Error: rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
Error: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer: certificate revoked on Mon 26 Oct 2026 10:48:56 +0000

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.mft
File:                     4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.mft (raw, json)
Hash identifier:          NR//U/cXnKTNH0kAprTeNHeLwy6GnQl58ulWvyShCvw=
Subject key identifier:   E8:D9:E5:D3:DE:7D:28:E0:1B:BD:81:03:2D:0A:99:16:57:12:26:AF
Authority key identifier: 4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2
Certificate issuer:       /CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
Certificate serial:       70D65BCC8005B6E7A14D3A33B1B593ED0268A387
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.mft
Manifest number:          03E1
Signing time:             Tue 20 Oct 2026 15:53:27 +0000
Manifest this update:     Tue 20 Oct 2026 15:48:27 +0000
Manifest next update:     Wed 21 Oct 2026 17:09:27 +0000
Files and hashes:         1: 323830343a6439303a3a2f33322d3536203d3e2033333536.roa (hash: BV1blz4/VpmTLoN14nzkUFJp0b9wDMriWT8Rjdyw3Hk=)
                          2: 3137392e39362e3137362e302f32312d3332203d3e20323032.roa (hash: bIjkBcK7BA4Q3FiPmspwfXcxXj6ZbFurSi3b0/ksKU0=)
                          3: 323830343a6439303a3a2f33322d3334203d3e203532363339.roa (hash: W7HIC9Fkv+etQTXxD4VMRegv80coHuVVrxXsVAw3P3Q=)
                          4: 3136382e3139352e3131322e302f32322d3332203d3e20323032.roa (hash: rKJXZnk2Vm0/VJ+uKRGRJnFeWYC/Fd8iFecxOodg/bs=)
                          5: 3136382e3139352e3131322e302f32322d3332203d3e2033333536.roa (hash: fQp7FmGtmgusxlEJub1Rxn4k2ANzAf2TLEwsbx/v51w=)
                          6: 3137392e39362e3137362e302f32312d3332203d3e2033333536.roa (hash: U9HURwzfa2wNyJP938wy03r24OPQKdmrGaliTMRCjJA=)
                          7: 3137392e39362e3137362e302f32312d3234203d3e203532363339.roa (hash: 0J2FyqIVWaNAXgu1IzZHcSmpenYq23iGByXwqmNaoRs=)
                          8: 3136382e3139352e3131322e302f32322d3234203d3e203532363339.roa (hash: +EzznQxnyhDO/IEnAF7S6JqmOB0qExVp1TNw0b9W0uE=)
                          9: 3137392e39362e3137362e302f32312d3332203d3e20323033.roa (hash: IqaMZm0/ytBSKo0Z/HNKPC8JyAq91/JbOHZChfNs07g=)
                          10: 323830343a6439303a3a2f33322d3536203d3e20323032.roa (hash: AKpku7Hv//FGkEL6gpuUMpFSOcFa7GsB7oiC/13pvXk=)
                          11: 323830343a6439303a3a2f33322d3536203d3e20323033.roa (hash: EKftNov2xkWY0hw68Pm1DGz9068vsDgwuQ0aP05E7X4=)
                          12: 3136382e3139352e3131322e302f32322d3332203d3e20323033.roa (hash: 00PKsBk9VFXLGHuN46631LO5RdQZjuj+PXNdS05CZDc=)
                          13: 4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.crl (hash: jqowGhtl9sx7Is/+qJxxB9FZJwV4XvaVWxbQ96yZyCo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d6:5b:cc:80:05:b6:e7:a1:4d:3a:33:b1:b5:93:ed:02:68:a3:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
        Validity
            Not Before: Oct 20 15:48:27 2026 GMT
            Not After : Oct 21 17:09:27 2026 GMT
        Subject: CN=E8D9E5D3DE7D28E01BBD81032D0A9916571226AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ee:fa:87:74:2b:57:df:3b:57:fc:f2:4a:c1:
                    fe:38:79:ab:c9:88:26:34:bb:92:64:6c:3a:76:1c:
                    2a:1f:56:f6:bd:25:72:a3:08:40:3e:9f:de:c3:e5:
                    fd:db:46:6d:1b:49:ce:81:b7:29:be:c8:7a:e9:a4:
                    73:42:90:16:37:0b:93:a4:05:e5:bf:f1:b8:9a:f3:
                    ff:56:cf:74:37:e0:36:06:7a:22:7c:1f:2e:33:97:
                    1a:7d:f0:dd:18:1b:16:58:97:35:d9:43:1a:8a:b5:
                    40:90:8e:b1:86:7c:e4:6c:0a:85:6a:a9:6c:61:fa:
                    e2:0f:9f:ca:b6:bf:91:38:70:7f:6f:42:2e:92:9a:
                    b9:15:86:fd:ea:c5:ad:23:db:c5:92:34:98:34:bf:
                    a9:ac:bd:f4:49:d2:bf:c6:e7:52:5f:22:e0:c5:57:
                    56:0e:dd:c9:89:59:22:66:82:20:24:e0:6e:9e:2d:
                    d6:f7:e2:1c:be:46:5a:b4:63:e2:cb:3f:38:c1:ac:
                    c5:b6:59:40:fd:f5:e0:89:03:a0:2f:67:8f:2a:f0:
                    f5:45:78:fd:ef:54:7a:3e:37:96:79:c9:d7:ce:58:
                    52:35:36:87:b1:5f:bc:0f:d5:b3:69:3f:12:52:f3:
                    f4:54:7b:0d:4c:e6:0c:91:7f:c4:3a:24:38:5a:fa:
                    2e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D9:E5:D3:DE:7D:28:E0:1B:BD:81:03:2D:0A:99:16:57:12:26:AF
            X509v3 Authority Key Identifier:
                keyid:4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:f1:0e:53:02:4a:70:28:10:e5:5b:9e:2e:f3:b6:7c:1f:16:
         92:52:e7:cf:1b:b3:87:f0:13:fa:3e:d1:f1:91:b0:5b:c4:0f:
         d3:38:f1:eb:8e:2a:37:91:7d:28:dd:40:9a:e8:a7:42:ab:41:
         4a:a9:40:12:14:47:03:19:86:7d:11:1f:2a:47:16:80:49:5c:
         80:50:9a:d9:97:c4:1d:66:d2:75:78:8b:f9:6c:60:ef:28:a8:
         c5:ca:3d:a3:b8:33:c9:27:90:58:eb:7e:e9:94:e8:5e:14:c4:
         8e:c0:f3:a7:72:b8:39:e1:9b:23:d6:7f:50:a2:c3:08:f6:dd:
         08:d3:0c:8e:6a:fb:2c:dd:3c:ba:bc:e0:f3:38:ee:4d:02:64:
         8d:19:3a:83:0d:48:e4:99:bd:58:fe:41:98:b8:0c:77:cb:b9:
         03:1e:de:ab:e0:8c:63:ab:32:ba:3f:af:a2:79:92:d9:23:48:
         a4:64:3c:b5:b7:ab:97:5e:9f:5e:c7:29:c6:6f:4c:6b:1d:aa:
         45:7e:33:a1:7f:f6:90:06:43:ed:d7:a0:6d:c3:64:7f:74:9a:
         5f:88:44:2c:36:31:5a:34:5a:94:33:e6:16:29:d8:4a:e5:3a:
         2b:2f:22:02:1f:28:86:a5:e5:32:1d:41:b8:94:ea:0e:40:1b:
         bd:ce:a9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 21:09:45 2026 by rpki-client