Error: rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
Error: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer: certificate revoked on Thu 24 Sep 2026 11:06:23 +0000

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft
File:                     3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft (raw, json)
Hash identifier:          XKJojoy6s2vTORAl2KhjSfub8uFLzl6Ycj7r2uBd+hI=
Subject key identifier:   75:45:5C:01:95:28:B7:DE:8C:CC:53:68:2E:8B:91:AA:D2:A8:CF:FF
Authority key identifier: 3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1
Certificate issuer:       /CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1
Certificate serial:       3BCEA5430AB9FC0AEED7C38D5B2E2C2AF9DBCCE7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft
Manifest number:          04AA
Signing time:             Wed 16 Sep 2026 22:09:22 +0000
Manifest this update:     Wed 16 Sep 2026 22:04:22 +0000
Manifest next update:     Thu 17 Sep 2026 22:18:22 +0000
Files and hashes:         1: 34352e3137352e3233302e302f32332d3233203d3e20323638393133.roa (hash: E2IJqLpJqhC2sN0pmwaDrIfmgjIrQSv124eOj2oH/FU=)
                          2: 34352e3137352e3232392e302f32342d3234203d3e20323638393133.roa (hash: JMFBfHNLCD10KXYNGspE+0vvATZxPRJS05hw83vbUpw=)
                          3: 3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl (hash: e6W8uT1jPa4ac2VrD4uHZyahYRfA0CHIs1/mS4cFN98=)
                          4: 34352e3137352e3233302e302f32342d3234203d3e20323638393133.roa (hash: fjYN5ohW9UrvVn/jIhNTevNUqaEhTqTJbLSiX3l8FZM=)
                          5: 34352e3137352e3232382e302f32332d3233203d3e20323638393133.roa (hash: 8i34fQq4t0JzP8JRIPn/y0bpe/PzMo2bjI4IkVeVfGI=)
                          6: 323830343a356338343a3a2f33322d313238203d3e20323638393133.roa (hash: 4psnTXdLSw12WNhcpdrrRdiW1o6SQJjb27/rcdEonew=)
                          7: 34352e3137352e3232382e302f32342d3234203d3e20323638393133.roa (hash: TkNoZjEoAL/+boDq6uIF15NzTTplqQZFmhlSYsLYMmw=)
                          8: 34352e3137352e3233312e302f32342d3234203d3e20323638393133.roa (hash: 7HthnmuiFL+QZBUBOm+JQ0vVcX9DwEFThjzaPHstPe8=)
                          9: 34352e3137352e3232382e302f32322d3232203d3e20323638393133.roa (hash: MRmZ3/n2BmAbob40eZUZLgh7jvK3EY54pvvHXanBsB8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ce:a5:43:0a:b9:fc:0a:ee:d7:c3:8d:5b:2e:2c:2a:f9:db:cc:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1
        Validity
            Not Before: Sep 16 22:04:22 2026 GMT
            Not After : Sep 17 22:18:22 2026 GMT
        Subject: CN=75455C019528B7DE8CCC53682E8B91AAD2A8CFFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:41:17:fa:86:66:96:48:79:9c:10:10:b2:2f:
                    e9:85:46:22:15:f1:f6:7f:75:96:86:a0:fb:a1:85:
                    77:f0:b8:1a:9d:d8:a2:39:42:a7:b6:0c:8d:a0:be:
                    a7:f8:a1:4d:3b:a6:9f:22:41:32:09:59:63:2c:db:
                    34:3c:93:78:dd:37:cb:3d:7d:fb:76:1c:6b:63:2c:
                    66:aa:f9:c4:cf:65:a3:69:7f:2d:61:7d:af:03:4e:
                    80:48:fa:53:6b:f5:4d:14:93:73:54:d4:71:ad:58:
                    9f:08:af:07:a1:22:0d:d7:91:24:41:fa:33:24:18:
                    fb:d6:26:39:dd:74:54:39:16:66:e2:eb:0a:32:a3:
                    ca:77:43:09:5b:27:41:c1:51:43:a7:2c:43:cd:fa:
                    97:82:36:70:3b:1f:51:d3:1d:59:7f:30:bb:23:0a:
                    a8:33:40:b7:ab:5e:49:0b:fb:81:a8:fd:d5:eb:61:
                    30:7c:e0:af:ca:29:0d:56:66:fb:49:52:d6:36:5a:
                    38:b2:f8:80:3e:af:77:f8:5e:7f:35:a7:23:7c:2d:
                    c1:3d:74:76:fb:65:e0:cb:b7:5b:eb:a3:e6:c0:b6:
                    42:b2:23:59:60:bf:7d:91:51:c5:14:66:69:98:73:
                    c6:9c:3f:1a:9a:ed:fa:ae:50:71:a5:a8:be:0a:e2:
                    93:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:45:5C:01:95:28:B7:DE:8C:CC:53:68:2E:8B:91:AA:D2:A8:CF:FF
            X509v3 Authority Key Identifier:
                keyid:3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:53:a5:a5:6c:63:9d:0f:3b:69:ea:70:08:df:32:b9:f2:39:
         2a:73:c5:1a:61:e2:7c:36:19:ba:c9:c1:52:4f:ec:98:3c:21:
         39:ff:1d:f3:79:5a:02:63:77:dd:43:d8:74:e1:d9:a3:a2:50:
         f5:51:4e:22:0d:d8:c0:9e:71:26:b3:52:fe:25:21:05:42:2d:
         eb:f9:d2:48:a3:00:0e:3f:21:89:d6:5d:f4:c6:d3:fc:51:4a:
         a4:bc:ba:10:f8:78:4f:59:70:d0:6e:12:b8:af:9c:68:6a:5b:
         be:3b:e7:49:b0:f7:a9:6e:a9:ff:1a:c3:1f:20:2f:8f:ff:f7:
         6f:9c:ba:c3:1c:31:00:a4:62:da:53:2a:2e:c2:6f:be:00:c8:
         d1:81:49:ea:cb:50:b4:c2:5d:64:30:28:56:06:39:04:41:c4:
         34:ae:00:6f:70:90:97:47:8a:38:0d:93:6f:be:ab:74:fc:3f:
         d9:ec:7f:cc:c0:b1:9f:87:82:f4:69:5a:9f:6c:7a:55:cb:0f:
         0f:f0:5e:e6:a7:d0:be:c7:cd:73:8e:56:58:99:91:a6:fd:a2:
         00:db:e6:b5:82:ff:b2:13:08:01:0b:b4:c9:a1:ad:6d:f7:0d:
         2c:9c:da:33:e9:c4:30:9e:d8:37:49:49:2e:12:a8:2d:7e:02:
         7c:58:ad:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:42:32 2026 by rpki-client