Error: rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
Error: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer: certificate revoked on Mon 26 Oct 2026 09:48:57 +0000

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.mft
File:                     BF45F5442049793490E484E18AD1516C8FDC8087.mft (raw, json)
Hash identifier:          +dbxi4ktt4ovWrZ6eHj5EoEMbH0tPlmmHs8q4nMl0os=
Subject key identifier:   27:08:5B:F5:FD:AC:8F:CB:64:B4:B6:D5:8A:39:2A:E1:2A:F3:FF:FC
Authority key identifier: BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87
Certificate issuer:       /CN=BF45F5442049793490E484E18AD1516C8FDC8087
Certificate serial:       6B50069E7701232B114E12DE779DFA7A744F6323
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.mft
Manifest number:          03DD
Signing time:             Tue 20 Oct 2026 14:28:09 +0000
Manifest this update:     Tue 20 Oct 2026 14:23:09 +0000
Manifest next update:     Wed 21 Oct 2026 16:00:09 +0000
Files and hashes:         1: 323830343a373762303a3a2f33322d3634203d3e203532363339.roa (hash: Gt0i3W+EGyOwmcRI2UbmRZoVgbKEbhYnUzu0WqJQjUs=)
                          2: 3137392e34392e3134342e302f32322d3332203d3e20323032.roa (hash: tEpAdEOJ9U9pBbWXEzGt8aP1/CaVRuncqOvci0crDic=)
                          3: 3137392e34392e3134342e302f32322d3332203d3e2033333536.roa (hash: IMlvYIOZd4kFaLN/nA98J35q03e7MUTSSxXSgJE3w5A=)
                          4: 3137392e34392e3134342e302f32322d3332203d3e203532363339.roa (hash: 1Rdu+6D/6SRfoWYwx4TQXLZ/QZfdW+L+PqLNd8BSusM=)
                          5: BF45F5442049793490E484E18AD1516C8FDC8087.crl (hash: PKtI/Ne+Ca3MW9MnFe9fRidD8gxAA2TD4KHHLasCRCs=)
                          6: 3137392e34392e3134342e302f32322d3234203d3e20323731313933.roa (hash: 3VONtANlffbgl59CDPI3i8TgYb3jL06p+NjQdxpLeRY=)
                          7: 3137392e34392e3134342e302f32322d3332203d3e20323033.roa (hash: 2u84EM5AYvQ+8v+rwbPeZ1hbqfGxWzoiepFfeZTfgrM=)
                          8: 323830343a373762303a3a2f33322d3634203d3e2033333536.roa (hash: KMxeMzXYGN25nMPwZrKi2DIcJhdSlrQ02BzBFW514kI=)
                          9: 323830343a373762303a3a2f33322d3438203d3e20323731313933.roa (hash: fjD2LWOqViPDKL6KPGIp6gh8Kkvs/oVyMwsa42rB1zw=)
                          10: 323830343a373762303a3a2f33322d3634203d3e20323033.roa (hash: 6j6tw5PiubxzdGVs6XVLtlL3nNjMu5TGC/UWgK8O6Es=)
                          11: 323830343a373762303a3a2f33322d3634203d3e20323032.roa (hash: +Fq/LqTDFvoQf3C3OD0kkoBTgZth99e2SfXtJjdJUj0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:50:06:9e:77:01:23:2b:11:4e:12:de:77:9d:fa:7a:74:4f:63:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF45F5442049793490E484E18AD1516C8FDC8087
        Validity
            Not Before: Oct 20 14:23:09 2026 GMT
            Not After : Oct 21 16:00:09 2026 GMT
        Subject: CN=27085BF5FDAC8FCB64B4B6D58A392AE12AF3FFFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:37:53:b3:f9:01:4b:5b:0e:2c:32:ea:c2:c7:
                    d4:08:b7:e7:22:c7:f3:1e:91:7b:5e:6e:ae:9c:27:
                    89:89:1f:62:92:a4:d7:1e:ab:bb:ef:1b:d8:c4:d1:
                    2d:10:b2:4d:a4:93:05:3d:21:67:cc:15:b1:42:e5:
                    f7:14:a5:df:45:75:3a:a2:4b:ed:6d:bd:fa:bc:96:
                    b7:bd:dc:06:71:ba:1e:84:7c:d1:a8:10:bf:3d:aa:
                    9e:d2:6b:80:5a:3b:7a:88:b4:28:97:20:e9:98:d0:
                    be:96:11:db:fd:a1:ae:65:62:ad:87:2c:0e:04:11:
                    58:16:f1:f6:16:50:c4:bc:71:92:48:c4:fd:aa:5f:
                    09:29:cc:cc:d9:c6:92:42:f0:36:70:72:9d:7b:72:
                    71:4a:15:d4:84:20:68:ab:e2:b2:6d:d7:64:8f:f3:
                    e5:96:80:52:5a:44:5c:ed:7c:6f:c7:29:5f:a0:ee:
                    35:4a:f7:dd:26:f2:a6:bf:aa:28:f2:57:61:b7:d3:
                    be:b3:8d:69:ec:05:fd:da:8b:34:94:a6:0f:aa:5e:
                    25:f1:2a:7b:21:51:d8:17:c3:1f:b6:55:88:6e:51:
                    cc:91:9a:78:fa:d8:77:b6:c3:60:d1:a2:57:e8:ba:
                    1f:0d:a6:94:27:f2:c1:6b:e9:e0:4d:d6:d2:48:f1:
                    a8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:08:5B:F5:FD:AC:8F:CB:64:B4:B6:D5:8A:39:2A:E1:2A:F3:FF:FC
            X509v3 Authority Key Identifier:
                keyid:BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ee:0c:0c:bd:c0:bf:c0:f7:ae:62:ff:0a:e7:bc:56:b8:4a:
         05:7d:5e:3c:a6:de:57:3e:4f:30:50:5c:00:91:bf:de:7a:23:
         4f:d8:ed:dd:bf:5f:75:b6:0b:f8:ee:7a:bd:40:9b:c4:9c:c5:
         24:66:44:80:f3:ad:0d:5c:b3:6a:cb:71:60:77:8b:8b:a1:e7:
         b4:c6:5f:7b:0d:87:a5:9b:30:8e:3f:92:00:7c:f9:7e:23:98:
         c2:5d:b0:6f:0c:2b:a7:b4:fc:8b:8d:f2:54:4d:f1:8f:03:29:
         4c:bf:14:b2:79:ac:71:58:83:5a:e6:4d:d9:d4:b9:5d:1a:b8:
         ca:77:9b:2a:bf:d5:4c:3f:85:8d:99:82:35:9a:28:e3:4c:2d:
         a1:ad:28:65:98:05:0e:c5:22:48:24:00:7d:fc:bb:e9:39:e4:
         7f:ee:3a:f1:c5:99:76:ce:bc:18:bb:24:8d:a5:44:59:ba:68:
         75:22:95:9c:d8:ad:c9:49:4f:82:89:68:51:8d:ae:ad:93:1c:
         a6:96:e8:6d:4e:42:1d:f5:ac:05:d1:0a:5c:5a:41:e8:9b:5c:
         7c:b0:19:0e:03:f6:27:cd:7d:fc:c4:16:9d:cd:e9:db:22:33:
         bd:59:ec:8e:f7:c5:4e:85:4b:50:cf:a0:cb:2d:e9:b6:4b:d8:
         c5:03:95:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:36:42 2026 by rpki-client