
Error: rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
Error: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer: certificate revoked on Mon 26 Oct 2026 10:48:56 +0000
Manifest
$ rpki-client -vvvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.mft
File: 4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.mft (raw, json)
Hash identifier: NR//U/cXnKTNH0kAprTeNHeLwy6GnQl58ulWvyShCvw=
Subject key identifier: E8:D9:E5:D3:DE:7D:28:E0:1B:BD:81:03:2D:0A:99:16:57:12:26:AF
Authority key identifier: 4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2
Certificate issuer: /CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
Certificate serial: 70D65BCC8005B6E7A14D3A33B1B593ED0268A387
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.mft
Manifest number: 03E1
Signing time: Tue 20 Oct 2026 15:53:27 +0000
Manifest this update: Tue 20 Oct 2026 15:48:27 +0000
Manifest next update: Wed 21 Oct 2026 17:09:27 +0000
Files and hashes: 1: 323830343a6439303a3a2f33322d3536203d3e2033333536.roa (hash: BV1blz4/VpmTLoN14nzkUFJp0b9wDMriWT8Rjdyw3Hk=)
2: 3137392e39362e3137362e302f32312d3332203d3e20323032.roa (hash: bIjkBcK7BA4Q3FiPmspwfXcxXj6ZbFurSi3b0/ksKU0=)
3: 323830343a6439303a3a2f33322d3334203d3e203532363339.roa (hash: W7HIC9Fkv+etQTXxD4VMRegv80coHuVVrxXsVAw3P3Q=)
4: 3136382e3139352e3131322e302f32322d3332203d3e20323032.roa (hash: rKJXZnk2Vm0/VJ+uKRGRJnFeWYC/Fd8iFecxOodg/bs=)
5: 3136382e3139352e3131322e302f32322d3332203d3e2033333536.roa (hash: fQp7FmGtmgusxlEJub1Rxn4k2ANzAf2TLEwsbx/v51w=)
6: 3137392e39362e3137362e302f32312d3332203d3e2033333536.roa (hash: U9HURwzfa2wNyJP938wy03r24OPQKdmrGaliTMRCjJA=)
7: 3137392e39362e3137362e302f32312d3234203d3e203532363339.roa (hash: 0J2FyqIVWaNAXgu1IzZHcSmpenYq23iGByXwqmNaoRs=)
8: 3136382e3139352e3131322e302f32322d3234203d3e203532363339.roa (hash: +EzznQxnyhDO/IEnAF7S6JqmOB0qExVp1TNw0b9W0uE=)
9: 3137392e39362e3137362e302f32312d3332203d3e20323033.roa (hash: IqaMZm0/ytBSKo0Z/HNKPC8JyAq91/JbOHZChfNs07g=)
10: 323830343a6439303a3a2f33322d3536203d3e20323032.roa (hash: AKpku7Hv//FGkEL6gpuUMpFSOcFa7GsB7oiC/13pvXk=)
11: 323830343a6439303a3a2f33322d3536203d3e20323033.roa (hash: EKftNov2xkWY0hw68Pm1DGz9068vsDgwuQ0aP05E7X4=)
12: 3136382e3139352e3131322e302f32322d3332203d3e20323033.roa (hash: 00PKsBk9VFXLGHuN46631LO5RdQZjuj+PXNdS05CZDc=)
13: 4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.crl (hash: jqowGhtl9sx7Is/+qJxxB9FZJwV4XvaVWxbQ96yZyCo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:d6:5b:cc:80:05:b6:e7:a1:4d:3a:33:b1:b5:93:ed:02:68:a3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
Validity
Not Before: Oct 20 15:48:27 2026 GMT
Not After : Oct 21 17:09:27 2026 GMT
Subject: CN=E8D9E5D3DE7D28E01BBD81032D0A9916571226AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:fa:87:74:2b:57:df:3b:57:fc:f2:4a:c1:
fe:38:79:ab:c9:88:26:34:bb:92:64:6c:3a:76:1c:
2a:1f:56:f6:bd:25:72:a3:08:40:3e:9f:de:c3:e5:
fd:db:46:6d:1b:49:ce:81:b7:29:be:c8:7a:e9:a4:
73:42:90:16:37:0b:93:a4:05:e5:bf:f1:b8:9a:f3:
ff:56:cf:74:37:e0:36:06:7a:22:7c:1f:2e:33:97:
1a:7d:f0:dd:18:1b:16:58:97:35:d9:43:1a:8a:b5:
40:90:8e:b1:86:7c:e4:6c:0a:85:6a:a9:6c:61:fa:
