Error: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D43F36140A4C38AD745FB2C264948998A60F421.cer: certificate revoked on Mon 01 Jun 2026 07:48:21 +0000

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/0/0D43F36140A4C38AD745FB2C264948998A60F421.mft
File:                     0D43F36140A4C38AD745FB2C264948998A60F421.mft (raw, json)
Hash identifier:          kt56DoCdkP5lNiG7CYuWD57PGwc1sIxtyo6n4X3Nhfc=
Subject key identifier:   24:A0:2C:42:AB:B7:77:7E:73:73:04:86:67:C6:1F:3D:2F:84:45:06
Authority key identifier: 0D:43:F3:61:40:A4:C3:8A:D7:45:FB:2C:26:49:48:99:8A:60:F4:21
Certificate issuer:       /CN=0D43F36140A4C38AD745FB2C264948998A60F421
Certificate serial:       1F125E76D1AACA5F4C3E8AF232E263F07C907846
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D43F36140A4C38AD745FB2C264948998A60F421.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/0/0D43F36140A4C38AD745FB2C264948998A60F421.mft
Manifest number:          0287
Signing time:             Tue 26 May 2026 10:06:16 +0000
Manifest this update:     Tue 26 May 2026 10:01:16 +0000
Manifest next update:     Wed 27 May 2026 13:21:16 +0000
Files and hashes:         1: 3137372e3232332e3134302e302f32342d3234203d3e20323731323039.roa (hash: 2YRnd0r062JgYyjZk8mUCt3IyzDuoyYAuMrDaVfc99M=)
                          2: 323830343a373766303a3a2f33322d3332203d3e20323731323039.roa (hash: FM03o58IY4Y7NdOL9l+nG0hklHiWsSnTQGuf9wL3Rec=)
                          3: 3137372e3232332e3134312e302f32342d3234203d3e20323731323039.roa (hash: xPv3LaPU8ud+Aqr52isI99BM1fzlU9KyJdQcI4ddrxE=)
                          4: 0D43F36140A4C38AD745FB2C264948998A60F421.crl (hash: P757CoX9oZ3g+q+exU1O7FdDhqtINaAKIT7rV6LaAMI=)
                          5: 3137372e3232332e3134332e302f32342d3234203d3e20323731323039.roa (hash: je+aKDG6q792n4eMZK1bl0n93IPMrFZT95cCP2qgswg=)
                          6: 3137372e3232332e3134322e302f32342d3234203d3e20323731323039.roa (hash: Lj8FULJmuClZAyo8OVa6C19J5qy6em+ACO+EEsCfxZ0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:12:5e:76:d1:aa:ca:5f:4c:3e:8a:f2:32:e2:63:f0:7c:90:78:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D43F36140A4C38AD745FB2C264948998A60F421
        Validity
            Not Before: May 26 10:01:16 2026 GMT
            Not After : May 27 13:21:16 2026 GMT
        Subject: CN=24A02C42ABB7777E7373048667C61F3D2F844506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d9:5e:0c:d3:2d:a3:1f:f0:66:16:af:55:c0:
                    c4:2a:4f:c7:7d:34:c5:ea:a2:ac:cb:f1:ba:fe:08:
                    85:8f:d6:0d:65:1b:c0:fc:03:55:15:91:f1:53:62:
                    66:40:e7:18:2e:a7:fd:83:72:3b:0d:29:b9:21:c0:
                    4f:cd:aa:2d:9d:c3:b5:27:e2:32:98:d3:82:8f:10:
                    92:60:6e:89:b5:86:af:23:c1:ab:4a:97:22:e1:b4:
                    26:db:1c:a1:27:23:63:a6:05:7e:75:4c:33:8c:d1:
                    91:26:a8:d3:eb:f2:87:65:c7:e8:47:13:49:8b:4a:
                    fb:a3:a1:59:2f:89:00:37:82:d3:ed:a6:3f:8e:4b:
                    08:2c:fa:62:b1:fd:10:77:ae:d6:40:ac:34:0b:3d:
                    31:b5:b7:f1:cf:7a:e0:7e:cd:a5:8c:f4:0b:84:88:
                    3c:87:bb:50:92:29:e0:49:1d:0a:4d:ee:03:dc:f0:
                    39:9e:50:90:bd:d1:3a:f5:43:6c:ed:c8:6a:b2:39:
                    88:7a:20:2b:d9:38:b2:11:e0:9c:2d:59:3f:5b:06:
                    65:54:f1:62:ea:58:cf:d5:ba:01:64:32:cb:7f:06:
                    95:6d:6a:e8:34:d6:77:63:a7:85:a8:fa:2f:d0:37:
                    cc:e4:24:88:b4:23:27:5b:07:65:2a:4b:02:fa:3b:
                    98:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A0:2C:42:AB:B7:77:7E:73:73:04:86:67:C6:1F:3D:2F:84:45:06
            X509v3 Authority Key Identifier:
                keyid:0D:43:F3:61:40:A4:C3:8A:D7:45:FB:2C:26:49:48:99:8A:60:F4:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/0/0D43F36140A4C38AD745FB2C264948998A60F421.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D43F36140A4C38AD745FB2C264948998A60F421.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/0/0D43F36140A4C38AD745FB2C264948998A60F421.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:28:a1:a2:f5:ef:5f:a7:7e:63:3e:27:4b:3d:83:5e:70:fb:
         1d:fd:af:2e:f4:fc:96:46:2f:67:02:3a:88:53:4b:e3:cf:80:
         f4:3c:a7:7d:7a:e1:94:d6:84:17:c2:61:8d:67:93:93:c6:5d:
         7a:f6:9e:1f:84:b9:85:c0:05:93:56:28:d9:87:99:5e:c5:43:
         3a:79:82:64:c7:ed:87:4a:46:b3:1c:86:c6:90:57:5a:1f:e8:
         cf:eb:a2:81:e1:35:ef:aa:3f:39:af:2c:61:58:21:6f:90:4c:
         f3:71:75:45:2f:c5:b7:5a:39:74:6e:e1:f0:23:bf:56:d9:cb:
         d3:d1:53:0c:16:3f:ae:69:99:40:d6:29:61:9f:b6:4f:d7:66:
         82:39:b2:00:1b:e7:4d:1b:57:27:83:fb:ba:54:11:68:1a:be:
         23:7c:96:30:9f:2a:04:42:f7:3d:c0:c7:8d:bd:d4:cc:c3:cd:
         30:17:78:84:cd:4a:47:bd:d3:1c:4a:57:ca:18:12:18:8b:39:
         5f:77:bc:22:4d:b8:fd:07:c6:1d:c8:e5:4c:8d:81:2b:80:ef:
         54:a9:b1:44:de:b6:f5:da:c0:30:d3:4d:03:6a:b3:38:52:fa:
         9c:19:fd:09:01:5b:b7:f2:80:35:1a:bb:88:83:19:0b:0b:ec:
         dc:3a:f3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:21:51 2026 by rpki-client