
Error: rpki-repo.registro.br/repo/5tpmkVizxqXDbkDRwN1voPdXTEFY5f4GaDmmoKZwuqzn/0/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
Error: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.cer: certificate revoked on Tue 06 Oct 2026 01:50:46 +0000
Manifest
$ rpki-client -vvvf rpki-repo.registro.br/repo/5tpmkVizxqXDbkDRwN1voPdXTEFY5f4GaDmmoKZwuqzn/0/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.mft
File: 16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.mft (raw, json)
Hash identifier: 1OO7Gkv1+lke+iQjN33T/kElxz1QWI2x/8ic9i6eZUI=
Subject key identifier: 27:01:FB:19:53:E1:2E:5F:59:6A:DB:27:7D:7C:03:B4:BF:D2:25:32
Authority key identifier: 16:FF:CD:7C:F1:37:4D:25:6D:7E:12:26:D5:1D:91:AF:91:53:AA:A2
Certificate issuer: /CN=16FFCD7CF1374D256D7E1226D51D91AF9153AAA2
Certificate serial: 21D0CFAABE1E522A16BF3B31F89D41D3F57CC373
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5tpmkVizxqXDbkDRwN1voPdXTEFY5f4GaDmmoKZwuqzn/0/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.mft
Manifest number: 0282
Signing time: Wed 30 Sep 2026 04:44:50 +0000
Manifest this update: Wed 30 Sep 2026 04:39:50 +0000
Manifest next update: Thu 01 Oct 2026 07:05:50 +0000
Files and hashes: 1: 323830343a366434633a3a2f33322d3438203d3e20323730353233.roa (hash: sVZ8j7yMpbOyrsLPaJWZUy3zVCmTXbvXzpBctjdOs/M=)
2: 16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.crl (hash: gOYdvtqgci6byQH1Q2ujHLObIgmjUbvj0NHGnGXFG5I=)
3: 3138372e3130332e3139362e302f32322d3234203d3e20323730353233.roa (hash: DsG172lXClKDJlYTnSPBr1mF/tvTF9pvws0nobWcaWY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:d0:cf:aa:be:1e:52:2a:16:bf:3b:31:f8:9d:41:d3:f5:7c:c3:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16FFCD7CF1374D256D7E1226D51D91AF9153AAA2
Validity
Not Before: Sep 30 04:39:50 2026 GMT
Not After : Oct 1 07:05:50 2026 GMT
Subject: CN=2701FB1953E12E5F596ADB277D7C03B4BFD22532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7c:02:42:ec:e5:46:99:ed:a1:e5:ae:a7:3f:
2d:a1:0f:91:94:b5:1b:d7:f5:21:73:71:dd:09:f2:
1b:e6:96:cc:98:8b:77:7e:61:4f:5c:c3:48:87:d4:
ec:0f:fc:8e:71:ca:49:19:33:f1:c7:91:3e:2f:96:
1f:6a:b1:10:4b:01:c3:21:6b:7e:8e:05:05:bf:02:
b7:b4:9a:57:e6:29:ac:cd:f0:a8:70:92:c5:5b:49:
42:3c:9a:ff:19:57:2a:2e:36:81:df:72:43:48:76:
a2:f2:95:48:34:c4:7a:8e:80:f9:35:f1:77:94:f3:
8a:c1:00:30:d0:26:26:cc:20:6a:05:11:3c:fc:3d:
7f:3c:b9:90:15:10:98:f4:8c:3e:67:d1:07:5b:56:
84:15:4f:f2:68:43:07:7f:03:44:d2:dc:3e:72:ea:
d1:5f:8d:9d:4d:cf:f2:d7:9f:34:af:8f:7d:e2:df:
93:c3:31:f8:6b:4c:b5:ce:75:e7:d5:41:01:10:20:
60:b9:ac:d8:77:25:91:1b:d3:10:25:0f:15:ee:39:
c9:c4:39:31:9f:a1:55:bd:70:00:5c:82:1c:21:8f:
f4:ee:62:6a:6d:b8:54:4e:56:6a:80:af:c8:9b:30:
bf:79:cf:57:eb:2a:d4:c5:4b:95:54:fc:9e:14:05:
90:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:01:FB:19:53:E1:2E:5F:59:6A:DB:27:7D:7C:03:B4:BF:D2:25:32
X509v3 Authority Key Identifier:
keyid:16:FF:CD:7C:F1:37:4D:25:6D:7E:12:26:D5:1D:91:AF:91:53:AA:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5tpmkVizxqXDbkDRwN1voPdXTEFY5f4GaDmmoKZwuqzn/0/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5tpmkVizxqXDbkDRwN1voPdXTEFY5f4GaDmmoKZwuqzn/0/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:cb:e8:af:7b:04:b8:26:b6:8e:90:20:92:9a:ac:fe:ce:28:
48:da:f1:73:11:32:8f:7c:46:98:d9:99:d1:b1:ae:ba:f0:30:
0a:0b:68:2c:bf:6c:1e:65:ab:dc:48:4d:ad:de:6c:19:8c:b0:
d7:c9:ba:3e:46:ac:17:f1:1a:b5:28:dd:c7:ff:eb:89:b6:0a:
8a:2c:3a:80:70:23:00:3b:49:93:45:94:92:f4:df:0d:06:02:
36:61:de:73:f9:af:36:88:5f:1a:8f:86:22:bb:da:98:91:cb:
f2:6d:3e:94:6f:d8:fc:ef:49:13:bc:a6:5c:d6:05:27:4c:63:
26:88:56:58:16:57:58:74:62:ee:ec:db:53:62:15:a3:e2:48:
af:d2:f3:cb:45:c4:a2:97:ef:6b:8c:10:63:e5:72:57:d4:a1:
47:02:d5:d2:40:98:85:df:ea:83:76:0c:a4:8f:89:fe:00:68:
a5:c4:a9:a7:19:50:b1:ca:67:94:de:e8:32:11:8a:bd:41:09:
61:f9:e1:01:4f:5b:e2:9a:36:b1:5f:49:d4:29:75:37:b2:c7:
4f:79:23:49:61:1b:26:f8:74:34:ce:ed:dc:31:7e:6d:f2:57:
79:11:5a:2e:03:e8:08:d3:1c:f4:ee:2d:02:cf:b7:fa:8e:2a:
da:95:53:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:53:04 2026 by rpki-client