Error: rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
Error: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.cer: certificate revoked on Wed 19 Aug 2026 11:03:53 +0000

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.mft
File:                     72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.mft (raw, json)
Hash identifier:          0KchlfQ1JH8cTVX0K9RXKkeaBJ1lNmrzdQxCOCd8kmI=
Subject key identifier:   CF:B5:4D:2C:0D:6A:4D:E3:68:BF:87:97:71:9B:65:75:A5:74:17:BE
Authority key identifier: 72:F6:94:67:67:3B:0B:B3:A1:3E:C6:51:F1:D0:BF:66:BA:E3:1F:D8
Certificate issuer:       /CN=72F69467673B0BB3A13EC651F1D0BF66BAE31FD8
Certificate serial:       56AE00D6679E103054188BA67D863B0197982295
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.mft
Manifest number:          047F
Signing time:             Tue 18 Aug 2026 20:56:55 +0000
Manifest this update:     Tue 18 Aug 2026 20:51:55 +0000
Manifest next update:     Wed 19 Aug 2026 23:37:55 +0000
Files and hashes:         1: 323830343a336562303a3a2f33322d3438203d3e20323636363135.roa (hash: 9MEgIboxRmSKySk5TYZIBJPRuQrZtuCfIlSZcuRTRlg=)
                          2: 72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.crl (hash: rh3YOsxdrBIsBWjJshMg/PYr4QUykGZn+Gbo/1okFN4=)
                          3: 34352e372e3232342e302f32322d3234203d3e20323636363135.roa (hash: OpTTdPmL3E3wiXza3V9sw1tlqKWmtHj7mgfaeeoRT7A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ae:00:d6:67:9e:10:30:54:18:8b:a6:7d:86:3b:01:97:98:22:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72F69467673B0BB3A13EC651F1D0BF66BAE31FD8
        Validity
            Not Before: Aug 18 20:51:55 2026 GMT
            Not After : Aug 19 23:37:55 2026 GMT
        Subject: CN=CFB54D2C0D6A4DE368BF8797719B6575A57417BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:16:48:04:0f:4e:cd:50:2e:9e:c2:8f:62:18:
                    60:1f:cf:04:84:55:e8:af:eb:8a:61:ca:10:00:1b:
                    0e:d1:2c:2d:61:d3:e6:82:45:01:9a:56:63:59:c8:
                    61:e0:71:af:d5:ab:69:30:d4:a3:35:ef:96:85:d0:
                    65:38:b5:92:7c:d3:e2:aa:4b:af:d5:67:aa:dd:a6:
                    9a:f6:cf:b8:3d:4f:fa:db:5d:f3:81:a5:0c:6a:79:
                    a0:76:4b:fa:53:17:0f:1f:c3:83:5d:88:ff:c8:d2:
                    1d:e0:36:ab:7f:ed:4d:0d:db:55:98:94:40:e6:f0:
                    51:b5:ec:da:51:54:c1:32:94:be:90:e3:25:70:1a:
                    32:6f:6d:0b:af:0f:78:ea:67:fc:7a:f7:85:96:a3:
                    00:11:b6:d5:a6:b2:0f:81:0b:77:2d:9e:d5:2e:ad:
                    b4:a1:a0:4f:a0:7c:f4:12:07:d1:c5:7c:8d:b9:df:
                    a4:db:2c:55:ec:fd:93:3f:66:c9:9e:96:34:86:3a:
                    96:eb:71:cc:1f:15:88:06:4f:55:24:01:26:08:3f:
                    59:2b:22:c7:23:86:e9:77:e5:62:ec:a4:50:eb:37:
                    9d:f2:5e:a5:55:55:52:f7:69:8d:0b:f5:4a:86:84:
                    04:f5:cb:0d:e0:3d:ef:69:ea:16:6b:00:ab:3b:f6:
                    5a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B5:4D:2C:0D:6A:4D:E3:68:BF:87:97:71:9B:65:75:A5:74:17:BE
            X509v3 Authority Key Identifier:
                keyid:72:F6:94:67:67:3B:0B:B3:A1:3E:C6:51:F1:D0:BF:66:BA:E3:1F:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:a0:5e:f5:5b:d2:60:02:8d:11:39:65:45:75:a7:6d:f7:ba:
         bc:ff:8c:72:9f:7b:74:35:f2:6c:48:ff:8a:ca:43:ac:72:f3:
         8f:b7:0c:28:86:78:e6:d2:6e:31:66:80:e2:94:0a:f9:d9:34:
         04:ed:1e:9e:19:9f:55:c7:2c:40:41:9a:72:24:bc:1d:44:2c:
         26:10:a4:d9:fb:d1:e4:90:cb:c3:28:49:95:43:ab:44:dc:2f:
         77:72:4a:25:8e:25:9d:f4:ad:f0:c5:70:c9:4a:04:89:aa:07:
         c5:77:bb:62:d9:c6:79:d8:b4:a3:78:3c:4b:51:da:4b:7a:f4:
         4c:5c:4a:ed:3c:87:ef:a7:c4:11:1b:9d:69:c9:5b:c8:84:2e:
         f1:3f:a4:00:99:a8:b6:b2:67:c9:cc:f8:96:f5:cb:e0:8b:61:
         81:bd:69:89:7c:28:c1:c4:e3:3c:4a:78:1d:6c:fb:f5:58:bf:
         12:b3:22:a8:59:1b:d4:89:eb:2a:cb:da:40:af:63:7f:d4:a4:
         62:42:b8:92:fc:ce:f2:78:b5:c7:2a:f5:4c:4c:34:cf:4c:09:
         d8:2d:d8:ea:cc:b4:10:1b:6c:d7:cd:11:33:6f:c4:8c:70:4f:
         57:67:2a:27:76:49:93:6c:d2:be:a8:96:17:43:cc:39:8c:db:
         9c:5f:1c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 10:32:50 2026 by rpki-client