Error: rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/605FEF9057460FEC15E9DF06B37BF20541BC477E.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/605FEF9057460FEC15E9DF06B37BF20541BC477E.mft
File:                     605FEF9057460FEC15E9DF06B37BF20541BC477E.mft (raw, json)
Hash identifier:          gcwzr/FCnlHc+5bfvoZVQQQt75M/6hhEyYE7GO+XO/E=
Subject key identifier:   1B:D4:29:DE:E7:95:78:1D:8F:31:60:25:C4:7A:9E:33:F2:F4:85:0D
Authority key identifier: 60:5F:EF:90:57:46:0F:EC:15:E9:DF:06:B3:7B:F2:05:41:BC:47:7E
Certificate issuer:       /CN=605FEF9057460FEC15E9DF06B37BF20541BC477E
Certificate serial:       5B75A7DE0F42B1402068F56E1AB52ED253CAED37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605FEF9057460FEC15E9DF06B37BF20541BC477E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/605FEF9057460FEC15E9DF06B37BF20541BC477E.mft
Manifest number:          034E
Signing time:             Mon 26 Oct 2026 12:14:20 +0000
Manifest this update:     Mon 26 Oct 2026 12:09:20 +0000
Manifest next update:     Tue 27 Oct 2026 15:47:20 +0000
Files and hashes:         1: 3137392e3130392e3131322e302f32342d3234203d3e20323730373431.roa (hash: d+k6+kAu/XN++g8z7dRSURfRzRr8iYBavYYypx7KGG0=)
                          2: 323830343a373061633a3a2f33322d3332203d3e20323730373431.roa (hash: IOtd2WzUxtph5bVJzHI9021JVzf1hXVLbFb1AmLNHHE=)
                          3: 3137392e3130392e3131342e302f32332d3233203d3e20323730373431.roa (hash: AgBo+suxClC1kLvAlHkD7lu17tuiuyJVHCrxXTtBY5o=)
                          4: 323830343a373061633a3a2f33342d3334203d3e20323730373431.roa (hash: 2ImJ/DnJ7mnGT6YbQHmDTYzgwqgooSdSQaWlejC2ZY0=)
                          5: 323830343a373061633a343030303a3a2f33342d3334203d3e20323730373431.roa (hash: MUASXg01Pp2Hd44wmMTYZibeR3B+rObQmmPsR4494Gg=)
                          6: 3137392e3130392e3131332e302f32342d3234203d3e20323730373431.roa (hash: yXbs37vDsmLSb3QSeytCt9J750Cqj9x28HSCkuUX7IQ=)
                          7: 3137392e3130392e3131322e302f32332d3233203d3e20323730373431.roa (hash: YyNwLYFhWmCNuKz1GEipm8eoy1KTPkVE7sS8Hm+3eqI=)
                          8: 3137392e3130392e3131352e302f32342d3234203d3e20323730373431.roa (hash: ddgIXVGqjDISYIUWcPfbH1kjRYjWqYTQ09plyFenb/I=)
                          9: 323830343a373061633a383030303a3a2f33342d3334203d3e20323730373431.roa (hash: t7KQCOrsv5/mj2JYbKdgXH8kQkW4SfC9fojXLOLwjew=)
                          10: 605FEF9057460FEC15E9DF06B37BF20541BC477E.crl (hash: i4pxmCVHGypwAGg7lpiGxOCViMOu9J93c1/KYNUXzoY=)
                          11: 3137392e3130392e3131342e302f32342d3234203d3e20323730373431.roa (hash: Y+/qjbT/9cjy6jVJvK5ntsUdXmac56r6C//7Kxq/j1Y=)
                          12: 3137392e3130392e3131322e302f32322d3232203d3e20323730373431.roa (hash: voIQZHhRSrd3iWE2nZ6cLFto3KcMp5aS+j4zV1+NDQw=)
                          13: 323830343a373061633a383030303a3a2f33332d3333203d3e20323730373431.roa (hash: ATKMpa/hne9lVOuE2rwUVCQf6i3aA5d/sBmmjicFieI=)
                          14: 323830343a373061633a633030303a3a2f33342d3334203d3e20323730373431.roa (hash: DD+p1+OtWcFxRM+iNqHsqnbPOR4DF1wfIAJw2QkBJnI=)
                          15: 323830343a373061633a3a2f33332d3333203d3e20323730373431.roa (hash: oMSSpSSlVrvIDfhZ+q3MtI2ZiRYn5aYVdaNJPPn/hH4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/605FEF9057460FEC15E9DF06B37BF20541BC477E.crl