e2:0f:9f:ca:b6:bf:91:38:70:7f:6f:42:2e:92:9a:
b9:15:86:fd:ea:c5:ad:23:db:c5:92:34:98:34:bf:
a9:ac:bd:f4:49:d2:bf:c6:e7:52:5f:22:e0:c5:57:
56:0e:dd:c9:89:59:22:66:82:20:24:e0:6e:9e:2d:
d6:f7:e2:1c:be:46:5a:b4:63:e2:cb:3f:38:c1:ac:
c5:b6:59:40:fd:f5:e0:89:03:a0:2f:67:8f:2a:f0:
f5:45:78:fd:ef:54:7a:3e:37:96:79:c9:d7:ce:58:
52:35:36:87:b1:5f:bc:0f:d5:b3:69:3f:12:52:f3:
f4:54:7b:0d:4c:e6:0c:91:7f:c4:3a:24:38:5a:fa:
2e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D9:E5:D3:DE:7D:28:E0:1B:BD:81:03:2D:0A:99:16:57:12:26:AF
X509v3 Authority Key Identifier:
keyid:4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:f1:0e:53:02:4a:70:28:10:e5:5b:9e:2e:f3:b6:7c:1f:16:
92:52:e7:cf:1b:b3:87:f0:13:fa:3e:d1:f1:91:b0:5b:c4:0f:
d3:38:f1:eb:8e:2a:37:91:7d:28:dd:40:9a:e8:a7:42:ab:41:
4a:a9:40:12:14:47:03:19:86:7d:11:1f:2a:47:16:80:49:5c:
80:50:9a:d9:97:c4:1d:66:d2:75:78:8b:f9:6c:60:ef:28:a8:
c5:ca:3d:a3:b8:33:c9:27:90:58:eb:7e:e9:94:e8:5e:14:c4:
8e:c0:f3:a7:72:b8:39:e1:9b:23:d6:7f:50:a2:c3:08:f6:dd:
08:d3:0c:8e:6a:fb:2c:dd:3c:ba:bc:e0:f3:38:ee:4d:02:64:
8d:19:3a:83:0d:48:e4:99:bd:58:fe:41:98:b8:0c:77:cb:b9:
03:1e:de:ab:e0:8c:63:ab:32:ba:3f:af:a2:79:92:d9:23:48:
a4:64:3c:b5:b7:ab:97:5e:9f:5e:c7:29:c6:6f:4c:6b:1d:aa:
45:7e:33:a1:7f:f6:90:06:43:ed:d7:a0:6d:c3:64:7f:74:9a:
5f:88:44:2c:36:31:5a:34:5a:94:33:e6:16:29:d8:4a:e5:3a:
2b:2f:22:02:1f:28:86:a5:e5:32:1d:41:b8:94:ea:0e:40:1b:
bd:ce:a9:1f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcNZbzIAFtuehTTozsbWT7QJoo4cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEMzMzEwOThCODREQzkyOTZCQkRBRUU5RDJDMDVCRTJB
QzNDQzVBMjAeFw0yNjEwMjAxNTQ4MjdaFw0yNjEwMjExNzA5MjdaMDMxMTAvBgNV
BAMTKEU4RDlFNUQzREU3RDI4RTAxQkJEODEwMzJEMEE5OTE2NTcxMjI2QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/7vqHdCtX3ztX/PJKwf44eavJ
iCY0u5JkbDp2HCofVva9JXKjCEA+n97D5f3bRm0bSc6Btym+yHrppHNCkBY3C5Ok
BeW/8bia8/9Wz3Q34DYGeiJ8Hy4zlxp98N0YGxZYlzXZQxqKtUCQjrGGfORsCoVq
qWxh+uIPn8q2v5E4cH9vQi6SmrkVhv3qxa0j28WSNJg0v6msvfRJ0r/G51JfIuDF
V1YO3cmJWSJmgiAk4G6eLdb34hy+Rlq0Y+LLPzjBrMW2WUD99eCJA6AvZ48q8PVF
eP3vVHo+N5Z5ydfOWFI1NoexX7wP1bNpPxJS8/RUew1M5gyRf8Q6JDha+i4DAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU6Nnl0959KOAbvYEDLQqZFlcSJq8wHwYDVR0j
BBgwFoAUTDMQmLhNySlrva7p0sBb4qw8xaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3JBemlvd2VmTm1GcndiVzUxU3lQS2FEM0gxd05VajFKd1VQd2d1am1h
Y1UvMi80QzMzMTA5OEI4NERDOTI5NkJCREFFRTlEMkMwNUJFMkFDM0NDNUEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDMzMxMDk4Qjg0REM5Mjk2
QkJEQUVFOUQyQzA1QkUyQUMzQ0M1QTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N3JBemlvd2VmTm1GcndiVzUxU3lQS2FEM0gxd05VajFKd1VQd2d1am1hY1UvMi80
QzMzMTA5OEI4NERDOTI5NkJCREFFRTlEMkMwNUJFMkFDM0NDNUEyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANvEOUwJKcCgQ5VueLvO2fB8WklLnzxuzh/AT+j7R8ZGwW8QP0zjx644qN5F9
KN1AmuinQqtBSqlAEhRHAxmGfREfKkcWgElcgFCa2ZfEHWbSdXiL+Wxg7yioxco9
o7gzySeQWOt+6ZToXhTEjsDzp3K4OeGbI9Z/UKLDCPbdCNMMjmr7LN08urzg8zju
TQJkjRk6gw1I5Jm9WP5BmLgMd8u5Ax7eq+CMY6syuj+vonmS2SNIpGQ8tberl16f
Xscpxm9Max2qRX4zoX/2kAZD7degbcNkf3SaX4hELDYxWjRalDPmFinYSuU6Ky8i
Ah8ohqXlMh1BuJTqDkAbvc6pHw==
-----END CERTIFICATE-----
Generated at Wed Oct 28 21:09:45 2026 by rpki-client