Error: rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.mft
File:                     6295613937297D5F10674AC45D3ACAB7545474C7.mft (raw, json)
Hash identifier:          sO7cGNSB4Vv1LCLrbwp+//LOX/WcxkyWJhs08VjiweM=
Subject key identifier:   1F:66:78:30:76:CC:A0:15:CE:A5:06:E6:91:39:C3:59:0D:E2:DA:71
Authority key identifier: 62:95:61:39:37:29:7D:5F:10:67:4A:C4:5D:3A:CA:B7:54:54:74:C7
Certificate issuer:       /CN=6295613937297D5F10674AC45D3ACAB7545474C7
Certificate serial:       2BA2174001A1C3BF25F027D6DB17A79CBC3ED6E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.mft
Manifest number:          0405
Signing time:             Sat 17 Oct 2026 10:43:23 +0000
Manifest this update:     Sat 17 Oct 2026 10:38:23 +0000
Manifest next update:     Sun 18 Oct 2026 13:04:23 +0000
Files and hashes:         1: 3136382e3232372e3131342e302f32342d3234203d3e20323634383931.roa (hash: /4fWziM9U3nSmPZfElZTP8yOZy+fUtdGWWJ2QyWcDoA=)
                          2: 323830343a326637303a373030303a3a2f34382d3438203d3e20323634383931.roa (hash: g3okiz+2/0bL2vB6BSWdwfxNP+lWUYkW1h1TDK3da/c=)
                          3: 323830343a326637303a353030303a3a2f34382d3438203d3e20323634383931.roa (hash: lEf3nD38rzvArDc679LvkbZXO4qLP9HX/TVtFey+paA=)
                          4: 323830343a326637303a3a2f33322d3332203d3e20323634383931.roa (hash: gw2kr8iqC2erMFHK8E4vmWOtw1TP0lHRX0o/CnJ8QUI=)
                          5: 323830343a326637303a343030303a3a2f34302d3430203d3e20323634383931.roa (hash: VP6/e/nSazzAd3NSpgJsMRQi3AVLS8uz2+P6rpSOKnQ=)
                          6: 6295613937297D5F10674AC45D3ACAB7545474C7.crl (hash: GYAPmbxbJ5e662oMvaEctA3xOP5MhIZ3rEx27b2BwrE=)
                          7: 3136382e3232372e3131332e302f32342d3234203d3e20323634383931.roa (hash: 2CT1TO4QjqGBz/WOvyMPoesL2w/fqtFMGSzr1NvhqiM=)
                          8: 3136382e3232372e3131352e302f32342d3234203d3e20323634383931.roa (hash: +7Jjrw9LTrceEbHh8Jj+E2YrvPalObU6+roW77Z/+cs=)
                          9: 3136382e3232372e3131322e302f32322d3232203d3e20323634383931.roa (hash: 3PT21yrRFXoWY+Lj38++Fa++0QLs7YZDxWRp/vVTEDs=)
                          10: 323830343a326637303a363030303a3a2f34302d3430203d3e20323634383931.roa (hash: 1CpLJgBZ+6FadzIOEkLyZf4imc+8bSemfgOHonLEeNk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.crl
                          rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 13:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a2:17:40:01:a1:c3:bf:25:f0:27:d6:db:17:a7:9c:bc:3e:d6:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6295613937297D5F10674AC45D3ACAB7545474C7
        Validity
            Not Before: Oct 17 10:38:23 2026 GMT
            Not After : Oct 18 13:04:23 2026 GMT
        Subject: CN=1F66783076CCA015CEA506E69139C3590DE2DA71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ef:95:44:b8:b3:85:6c:c6:3b:91:48:86:4c:
                    ae:86:6d:32:2b:af:54:05:ed:46:0d:2e:47:a6:12:
                    8f:8d:69:d3:a4:ea:34:41:c0:5b:4f:8d:9a:25:04:
                    e7:61:eb:07:b7:0c:7d:5e:cd:f5:4a:05:4b:2e:07:
                    c1:be:ba:89:b8:56:ae:f8:d4:b6:be:f3:79:73:7f:
                    8e:ea:79:9b:28:8b:aa:0f:7d:77:6b:05:33:62:c2:
                    f6:b6:d8:fa:88:b2:05:5c:c4:eb:3c:ab:99:9c:8d:
                    d7:50:9c:7b:49:b8:1d:c7:03:89:c7:a7:a6:1d:d3:
                    95:21:64:89:4f:ed:54:a8:bf:fc:da:7e:ef:3b:44:
                    2f:f2:94:37:b9:90:3c:1b:21:dc:ec:a3:72:06:f5:
                    ba:d6:76:b1:17:bd:14:ab:b3:40:a9:07:63:be:05:
                    5f:02:c2:74:64:d1:f7:1d:5f:86:2d:30:8d:1d:9d:
                    cd:47:6c:86:f6:bc:93:1a:5c:b8:66:10:bb:5e:2f:
                    13:69:84:37:f4:a5:6d:1c:75:b1:60:43:75:50:3c:
                    f0:b4:bb:a5:a6:0c:d4:7e:25:b5:26:14:7f:a4:ca:
                    6d:48:72:d4:d0:e3:a3:e7:de:63:d1:f6:4a:06:11:
                    bd:af:8f:f5:51:68:2e:36:2f:ac:ed:21:cd:43:af:
                    2b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:66:78:30:76:CC:A0:15:CE:A5:06:E6:91:39:C3:59:0D:E2:DA:71
            X509v3 Authority Key Identifier:
                keyid:62:95:61:39:37:29:7D:5F:10:67:4A:C4:5D:3A:CA:B7:54:54:74:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:eb:74:ed:8b:20:11:16:db:a2:c0:89:1c:27:e6:4f:a6:80:
         cd:41:e5:c5:04:1a:20:c0:88:ff:28:c3:b3:15:1e:d4:ab:d6:
         76:00:d0:30:83:23:49:58:ef:68:e3:5d:3c:b0:72:79:30:99:
         02:fa:61:41:af:26:e3:af:f4:33:3b:f4:1d:7f:1b:7f:39:3a:
         36:f9:ed:09:7c:43:db:89:0c:11:c8:f7:20:b8:ea:79:d7:6f:
         15:35:4f:eb:58:bb:5b:0e:41:3d:4b:a3:70:83:23:22:d7:a5:
         a5:5d:43:91:0d:51:1f:2c:2b:ef:42:ca:45:53:db:c3:47:4a:
         60:56:74:80:60:63:a5:a4:99:d6:a5:04:77:5c:e4:5f:01:57:
         e7:15:62:cd:56:29:d3:b5:c3:15:eb:c0:16:3f:e2:b1:c5:7f:
         a6:f8:62:f8:39:3d:8e:cd:c0:b6:a9:d6:9a:ed:39:fc:df:b1:
         62:36:a2:c7:10:fb:ce:c9:07:b5:fe:42:7a:a0:2b:a1:5a:f1:
         25:6d:b9:78:f0:a5:65:84:db:d1:ae:8e:2a:80:be:29:c0:62:
         fa:94:0d:f6:83:07:45:71:8e:5d:f2:ef:d6:db:bf:d4:dc:f3:
         6c:58:e6:02:fe:da:fb:1c:d9:02:e0:2a:e8:f9:ab:63:35:c4:
         d5:a9:c4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 19:53:01 2026 by rpki-client