                          rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/605FEF9057460FEC15E9DF06B37BF20541BC477E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605FEF9057460FEC15E9DF06B37BF20541BC477E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Oct 2026 15:47:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:75:a7:de:0f:42:b1:40:20:68:f5:6e:1a:b5:2e:d2:53:ca:ed:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605FEF9057460FEC15E9DF06B37BF20541BC477E
        Validity
            Not Before: Oct 26 12:09:20 2026 GMT
            Not After : Oct 27 15:47:20 2026 GMT
        Subject: CN=1BD429DEE795781D8F316025C47A9E33F2F4850D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4f:73:6d:5f:27:bd:7f:69:b7:29:ab:81:a0:
                    45:53:99:b2:52:6e:e1:cb:24:5c:69:cf:de:e7:27:
                    45:e6:37:74:0c:eb:89:7a:4c:e2:fc:e0:7e:d5:49:
                    e8:84:32:c4:ca:ce:31:d8:c9:33:0d:72:46:03:f4:
                    7f:12:cb:2a:a9:60:d0:f5:ee:c6:56:d3:48:ee:b3:
                    25:07:6d:94:cb:11:1c:6e:d2:f5:32:05:f5:7d:c0:
                    41:3a:99:28:19:23:d1:7a:22:52:d3:b2:ca:f9:32:
                    2e:d9:84:1c:7c:c1:bf:31:f4:9b:c4:f4:c1:5a:e6:
                    93:b5:f5:f2:4b:da:7f:19:e8:3f:bb:e3:8d:58:38:
                    63:1e:31:dc:c5:14:fb:ad:2a:f0:3e:52:b0:1d:d2:
                    9a:0d:c4:e5:8b:ff:04:8a:27:c2:b3:12:00:15:31:
                    cc:69:f1:2c:f2:52:ab:92:3a:57:b0:86:90:60:2a:
                    ba:f3:5a:bf:c0:f5:e5:ef:69:25:29:a2:26:d9:27:
                    96:a7:a9:a3:a2:79:f4:1d:4f:c0:b9:92:2e:57:32:
                    75:bb:e0:12:77:5b:15:eb:1e:17:67:23:8d:6a:7f:
                    31:d3:50:1d:f1:e7:a5:24:94:1d:e8:9e:4f:6a:cb:
                    79:d1:da:6d:57:25:19:5a:6d:ed:4e:64:3d:7e:d8:
                    c0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D4:29:DE:E7:95:78:1D:8F:31:60:25:C4:7A:9E:33:F2:F4:85:0D
            X509v3 Authority Key Identifier:
                keyid:60:5F:EF:90:57:46:0F:EC:15:E9:DF:06:B3:7B:F2:05:41:BC:47:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/605FEF9057460FEC15E9DF06B37BF20541BC477E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605FEF9057460FEC15E9DF06B37BF20541BC477E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/605FEF9057460FEC15E9DF06B37BF20541BC477E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:15:8f:0e:68:f9:06:87:da:bd:ba:05:e8:20:30:b0:80:9a:
         fa:1a:0b:4b:e5:c5:df:3d:47:e8:64:16:f0:7d:be:d4:44:00:
         a8:c5:80:4c:d3:d7:0b:7b:05:1a:41:d0:f6:08:c6:dc:45:b9:
         3b:2a:ee:50:0f:29:71:09:33:72:28:15:fc:a8:6b:36:46:51:
         aa:51:b0:ef:2e:99:d8:5e:83:32:2c:57:b6:23:14:03:0c:9a:
         34:ca:11:f9:bf:ae:ae:c1:11:88:bf:07:e0:4a:65:f2:d2:62:
         c3:f2:89:c0:e5:53:06:34:9c:3e:13:1e:92:c4:0a:69:e5:65:
         65:b0:5b:31:70:48:da:d0:f3:51:3b:33:2a:82:39:e8:76:65:
         cf:5b:4f:f9:90:e3:c5:a6:73:24:b8:08:a3:43:99:c0:88:c7:
         6b:ff:89:13:7b:a5:c7:07:e0:9c:76:7d:f5:0f:50:37:b0:9a:
         a5:8b:b8:84:85:36:0c:e0:cd:71:bb:b3:ea:63:31:0b:f2:d5:
         7c:62:85:5f:fb:75:4d:9c:76:79:8d:f5:1e:a2:0d:9e:e4:29:
         15:65:78:f5:b0:35:02:1c:db:02:4b:d0:a6:65:15:e3:c9:4a:
         f9:cb:d2:d6:50:1e:1d:fb:a3:bc:ae:ab:a9:07:37:4e:4f:d0:
         2d:22:79:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:37:49 2026 by rpki-client