QHvC/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.mft
File:                     0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.mft (raw, json)
Hash identifier:          kxeFSTuw8j9hoRk3fjgfV8HbYDeX1PEaZfHjIy9OFnw=
Subject key identifier:   3C:64:96:8A:D5:D1:2A:60:97:F6:B9:70:13:31:30:96:32:7B:0A:D1
Authority key identifier: 0B:14:1C:05:E0:CD:60:AB:E1:A3:CD:F3:C3:C6:4C:FB:94:D0:67:51
Certificate issuer:       /CN=0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751
Certificate serial:       6BA0A2A0864E6448CEC954E66DC25837020D5586
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6UZysAyTjx2NJrkHbunyrSpdEkCM69Efmns52PN6QHvC/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.mft
Manifest number:          04D2
Signing time:             Fri 16 Oct 2026 05:23:17 +0000
Manifest this update:     Fri 16 Oct 2026 05:18:17 +0000
Manifest next update:     Sat 17 Oct 2026 06:29:17 +0000
Files and hashes:         1: 3138392e35312e3136302e302f32322d3234203d3e20323730373835.roa (hash: jjEKAR49e2FmWzOsZqwS6K6qcfPFNnwg5B9l7dS82Hg=)
                          2: 0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.crl (hash: IrHtSkwE4n+l+DkxSu2l5W9p9x0wioAmDiPZEd0ZyVA=)
                          3: 323830343a373136303a3a2f33322d3438203d3e20323730373835.roa (hash: ywTYhpF6/AMGHbFX+dTzLfKJa9FMnmkus6iZYADNj9s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6UZysAyTjx2NJrkHbunyrSpdEkCM69Efmns52PN6QHvC/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.crl
                          rsync://rpki-repo.registro.br/repo/6UZysAyTjx2NJrkHbunyrSpdEkCM69Efmns52PN6QHvC/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 06:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a0:a2:a0:86:4e:64:48:ce:c9:54:e6:6d:c2:58:37:02:0d:55:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751
        Validity
            Not Before: Oct 16 05:18:17 2026 GMT
            Not After : Oct 17 06:29:17 2026 GMT
        Subject: CN=3C64968AD5D12A6097F6B97013313096327B0AD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:90:18:4f:a3:94:ec:b6:ad:cf:2a:f4:eb:ff:
                    79:72:54:c6:80:87:e3:d1:a9:f1:94:3c:12:3d:ba:
                    a5:76:6a:fb:80:26:8d:30:f2:0c:e9:ea:0f:7e:f5:
                    d3:35:80:f4:d5:18:fe:8c:19:03:65:a3:3a:ea:fc:
                    73:ce:a7:f1:a3:a8:5e:b5:c7:16:c6:ab:73:b2:36:
                    03:d4:cf:5d:e4:0c:8e:19:cd:5e:16:5c:93:b7:69:
                    b0:6d:49:8b:bb:74:5d:ed:e3:d7:49:5c:f5:dc:c5:
                    73:82:40:34:ae:ce:7a:9d:d7:19:18:e7:c8:d7:1e:
                    ab:ca:0d:f0:c6:79:36:c9:0d:7a:cf:d6:3f:bb:96:
                    e1:ed:72:c9:bc:49:18:1a:47:e2:24:1f:ac:f2:ea:
                    2f:10:0b:dc:46:f3:18:0c:0e:1a:61:60:7b:29:c6:
                    60:e3:b8:0f:2d:f1:1a:1e:cc:ff:c8:c1:8d:bd:06:
                    63:97:05:7e:c9:a2:52:94:1b:c7:89:b0:08:ae:73:
                    82:4e:fe:20:21:12:9c:82:57:88:36:93:39:bd:9d:
                    a7:4c:c1:55:d8:84:f8:6d:e5:38:3b:3d:0c:a8:95:
                    2c:01:9d:e3:bb:76:57:c9:76:c1:a7:7a:18:4d:a8:
                    4c:88:e5:56:a9:7b:24:af:10:a1:25:1b:e8:04:94:
                    20:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:64:96:8A:D5:D1:2A:60:97:F6:B9:70:13:31:30:96:32:7B:0A:D1
            X509v3 Authority Key Identifier:
                keyid:0B:14:1C:05:E0:CD:60:AB:E1:A3:CD:F3:C3:C6:4C:FB:94:D0:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6UZysAyTjx2NJrkHbunyrSpdEkCM69Efmns52PN6QHvC/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6UZysAyTjx2NJrkHbunyrSpdEkCM69Efmns52PN6QHvC/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:f3:e9:79:0c:97:9e:72:a1:bf:40:b1:dc:60:fb:a9:d5:0d:
         d7:cd:61:e0:b4:9d:2e:90:54:68:9b:ca:90:eb:41:43:cc:80:
         75:9f:4e:19:52:58:51:7b:b3:fd:41:8d:a9:bc:14:a9:52:88:
         17:be:74:8b:3d:13:0f:36:fb:7e:ce:8c:97:35:5c:5b:2d:6a:
         32:d1:e8:c5:34:76:71:3b:ff:34:20:91:0f:1b:54:1d:c9:ca:
         0a:1d:29:e4:10:7e:c4:3a:f2:a2:55:41:83:78:fb:d6:bd:a2:
         86:2b:27:fb:02:68:8a:4a:e7:c3:5e:86:ba:1f:40:60:db:f3:
         03:58:fd:70:3e:3b:85:32:2d:82:fc:81:8e:a2:be:da:2c:ac:
         ca:79:bb:1b:48:b9:5b:7f:54:27:73:25:bd:f6:4f:63:0c:80:
         45:7d:67:2b:a4:d0:65:09:24:38:4b:c1:c9:8d:c4:9d:de:a8:
         a8:51:0e:d9:9a:c5:ce:f4:82:dc:f1:d8:14:3a:53:45:c6:20:
         eb:58:bc:c6:24:a6:2c:55:d2:4d:93:23:6d:2e:72:a4:7e:3d:
         cb:80:d2:8d:48:97:96:b5:ad:56:52:f1:b2:30:3f:44:48:3f:
         21:f5:b3:21:f8:9b:f8:68:48:5b:6e:38:c3:92:c5:7b:9f:28:
         b3:0a:f0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 12:19:21 2026 by rpki-client