Error: rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/6262236EC1F5D36F583AB71B503487DFB7E6D1AD.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/6262236EC1F5D36F583AB71B503487DFB7E6D1AD.mft
File:                     6262236EC1F5D36F583AB71B503487DFB7E6D1AD.mft (raw, json)
Hash identifier:          aiA47mQqUjpW+jSiAkc3ysKDInfV0rmU4Uk8uGql9pE=
Subject key identifier:   3D:5A:F2:88:C4:4B:AA:94:9B:8E:7C:A1:1C:B1:B9:68:63:E8:20:1F
Authority key identifier: 62:62:23:6E:C1:F5:D3:6F:58:3A:B7:1B:50:34:87:DF:B7:E6:D1:AD
Certificate issuer:       /CN=6262236EC1F5D36F583AB71B503487DFB7E6D1AD
Certificate serial:       4110CB2756993D8DE452D7DB7F2092628D8BB241
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6262236EC1F5D36F583AB71B503487DFB7E6D1AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/6262236EC1F5D36F583AB71B503487DFB7E6D1AD.mft
Manifest number:          1A
Signing time:             Sat 10 Oct 2026 15:04:08 +0000
Manifest this update:     Sat 10 Oct 2026 14:59:08 +0000
Manifest next update:     Sun 11 Oct 2026 15:14:08 +0000
Files and hashes:         1: 34352e3232342e32342e302f32322d3332203d3e20323637363336.roa (hash: i/fNbDhoFU/+uND2aU03pFOYEnA2oh18FYFnN8+hxBg=)
                          2: 323830343a343438303a3a2f33322d313238203d3e20323637363336.roa (hash: gTt5Yr2prUwwwlMPYKfJ7ACkvpbChmK238UiDC9nP2Q=)
                          3: 6262236EC1F5D36F583AB71B503487DFB7E6D1AD.crl (hash: 83XkIJSPrHdK5ybm0eaMfENizlv7XC1InGgtzntGSf4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/6262236EC1F5D36F583AB71B503487DFB7E6D1AD.crl
                          rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/6262236EC1F5D36F583AB71B503487DFB7E6D1AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6262236EC1F5D36F583AB71B503487DFB7E6D1AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 15:14:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:10:cb:27:56:99:3d:8d:e4:52:d7:db:7f:20:92:62:8d:8b:b2:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6262236EC1F5D36F583AB71B503487DFB7E6D1AD
        Validity
            Not Before: Oct 10 14:59:08 2026 GMT
            Not After : Oct 11 15:14:08 2026 GMT
        Subject: CN=3D5AF288C44BAA949B8E7CA11CB1B96863E8201F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:84:bf:9d:ec:ab:12:02:a5:ff:fd:b3:98:72:
                    27:69:99:69:5d:f4:bf:f3:0b:56:88:76:8a:4a:ec:
                    9e:23:0a:84:32:6b:fd:bb:45:79:84:a2:58:82:2b:
                    3d:fa:94:09:01:6c:c2:62:c6:c0:29:5e:98:65:bf:
                    81:10:b8:18:fa:87:c3:5a:80:b5:0a:b5:3f:b7:a5:
                    e2:66:6f:42:8a:30:15:57:20:ab:1a:6c:e8:c5:2c:
                    19:d5:f5:61:9d:7b:97:61:97:0f:4a:1c:6e:10:4d:
                    74:a4:c7:56:b9:af:48:69:68:bf:9c:b2:3c:02:f3:
                    a3:4e:34:31:39:49:62:53:13:88:f3:a5:48:57:53:
                    d2:be:b5:71:8b:dd:fb:f0:3c:71:53:bf:54:92:f3:
                    0c:2e:c7:05:ee:98:ae:d9:68:19:9e:68:3b:b4:80:
                    1d:b6:81:34:56:fa:5c:9f:5c:03:ad:84:75:7f:18:
                    6a:0f:17:0b:3a:53:9c:80:ee:7b:37:3f:63:10:00:
                    5c:54:7e:cd:b4:66:17:03:46:88:65:9f:92:c0:74:
                    6c:eb:2a:34:f2:cb:36:1b:37:b4:c8:11:68:c2:11:
                    f9:20:ce:89:53:64:37:5f:d4:e1:f4:d9:09:16:2e:
                    d6:8d:38:44:c5:e5:60:f4:9f:63:83:de:56:ea:f9:
                    14:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:5A:F2:88:C4:4B:AA:94:9B:8E:7C:A1:1C:B1:B9:68:63:E8:20:1F
            X509v3 Authority Key Identifier:
                keyid:62:62:23:6E:C1:F5:D3:6F:58:3A:B7:1B:50:34:87:DF:B7:E6:D1:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/6262236EC1F5D36F583AB71B503487DFB7E6D1AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6262236EC1F5D36F583AB71B503487DFB7E6D1AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/6262236EC1F5D36F583AB71B503487DFB7E6D1AD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:11:02:42:3c:42:4f:99:c0:93:2a:1b:a7:5f:11:3b:88:23:
         4c:6d:23:9c:e8:6a:45:52:e2:e2:a6:9e:c8:58:d1:aa:c6:49:
         72:ed:3f:3e:44:65:6d:3f:96:39:24:c2:ef:06:3a:45:65:3d:
         af:71:7c:93:d1:e6:15:2a:2a:e5:b4:d6:c0:54:df:ff:58:10:
         c6:6a:08:4b:45:e6:32:d1:68:42:6c:26:f8:7a:fc:aa:0f:f8:
         40:f2:f4:7a:4a:00:b8:f9:5b:cb:97:a9:95:ef:3f:18:4a:9f:
         3e:97:4e:02:ed:12:26:bf:a8:08:47:4a:6e:30:f0:75:ca:74:
         2b:01:93:8d:73:db:77:a4:d4:22:1c:08:0e:dc:20:cf:9a:fb:
         0c:61:1b:22:97:23:31:3b:37:59:52:64:43:cd:3f:67:a8:50:
         20:87:92:26:29:4b:ce:87:0b:46:39:1a:17:76:9d:f6:f6:6a:
         df:66:09:3f:b1:6b:b8:fa:b8:d0:6c:be:5d:5c:42:98:04:f5:
         e8:5f:65:99:92:ab:71:1f:92:e7:34:f8:ad:00:46:4d:c2:16:
         9f:d0:4d:b1:04:66:ce:85:88:4e:3e:85:82:7c:60:9d:a1:3f:
         46:b4:64:8c:e0:08:a9:b2:47:66:b5:da:48:68:14:dc:da:ae:
         18:38:52:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:29:22 2026 by rpki-client