
Error: rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
Error: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.cer: certificate revoked on Mon 05 Oct 2026 22:48:35 +0000
Manifest
$ rpki-client -vvvf rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.mft
File: A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.mft (raw, json)
Hash identifier: AF0dEsY1AUfvK4hM+hukv2A+AiPLnUYwXmOWry1s8AM=
Subject key identifier: 0A:42:01:B0:D1:6E:0A:FC:80:69:AA:64:4D:04:A8:BA:1B:21:ED:1C
Authority key identifier: A9:48:AB:96:F6:BB:7D:AC:2C:16:76:EF:BE:E8:D6:10:99:C6:1E:0A
Certificate issuer: /CN=A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A
Certificate serial: 2D2F9616017C9166EB05964E89F9BEEA4C12B79C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.mft
Manifest number: 0283
Signing time: Wed 30 Sep 2026 02:04:16 +0000
Manifest this update: Wed 30 Sep 2026 01:59:16 +0000
Manifest next update: Thu 01 Oct 2026 04:54:16 +0000
Files and hashes: 1: 3133382e3131372e38382e302f32322d3234203d3e20323634323336.roa (hash: jRl6uCp1lXSdBu+elav8qJ1k4MyeTiN66tGuXLXGYMY=)
2: 323830343a323461383a3a2f33322d3438203d3e20323634323336.roa (hash: 7rglwH81TnEjxeWemCrfPaJn0/HGb2XvAJ6Zj37PSdc=)
3: A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.crl (hash: 3SuhDXGFgNd7npSf50GcwZPGo+Gt6bqedcBvL9phQ9w=)
4: 3136382e39302e33362e302f32322d3234203d3e20323634323336.roa (hash: sfH7iliEnFn+lZOZmOIbMicXhpUjZ+FlDxfrILDs5K8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:2f:96:16:01:7c:91:66:eb:05:96:4e:89:f9:be:ea:4c:12:b7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A
Validity
Not Before: Sep 30 01:59:16 2026 GMT
Not After : Oct 1 04:54:16 2026 GMT
Subject: CN=0A4201B0D16E0AFC8069AA644D04A8BA1B21ED1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ba:04:d3:2b:79:a9:54:9e:5c:3f:76:e1:c9:
4f:d6:7c:1c:f6:d4:19:e3:0e:f9:2b:07:17:b9:de:
3b:8b:e4:28:eb:68:02:ac:2e:af:b9:dd:5c:6b:97:
49:f9:33:1e:f0:26:0b:f7:5f:5f:b7:fe:aa:81:28:
ee:c4:f9:1f:a9:0b:6e:7a:f9:39:26:6f:f4:cd:3a:
5f:58:da:fd:a0:5a:7a:60:55:30:72:7b:d0:ed:9f:
14:f8:2f:e6:fb:d1:a0:7a:34:6a:08:da:d7:a4:8a:
7d:fb:3e:5d:f7:57:b7:74:ec:6a:7d:23:58:17:20:
5c:59:43:a9:15:66:3f:f6:38:89:cf:58:52:47:1a:
42:6b:ec:5f:be:a4:ea:62:f8:b5:5f:80:44:ff:64:
07:51:39:c6:a8:24:e4:2e:85:1f:a9:75:83:ba:c8:
17:52:3d:17:dc:9f:af:ad:f8:73:06:51:1e:5a:f9:
b6:52:4f:df:76:49:87:c2:5c:05:07:93:4a:46:16:
6b:12:82:69:04:8f:12:e7:1c:9a:f3:36:98:7e:b6:
80:1c:31:b8:45:2b:a5:e1:65:8d:a1:d9:3e:37:6f:
8e:0e:1b:fd:7f:40:8a:ee:9b:07:ea:ec:b0:07:35:
46:d2:ef:31:fc:80:bc:c3:f5:41:96:bd:32:97:27:
f2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:42:01:B0:D1:6E:0A:FC:80:69:AA:64:4D:04:A8:BA:1B:21:ED:1C
X509v3 Authority Key Identifier:
keyid:A9:48:AB:96:F6:BB:7D:AC:2C:16:76:EF:BE:E8:D6:10:99:C6:1E:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:1e:32:e5:3e:ae:b3:7a:4d:e9:ac:44:ba:9c:f4:4f:ee:d5:
22:aa:e9:b8:f0:6a:7e:a5:4e:09:21:79:90:4f:5e:70:82:c2:
8d:ec:44:e3:29:03:3d:30:cb:8f:6b:0a:b0:47:10:f6:ef:d9:
81:b3:8e:10:d2:35:e8:e7:a7:e0:ac:d0:06:f9:e8:d3:8d:6c:
76:49:9a:d3:1a:ec:ca:9b:09:fe:aa:30:60:71:97:9d:33:81:
d5:5b:ff:56:7c:36:26:d7:4b:a5:3e:e5:10:08:6c:df:be:80:
38:8a:18:7c:0f:24:bc:4f:3b:ec:af:80:06:92:f7:0d:1c:ac:
8d:5c:03:52:21:82:b0:29:c5:72:01:6e:92:bd:ce:b8:94:26:
8e:04:42:b8:82:6d:be:51:b6:ec:cc:43:22:20:6a:3f:8d:25:
b5:11:4e:b0:63:cd:6e:fd:c1:46:2a:37:55:64:dd:c7:08:18:
44:0d:56:c3:87:45:42:f5:0f:0c:ae:fc:82:95:d3:81:aa:d2:
43:7d:53:5f:0c:60:b6:cb:80:c6:63:f0:9e:eb:0e:6b:8a:48:
89:b5:57:1b:45:0e:d4:89:a4:98:c5:c6:20:f9:ee:23:7a:97:
8c:21:34:1f:f6:bd:bb:41:2d:3a:28:4c:fe:bf:01:57:94:e8:
51:e6:66:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 02:21:25 2026 by rpki-client