Error: rpki-repo.registro.br/repo/4n8kKszPV1BB7PtoTMmPFPXjTefHxMVt5CkghBy9Tzpc/1/256D15C72429EEE41B4984BABC13685E98FEBF41.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
Error: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/256D15C72429EEE41B4984BABC13685E98FEBF41.cer: certificate revoked on Fri 25 Sep 2026 18:39:42 +0000

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4n8kKszPV1BB7PtoTMmPFPXjTefHxMVt5CkghBy9Tzpc/1/256D15C72429EEE41B4984BABC13685E98FEBF41.mft
File:                     256D15C72429EEE41B4984BABC13685E98FEBF41.mft (raw, json)
Hash identifier:          1udE6X4/6cyV64/rzaHDy+WcAWDHQCsP+WNGqHfLLfA=
Subject key identifier:   6C:86:EB:3E:64:E5:2D:9C:CD:9C:56:2C:28:BD:80:DA:06:CA:1B:4A
Authority key identifier: 25:6D:15:C7:24:29:EE:E4:1B:49:84:BA:BC:13:68:5E:98:FE:BF:41
Certificate issuer:       /CN=256D15C72429EEE41B4984BABC13685E98FEBF41
Certificate serial:       4AF747BDB022732F4B728DE7AB74842DEFB707DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/256D15C72429EEE41B4984BABC13685E98FEBF41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4n8kKszPV1BB7PtoTMmPFPXjTefHxMVt5CkghBy9Tzpc/1/256D15C72429EEE41B4984BABC13685E98FEBF41.mft
Manifest number:          04B6
Signing time:             Fri 25 Sep 2026 17:00:05 +0000
Manifest this update:     Fri 25 Sep 2026 16:55:05 +0000
Manifest next update:     Sat 26 Sep 2026 20:16:05 +0000
Files and hashes:         1: 256D15C72429EEE41B4984BABC13685E98FEBF41.crl (hash: 6mBnVfljFi55Ur62y+dKPmNT+DVv8K16fDidjRzxqCY=)
                          2: 323830343a333138303a3a2f33322d3438203d3e20323635303139.roa (hash: 0FOzFXoayq4xUFv/10/p3zWVHQgnuv3bC8tiD5BIJ6g=)
                          3: 3137302e38342e33362e302f32322d3234203d3e20323635303139.roa (hash: mcifhKoP3vAMDvtwxRHKHZYs7eex6cSkCn1Gtsp12Yo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:f7:47:bd:b0:22:73:2f:4b:72:8d:e7:ab:74:84:2d:ef:b7:07:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256D15C72429EEE41B4984BABC13685E98FEBF41
        Validity
            Not Before: Sep 25 16:55:05 2026 GMT
            Not After : Sep 26 20:16:05 2026 GMT
        Subject: CN=6C86EB3E64E52D9CCD9C562C28BD80DA06CA1B4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2f:3b:32:b9:c4:f8:7b:bd:12:2e:39:af:97:
                    5a:3b:76:42:12:c7:7a:a1:89:79:f2:c6:96:a9:76:
                    08:40:81:f4:09:ca:89:2a:70:12:da:a0:20:60:24:
                    85:bf:92:b6:ef:a4:36:f2:5e:43:02:c8:4a:9a:cc:
                    c0:c8:4a:23:77:43:6d:8e:92:5b:31:f6:4f:9c:f9:
                    c2:42:c1:73:6a:50:d4:37:3c:67:8c:6f:ff:f1:60:
                    42:19:97:eb:cf:de:e0:c3:91:61:2e:06:50:89:63:
                    71:61:6b:7f:e9:61:6e:f1:45:85:90:71:e7:b0:6c:
                    f9:16:91:09:42:cc:ea:16:73:9e:69:e9:14:60:6e:
                    44:c3:8f:02:36:27:96:90:52:42:9b:5e:e3:73:95:
                    34:db:58:5a:f6:3a:9a:c2:88:64:3f:94:14:97:06:
                    e6:06:fc:34:05:03:34:a2:59:d4:60:84:c3:81:fd:
                    e8:5e:c9:d1:c1:9f:d6:57:b2:d3:ed:ad:e3:ef:ed:
                    34:6e:c3:ee:98:9a:8b:10:fa:41:18:d8:24:ef:ba:
                    b2:e3:72:28:99:04:19:ef:b5:ef:d7:3e:94:31:fb:
                    e9:93:87:20:bc:9b:70:b9:49:f9:fc:6c:9a:3a:94:
                    74:2d:38:95:10:88:e7:55:d3:ee:48:20:0c:a4:e4:
