Error: rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.mft
File:                     2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.mft (raw, json)
Hash identifier:          Vx/9dt4evvjiTh4t/7hlbNSFxjA5janYImmkwkGGLnk=
Subject key identifier:   07:F3:EE:6B:E3:CE:3A:D1:26:01:F3:BD:8F:F5:37:33:F5:2D:17:FB
Authority key identifier: 2B:4E:D5:7C:FB:A9:25:5B:84:24:7A:7F:FB:F2:FD:92:3A:36:5F:DB
Certificate issuer:       /CN=2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB
Certificate serial:       602FB172E30C4975803072754FEAF6AAA718FD8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.mft
Manifest number:          04C2
Signing time:             Sat 17 Oct 2026 06:10:00 +0000
Manifest this update:     Sat 17 Oct 2026 06:05:00 +0000
Manifest next update:     Sun 18 Oct 2026 06:10:00 +0000
Files and hashes:         1: 34352e3137392e3135302e302f32342d3234203d3e20323639313037.roa (hash: Gb7izMJfOmC+W8mgFvy+FwjRs/FFU5IQCvnkAEylLD8=)
                          2: 2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl (hash: pCQQrXNzOTsn2Ls7sYZk247ur6qLGwETBcvcIB+x/dU=)
                          3: 323830343a356638383a383030303a3a2f33342d3334203d3e20323639313037.roa (hash: WpVkXou7kTJduQxNBNSnfqro0GIfuyA37C7WISrzXqg=)
                          4: 323830343a356638383a3a2f33322d3332203d3e20323639313037.roa (hash: e8mJ0IhqQ5rgIyCsFAW7r7LUqGTiftJ58DN2h+VHFqA=)
                          5: 34352e3137392e3134392e302f32342d3234203d3e20323639313037.roa (hash: sX6fe6Uc13EncAXqWxynj3Pk7E35e1utSTPF5CqKjZo=)
                          6: 323830343a356638383a633030303a3a2f33352d3335203d3e20323639313037.roa (hash: e9kTsbt+YRAYQ0uIluUGz/IpFdRuBLaULEu4MOk75uw=)
                          7: 323830343a356638383a3a2f33342d3334203d3e20323639313037.roa (hash: phqbYlKSmQDqClLZiIb1B1lSQiOAfexIUFwAABhCGD4=)
                          8: 34352e3137392e3135312e302f32342d3234203d3e20323639313037.roa (hash: gD0nfDuVuji17HIFfCsl5/mhfHsfstZ59DrniOTSYh0=)
                          9: 323830343a356638383a633030303a3a2f33342d3334203d3e20323639313037.roa (hash: NUScZ+Q8UxhoPp3FQA5ELis+f4zQvCeDC6yyFzJ6EmY=)
                          10: 34352e3137392e3134382e302f32342d3234203d3e20323639313037.roa (hash: mV+5OafIn5EHxPGKE4RQdKeyYczSU9OsHoe2kjtySeE=)
                          11: 323830343a356638383a3a2f33332d3333203d3e20323639313037.roa (hash: iW7jDRft8aCprzuW+y9tYt3vuHqM23tAVTTpxjGAqaI=)
                          12: 323830343a356638383a343030303a3a2f33342d3334203d3e20323639313037.roa (hash: voNJdqpR2WW3/uxxKkYJoYeikkbkoH4HoVlbwiCz5u0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl
                          rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 06:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:2f:b1:72:e3:0c:49:75:80:30:72:75:4f:ea:f6:aa:a7:18:fd:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB
        Validity
            Not Before: Oct 17 06:05:00 2026 GMT
            Not After : Oct 24 06:10:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fd:bd:43:df:34:f8:64:fb:89:8b:43:9b:9e:
                    02:60:47:5a:e0:f7:a3:4d:bc:81:de:88:a1:d4:bc:
                    80:17:bb:be:ef:49:65:2b:82:65:28:5c:fb:b7:f7:
                    51:3b:b8:1d:64:0f:cd:5d:d0:c0:e3:04:f2:99:ea:
                    39:49:66:e1:bf:bb:68:be:1c:fe:a1:86:c6:05:77:
                    6c:82:33:4a:64:81:5b:a2:c4:f3:64:b4:ea:fb:f8:
                    aa:9e:98:fa:36:53:32:97:e3:80:25:2c:74:67:af:
                    86:6b:29:cf:fc:50:c0:49:7b:a0:0b:de:d0:21:8c:
                    ba:c0:92:c6:9d:ef:64:52:95:9a:18:43:04:60:66:
                    75:84:15:61:53:43:79:a2:ba:49:f3:1a:19:86:b0:
                    76:09:a6:28:e7:f4:d2:a9:ac:d4:b4:90:7c:1e:1a:
                    7b:c5:4e:fb:5c:40:6f:9a:eb:60:9d:05:35:2d:47:
                    f6:59:09:41:f6:40:e2:9d:35:1f:13:ab:cc:92:aa:
                    ce:6d:5a:e3:59:36:48:3c:5c:fe:bc:25:ba:17:5b:
                    b3:a0:e9:7b:6a:ba:3f:21:d5:e4:29:6e:45:cf:95:
                    2b:21:9b:fa:9a:b3:a9:18:21:a5:22:6a:08:9f:74:
                    e1:15:48:c5:59:4f:94:56:f4:a1:bd:50:62:8a:67:
                    5f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F3:EE:6B:E3:CE:3A:D1:26:01:F3:BD:8F:F5:37:33:F5:2D:17:FB
            X509v3 Authority Key Identifier:
                keyid:2B:4E:D5:7C:FB:A9:25:5B:84:24:7A:7F:FB:F2:FD:92:3A:36:5F:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:8f:8b:67:60:2a:8b:56:30:1a:60:22:21:10:d4:68:91:07:
         a7:93:d0:a8:b7:1f:be:18:75:6e:d2:7d:db:fd:ae:aa:97:99:
         3d:da:d0:8e:fb:63:b3:ee:77:e9:58:79:e3:2d:e8:f6:e7:e5:
         80:41:e3:b3:31:6d:19:25:e3:6f:91:f7:d0:a2:3e:cc:c3:a1:
         03:ba:c2:f4:7e:96:41:84:ba:7a:30:7b:ea:c0:dd:eb:71:2c:
         89:5a:36:61:54:a9:cc:76:81:ed:8c:19:8c:0d:a8:42:ff:b0:
         c1:ab:06:0e:bc:5c:ed:62:46:9f:8c:51:a5:78:9c:2f:4c:01:
         9e:90:c9:8e:5f:23:64:5e:20:f3:7b:39:23:23:fa:93:1a:d2:
         6e:ac:58:f0:11:91:28:38:b8:4a:a5:7f:b7:01:41:8d:1b:49:
         af:fe:55:1c:f0:ca:91:79:6d:de:c3:53:82:b5:dd:b8:5c:ab:
         b6:01:db:36:ec:39:b2:ad:d3:4d:14:03:69:c5:cc:65:14:5a:
         04:1a:f8:e2:72:67:c1:bd:8b:b8:c8:aa:bb:e2:43:92:c3:dc:
         31:07:e0:2f:e3:21:da:42:ff:b4:08:32:1d:73:c7:5b:a1:b1:
         34:d6:ce:70:22:99:85:e9:3d:7c:5c:6c:e6:f0:b9:48:c9:b4:
         09:4a:cd:7c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 17 18:35:35 2026 by rpki-client