Error: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6884A1CC4A18E11C8C7C005037C1A88A3517CE5D.cer: certificate revoked on Wed 23 Sep 2026 06:49:04 +0000

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/6884A1CC4A18E11C8C7C005037C1A88A3517CE5D.mft
File:                     6884A1CC4A18E11C8C7C005037C1A88A3517CE5D.mft (raw, json)
Hash identifier:          8KIceYJLMP8iiuBNLxdf/DkfQMz+Jn/jY0tPzuPqWF4=
Subject key identifier:   EB:D0:F6:33:32:AE:C0:83:D7:01:D5:B6:34:D8:C6:96:58:73:C4:FC
Authority key identifier: 68:84:A1:CC:4A:18:E1:1C:8C:7C:00:50:37:C1:A8:8A:35:17:CE:5D
Certificate issuer:       /CN=6884A1CC4A18E11C8C7C005037C1A88A3517CE5D
Certificate serial:       575FA5C784E95BD10DE74FBE0A84B00A4CB45098
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6884A1CC4A18E11C8C7C005037C1A88A3517CE5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/6884A1CC4A18E11C8C7C005037C1A88A3517CE5D.mft
Manifest number:          0130
Signing time:             Thu 17 Sep 2026 11:41:53 +0000
Manifest this update:     Thu 17 Sep 2026 11:36:53 +0000
Manifest next update:     Fri 18 Sep 2026 12:56:53 +0000
Files and hashes:         1: 6884A1CC4A18E11C8C7C005037C1A88A3517CE5D.crl (hash: 3NwArgpnKEYb3z4wVjd21afsdxmQobof4pNMiT9Maao=)
                          2: 34352e3137392e3132312e302f32342d3234203d3e20323639303834.roa (hash: iHjV0lynYpxKXyvKZ6QYUPZd77OBVv376LbUBFZLr+Y=)
                          3: 34352e3137392e3132322e302f32342d3234203d3e20323639303834.roa (hash: 8hXZkBohPncs4ClmQ/nK36DN1ABJS4icl5IYrEEQJdc=)
                          4: 34352e3137392e3132332e302f32342d3234203d3e20323639303834.roa (hash: ukNHqPJic6dAseLepb3VMiwhMuLoWpZ1shSyvBXaBo8=)
                          5: 34352e3137392e3132302e302f32322d3232203d3e20323639303834.roa (hash: LsMXl7txTOAUchDa0Vk1W4iQcaPYM9YpcSAd2R01ARo=)
                          6: 323830343a356633383a3a2f33322d3332203d3e20323639303834.roa (hash: /Mn+oL3IemycoC6rYq5RWh6SBdJTf+ipEMVIieRDK/4=)
                          7: 34352e3137392e3132302e302f32342d3234203d3e20323639303834.roa (hash: Jw6lYiAKNDsrZj8WVK8rSk5OVNmYy2e53INwUg/1x9Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:5f:a5:c7:84:e9:5b:d1:0d:e7:4f:be:0a:84:b0:0a:4c:b4:50:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6884A1CC4A18E11C8C7C005037C1A88A3517CE5D
        Validity
            Not Before: Sep 17 11:36:53 2026 GMT
            Not After : Sep 18 12:56:53 2026 GMT
        Subject: CN=EBD0F63332AEC083D701D5B634D8C6965873C4FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4d:9f:4e:d4:6d:ac:54:95:76:b6:30:a1:7f:
                    9d:74:38:bd:5c:2e:67:44:de:30:e9:11:33:21:04:
                    7e:a1:9e:dd:14:bd:c9:48:47:be:a8:12:1d:a8:01:
                    56:81:84:52:73:f1:0e:c8:5c:2d:0d:34:6f:72:96:
                    a0:8a:86:54:91:ab:26:b2:1b:dc:7d:91:c4:a2:a4:
                    35:ea:b0:32:ca:8f:26:ca:2b:15:3a:d5:d3:9b:73:
                    cc:79:96:52:a7:c3:56:51:18:56:51:bf:ab:06:4a:
                    34:e1:b2:ee:30:50:ee:85:7a:5c:0b:4a:be:53:b8:
                    c9:c3:fc:1e:af:6d:95:3d:68:81:e4:b0:cc:e9:6e:
                    3b:0a:20:c9:7d:58:f5:bf:56:d4:57:f3:02:59:00:
                    e0:0c:c4:76:f1:72:c1:df:39:ab:19:cd:41:0c:c8:
                    58:bc:ef:6b:ec:f6:0a:63:81:bb:f4:12:92:ab:61:
                    04:76:ee:b2:50:eb:9c:c0:1b:c9:6b:ab:d2:42:03:
                    69:0b:fb:2c:96:06:b8:63:4f:34:a5:12:aa:92:8e:
                    1e:5d:c7:a4:9f:00:56:cb:19:d5:f5:ca:f1:92:d5:
                    37:01:ba:b3:34:93:27:c2:4a:ad:6d:b8:8f:4e:aa:
                    04:6f:2a:51:5b:fa:59:a9:38:36:e9:98:60:d7:3d:
                    d3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D0:F6:33:32:AE:C0:83:D7:01:D5:B6:34:D8:C6:96:58:73:C4:FC
            X509v3 Authority Key Identifier:
                keyid:68:84:A1:CC:4A:18:E1:1C:8C:7C:00:50:37:C1:A8:8A:35:17:CE:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/6884A1CC4A18E11C8C7C005037C1A88A3517CE5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6884A1CC4A18E11C8C7C005037C1A88A3517CE5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/6884A1CC4A18E11C8C7C005037C1A88A3517CE5D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:45:8f:9d:7e:b9:7b:0f:f1:64:da:4b:92:23:2b:42:94:eb:
         2a:98:df:7c:48:56:2c:fe:bb:7f:15:e4:3e:1d:5f:50:a9:e4:
         03:13:d7:a8:88:0b:f1:5d:6b:a1:60:4a:e9:02:38:4d:b8:5f:
         39:5d:7e:9c:bd:12:07:2b:40:97:b6:16:be:af:8c:cd:01:8a:
         dc:f5:01:13:34:53:12:b7:fc:82:cc:17:60:25:c7:52:c4:e2:
         40:25:0b:92:04:73:b6:e7:06:4d:aa:e3:f0:f9:52:53:f6:c7:
         46:82:8f:e9:2c:40:16:ba:a5:87:64:35:82:77:93:b7:26:55:
         ac:cc:c8:20:d5:83:bb:b1:b0:3a:11:4b:e6:0b:85:a0:95:3f:
         2c:cb:1f:b9:65:0a:48:a8:a6:4a:3f:0c:28:60:7e:c5:e4:d9:
         07:11:3a:3f:c4:f1:48:b3:24:0a:a2:c3:0c:e6:11:47:8c:98:
         5d:bc:ce:8a:db:db:4e:46:40:e3:52:2f:ed:64:7d:45:5a:bb:
         57:be:64:82:f4:15:a9:4a:01:2c:4e:2f:2e:0b:d1:60:d4:65:
         fa:1a:9c:26:1a:c1:0d:9b:e1:7d:af:52:23:b5:57:b4:e8:11:
         05:06:89:7d:c4:21:3c:29:ae:54:ef:48:f3:3f:a2:fe:41:bd:
         f2:8a:da:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 22:49:57 2026 by rpki-client