                    87:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:86:EB:3E:64:E5:2D:9C:CD:9C:56:2C:28:BD:80:DA:06:CA:1B:4A
            X509v3 Authority Key Identifier:
                keyid:25:6D:15:C7:24:29:EE:E4:1B:49:84:BA:BC:13:68:5E:98:FE:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4n8kKszPV1BB7PtoTMmPFPXjTefHxMVt5CkghBy9Tzpc/1/256D15C72429EEE41B4984BABC13685E98FEBF41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/256D15C72429EEE41B4984BABC13685E98FEBF41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4n8kKszPV1BB7PtoTMmPFPXjTefHxMVt5CkghBy9Tzpc/1/256D15C72429EEE41B4984BABC13685E98FEBF41.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:b1:d1:16:99:92:1c:c9:a1:df:05:31:b4:ef:7e:cc:13:a0:
         3c:7f:87:25:dd:a7:1c:bd:c2:99:cf:67:94:95:d2:31:40:fd:
         40:db:13:b4:7b:25:05:69:7e:8e:62:f1:34:fe:36:40:23:48:
         e7:8d:2b:3f:fe:43:15:ae:cd:0a:a9:78:7b:36:68:3d:2e:2f:
         50:2d:a6:7e:0f:83:52:ae:be:86:4f:57:d5:4a:fe:2b:3d:25:
         8d:e5:d7:57:a0:46:ed:9a:63:cb:37:a2:9b:49:ca:5e:bc:58:
         5b:56:43:96:fc:c5:ba:8e:63:0c:14:7a:60:34:fd:7a:cf:ad:
         5b:ac:9d:a0:e0:f5:a1:95:08:13:db:49:19:65:6f:09:67:b1:
         53:3c:be:aa:75:c9:ea:a5:87:29:7a:97:26:f8:98:59:39:8f:
         9b:4e:fc:fc:5e:31:6f:62:f4:50:80:15:18:ba:43:64:53:37:
         ed:f3:2c:87:67:ff:9f:2c:bb:65:a0:3f:d8:48:51:ed:ff:27:
         8b:25:a3:84:7b:d9:c8:ac:e7:49:8b:0c:19:b3:d0:4a:55:47:
         a6:13:78:19:a7:4f:b3:1a:57:39:03:9d:23:0e:c5:22:a8:5d:
         08:7f:99:9d:73:f8:88:51:df:62:e4:f6:52:ae:0f:db:4c:e2:
         d6:d5:06:9b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSvdHvbAicy9Lco3nq3SELe+3B9owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjU2RDE1QzcyNDI5RUVFNDFCNDk4NEJBQkMxMzY4NUU5
OEZFQkY0MTAeFw0yNjA5MjUxNjU1MDVaFw0yNjA5MjYyMDE2MDVaMDMxMTAvBgNV
BAMTKDZDODZFQjNFNjRFNTJEOUNDRDlDNTYyQzI4QkQ4MERBMDZDQTFCNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDLzsyucT4e70SLjmvl1o7dkIS
x3qhiXnyxpapdghAgfQJyokqcBLaoCBgJIW/krbvpDbyXkMCyEqazMDISiN3Q22O
klsx9k+c+cJCwXNqUNQ3PGeMb//xYEIZl+vP3uDDkWEuBlCJY3Fha3/pYW7xRYWQ
ceewbPkWkQlCzOoWc55p6RRgbkTDjwI2J5aQUkKbXuNzlTTbWFr2OprCiGQ/lBSX
BuYG/DQFAzSiWdRghMOB/eheydHBn9ZXstPtrePv7TRuw+6YmosQ+kEY2CTvurLj
ciiZBBnvte/XPpQx++mThyC8m3C5Sfn8bJo6lHQtOJUQiOdV0+5IIAyk5IdPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUbIbrPmTlLZzNnFYsKL2A2gbKG0owHwYDVR0j
BBgwFoAUJW0VxyQp7uQbSYS6vBNoXpj+v0EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG44a0tzelBWMUJCN1B0b1RNbVBGUFhqVGVmSHhNVnQ1Q2tnaEJ5OVR6
cGMvMS8yNTZEMTVDNzI0MjlFRUU0MUI0OTg0QkFCQzEzNjg1RTk4RkVCRjQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1NkQxNUM3MjQyOUVFRTQx
QjQ5ODRCQUJDMTM2ODVFOThGRUJGNDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NG44a0tzelBWMUJCN1B0b1RNbVBGUFhqVGVmSHhNVnQ1Q2tnaEJ5OVR6cGMvMS8y
NTZEMTVDNzI0MjlFRUU0MUI0OTg0QkFCQzEzNjg1RTk4RkVCRjQxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwbHRFpmSHMmh3wUxtO9+zBOgPH+HJd2nHL3Cmc9nlJXSMUD9QNsTtHslBWl+
jmLxNP42QCNI540rP/5DFa7NCql4ezZoPS4vUC2mfg+DUq6+hk9X1Ur+Kz0ljeXX
V6BG7Zpjyzeim0nKXrxYW1ZDlvzFuo5jDBR6YDT9es+tW6ydoOD1oZUIE9tJGWVv
CWexUzy+qnXJ6qWHKXqXJviYWTmPm078/F4xb2L0UIAVGLpDZFM37fMsh2f/nyy7
ZaA/2EhR7f8niyWjhHvZyKznSYsMGbPQSlVHphN4GadPsxpXOQOdIw7FIqhdCH+Z
nXP4iFHfYuT2Uq4P20zi1tUGmw==
-----END CERTIFICATE-----
Generated at Wed Oct 28 22:30:52 2026 by rpki-client