Error: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer: certificate revoked on Sat 05 Sep 2026 09:48:36 +0000

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft
File:                     0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft (raw, json)
Hash identifier:          5ObW31eGlTdg3DIzKeN5DkJxiMD+D1dyarrmrl8WCxg=
Subject key identifier:   C1:EB:01:2A:70:95:B2:2D:43:3F:8E:73:4E:CB:5F:2C:5B:2E:A6:92
Authority key identifier: 03:30:D9:25:2D:48:F6:AC:52:A8:00:FF:3C:2E:65:4C:58:37:DA:05
Certificate issuer:       /CN=0330D9252D48F6AC52A800FF3C2E654C5837DA05
Certificate serial:       681C100A95CBB1AF876020B714CE33F49C49D342
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft
Manifest number:          0352
Signing time:             Sun 30 Aug 2026 14:15:09 +0000
Manifest this update:     Sun 30 Aug 2026 14:10:09 +0000
Manifest next update:     Mon 31 Aug 2026 16:16:09 +0000
Files and hashes:         1: 3136302e32302e3137362e302f32342d3234203d3e20323731313130.roa (hash: d664kBWKzsrFuFfIjjQ+xw/oxEG/P16+rBO5QXAxHn8=)
                          2: 323830343a373636383a3a2f33322d3438203d3e20323731313130.roa (hash: vb9YUlejfRTr7kI1aYxQHYliUllejevQ+kOX2MTtokM=)
                          3: 0330D9252D48F6AC52A800FF3C2E654C5837DA05.crl (hash: wTIbKEOiI4y6MX9rzrRfEUxUTx2KUXuQG2sKjUOe5y0=)
                          4: 3136302e32302e3137382e302f32342d3234203d3e20323731313130.roa (hash: ZKNo7Up8u1Jy7H1whaiVjqWCxsF4ovZTcSMZyUOLkWI=)
                          5: 3136302e32302e3137372e302f32342d3234203d3e20323731313130.roa (hash: PM0lHsUYnB12FJqt6xiReOJNg/ovKurUA+Xwa3EXzBQ=)
                          6: 3136302e32302e3137392e302f32342d3234203d3e20323731313130.roa (hash: 18uOdOq1fc4kDsNdg6BO2GwAlWXhd1BPq+icqwd6Rsw=)
                          7: 3136302e32302e3137362e302f32322d3233203d3e20323731313130.roa (hash: NqWILxpBiHhsXEv2+8eKu6PDuTyCSzC9E8quU08aTX4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:1c:10:0a:95:cb:b1:af:87:60:20:b7:14:ce:33:f4:9c:49:d3:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0330D9252D48F6AC52A800FF3C2E654C5837DA05
        Validity
            Not Before: Aug 30 14:10:09 2026 GMT
            Not After : Aug 31 16:16:09 2026 GMT
        Subject: CN=C1EB012A7095B22D433F8E734ECB5F2C5B2EA692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:68:99:79:49:a7:da:92:b6:92:aa:d8:25:90:
                    33:1a:62:3c:58:31:9f:2d:66:6f:24:bd:c8:2c:59:
                    61:52:62:55:77:6d:8c:a9:56:69:2d:cd:07:9f:74:
                    c3:48:6b:24:3c:f0:ab:76:18:4f:71:9b:91:da:ab:
                    16:2c:df:31:f6:a7:6f:eb:31:9f:ab:d1:63:a2:68:
                    7f:3f:30:a4:54:7a:22:81:98:39:df:88:61:55:c0:
                    22:d6:cc:d3:99:e0:0d:5c:8b:ae:44:63:2a:fa:9e:
                    ec:03:74:8f:e8:de:7a:ef:7a:65:81:1f:1b:94:9e:
                    01:8c:35:97:7d:cc:1d:0c:1e:d6:1e:aa:b5:14:89:
                    c5:b1:7f:d2:64:eb:d1:26:02:ac:f8:c4:f0:7f:48:
                    7c:f0:ca:2e:5d:e7:da:cb:a9:36:24:3b:42:da:f9:
                    21:9b:0b:32:dd:80:90:7f:1d:5d:57:01:d0:10:8e:
                    25:64:e0:38:39:4c:57:6c:9b:0e:b3:4a:57:f6:b8:
                    c8:75:9d:ea:8a:0e:22:30:f8:d0:04:6b:07:b4:c6:
                    ba:8b:51:80:ea:a0:83:0a:ce:cc:09:a0:88:80:b5:
                    b9:90:a1:8c:ad:fd:b0:c2:11:b5:8b:57:b4:25:f6:
                    3b:b0:96:61:e2:e9:0b:ab:47:e9:6d:3f:7f:bd:ec:
                    ea:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:EB:01:2A:70:95:B2:2D:43:3F:8E:73:4E:CB:5F:2C:5B:2E:A6:92
            X509v3 Authority Key Identifier:
                keyid:03:30:D9:25:2D:48:F6:AC:52:A8:00:FF:3C:2E:65:4C:58:37:DA:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:60:e0:f1:87:79:8d:5c:43:52:25:2a:49:de:43:7a:8d:64:
         2f:e5:1e:3a:16:18:5b:3c:93:c5:44:34:49:a1:0e:8e:59:2a:
         9b:88:18:70:13:5a:cb:28:04:e8:bf:a8:df:2a:b3:db:55:50:
         4d:83:c0:38:ab:e0:37:a4:5f:85:83:87:ee:c4:e3:06:6a:68:
         43:cd:68:79:31:56:06:09:bf:cc:61:31:59:81:68:cb:78:71:
         09:da:9e:2f:62:37:40:57:e2:bc:6e:25:c2:e4:d4:af:e6:86:
         66:f4:b0:47:92:89:a7:eb:c3:61:de:59:60:b9:9c:f1:c7:4d:
         23:d5:ce:94:09:b5:b0:90:67:24:41:45:ad:3c:f1:6c:e5:c8:
         0f:24:c8:46:9f:8a:a0:8b:46:4b:34:e3:6f:76:15:b0:b4:55:
         02:71:a3:87:43:4a:36:22:66:5c:48:ab:19:20:3b:97:3d:af:
         d1:45:8e:3d:0d:16:c5:cc:fb:46:0f:fb:07:6b:1a:a7:3f:e2:
         4d:f0:be:20:35:6b:14:34:f2:63:46:cf:b9:0e:e0:4f:e2:f2:
         25:e2:fc:37:4e:38:38:7c:7e:fe:49:28:5a:68:75:53:4f:2f:
         80:4b:af:47:a2:3f:a2:f2:22:b8:f7:b1:a7:99:bb:4e:8d:72:
         62:4e:b2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 14:30:45 2026 by rpki-client