Error: rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/1/5FA7CB850A2B0CBC348574695F2F5CF499586904.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
Error: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA7CB850A2B0CBC348574695F2F5CF499586904.cer: certificate revoked on Fri 07 Aug 2026 08:48:25 +0000

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/1/5FA7CB850A2B0CBC348574695F2F5CF499586904.mft
File:                     5FA7CB850A2B0CBC348574695F2F5CF499586904.mft (raw, json)
Hash identifier:          enUsKAY2+MnUD/bN1Nek+HJ6grme1p3FXDBAhu4HZRY=
Subject key identifier:   67:42:BB:04:2B:82:E0:7C:CC:C2:F0:A0:5A:81:7C:77:78:C5:F1:DE
Authority key identifier: 5F:A7:CB:85:0A:2B:0C:BC:34:85:74:69:5F:2F:5C:F4:99:58:69:04
Certificate issuer:       /CN=5FA7CB850A2B0CBC348574695F2F5CF499586904
Certificate serial:       530A04448EC2C6F3ACECB6B18B8001B1FDCCC81C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA7CB850A2B0CBC348574695F2F5CF499586904.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/1/5FA7CB850A2B0CBC348574695F2F5CF499586904.mft
Manifest number:          0462
Signing time:             Sat 01 Aug 2026 12:53:58 +0000
Manifest this update:     Sat 01 Aug 2026 12:48:58 +0000
Manifest next update:     Sun 02 Aug 2026 14:01:58 +0000
Files and hashes:         1: 3138362e3231392e3132302e302f32312d3234203d3e203631383930.roa (hash: QtK3DMnTLenS7FSLOa2G0YtUPwPyaELn8+LkdkzSXS4=)
                          2: 3137302e3135302e32342e302f32322d3234203d3e203631383930.roa (hash: IE1PeqGILUSEV0qV79H7sZYAFaJX1dTx3zpWx7pQt6k=)
                          3: 3133382e3230342e3231322e302f32322d3234203d3e203631383930.roa (hash: dIRCiCzVUKMucI1L8qfPPLNkS3xdL10y9sMlCp5AOhc=)
                          4: 5FA7CB850A2B0CBC348574695F2F5CF499586904.crl (hash: WQ5Zn6WRuI39cGESshH7G3tJkm69kPtoEZwPWMjQiQA=)
                          5: 323830343a6562343a3a2f33322d3438203d3e203631383930.roa (hash: L4SHcox4+aEk4K/l77VZzmX4oNYKvvo1lUjH5Ho4zyE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:0a:04:44:8e:c2:c6:f3:ac:ec:b6:b1:8b:80:01:b1:fd:cc:c8:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA7CB850A2B0CBC348574695F2F5CF499586904
        Validity
            Not Before: Aug  1 12:48:58 2026 GMT
            Not After : Aug  2 14:01:58 2026 GMT
        Subject: CN=6742BB042B82E07CCCC2F0A05A817C7778C5F1DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e0:39:a9:35:f8:7f:70:20:53:1b:10:36:14:
                    90:08:bd:d3:15:8e:f8:b4:cf:cc:e0:21:b9:03:d1:
                    59:c9:bd:56:6d:8b:20:bf:e6:e5:d4:de:84:f8:77:
                    94:59:64:fb:30:bc:5f:9a:90:a1:8d:d5:dc:97:51:
                    c9:a5:91:36:f5:f2:60:bf:b5:fe:28:64:4d:dd:81:
                    41:bd:6c:54:12:a6:06:02:7f:8d:95:8d:25:24:a5:
                    f6:d6:0c:0f:02:c7:cc:80:fd:66:e3:98:17:28:36:
                    8e:88:d0:8a:99:87:59:36:b8:cd:10:1a:4d:51:b2:
                    70:fa:4d:ba:c9:97:7e:7f:8c:dd:7f:a7:88:06:e7:
                    e0:51:39:29:85:97:e3:1f:a4:ef:c6:cc:53:4c:69:
                    f3:5d:42:02:cc:8f:1d:76:35:b8:66:fe:51:a6:aa:
                    1e:93:21:2c:bf:21:29:3c:1d:15:a4:e3:31:5c:62:
                    a4:3d:b9:8a:df:2d:69:0a:d2:d4:83:92:7b:2e:4f:
                    46:1e:e8:48:e5:2a:d3:c6:c7:da:93:a4:4a:bd:d4:
                    17:38:2e:24:5a:c6:2c:c4:8b:81:f9:da:ce:39:01:
                    a2:13:67:a7:75:83:46:a5:16:f9:c0:8a:1e:e9:c9:
                    71:05:21:6c:d4:74:d5:a0:07:ac:72:ee:e2:66:da:
                    08:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:42:BB:04:2B:82:E0:7C:CC:C2:F0:A0:5A:81:7C:77:78:C5:F1:DE
            X509v3 Authority Key Identifier:
                keyid:5F:A7:CB:85:0A:2B:0C:BC:34:85:74:69:5F:2F:5C:F4:99:58:69:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/1/5FA7CB850A2B0CBC348574695F2F5CF499586904.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA7CB850A2B0CBC348574695F2F5CF499586904.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/1/5FA7CB850A2B0CBC348574695F2F5CF499586904.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:23:9c:95:43:f2:7b:da:9e:18:f2:7b:0e:fa:43:4a:4c:7f:
         92:72:c6:73:c4:28:27:29:c9:87:d5:57:3b:90:de:a5:85:c4:
         d5:70:7a:f8:50:3b:00:f9:9d:0c:c7:95:60:d1:d6:cd:95:04:
         3c:a3:4a:70:d0:ab:75:67:66:74:01:9b:c4:68:0e:18:6e:8e:
         ba:e4:fc:34:b4:93:62:b8:99:17:d2:5f:a3:18:6d:ff:63:73:
         97:32:86:99:72:ef:48:26:89:e5:6a:40:4f:d9:b7:a0:bf:4f:
         0e:68:69:84:4f:bf:9d:fb:07:eb:a8:a4:ad:ee:f9:78:f8:fe:
         fe:e5:90:98:d5:0b:a9:47:fd:40:9f:db:be:c1:e9:53:1d:1c:
         41:87:0c:95:75:4a:fd:42:b8:81:d3:f2:9b:71:85:e0:f8:8e:
         01:fd:3f:71:f1:cf:0a:d7:7b:96:15:85:94:35:42:4e:c2:46:
         06:a9:20:f6:c3:56:26:99:cf:65:8c:2c:99:61:71:ce:bc:3a:
         62:af:43:a4:69:17:54:42:1b:43:7d:dd:f9:ae:8c:a2:8c:a7:
         31:09:15:39:33:1b:22:8c:0a:a7:ff:b5:fa:84:8d:45:bb:11:
         d7:7b:ec:eb:78:4b:a2:d0:a0:ed:7c:3f:60:9c:fb:fe:eb:65:
         42:61:5c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 21:58:19 2026 by rpki-client