Error: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.cer: certificate revoked on Mon 14 Sep 2026 15:48:29 +0000

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.mft
File:                     512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.mft (raw, json)
Hash identifier:          JXRv3pJySVganCmT9vt8pihFSiFKuW+Jm9aKWvYUg5U=
Subject key identifier:   70:CB:DD:15:73:D4:03:CF:BC:23:A1:42:26:BD:3C:57:AD:B6:13:C6
Authority key identifier: 51:2D:0D:56:D1:56:1B:4A:FE:3C:13:FF:64:32:B2:3F:B5:B3:8C:51
Certificate issuer:       /CN=512D0D56D1561B4AFE3C13FF6432B23FB5B38C51
Certificate serial:       3CA8DCE0A8765AE3F35E59340BBDF40D30DA30AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.mft
Manifest number:          04A0
Signing time:             Tue 08 Sep 2026 19:54:17 +0000
Manifest this update:     Tue 08 Sep 2026 19:49:17 +0000
Manifest next update:     Wed 09 Sep 2026 22:16:17 +0000
Files and hashes:         1: 34352e372e3139342e302f32332d3234203d3e20323636363037.roa (hash: dztkzU5TW/7JwlYiEd2eVjcDrIrcE13PnzIpSqpa1w4=)
                          2: 34352e372e3139322e302f32332d3234203d3e20323636363037.roa (hash: hwrQbFXrihuCGbQ5c53d5DCrExVSXcGPUnnUpOJXC2w=)
                          3: 323830343a336539343a3a2f33332d3338203d3e20323636363037.roa (hash: pu+XiiWiYK8+X99mlzXSYtWevrwM+YAX7huV75bz+vE=)
                          4: 34352e372e3139322e302f32322d3232203d3e20323636363037.roa (hash: 3oUo2HW666qMG1k3TaHsZSRDGz42I28r+MpAC4hGqSM=)
                          5: 512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.crl (hash: Yq42+A9TpPzudw5Zvrn04y4KLkJNvo+rM0OfkcgVRUk=)
                          6: 323830343a336539343a3a2f33322d3332203d3e20323636363037.roa (hash: 2jYK01WR9dm8jNb4JQS1Y9zCg3L1z7zFE7Nr3/qYRgE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a8:dc:e0:a8:76:5a:e3:f3:5e:59:34:0b:bd:f4:0d:30:da:30:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=512D0D56D1561B4AFE3C13FF6432B23FB5B38C51
        Validity
            Not Before: Sep  8 19:49:17 2026 GMT
            Not After : Sep  9 22:16:17 2026 GMT
        Subject: CN=70CBDD1573D403CFBC23A14226BD3C57ADB613C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a9:ce:ba:bb:d1:d3:08:51:1a:48:f0:1c:16:
                    75:26:84:c9:23:74:fa:5b:4f:08:c4:3f:22:38:7b:
                    a0:96:6a:43:84:b4:14:69:bb:4e:f8:34:14:e5:19:
                    fa:f2:93:de:f7:c9:f6:6b:95:15:43:53:83:eb:79:
                    78:ed:c9:a6:ef:73:d6:94:c2:94:08:c0:f4:04:ae:
                    71:45:de:9a:f1:47:85:a4:b9:3e:59:06:e5:3d:d6:
                    74:31:63:db:bf:02:ed:c6:ef:af:ae:de:a0:23:dc:
                    ad:86:11:d2:1b:ff:26:80:4c:e7:ec:77:dd:34:d0:
                    43:53:65:19:dc:8f:9b:26:f8:75:c0:5e:38:f4:d9:
                    55:80:9f:7a:9b:ef:51:25:b1:4e:6c:1b:12:23:69:
                    2e:4c:7c:e9:55:ea:29:50:8e:8f:ec:60:b8:ec:b5:
                    24:34:c6:a0:8d:dc:c2:cb:a1:c1:9b:d5:b7:62:4e:
                    ec:de:ef:f0:04:2b:8c:2f:7f:a2:40:ae:2c:39:fc:
                    95:4e:b3:c4:a8:30:38:9e:bb:1f:09:f2:21:1e:66:
                    f7:b3:f7:ab:f4:76:10:80:1a:01:73:70:fd:35:9a:
                    ea:ed:34:00:3f:2f:fc:30:2b:c7:19:de:4e:c8:c5:
                    b7:14:0c:39:a4:9a:61:a6:0c:41:54:46:26:d6:2f:
                    74:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:CB:DD:15:73:D4:03:CF:BC:23:A1:42:26:BD:3C:57:AD:B6:13:C6
            X509v3 Authority Key Identifier:
                keyid:51:2D:0D:56:D1:56:1B:4A:FE:3C:13:FF:64:32:B2:3F:B5:B3:8C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:a9:28:64:40:ad:56:8c:2f:68:93:fe:3a:a2:17:4f:39:55:
         96:03:5e:36:fd:da:03:d3:6c:b0:0f:9f:cb:c6:4b:94:8e:f0:
         6a:d8:5f:11:91:8c:a9:0d:6a:9b:5b:70:8f:1e:77:7c:87:af:
         4a:77:b7:fa:b6:28:b6:f2:59:0a:16:1c:31:f2:45:67:0e:0c:
         23:d9:6a:bf:83:54:ca:09:aa:e9:f8:b4:60:10:93:3b:3d:47:
         c4:fa:f3:77:72:f1:5e:9c:75:db:4c:27:56:57:4a:9b:ec:cd:
         26:a0:b5:42:68:d4:d6:a7:db:80:a9:f1:c4:37:a7:88:54:a5:
         66:96:ee:b5:1f:b3:bf:74:41:0d:19:fa:fb:1a:d4:3a:32:67:
         c3:ba:12:b4:ae:04:70:e4:06:db:be:5c:ba:02:90:ef:1b:1a:
         3d:26:ff:3c:fc:9c:97:c6:28:3d:d7:72:5c:48:88:79:a0:80:
         7d:61:57:1d:a3:14:26:11:c8:40:eb:b8:a3:66:e4:8a:35:e3:
         87:36:be:dd:39:b5:0a:3c:5b:4c:f2:c5:7a:f4:5f:74:d5:4a:
         a0:97:b5:5b:82:61:19:c5:d7:5e:c7:c5:24:50:eb:8e:f1:97:
         cc:32:85:60:32:85:68:88:1f:90:29:81:d8:c0:18:1a:73:c6:
         1c:f3:5b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 14:29:43 2026 by rpki-client