
Error: rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
Error: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer: certificate revoked on Thu 24 Sep 2026 11:06:23 +0000
Manifest
$ rpki-client -vvvf rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft
File: 3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft (raw, json)
Hash identifier: XKJojoy6s2vTORAl2KhjSfub8uFLzl6Ycj7r2uBd+hI=
Subject key identifier: 75:45:5C:01:95:28:B7:DE:8C:CC:53:68:2E:8B:91:AA:D2:A8:CF:FF
Authority key identifier: 3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1
Certificate issuer: /CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1
Certificate serial: 3BCEA5430AB9FC0AEED7C38D5B2E2C2AF9DBCCE7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft
Manifest number: 04AA
Signing time: Wed 16 Sep 2026 22:09:22 +0000
Manifest this update: Wed 16 Sep 2026 22:04:22 +0000
Manifest next update: Thu 17 Sep 2026 22:18:22 +0000
Files and hashes: 1: 34352e3137352e3233302e302f32332d3233203d3e20323638393133.roa (hash: E2IJqLpJqhC2sN0pmwaDrIfmgjIrQSv124eOj2oH/FU=)
2: 34352e3137352e3232392e302f32342d3234203d3e20323638393133.roa (hash: JMFBfHNLCD10KXYNGspE+0vvATZxPRJS05hw83vbUpw=)
3: 3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl (hash: e6W8uT1jPa4ac2VrD4uHZyahYRfA0CHIs1/mS4cFN98=)
4: 34352e3137352e3233302e302f32342d3234203d3e20323638393133.roa (hash: fjYN5ohW9UrvVn/jIhNTevNUqaEhTqTJbLSiX3l8FZM=)
5: 34352e3137352e3232382e302f32332d3233203d3e20323638393133.roa (hash: 8i34fQq4t0JzP8JRIPn/y0bpe/PzMo2bjI4IkVeVfGI=)
6: 323830343a356338343a3a2f33322d313238203d3e20323638393133.roa (hash: 4psnTXdLSw12WNhcpdrrRdiW1o6SQJjb27/rcdEonew=)
7: 34352e3137352e3232382e302f32342d3234203d3e20323638393133.roa (hash: TkNoZjEoAL/+boDq6uIF15NzTTplqQZFmhlSYsLYMmw=)
8: 34352e3137352e3233312e302f32342d3234203d3e20323638393133.roa (hash: 7HthnmuiFL+QZBUBOm+JQ0vVcX9DwEFThjzaPHstPe8=)
9: 34352e3137352e3232382e302f32322d3232203d3e20323638393133.roa (hash: MRmZ3/n2BmAbob40eZUZLgh7jvK3EY54pvvHXanBsB8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:ce:a5:43:0a:b9:fc:0a:ee:d7:c3:8d:5b:2e:2c:2a:f9:db:cc:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1
Validity
Not Before: Sep 16 22:04:22 2026 GMT
Not After : Sep 17 22:18:22 2026 GMT
Subject: CN=75455C019528B7DE8CCC53682E8B91AAD2A8CFFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:41:17:fa:86:66:96:48:79:9c:10:10:b2:2f:
e9:85:46:22:15:f1:f6:7f:75:96:86:a0:fb:a1:85:
77:f0:b8:1a:9d:d8:a2:39:42:a7:b6:0c:8d:a0:be:
a7:f8:a1:4d:3b:a6:9f:22:41:32:09:59:63:2c:db:
34:3c:93:78:dd:37:cb:3d:7d:fb:76:1c:6b:63:2c:
66:aa:f9:c4:cf:65:a3:69:7f:2d:61:7d:af:03:4e:
80:48:fa:53:6b:f5:4d:14:93:73:54:d4:71:ad:58:
9f:08:af:07:a1:22:0d:d7:91:24:41:fa:33:24:18:
fb:d6:26:39:dd:74:54:39:16:66:e2:eb:0a:32:a3:
ca:77:43:09:5b:27:41:c1:51:43:a7:2c:43:cd:fa:
97:82:36:70:3b:1f:51:d3:1d:59:7f:30:bb:23:0a:
a8:33:40:b7:ab:5e:49:0b:fb:81:a8:fd:d5:eb:61:
30:7c:e0:af:ca:29:0d:56:66:fb:49:52:d6:36:5a:
38:b2:f8:80:3e:af:77:f8:5e:7f:35:a7:23:7c:2d:
c1:3d:74:76:fb:65:e0:cb:b7:5b:eb:a3:e6:c0:b6:
42:b2:23:59:60:bf:7d:91:51:c5:14:66:69:98:73:
c6:9c:3f:1a:9a:ed:fa:ae:50:71:a5:a8:be:0a:e2:
93:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:45:5C:01:95:28:B7:DE:8C:CC:53:68:2E:8B:91:AA:D2:A8:CF:FF
X509v3 Authority Key Identifier:
keyid:3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:53:a5:a5:6c:63:9d:0f:3b:69:ea:70:08:df:32:b9:f2:39:
2a:73:c5:1a:61:e2:7c:36:19:ba:c9:c1:52:4f:ec:98:3c:21:
39:ff:1d:f3:79:5a:02:63:77:dd:43:d8:74:e1:d9:a3:a2:50:
f5:51:4e:22:0d:d8:c0:9e:71:26:b3:52:fe:25:21:05:42:2d:
eb:f9:d2:48:a3:00:0e:3f:21:89:d6:5d:f4:c6:d3:fc:51:4a:
a4:bc:ba:10:f8:78:4f:59:70:d0:6e:12:b8:af:9c:68:6a:5b:
be:3b:e7:49:b0:f7:a9:6e:a9:ff:1a:c3:1f:20:2f:8f:ff:f7:
6f:9c:ba:c3:1c:31:00:a4:62:da:53:2a:2e:c2:6f:be:00:c8:
d1:81:49:ea:cb:50:b4:c2:5d:64:30:28:56:06:39:04:41:c4:
34:ae:00:6f:70:90:97:47:8a:38:0d:93:6f:be:ab:74:fc:3f:
d9:ec:7f:cc:c0:b1:9f:87:82:f4:69:5a:9f:6c:7a:55:cb:0f:
0f:f0:5e:e6:a7:d0:be:c7:cd:73:8e:56:58:99:91:a6:fd:a2:
00:db:e6:b5:82:ff:b2:13:08:01:0b:b4:c9:a1:ad:6d:f7:0d:
2c:9c:da:33:e9:c4:30:9e:d8:37:49:49:2e:12:a8:2d:7e:02:
7c:58:ad:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:42:32 2026 by rpki-client