Error: rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.mft
File:                     D6339C86DE0C65F4299E0B925EDD88EAB886F72D.mft (raw, json)
Hash identifier:          +6JBhlWOJeXy7q9j0SNYyLDQdoxzfx7wEWxInP8iuBQ=
Subject key identifier:   66:6C:58:A6:81:85:37:D0:7E:B6:F8:CC:E8:CE:2B:81:1D:9E:EC:49
Authority key identifier: D6:33:9C:86:DE:0C:65:F4:29:9E:0B:92:5E:DD:88:EA:B8:86:F7:2D
Certificate issuer:       /CN=D6339C86DE0C65F4299E0B925EDD88EAB886F72D
Certificate serial:       61CBDCF00292C1C264BCC2272D806205A5C2675F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.mft
Manifest number:          04DC
Signing time:             Wed 28 Oct 2026 15:45:17 +0000
Manifest this update:     Wed 28 Oct 2026 15:40:17 +0000
Manifest next update:     Thu 29 Oct 2026 17:38:17 +0000
Files and hashes:         1: 3137372e3132342e32312e302f32342d3234203d3e203532363132.roa (hash: IgWam9gFjQk59l0wl363sX+2WmajH/AjPLKVKXJGgqs=)
                          2: 3137372e3132342e32302e302f32322d3232203d3e203532363132.roa (hash: mxAPDXG7E3L1sfighc5nxh8cEDPiZVvJ39J9C/rgViM=)
                          3: D6339C86DE0C65F4299E0B925EDD88EAB886F72D.crl (hash: P9/3akHeLd2zW/1UGiW7UMB6KnKlbkIIu2XFbbN+2JE=)
                          4: 3137372e3132342e32322e302f32342d3234203d3e203532363132.roa (hash: kPepkfX92SsHB2LO/dXF8r35+O+WfTNE+cQ9z5tHxvM=)
                          5: 3137372e3132342e32332e302f32342d3234203d3e203532363132.roa (hash: DnV9ktyi+mMh6Qkdm2wHNfeAbuHm03E1AsiML22DIsU=)
                          6: 323830343a323266633a3a2f33322d313238203d3e203532363132.roa (hash: Abzz5MjZDNjsOKylknymm1lROFeNR+fLAyXVbvfnd1k=)
                          7: 3137372e3132342e32302e302f32342d3234203d3e203532363132.roa (hash: syjiQ1Oi2gBn8KFjx7aAbyZrBkzd4oua6u6ieBXpldM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.crl
                          rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 17:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:cb:dc:f0:02:92:c1:c2:64:bc:c2:27:2d:80:62:05:a5:c2:67:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6339C86DE0C65F4299E0B925EDD88EAB886F72D
        Validity
            Not Before: Oct 28 15:40:17 2026 GMT
            Not After : Oct 29 17:38:17 2026 GMT
        Subject: CN=666C58A6818537D07EB6F8CCE8CE2B811D9EEC49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:dc:77:f2:b1:61:42:39:c8:77:2e:02:b2:64:
                    02:3f:0f:a2:c7:a9:8e:69:88:64:24:95:27:fd:33:
                    38:9c:85:03:3d:1a:93:dd:b0:94:95:8b:c9:a0:b6:
                    63:83:e1:05:0d:c5:0c:5c:76:83:a8:08:aa:e9:bf:
                    c0:f6:a7:75:5c:38:8b:9c:b7:9e:99:64:af:e7:dc:
                    bc:40:11:18:d9:b8:40:63:80:8b:8c:a1:0c:d1:a5:
                    6e:16:49:56:72:eb:a5:b7:6e:74:0d:62:64:7d:3b:
                    e0:8d:9f:0b:ac:2d:91:3e:59:4f:c4:b2:26:d5:4a:
                    11:e7:8d:34:59:2a:11:80:4c:56:4f:25:a2:12:d2:
                    b1:72:54:43:0f:bd:3d:13:15:de:bb:90:b9:14:96:
                    2c:fd:60:09:fc:85:f8:da:f9:13:8d:69:8c:ac:84:
                    e9:44:ca:d7:4c:e0:c4:55:cb:70:d9:7e:6e:0a:f9:
                    05:4e:41:fd:f6:33:8e:88:75:b2:3d:66:6c:96:53:
                    8e:c4:8d:44:57:e2:d6:90:0e:db:78:bc:52:ba:f9:
                    83:eb:f2:ff:e6:82:34:a1:e2:7f:fb:49:00:47:57:
                    72:72:15:f9:fc:e4:51:83:19:17:47:08:91:14:58:
                    82:e4:f3:42:63:32:e9:82:32:d0:84:e4:b6:b2:91:
                    63:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6C:58:A6:81:85:37:D0:7E:B6:F8:CC:E8:CE:2B:81:1D:9E:EC:49
            X509v3 Authority Key Identifier:
                keyid:D6:33:9C:86:DE:0C:65:F4:29:9E:0B:92:5E:DD:88:EA:B8:86:F7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:2a:9e:fd:4e:96:ac:60:68:1e:f8:58:84:e4:58:5f:ba:49:
         7d:54:0d:14:bd:61:4f:6e:2e:46:43:a5:be:4f:ab:1a:e8:14:
         9c:e2:7c:4c:ec:7f:37:da:51:26:9f:5c:ce:a1:83:88:29:c1:
         d7:0a:28:79:ca:cb:8b:f0:ca:f7:ad:39:d0:2e:86:ae:03:ac:
         ad:84:4c:ee:8d:48:8a:ce:05:c3:02:46:45:07:09:f8:51:e4:
         54:c0:7a:a0:7b:b3:d8:3e:8c:5b:48:59:9d:35:e8:15:cc:80:
         78:d5:30:b3:bc:e8:94:b8:2a:af:bc:14:f1:33:85:a3:c6:d6:
         f3:1a:40:1f:a5:5e:49:b1:1e:7c:f6:29:66:67:a0:d6:c8:bf:
         fb:cb:32:b0:82:94:7c:31:fd:2a:56:6a:56:4c:2a:36:6f:bf:
         f7:bb:92:60:81:38:5c:db:39:69:cc:dc:db:e0:d5:cf:5e:d3:
         40:d4:f1:ec:ad:a3:d5:27:d1:39:57:1b:f2:1d:d5:a5:d7:d1:
         7c:28:81:b6:41:7a:e9:50:56:d2:93:2f:ee:ba:5b:c6:7d:13:
         2f:09:f4:5b:3f:f0:13:6d:a7:31:0e:ee:26:b9:c3:2c:19:22:
         e7:da:00:bf:8e:92:02:41:6e:64:ef:a0:b2:ac:df:ba:92:4f:
         8c:51:38:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 01:48:52 2026 by rpki-client