
Error: rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
Error: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.cer: certificate revoked on Wed 19 Aug 2026 11:03:53 +0000
Manifest
$ rpki-client -vvvf rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.mft
File: 72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.mft (raw, json)
Hash identifier: 0KchlfQ1JH8cTVX0K9RXKkeaBJ1lNmrzdQxCOCd8kmI=
Subject key identifier: CF:B5:4D:2C:0D:6A:4D:E3:68:BF:87:97:71:9B:65:75:A5:74:17:BE
Authority key identifier: 72:F6:94:67:67:3B:0B:B3:A1:3E:C6:51:F1:D0:BF:66:BA:E3:1F:D8
Certificate issuer: /CN=72F69467673B0BB3A13EC651F1D0BF66BAE31FD8
Certificate serial: 56AE00D6679E103054188BA67D863B0197982295
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.mft
Manifest number: 047F
Signing time: Tue 18 Aug 2026 20:56:55 +0000
Manifest this update: Tue 18 Aug 2026 20:51:55 +0000
Manifest next update: Wed 19 Aug 2026 23:37:55 +0000
Files and hashes: 1: 323830343a336562303a3a2f33322d3438203d3e20323636363135.roa (hash: 9MEgIboxRmSKySk5TYZIBJPRuQrZtuCfIlSZcuRTRlg=)
2: 72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.crl (hash: rh3YOsxdrBIsBWjJshMg/PYr4QUykGZn+Gbo/1okFN4=)
3: 34352e372e3232342e302f32322d3234203d3e20323636363135.roa (hash: OpTTdPmL3E3wiXza3V9sw1tlqKWmtHj7mgfaeeoRT7A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:ae:00:d6:67:9e:10:30:54:18:8b:a6:7d:86:3b:01:97:98:22:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72F69467673B0BB3A13EC651F1D0BF66BAE31FD8
Validity
Not Before: Aug 18 20:51:55 2026 GMT
Not After : Aug 19 23:37:55 2026 GMT
Subject: CN=CFB54D2C0D6A4DE368BF8797719B6575A57417BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:16:48:04:0f:4e:cd:50:2e:9e:c2:8f:62:18:
60:1f:cf:04:84:55:e8:af:eb:8a:61:ca:10:00:1b:
0e:d1:2c:2d:61:d3:e6:82:45:01:9a:56:63:59:c8:
61:e0:71:af:d5:ab:69:30:d4:a3:35:ef:96:85:d0:
65:38:b5:92:7c:d3:e2:aa:4b:af:d5:67:aa:dd:a6:
9a:f6:cf:b8:3d:4f:fa:db:5d:f3:81:a5:0c:6a:79:
a0:76:4b:fa:53:17:0f:1f:c3:83:5d:88:ff:c8:d2:
1d:e0:36:ab:7f:ed:4d:0d:db:55:98:94:40:e6:f0:
51:b5:ec:da:51:54:c1:32:94:be:90:e3:25:70:1a:
32:6f:6d:0b:af:0f:78:ea:67:fc:7a:f7:85:96:a3:
00:11:b6:d5:a6:b2:0f:81:0b:77:2d:9e:d5:2e:ad:
b4:a1:a0:4f:a0:7c:f4:12:07:d1:c5:7c:8d:b9:df:
a4:db:2c:55:ec:fd:93:3f:66:c9:9e:96:34:86:3a:
96:eb:71:cc:1f:15:88:06:4f:55:24:01:26:08:3f:
59:2b:22:c7:23:86:e9:77:e5:62:ec:a4:50:eb:37:
9d:f2:5e:a5:55:55:52:f7:69:8d:0b:f5:4a:86:84:
04:f5:cb:0d:e0:3d:ef:69:ea:16:6b:00:ab:3b:f6:
5a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B5:4D:2C:0D:6A:4D:E3:68:BF:87:97:71:9B:65:75:A5:74:17:BE
X509v3 Authority Key Identifier:
keyid:72:F6:94:67:67:3B:0B:B3:A1:3E:C6:51:F1:D0:BF:66:BA:E3:1F:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a0:5e:f5:5b:d2:60:02:8d:11:39:65:45:75:a7:6d:f7:ba:
bc:ff:8c:72:9f:7b:74:35:f2:6c:48:ff:8a:ca:43:ac:72:f3:
8f:b7:0c:28:86:78:e6:d2:6e:31:66:80:e2:94:0a:f9:d9:34:
04:ed:1e:9e:19:9f:55:c7:2c:40:41:9a:72:24:bc:1d:44:2c:
26:10:a4:d9:fb:d1:e4:90:cb:c3:28:49:95:43:ab:44:dc:2f:
77:72:4a:25:8e:25:9d:f4:ad:f0:c5:70:c9:4a:04:89:aa:07:
c5:77:bb:62:d9:c6:79:d8:b4:a3:78:3c:4b:51:da:4b:7a:f4:
4c:5c:4a:ed:3c:87:ef:a7:c4:11:1b:9d:69:c9:5b:c8:84:2e:
f1:3f:a4:00:99:a8:b6:b2:67:c9:cc:f8:96:f5:cb:e0:8b:61:
81:bd:69:89:7c:28:c1:c4:e3:3c:4a:78:1d:6c:fb:f5:58:bf:
12:b3:22:a8:59:1b:d4:89:eb:2a:cb:da:40:af:63:7f:d4:a4:
62:42:b8:92:fc:ce:f2:78:b5:c7:2a:f5:4c:4c:34:cf:4c:09:
d8:2d:d8:ea:cc:b4:10:1b:6c:d7:cd:11:33:6f:c4:8c:70:4f:
57:67:2a:27:76:49:93:6c:d2:be:a8:96:17:43:cc:39:8c:db:
9c:5f:1c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 10:32:50 2026 by rpki-client