Error: rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
Error: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E533674BA5C26CC97186C54907220754478B1596.cer: certificate revoked on Fri 31 Jul 2026 08:48:27 +0000

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.mft
File:                     E533674BA5C26CC97186C54907220754478B1596.mft (raw, json)
Hash identifier:          UshEjfGUkbx0XWXlKt4yTMa7g199a4zve6dwd7LLlwM=
Subject key identifier:   16:2D:72:5D:26:8F:37:F5:88:49:8F:31:5B:69:A9:20:31:89:9B:30
Authority key identifier: E5:33:67:4B:A5:C2:6C:C9:71:86:C5:49:07:22:07:54:47:8B:15:96
Certificate issuer:       /CN=E533674BA5C26CC97186C54907220754478B1596
Certificate serial:       58C23F4757F09D8F717F306338716B168BC48CB7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E533674BA5C26CC97186C54907220754478B1596.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.mft
Manifest number:          03CF
Signing time:             Sat 25 Jul 2026 12:22:52 +0000
Manifest this update:     Sat 25 Jul 2026 12:17:52 +0000
Manifest next update:     Sun 26 Jul 2026 15:21:52 +0000
Files and hashes:         1: 34352e3232392e32312e302f32342d3234203d3e20323637303931.roa (hash: SiRfqEhTD49gLZqmp5SQ+CpMkiLP8iqqn5NmZgx3opM=)
                          2: 34352e3232392e32322e302f32342d3234203d3e20323637303931.roa (hash: OufUszNAwdTkYGGkoMrVbhlvse4wLzgSyBoffAkDg18=)
                          3: 323830343a343830303a3a2f33322d3332203d3e20323637303931.roa (hash: H08oRdg/Xis3Iz+yNRSpVlY3HcrIOICN4ILTYIs9eMg=)
                          4: E533674BA5C26CC97186C54907220754478B1596.crl (hash: AYNqLjp7PoTz4X1B+4vhF5ceF4U9UYkdbv9iZ3L5D9g=)
                          5: 34352e3232392e32302e302f32342d3234203d3e20323637303931.roa (hash: ExicLZzhWNSEErEIxBVxnE/gWZBoOAYCrasyXoRxJto=)
                          6: 34352e3232392e32332e302f32342d3234203d3e20323637303931.roa (hash: 7C9doz7mvSkmqq68evd0eckK0E1swBXiSLfjduxgpR4=)
                          7: 34352e3232392e32302e302f32322d3232203d3e20323637303931.roa (hash: mYYkx7CDdNQO2yv//6LVteQ0/ztzpQrDAMQ+Q0pc9yU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c2:3f:47:57:f0:9d:8f:71:7f:30:63:38:71:6b:16:8b:c4:8c:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E533674BA5C26CC97186C54907220754478B1596
        Validity
            Not Before: Jul 25 12:17:52 2026 GMT
            Not After : Jul 26 15:21:52 2026 GMT
        Subject: CN=162D725D268F37F588498F315B69A92031899B30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d5:12:78:ba:03:8c:ff:b0:0e:10:12:49:c2:
                    cf:d9:1b:88:40:b1:27:3a:21:b7:dc:45:dc:bc:be:
                    ae:02:6a:b7:91:be:95:f7:fa:8c:51:9d:93:e7:2c:
                    58:3c:c3:9b:ed:46:9a:dc:d9:11:6a:ab:85:f0:da:
                    2c:b0:4d:2a:39:61:6e:0f:3e:d0:d1:f0:b3:fa:65:
                    cb:f9:e7:0f:af:07:fc:78:59:fe:aa:f6:1c:59:bc:
                    0a:2b:51:c6:90:64:6d:7a:eb:7b:85:83:06:b1:8e:
                    41:09:e2:f5:99:cb:58:7d:d2:7f:cc:a5:d0:94:11:
                    e3:86:48:13:a5:47:b7:be:49:28:f4:94:d5:23:53:
                    0e:53:7b:4d:e5:94:b8:f7:83:79:08:dd:63:05:84:
                    12:e5:db:86:b7:7e:88:7b:dc:65:bf:bd:a9:1a:69:
                    a1:96:35:68:52:cf:be:cc:a2:84:57:52:cb:0b:aa:
                    f4:ab:67:40:0c:91:ea:19:28:19:7c:df:85:87:50:
                    48:0e:2a:8e:69:d0:a3:d4:aa:60:ec:2e:8a:c9:f9:
                    c5:50:15:37:0f:b7:f1:2d:6b:b6:54:73:da:9c:79:
                    70:ee:a0:ee:76:e9:9c:ce:d1:ee:95:c3:0d:06:bd:
                    01:e3:bb:0f:2d:37:41:4e:d9:e6:55:a5:16:5a:f9:
                    9a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2D:72:5D:26:8F:37:F5:88:49:8F:31:5B:69:A9:20:31:89:9B:30
            X509v3 Authority Key Identifier:
                keyid:E5:33:67:4B:A5:C2:6C:C9:71:86:C5:49:07:22:07:54:47:8B:15:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E533674BA5C26CC97186C54907220754478B1596.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:f1:85:57:a1:19:81:65:41:aa:69:a1:b5:c1:e4:2e:17:55:
         7f:98:80:14:65:72:7d:40:1a:c4:4b:d5:84:7c:9e:51:6f:ab:
         09:c3:93:7b:db:21:f9:3a:15:2b:be:5b:20:2e:83:d1:ef:b5:
         48:ad:3b:0b:3b:37:76:59:95:6e:fc:b6:c6:80:ef:00:0e:59:
         c2:1d:ce:44:0b:59:d5:a6:4b:b0:b5:58:d5:63:08:48:de:d5:
         31:e3:38:bd:86:82:18:fa:68:01:2b:76:f1:5e:9e:67:55:1b:
         19:68:a0:cd:59:15:ca:92:de:c1:68:f4:1d:28:7f:61:84:34:
         6f:3b:2f:a8:90:21:58:c0:b8:66:1e:ba:83:86:20:dd:91:9d:
         03:ff:23:88:fe:b8:b7:9f:1c:ec:4d:6c:59:a1:2b:db:95:c8:
         13:5c:1a:83:80:df:48:57:c0:24:cd:aa:1f:7b:d9:d5:cb:96:
         91:3f:6b:fa:b8:52:8b:d4:a7:93:d4:00:b5:78:89:54:06:04:
         69:6b:ce:77:ac:f2:92:9b:22:5e:12:ee:68:36:6c:00:01:7d:
         cf:e3:5d:ca:13:7d:e4:0d:6e:12:88:40:b6:77:43:e7:4e:d7:
         11:8e:ca:a1:23:ce:00:1e:58:ed:a1:f2:03:27:84:72:84:6b:
         25:86:ca:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:18:06 2026 by rpki-client