
Error: rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
Error: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.cer: certificate revoked on Wed 09 Sep 2026 11:51:30 +0000
Manifest
$ rpki-client -vvvf rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.mft
File: 3DFAB11D75C819D05773554EBACF15CD75341EF8.mft (raw, json)
Hash identifier: iEq8BOn+y8B9QzDtyW7nU0GGAX3005HKpLbnLni6tJA=
Subject key identifier: 74:1D:AF:94:A9:42:2F:AF:ED:45:B3:EE:63:BF:99:5A:EF:1E:21:E5
Authority key identifier: 3D:FA:B1:1D:75:C8:19:D0:57:73:55:4E:BA:CF:15:CD:75:34:1E:F8
Certificate issuer: /CN=3DFAB11D75C819D05773554EBACF15CD75341EF8
Certificate serial: 7779B8D0E0A1A507B25CD5A6E2ED4B89505C4D2B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.mft
Manifest number: 0536
Signing time: Wed 09 Sep 2026 00:10:00 +0000
Manifest this update: Wed 09 Sep 2026 00:05:00 +0000
Manifest next update: Thu 10 Sep 2026 00:10:00 +0000
Files and hashes: 1: 3230302e392e3131362e302f32322d3234203d3e20323731333238.roa (hash: 1+tu23htzbeHdf9eZWTCp755ljvCiaLehmRKfzaiEXM=)
2: 323830343a373963633a3a2f33322d3334203d3e20323731333238.roa (hash: uKDSVQIAmd/wFpMVLHPmFPmf1kT8GFm8akZsk43WZNw=)
3: 3DFAB11D75C819D05773554EBACF15CD75341EF8.crl (hash: QenRaeAuBOtMSan9KijqvOA6e3fB1zQDddpBBIiRUmM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:79:b8:d0:e0:a1:a5:07:b2:5c:d5:a6:e2:ed:4b:89:50:5c:4d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3DFAB11D75C819D05773554EBACF15CD75341EF8
Validity
Not Before: Sep 9 00:05:00 2026 GMT
Not After : Sep 10 00:10:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f0:a6:1e:3d:22:a5:86:8c:35:5b:4a:94:03:
b8:b3:c3:df:7d:a6:92:87:63:ba:b2:33:b1:9f:a2:
91:5a:7f:ff:56:58:63:63:98:24:ad:1f:5f:78:e0:
83:38:14:b6:08:f9:17:2e:24:e0:aa:22:85:02:37:
bf:16:30:4c:a9:f3:6b:5e:01:f7:86:8c:69:ae:09:
7d:7b:b6:b6:97:fd:48:2f:fb:8c:ca:9f:2d:b1:8a:
6a:de:27:0a:42:bd:d3:3b:2c:99:1b:93:1d:5d:f9:
ac:16:c3:89:e5:2d:1e:f8:cf:b7:17:ab:6c:55:4a:
a5:d4:e5:6f:08:1d:ef:bf:14:35:5d:e9:fc:51:a0:
7d:b6:dc:f8:dd:9d:2a:ee:95:6f:3f:ff:c6:84:31:
88:f4:1a:da:09:c5:a4:ae:65:07:34:36:b2:f0:a2:
b9:8d:53:5c:58:ee:15:6e:2e:e0:59:2c:5f:d9:32:
8c:89:9e:f1:c6:eb:7d:a2:75:db:14:a8:fc:d7:b2:
9f:80:6c:69:da:80:84:c0:1c:4a:db:ea:c8:d5:ea:
7a:1f:45:af:f7:1f:a3:14:b5:95:57:e7:b7:9c:21:
cb:d7:f3:2b:fc:78:f6:71:3f:9e:e2:16:34:77:48:
26:db:7a:9f:f1:18:e6:3c:ae:62:07:6f:4e:1e:af:
4e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1D:AF:94:A9:42:2F:AF:ED:45:B3:EE:63:BF:99:5A:EF:1E:21:E5
X509v3 Authority Key Identifier:
keyid:3D:FA:B1:1D:75:C8:19:D0:57:73:55:4E:BA:CF:15:CD:75:34:1E:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:7b:0e:ba:8a:f3:d9:76:26:c6:20:06:6c:52:17:f8:33:55:
a9:ae:53:86:c2:f1:06:86:dd:c2:60:6b:85:e8:29:a2:de:71:
83:d4:d6:d4:6c:37:17:9f:b6:6d:b0:d2:ed:de:ea:b6:0d:ae:
53:69:5e:14:95:b5:19:a0:7d:d7:86:ea:50:64:17:b2:74:d8:
61:26:53:50:6d:e7:62:4f:53:86:67:3d:17:26:d8:c6:3b:f0:
25:32:23:ba:f4:59:4d:c1:97:1d:6c:b8:f2:85:42:5a:24:f8:
06:c2:43:ec:d5:42:e4:4e:e7:ce:d6:4e:75:6b:a6:14:06:3e:
bd:cd:32:9f:0c:79:de:4d:71:9d:5f:50:aa:5f:ad:d8:6e:20:
57:9d:f8:32:aa:1e:0f:38:31:a8:05:47:da:7e:c8:0f:2f:34:
25:22:67:00:8a:73:08:19:6b:e5:91:74:aa:65:b1:f9:85:93:
a1:b6:be:d5:42:01:3d:61:f4:91:01:99:be:b8:09:59:c5:b3:
e4:68:7e:2f:72:cb:98:5e:29:40:e2:89:c4:e2:db:84:c8:43:
2e:83:e5:72:cd:e4:77:ad:a0:9c:12:c3:1a:f8:63:f7:32:a1:
cc:09:48:5f:85:be:df:bf:93:c0:ca:5f:76:b1:9d:a3:df:db:
e6:61:18:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:23:09 2026 by rpki-client