Error: rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/3FCC36F1DDF68309E93E427762E77B115A3C00D6.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
Error: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FCC36F1DDF68309E93E427762E77B115A3C00D6.cer: certificate revoked on Mon 10 Aug 2026 08:48:27 +0000

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/3FCC36F1DDF68309E93E427762E77B115A3C00D6.mft
File:                     3FCC36F1DDF68309E93E427762E77B115A3C00D6.mft (raw, json)
Hash identifier:          nxKfeoEBZKNCrkuZJwXSuUfDd71w65gtDkBSPtF+Sck=
Subject key identifier:   C0:55:FF:D1:A4:DA:0C:69:F6:4C:C7:CE:E0:FC:42:2A:AF:5B:AB:A7
Authority key identifier: 3F:CC:36:F1:DD:F6:83:09:E9:3E:42:77:62:E7:7B:11:5A:3C:00:D6
Certificate issuer:       /CN=3FCC36F1DDF68309E93E427762E77B115A3C00D6
Certificate serial:       210CE36A05394499A3E840CA1560C1A4EBCE00CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FCC36F1DDF68309E93E427762E77B115A3C00D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/3FCC36F1DDF68309E93E427762E77B115A3C00D6.mft
Manifest number:          28
Signing time:             Tue 04 Aug 2026 13:49:17 +0000
Manifest this update:     Tue 04 Aug 2026 13:44:17 +0000
Manifest next update:     Wed 05 Aug 2026 14:55:17 +0000
Files and hashes:         1: 323830343a336534633a3a2f33322d3438203d3e20323636353836.roa (hash: yjmB0HkeGCDskPLe2/RZPDAPmWEjonm2mf8OJrTkPi4=)
                          2: 3FCC36F1DDF68309E93E427762E77B115A3C00D6.crl (hash: 2quJuCPKNx2VudBQHRZBD6biyItVlaEoRYdffIgm+L0=)
                          3: 34352e372e3134382e302f32322d3234203d3e20323636353836.roa (hash: Fhhul9j3IJxWjp9ZSZNjHDuPTH90tfxxs1O9SHFvjY8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:0c:e3:6a:05:39:44:99:a3:e8:40:ca:15:60:c1:a4:eb:ce:00:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FCC36F1DDF68309E93E427762E77B115A3C00D6
        Validity
            Not Before: Aug  4 13:44:17 2026 GMT
            Not After : Aug  5 14:55:17 2026 GMT
        Subject: CN=C055FFD1A4DA0C69F64CC7CEE0FC422AAF5BABA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4d:5e:35:76:89:53:dd:24:db:12:62:ff:b8:
                    66:0e:a6:58:57:67:29:5c:b8:99:d0:c9:0e:4a:9b:
                    cb:f9:5a:8d:9c:19:93:fd:6b:3e:e7:61:99:0e:dd:
                    37:20:35:1a:38:3c:d2:17:0a:fc:e0:de:c6:c6:73:
                    4d:e8:d4:7a:5c:7d:97:38:50:c5:67:06:73:c2:72:
                    b9:c2:51:ab:75:04:9d:8c:c9:18:e9:7f:8b:c6:71:
                    21:46:4e:e5:dc:06:a2:f9:e5:9a:76:e4:25:19:84:
                    b5:86:f5:90:ff:32:e4:d7:9b:8b:f1:ba:b5:14:f6:
                    db:cd:6f:c3:5b:49:51:bf:d2:95:ca:1c:76:ed:b9:
                    60:7d:0a:cd:19:79:e7:d5:e7:ce:62:08:af:00:3f:
                    4b:57:3f:07:b3:27:3c:81:1c:9c:2b:fa:87:46:9d:
                    d6:fd:05:0b:03:45:e1:04:1c:56:1a:c4:e7:ce:87:
                    aa:94:bb:8d:dc:43:bc:af:3b:1d:0e:ce:f5:96:d3:
                    8b:5c:2d:71:fd:c8:5a:72:96:4d:fd:da:39:02:88:
                    a9:2f:87:af:47:af:ce:24:66:bb:fd:73:0f:26:9f:
                    3c:31:fa:73:d8:ec:e0:e6:e4:63:86:06:62:0e:99:
                    1a:79:e1:e8:d8:1a:54:39:fb:1c:f2:05:fb:25:15:
                    95:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:55:FF:D1:A4:DA:0C:69:F6:4C:C7:CE:E0:FC:42:2A:AF:5B:AB:A7
            X509v3 Authority Key Identifier:
                keyid:3F:CC:36:F1:DD:F6:83:09:E9:3E:42:77:62:E7:7B:11:5A:3C:00:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/3FCC36F1DDF68309E93E427762E77B115A3C00D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FCC36F1DDF68309E93E427762E77B115A3C00D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/3FCC36F1DDF68309E93E427762E77B115A3C00D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:5b:51:52:70:38:36:04:c8:ed:b3:fa:8b:e1:1b:b4:af:40:
         d2:84:bd:a7:0c:26:34:16:58:2a:05:a5:37:f2:8f:5c:53:89:
         a2:46:be:9a:68:ef:7a:30:72:5a:7b:f2:38:1f:32:21:da:b0:
         bf:3f:c9:db:2f:59:56:7d:d9:84:a7:c9:22:2b:31:b8:cf:2b:
         fb:23:ff:8f:4b:4b:4a:b4:ef:4d:25:60:43:49:8a:6c:53:90:
         57:06:d5:c8:46:bc:67:6c:ab:17:eb:54:f4:ee:c1:a5:92:39:
         ba:28:18:51:cf:e4:19:b8:76:bb:a8:69:fc:45:a7:bb:36:0e:
         e8:c6:89:c2:b9:50:e3:83:9e:21:26:da:8c:9d:57:b3:8e:7e:
         36:7c:38:33:49:0e:b0:81:00:7d:59:32:5f:a4:e2:63:ed:ff:
         e1:a0:3b:4d:9a:5e:5a:a6:b3:02:de:c5:47:cc:19:dc:0f:2b:
         7d:0b:d6:60:00:be:c0:7a:12:a7:b4:f3:45:43:bd:a7:93:96:
         fb:7d:cf:ce:1c:15:36:2e:3d:68:3c:01:32:44:36:f3:cb:cf:
         9b:23:82:a0:ef:0a:ed:0a:aa:17:8d:74:99:31:20:20:1a:f6:
         d4:9c:d4:42:82:45:65:cd:d6:c6:9d:71:26:1f:be:64:6e:6d:
         6b:69:de:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:44:19 2026 by rpki-client