Error: rpki-repo.registro.br/repo/5tpmkVizxqXDbkDRwN1voPdXTEFY5f4GaDmmoKZwuqzn/0/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
Error: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.cer: certificate revoked on Tue 06 Oct 2026 01:50:46 +0000

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5tpmkVizxqXDbkDRwN1voPdXTEFY5f4GaDmmoKZwuqzn/0/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.mft
File:                     16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.mft (raw, json)
Hash identifier:          1OO7Gkv1+lke+iQjN33T/kElxz1QWI2x/8ic9i6eZUI=
Subject key identifier:   27:01:FB:19:53:E1:2E:5F:59:6A:DB:27:7D:7C:03:B4:BF:D2:25:32
Authority key identifier: 16:FF:CD:7C:F1:37:4D:25:6D:7E:12:26:D5:1D:91:AF:91:53:AA:A2
Certificate issuer:       /CN=16FFCD7CF1374D256D7E1226D51D91AF9153AAA2
Certificate serial:       21D0CFAABE1E522A16BF3B31F89D41D3F57CC373
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5tpmkVizxqXDbkDRwN1voPdXTEFY5f4GaDmmoKZwuqzn/0/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.mft
Manifest number:          0282
Signing time:             Wed 30 Sep 2026 04:44:50 +0000
Manifest this update:     Wed 30 Sep 2026 04:39:50 +0000
Manifest next update:     Thu 01 Oct 2026 07:05:50 +0000
Files and hashes:         1: 323830343a366434633a3a2f33322d3438203d3e20323730353233.roa (hash: sVZ8j7yMpbOyrsLPaJWZUy3zVCmTXbvXzpBctjdOs/M=)
                          2: 16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.crl (hash: gOYdvtqgci6byQH1Q2ujHLObIgmjUbvj0NHGnGXFG5I=)
                          3: 3138372e3130332e3139362e302f32322d3234203d3e20323730353233.roa (hash: DsG172lXClKDJlYTnSPBr1mF/tvTF9pvws0nobWcaWY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d0:cf:aa:be:1e:52:2a:16:bf:3b:31:f8:9d:41:d3:f5:7c:c3:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16FFCD7CF1374D256D7E1226D51D91AF9153AAA2
        Validity
            Not Before: Sep 30 04:39:50 2026 GMT
            Not After : Oct  1 07:05:50 2026 GMT
        Subject: CN=2701FB1953E12E5F596ADB277D7C03B4BFD22532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7c:02:42:ec:e5:46:99:ed:a1:e5:ae:a7:3f:
                    2d:a1:0f:91:94:b5:1b:d7:f5:21:73:71:dd:09:f2:
                    1b:e6:96:cc:98:8b:77:7e:61:4f:5c:c3:48:87:d4:
                    ec:0f:fc:8e:71:ca:49:19:33:f1:c7:91:3e:2f:96:
                    1f:6a:b1:10:4b:01:c3:21:6b:7e:8e:05:05:bf:02:
                    b7:b4:9a:57:e6:29:ac:cd:f0:a8:70:92:c5:5b:49:
                    42:3c:9a:ff:19:57:2a:2e:36:81:df:72:43:48:76:
                    a2:f2:95:48:34:c4:7a:8e:80:f9:35:f1:77:94:f3:
                    8a:c1:00:30:d0:26:26:cc:20:6a:05:11:3c:fc:3d:
                    7f:3c:b9:90:15:10:98:f4:8c:3e:67:d1:07:5b:56:
                    84:15:4f:f2:68:43:07:7f:03:44:d2:dc:3e:72:ea:
                    d1:5f:8d:9d:4d:cf:f2:d7:9f:34:af:8f:7d:e2:df:
                    93:c3:31:f8:6b:4c:b5:ce:75:e7:d5:41:01:10:20:
                    60:b9:ac:d8:77:25:91:1b:d3:10:25:0f:15:ee:39:
                    c9:c4:39:31:9f:a1:55:bd:70:00:5c:82:1c:21:8f:
                    f4:ee:62:6a:6d:b8:54:4e:56:6a:80:af:c8:9b:30:
                    bf:79:cf:57:eb:2a:d4:c5:4b:95:54:fc:9e:14:05:
                    90:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:01:FB:19:53:E1:2E:5F:59:6A:DB:27:7D:7C:03:B4:BF:D2:25:32
            X509v3 Authority Key Identifier:
                keyid:16:FF:CD:7C:F1:37:4D:25:6D:7E:12:26:D5:1D:91:AF:91:53:AA:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5tpmkVizxqXDbkDRwN1voPdXTEFY5f4GaDmmoKZwuqzn/0/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5tpmkVizxqXDbkDRwN1voPdXTEFY5f4GaDmmoKZwuqzn/0/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:cb:e8:af:7b:04:b8:26:b6:8e:90:20:92:9a:ac:fe:ce:28:
         48:da:f1:73:11:32:8f:7c:46:98:d9:99:d1:b1:ae:ba:f0:30:
         0a:0b:68:2c:bf:6c:1e:65:ab:dc:48:4d:ad:de:6c:19:8c:b0:
         d7:c9:ba:3e:46:ac:17:f1:1a:b5:28:dd:c7:ff:eb:89:b6:0a:
         8a:2c:3a:80:70:23:00:3b:49:93:45:94:92:f4:df:0d:06:02:
         36:61:de:73:f9:af:36:88:5f:1a:8f:86:22:bb:da:98:91:cb:
         f2:6d:3e:94:6f:d8:fc:ef:49:13:bc:a6:5c:d6:05:27:4c:63:
         26:88:56:58:16:57:58:74:62:ee:ec:db:53:62:15:a3:e2:48:
         af:d2:f3:cb:45:c4:a2:97:ef:6b:8c:10:63:e5:72:57:d4:a1:
         47:02:d5:d2:40:98:85:df:ea:83:76:0c:a4:8f:89:fe:00:68:
         a5:c4:a9:a7:19:50:b1:ca:67:94:de:e8:32:11:8a:bd:41:09:
         61:f9:e1:01:4f:5b:e2:9a:36:b1:5f:49:d4:29:75:37:b2:c7:
         4f:79:23:49:61:1b:26:f8:74:34:ce:ed:dc:31:7e:6d:f2:57:
         79:11:5a:2e:03:e8:08:d3:1c:f4:ee:2d:02:cf:b7:fa:8e:2a:
         da:95:53:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:53:04 2026 by rpki-client