Error: rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.mft
File:                     36ED969D92322E6C7F28A050D3ABC47947497160.mft (raw, json)
Hash identifier:          YcWOR3Hj5xvmGZtasoVTZH9skC3JB/35nQ5h51q5huw=
Subject key identifier:   06:27:A6:79:F6:A4:6A:8C:B6:AF:7D:0B:D9:94:1D:F9:D9:34:EF:A0
Authority key identifier: 36:ED:96:9D:92:32:2E:6C:7F:28:A0:50:D3:AB:C4:79:47:49:71:60
Certificate issuer:       /CN=36ED969D92322E6C7F28A050D3ABC47947497160
Certificate serial:       4F0ED1F70B9FC7FA0633F5C64B7A4AD909756473
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ED969D92322E6C7F28A050D3ABC47947497160.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.mft
Manifest number:          048B
Signing time:             Wed 14 Oct 2026 19:08:45 +0000
Manifest this update:     Wed 14 Oct 2026 19:03:45 +0000
Manifest next update:     Thu 15 Oct 2026 21:49:45 +0000
Files and hashes:         1: 3230312e3135392e3135362e302f32322d3234203d3e203631383133.roa (hash: Pz5jvf5pyC7yvc8HVLt0O6AXU3kBiFIaZeqlerxaAYg=)
                          2: 323830343a313962343a3a2f33322d3438203d3e203631383133.roa (hash: 634Zk57vNJ6xS0Y4+2TCXWt9fxtitSuJc1Ql07m+6BM=)
                          3: 36ED969D92322E6C7F28A050D3ABC47947497160.crl (hash: YbVNmJDZG5w1vWig+QII8gKDG5SSOwPD1Qtv5UuuRgM=)
                          4: 3133382e3132322e3139362e302f32322d3234203d3e203631383133.roa (hash: n+HoyJG26++b3FJA1fVxT685DhRMUTDWbcID6VZG3yc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.crl
                          rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ED969D92322E6C7F28A050D3ABC47947497160.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 21:49:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:0e:d1:f7:0b:9f:c7:fa:06:33:f5:c6:4b:7a:4a:d9:09:75:64:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ED969D92322E6C7F28A050D3ABC47947497160
        Validity
            Not Before: Oct 14 19:03:45 2026 GMT
            Not After : Oct 15 21:49:45 2026 GMT
        Subject: CN=0627A679F6A46A8CB6AF7D0BD9941DF9D934EFA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a2:01:ff:46:91:75:1d:b4:2c:f5:31:5f:79:
                    48:99:3f:83:c0:3b:0c:5b:c9:d4:2c:ee:9a:84:18:
                    d0:63:81:cf:7e:da:cb:13:ac:51:00:30:bf:bb:8f:
                    66:69:17:ff:52:bf:55:05:0b:06:a2:1b:79:d6:7b:
                    02:ea:7e:89:c8:99:66:49:23:76:0c:2f:a7:d3:26:
                    64:ae:06:ce:d2:25:9c:dc:87:73:89:e3:af:a3:17:
                    6f:5c:6a:4e:eb:71:79:02:9a:09:f5:0c:5a:1a:23:
                    44:77:a1:bd:59:dd:55:b3:03:d5:42:6d:d4:7c:35:
                    c8:76:fc:10:29:ab:5d:96:68:d6:e0:51:53:68:78:
                    61:82:17:40:d8:1c:70:ce:9c:80:d0:a2:46:bb:4c:
                    b1:3b:2b:ca:84:ae:ba:19:bd:fa:80:cb:ee:8d:08:
                    16:a6:b8:e0:94:d9:9c:54:32:8f:3a:59:5a:f1:e4:
                    dc:5e:fb:e0:f4:8b:60:66:81:92:67:93:b8:db:1c:
                    bc:44:88:db:54:81:54:4d:6b:47:27:05:69:a2:88:
                    d1:da:5d:94:1b:96:91:24:2e:b4:b8:4e:fb:8c:64:
                    80:af:47:80:60:bc:0e:65:a5:ee:c8:cc:3d:53:96:
                    9f:2a:c3:6e:e4:b3:ee:35:43:a0:84:27:4b:76:85:
                    02:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:27:A6:79:F6:A4:6A:8C:B6:AF:7D:0B:D9:94:1D:F9:D9:34:EF:A0
            X509v3 Authority Key Identifier:
                keyid:36:ED:96:9D:92:32:2E:6C:7F:28:A0:50:D3:AB:C4:79:47:49:71:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ED969D92322E6C7F28A050D3ABC47947497160.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:db:db:d7:af:e5:25:a6:74:c5:4b:23:8e:f5:d8:d1:d3:77:
         7f:59:f9:c7:2f:04:6a:9b:0f:d2:7f:cb:26:ba:7d:a9:5e:7d:
         f5:e6:5d:f1:a9:38:27:f8:d1:7c:a0:b6:88:2d:3c:e4:04:de:
         02:b5:d2:cf:05:f1:a2:2c:3b:bd:6b:5a:a3:c4:4e:d3:0f:43:
         5e:6e:d9:69:2d:da:46:73:1f:47:33:ef:09:5c:3f:2e:75:37:
         58:96:85:8b:3f:6a:b5:46:84:14:39:24:ff:87:08:2a:c2:33:
         af:ac:0e:ec:58:45:59:3a:bf:18:8a:96:28:bf:5d:84:79:4d:
         ca:27:db:e8:b8:f3:29:aa:90:10:a1:08:84:27:02:20:f1:b9:
         03:ec:a3:88:29:8b:6e:67:69:48:4c:f0:1b:b4:d3:ae:8b:9b:
         84:fc:5e:c9:21:96:b8:aa:cb:22:f1:55:55:6a:96:6a:e7:bc:
         c2:bc:b2:c9:6b:58:02:2b:4a:8b:c3:74:49:a5:8d:9b:d8:39:
         e0:34:43:70:f2:56:30:85:62:c4:f0:23:a5:27:2a:db:ff:c0:
         9e:4e:40:d6:b6:f7:09:09:63:ff:d0:52:52:23:15:b9:f9:4b:
         74:6d:a5:ab:aa:10:4b:4a:50:4c:fa:d2:9e:1f:2c:b4:80:4c:
         09:16:f0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 00:11:24 2026 by rpki-client