Error: rpki-repo.registro.br/repo/9Dbz34SJ5YwsD7PCyzUfd1ifoZjSsqWWh46XZUXvpYFS/0/91D0AECE4CA4B520D30283A943EC3430DE576329.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
Error: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D0AECE4CA4B520D30283A943EC3430DE576329.cer: certificate revoked on Tue 06 Oct 2026 02:48:31 +0000

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/9Dbz34SJ5YwsD7PCyzUfd1ifoZjSsqWWh46XZUXvpYFS/0/91D0AECE4CA4B520D30283A943EC3430DE576329.mft
File:                     91D0AECE4CA4B520D30283A943EC3430DE576329.mft (raw, json)
Hash identifier:          O1I75nrTSu/iWfotgOJxPUSzX+UtTNmnkZVtSb2O8i4=
Subject key identifier:   0B:F9:32:99:8A:CA:E0:C4:DA:02:EE:9A:C7:72:7E:DC:44:2E:6F:B1
Authority key identifier: 91:D0:AE:CE:4C:A4:B5:20:D3:02:83:A9:43:EC:34:30:DE:57:63:29
Certificate issuer:       /CN=91D0AECE4CA4B520D30283A943EC3430DE576329
Certificate serial:       4EDC6DBBA94DB9F386A853AC8A6F498323B7C944
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D0AECE4CA4B520D30283A943EC3430DE576329.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Dbz34SJ5YwsD7PCyzUfd1ifoZjSsqWWh46XZUXvpYFS/0/91D0AECE4CA4B520D30283A943EC3430DE576329.mft
Manifest number:          027E
Signing time:             Wed 30 Sep 2026 08:25:34 +0000
Manifest this update:     Wed 30 Sep 2026 08:20:34 +0000
Manifest next update:     Thu 01 Oct 2026 08:49:34 +0000
Files and hashes:         1: 3133382e3235352e342e302f32322d3234203d3e20323633393439.roa (hash: Xu5/3ueneabQZZ/p3s0UzKx4kyNfY6E38gK/1hswH50=)
                          2: 91D0AECE4CA4B520D30283A943EC3430DE576329.crl (hash: BCjPIpsovMLIYk9wvkIgJn+nVuzP3dQm3H2/FntTqTo=)
                          3: 3137302e3234372e3234302e302f32322d3234203d3e20323633393439.roa (hash: q2WMrT7TOLmJlqPeA2OqyxJPu9XA4Hopxpa1WRlmAls=)
                          4: 323830343a323833633a3a2f33322d3438203d3e20323633393439.roa (hash: Kumyaw4x7W3edA/N6XYP+jzksdSuJ/BTH+aMafrUikU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:dc:6d:bb:a9:4d:b9:f3:86:a8:53:ac:8a:6f:49:83:23:b7:c9:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D0AECE4CA4B520D30283A943EC3430DE576329
        Validity
            Not Before: Sep 30 08:20:34 2026 GMT
            Not After : Oct  1 08:49:34 2026 GMT
        Subject: CN=0BF932998ACAE0C4DA02EE9AC7727EDC442E6FB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bf:2b:b6:2f:cd:22:e9:68:6e:1e:b0:be:93:
                    d1:4f:fc:19:61:6e:cc:f9:83:25:49:2e:e8:b4:c9:
                    1f:b0:48:fa:63:2e:5a:9e:c3:e0:20:06:75:b1:5d:
                    64:8c:c1:df:90:24:cb:6e:35:e2:a5:f2:84:6a:bb:
                    66:25:f0:b7:cc:ba:9c:d8:f7:58:e8:84:8d:3c:40:
                    e7:8f:df:e9:be:69:0b:20:be:1d:b1:62:d4:38:32:
                    cf:3b:a6:6a:40:55:5c:60:97:8e:66:0a:dc:c2:ee:
                    54:97:24:cc:e2:f6:af:48:59:68:5c:b6:4b:6e:4d:
                    d2:dc:b0:13:e2:e6:bc:18:02:dc:09:58:e1:45:66:
                    97:87:40:16:cd:8b:99:21:2d:99:25:27:46:2a:e3:
                    00:49:00:c3:e6:d0:76:51:1e:56:2e:b8:22:b6:da:
                    2e:73:ac:7c:12:9b:62:28:1c:9b:51:48:3e:48:c8:
                    b1:da:d0:68:11:c6:38:32:b4:d2:12:2d:21:93:6b:
                    ff:3d:4b:d6:d9:69:c8:fc:d6:2e:52:75:c6:ec:d3:
                    bf:12:e7:05:d8:2d:21:75:91:de:0a:a8:b8:aa:18:
                    dd:31:52:c3:71:39:76:00:44:9b:62:4e:56:21:1a:
                    62:18:eb:df:75:0b:ac:f9:ac:83:a9:39:12:ae:d7:
                    96:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F9:32:99:8A:CA:E0:C4:DA:02:EE:9A:C7:72:7E:DC:44:2E:6F:B1
            X509v3 Authority Key Identifier:
                keyid:91:D0:AE:CE:4C:A4:B5:20:D3:02:83:A9:43:EC:34:30:DE:57:63:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Dbz34SJ5YwsD7PCyzUfd1ifoZjSsqWWh46XZUXvpYFS/0/91D0AECE4CA4B520D30283A943EC3430DE576329.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D0AECE4CA4B520D30283A943EC3430DE576329.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Dbz34SJ5YwsD7PCyzUfd1ifoZjSsqWWh46XZUXvpYFS/0/91D0AECE4CA4B520D30283A943EC3430DE576329.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:e0:02:0c:df:f8:d4:dd:c8:69:68:9a:42:eb:26:b3:20:fc:
         0a:7d:0e:93:7a:7b:09:8b:2b:cd:87:88:11:65:b2:80:d1:af:
         32:f6:74:61:93:55:66:91:20:47:8e:bf:0e:a1:8d:cf:9d:a6:
         15:30:d1:40:5b:11:6b:b8:60:bc:b9:3f:f1:79:aa:f8:b3:8e:
         db:3b:f2:72:96:54:af:35:36:3a:c4:56:19:0c:9a:95:09:34:
         4a:5e:d2:97:7d:db:9e:ca:6b:d1:c8:b0:dc:ef:74:45:ff:e7:
         f7:02:16:dc:e5:d3:b8:11:0b:75:bb:74:36:93:fc:ba:e1:5b:
         10:5a:37:28:3d:15:3f:65:7b:7d:8d:8c:a2:a5:60:95:f5:71:
         87:00:8a:90:a4:37:44:0c:04:eb:1b:11:78:ae:39:37:81:7b:
         7b:c0:f1:f8:09:a5:c5:3f:b8:22:ce:3c:b0:b5:bc:9b:c6:a8:
         5a:1e:77:3e:cc:b6:d8:58:02:21:76:c6:bf:71:e0:00:42:35:
         47:9a:90:77:1e:dc:86:c9:cb:fc:1a:be:4c:5f:78:3e:25:b0:
         02:72:8b:9f:05:bc:b7:72:36:96:d3:a3:2c:6a:9a:1f:44:88:
         3a:cc:42:99:98:72:7c:7f:10:1c:f1:f9:e7:31:42:72:9d:c7:
         45:97:37:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:26:22 2026 by rpki-client