Error: rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/0/DCF2B01B127E8147448A26DC2DD6E136430B7F01.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
Error: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCF2B01B127E8147448A26DC2DD6E136430B7F01.cer: certificate revoked on Sat 20 Jun 2026 19:48:26 +0000

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/0/DCF2B01B127E8147448A26DC2DD6E136430B7F01.mft
File:                     DCF2B01B127E8147448A26DC2DD6E136430B7F01.mft (raw, json)
Hash identifier:          MEBuWlwsd3iM4Lz5Bl43BZEDAyhh0w7MpbKHzctAYy8=
Subject key identifier:   BF:ED:51:8A:F2:92:85:1C:8A:99:01:EB:DA:B4:C5:D0:49:BB:21:DF
Authority key identifier: DC:F2:B0:1B:12:7E:81:47:44:8A:26:DC:2D:D6:E1:36:43:0B:7F:01
Certificate issuer:       /CN=DCF2B01B127E8147448A26DC2DD6E136430B7F01
Certificate serial:       18275099D3B395F053CE89FDC6836CB333876309
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCF2B01B127E8147448A26DC2DD6E136430B7F01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/0/DCF2B01B127E8147448A26DC2DD6E136430B7F01.mft
Manifest number:          5E
Signing time:             Mon 15 Jun 2026 01:13:21 +0000
Manifest this update:     Mon 15 Jun 2026 01:08:21 +0000
Manifest next update:     Tue 16 Jun 2026 02:01:21 +0000
Files and hashes:         1: 3133382e3230342e3232342e302f32322d3234203d3e20323633393135.roa (hash: ZMK2wKJG3iMTnMF0woD9nT2KNt0wPretaJsSgZWVbbA=)
                          2: 323830343a323761383a383030303a3a2f33342d3334203d3e20323633393135.roa (hash: FbBdBljTCFb4GFjJmXe/b40n0/0clyMJlREVzTZoUZc=)
                          3: 323830343a323761383a3a2f33332d3333203d3e20323633393135.roa (hash: I9krsTJt4gZlJyPaoAKwMdNrIOkuvo91j4/6viLB9Ng=)
                          4: DCF2B01B127E8147448A26DC2DD6E136430B7F01.crl (hash: PEGGI6QE1cCQfE/+uwO6LTZs5nKV3gpyBEq4ubGf6yA=)
                          5: 323830343a323761383a383030303a3a2f33332d3333203d3e20323633393135.roa (hash: lHfjLEuYejLN5hB1qUqcT6MaVnM7ZIf1zVsCWdZ6VCI=)
                          6: 323830343a323761383a3a2f33322d3332203d3e20323633393135.roa (hash: KoKZ0ScYBw1rjqvI3C/g35o+oNpcAt3vMA7SH1CL+cg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:27:50:99:d3:b3:95:f0:53:ce:89:fd:c6:83:6c:b3:33:87:63:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCF2B01B127E8147448A26DC2DD6E136430B7F01
        Validity
            Not Before: Jun 15 01:08:21 2026 GMT
            Not After : Jun 16 02:01:21 2026 GMT
        Subject: CN=BFED518AF292851C8A9901EBDAB4C5D049BB21DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:33:84:a5:2f:c7:ba:d6:c6:8c:37:57:2e:ad:
                    6c:5a:83:bb:b2:23:50:24:f4:ec:07:96:06:4c:55:
                    5f:4a:3a:be:2c:c2:98:4b:b3:10:44:b8:a2:47:fe:
                    5a:86:42:ff:c5:83:48:50:50:a7:ac:9f:f6:b0:bc:
                    cb:03:51:45:97:21:9e:ec:82:b0:4b:ea:8f:ff:c0:
                    88:ec:29:21:70:b5:34:e2:1a:73:42:a6:b3:c7:c5:
                    63:ba:be:6a:d3:71:a7:8e:ab:c9:62:d3:44:29:a7:
                    1c:b2:a6:49:f3:08:65:a3:e9:47:42:fb:67:f9:40:
                    1d:25:77:b9:a5:21:a9:34:b1:5d:22:c9:43:e1:63:
                    23:11:03:a8:d3:b9:4e:05:8c:48:b9:5c:91:68:da:
                    f4:5d:a3:7a:46:a3:6a:7f:86:35:bc:85:b0:9b:84:
                    c1:a4:4b:f8:75:ad:ea:9e:1b:8a:79:88:11:3c:ce:
                    ac:f4:20:88:6e:30:ff:59:8c:9c:49:34:b7:9a:31:
                    7a:28:fe:99:50:56:a7:9d:7f:7c:f8:e6:60:05:92:
                    e3:41:04:53:db:73:37:ed:97:4a:a1:51:a6:86:b1:
                    bc:69:bc:c2:40:eb:62:9d:6b:f4:8c:a2:a3:71:4e:
                    1d:28:45:83:3b:5e:33:31:fe:71:d2:d0:73:6d:ab:
                    07:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:ED:51:8A:F2:92:85:1C:8A:99:01:EB:DA:B4:C5:D0:49:BB:21:DF
            X509v3 Authority Key Identifier:
                keyid:DC:F2:B0:1B:12:7E:81:47:44:8A:26:DC:2D:D6:E1:36:43:0B:7F:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/0/DCF2B01B127E8147448A26DC2DD6E136430B7F01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCF2B01B127E8147448A26DC2DD6E136430B7F01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/0/DCF2B01B127E8147448A26DC2DD6E136430B7F01.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:9a:ae:be:b3:e0:46:45:0a:ae:6a:7a:49:bc:ff:3d:c2:ac:
         60:ba:e8:de:47:ff:1b:01:21:5c:9b:ff:e8:21:91:4d:c5:44:
         20:76:f2:6e:e2:77:79:00:95:dd:d3:59:a1:4e:86:b4:6a:e7:
         90:7e:21:40:4d:ac:c5:e0:6f:b5:12:c7:65:1e:92:97:7e:3a:
         35:3a:70:64:e7:4f:df:46:8e:76:0a:9c:83:22:27:a6:39:de:
         f7:e3:f7:5e:62:88:e5:47:13:b8:c2:fe:f8:c1:5d:b0:c8:d2:
         09:71:63:ab:cc:4e:e8:7c:a6:85:6d:aa:24:95:36:7e:69:b2:
         e3:01:5a:ff:be:c8:6f:cc:6d:63:48:d3:24:cc:12:eb:0a:dc:
         38:e2:9e:ee:9c:b5:1a:f2:18:fc:b0:17:6b:19:48:d3:9a:2b:
         88:11:69:51:02:04:ff:9f:4e:13:82:7a:4c:76:a6:30:5e:22:
         f5:59:45:14:53:53:f7:66:bc:e6:c4:0a:90:67:e6:48:42:82:
         19:f0:b1:59:2d:71:68:24:ee:2f:89:22:57:aa:e6:4e:2f:03:
         2b:69:2f:d8:b4:6f:ec:8e:33:f4:c7:61:d2:ed:6f:15:aa:e6:
         70:2f:96:90:b6:5c:f0:31:2f:41:a0:e0:f3:e5:00:2a:98:c6:
         5c:89:7f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 00:19:39 2026 by rpki-client