Error: rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.mft
File:                     B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.mft (raw, json)
Hash identifier:          ECkvvbsZeUhpMQ/yh1OtsXesP0u9QHnluu7iV3iBkUw=
Subject key identifier:   33:D5:9A:EE:2C:FD:F0:21:A1:CF:A9:A7:38:4A:40:14:AE:13:F3:B3
Authority key identifier: B6:C5:FB:85:7E:69:A9:04:49:73:FA:30:62:AA:1D:6F:BF:5C:4A:81
Certificate issuer:       /CN=B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81
Certificate serial:       51059B83B4A6C987D00FA0ECEA139E1E40732DCF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.mft
Manifest number:          04E5
Signing time:             Mon 02 Nov 2026 04:03:18 +0000
Manifest this update:     Mon 02 Nov 2026 03:58:18 +0000
Manifest next update:     Tue 03 Nov 2026 07:30:18 +0000
Files and hashes:         1: 3137372e3232332e3133322e302f32332d3233203d3e20323731303031.roa (hash: 5grWE5cRh/6cEmXqmMN3pi5gUfC2kvK3BaUW2/4nGzA=)
                          2: 3137372e3232332e3133342e302f32332d3233203d3e20323731303031.roa (hash: 3ntzYsi1IOZza3qeVwwdkv0WKZbyr128hpJBpmu3I78=)
                          3: 323830343a373463303a383030303a3a2f33332d3333203d3e20323731303031.roa (hash: qYZkWgpVVLbm9MkhZNlJEtL1eu/zJOHCRqzNVEJEnoU=)
                          4: 323830343a373463303a3a2f33332d3333203d3e20323731303031.roa (hash: bfze2OkHv0CirGa6o3aVa143n8LPQ5iJTjycvufqJeQ=)
                          5: 323830343a373463303a333a3a2f34382d3438203d3e20323731303031.roa (hash: oADN4xx/OmX5VJ6pQXgUfHrknndpiAE/iLY48zwQ6Js=)
                          6: B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.crl (hash: 3Y5dUzXzGP03ppGweccsDDKo42lUa1AAq3tOyKG8g0A=)
                          7: 323830343a373463303a3a2f33322d3332203d3e20323731303031.roa (hash: qjWQFW+9i3bxMpb9nu0NnsmvW2vz0ZF77WeNaaHz8wg=)
                          8: 3137372e3232332e3133322e302f32322d3232203d3e20323731303031.roa (hash: gGyxm4/SpvEkMY753tiQw3JFdBITSh6wElzkaMRTdLs=)
                          9: 323830343a373463303a363a3a2f34382d3438203d3e20323731303031.roa (hash: RbhtQAfeCAhd749TcWBL328x0ExsujCj8pVwowkwKCQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.crl
                          rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 07:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:05:9b:83:b4:a6:c9:87:d0:0f:a0:ec:ea:13:9e:1e:40:73:2d:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81
        Validity
            Not Before: Nov  2 03:58:18 2026 GMT
            Not After : Nov  3 07:30:18 2026 GMT
        Subject: CN=33D59AEE2CFDF021A1CFA9A7384A4014AE13F3B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:40:f0:3d:19:c7:3f:f0:bc:66:e7:1d:48:56:
                    11:0e:b4:f1:98:15:59:68:4b:70:f0:de:e9:e4:f5:
                    ee:0c:30:25:20:54:db:65:ba:1b:05:51:a7:d3:e0:
                    68:75:d7:fa:26:d3:ad:13:f3:0d:93:cd:f0:14:f2:
                    3d:0f:53:9d:a3:61:11:15:18:6e:18:14:ae:9d:24:
                    77:13:d0:91:f2:1d:6e:8c:fa:d4:4c:c0:15:c8:9e:
                    8f:5b:f0:74:65:50:ae:d5:3d:9e:28:ac:28:4c:4d:
                    fc:c6:10:7c:1d:3e:db:65:90:a6:88:5b:32:c8:31:
                    57:2d:57:32:58:5b:68:01:64:f5:15:87:54:f8:ef:
                    74:4d:e4:f4:90:1a:e3:2a:36:29:88:8f:02:9b:fd:
                    27:31:b4:a6:9f:6d:40:7b:d1:c5:cb:63:d3:11:62:
                    75:34:16:5a:a4:dd:5b:eb:fc:11:37:81:77:88:33:
                    41:1a:bd:23:7e:dd:b9:5a:b5:23:73:68:56:56:cf:
                    7e:39:26:b7:ce:de:ae:7d:68:45:50:43:f0:77:fe:
                    2f:1f:8f:9f:12:d2:aa:00:07:37:ea:60:eb:9c:6e:
                    d3:87:cd:17:5b:9c:b0:f4:7f:54:d6:29:1a:f4:d9:
                    a1:34:4e:13:1c:1a:13:fd:5c:98:5c:e9:9f:d5:7e:
                    13:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D5:9A:EE:2C:FD:F0:21:A1:CF:A9:A7:38:4A:40:14:AE:13:F3:B3
            X509v3 Authority Key Identifier:
                keyid:B6:C5:FB:85:7E:69:A9:04:49:73:FA:30:62:AA:1D:6F:BF:5C:4A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:b3:75:fd:4e:fa:b0:97:c3:f2:ff:39:b5:54:1b:38:e6:1a:
         12:f7:8b:5a:82:e1:cb:a9:7f:d1:22:5b:cb:57:7b:0f:78:11:
         d2:db:f9:db:08:87:3e:39:dd:fe:be:5b:f1:4f:61:f3:a9:42:
         82:90:7f:be:15:b5:34:b3:88:d3:90:ca:65:46:d1:a1:c0:30:
         48:74:29:70:b5:cd:0f:36:7b:87:5a:2b:6b:bb:55:e0:4e:ab:
         fd:7a:31:96:1f:fc:a7:1e:da:d9:c5:cb:0c:80:b1:c6:1f:c1:
         18:d5:eb:11:96:95:bf:a6:bc:4f:38:51:06:15:25:8a:59:c7:
         36:98:20:de:1e:3a:af:ed:25:ce:29:3a:b2:0b:7d:71:61:ee:
         18:ae:0a:f0:31:b8:85:c5:af:a4:24:f8:9d:68:b4:93:d8:72:
         21:87:72:e8:c6:a9:f3:69:cb:4f:29:fc:2f:13:53:9e:8e:f5:
         af:96:d9:35:89:6c:1f:07:08:3c:a8:71:ce:59:b6:b0:0b:f0:
         65:2d:aa:03:12:32:88:20:08:b9:04:b5:7c:7f:bc:0d:93:f2:
         df:b9:ee:3d:e5:4d:09:68:36:0e:67:d3:7d:3e:e4:a9:53:a7:
         9c:68:bc:8f:c7:b5:e4:a3:c1:7d:7c:26:16:35:87:b1:8c:84:
         d1:26:12:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 19:40:38 2026 by rpki-client