Error: rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
Error: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer: certificate revoked on Thu 15 Oct 2026 12:24:55 +0000

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.mft
File:                     A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.mft (raw, json)
Hash identifier:          3anrUBqAxQCrvWvJ25zQI2I85bBhztGeUQx1aInOkrw=
Subject key identifier:   AC:0E:9F:10:0E:6D:99:A4:9F:1F:24:28:60:95:31:32:54:B3:E5:59
Authority key identifier: A1:65:31:9A:A3:6D:4F:FD:2A:5D:9A:2B:E4:2F:5C:2E:F0:E2:0B:8E
Certificate issuer:       /CN=A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E
Certificate serial:       7F613C9EBCB5E2DFDE03AAA894E549597A92EDD1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.mft
Manifest number:          056F
Signing time:             Wed 14 Oct 2026 20:20:00 +0000
Manifest this update:     Wed 14 Oct 2026 20:15:00 +0000
Manifest next update:     Thu 15 Oct 2026 20:20:00 +0000
Files and hashes:         1: 323830343a383038303a343030303a3a2f33342d3334203d3e20323731373534.roa (hash: 6vcZuyZ15SCjY3gZq0i6rCSbEUeyQoeAoobLxvAJq6Y=)
                          2: 323830343a383038303a3a2f33332d3333203d3e20323731373534.roa (hash: OF4qCfkjSVuHBeRtLzVYWOomJ5NZy654wIaKa/KSQFk=)
                          3: 323830343a383038303a383030303a3a2f33332d3333203d3e20323731373534.roa (hash: kGEtGWQtM11UcMXBptNnTw2aSqCoSvSndPOV/qiV0EA=)
                          4: 323830343a383038303a3a2f33322d3332203d3e20323731373534.roa (hash: 1CYM+lfNzbhk3t6ojtq94Hwaabr/GjokAPRrekXBgPc=)
                          5: 323830343a383038303a633030303a3a2f33342d3334203d3e20323731373534.roa (hash: dOjBFiQ32+qPyJN9X7UuntXflMn6H0c06DF5jVRBZHg=)
                          6: A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.crl (hash: W6bIlR81jkMbgdFf6vxOY5NxpFIhjKXFkPdCjMeoAtU=)
                          7: 323830343a383038303a3a2f33342d3334203d3e20323731373534.roa (hash: GsTYgWWVqp4/Gg/7NBRtF3VNJ42vVwEWMp2AsvN42Fk=)
                          8: 323830343a383038303a383030303a3a2f33342d3334203d3e20323731373534.roa (hash: KQnQCytaRVogvL6zJhT8o2cClwMPi5VqD6ts4yzyj6g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:61:3c:9e:bc:b5:e2:df:de:03:aa:a8:94:e5:49:59:7a:92:ed:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E
        Validity
            Not Before: Oct 14 20:15:00 2026 GMT
            Not After : Oct 15 20:20:00 2026 GMT
        Subject: CN=3082010A0282010100CEF4B3415C1027008DE8F8BEE9DEF6266AA8E4F490AD67BE6C5F76F5618CFEA5F97EBFC9E9C00AB4DF86C420811B80F3EF85A20C4D56EEC5DB23AAECA067488D51675DBD164AEA04B614B038B9949D135ABBC5C796314AC3D2ED7136348B35A70DA791E34C76F505E28C4E5E1B6111FF80BF23E82653156EA65ECFFC7FFBC2441A865A7F6216A7E90BD4E7D7240A093CC74518C2852953C5F00C35958739F80E1EEED95CEB706AAE9C0EB07EAFF02AE361CC75020DCB6D24E2C6CAE785DED8494CD47FA67BB34CAE4D72616C03AF560A9C5DFEEFF493E0603A480B43A78412B829DD7B5F12CD83FBCD2B6E5BC7B356829D95A37D1AE3004943C8DEFA3599BA050203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f4:b3:41:5c:10:27:00:8d:e8:f8:be:e9:de:
                    f6:26:6a:a8:e4:f4:90:ad:67:be:6c:5f:76:f5:61:
                    8c:fe:a5:f9:7e:bf:c9:e9:c0:0a:b4:df:86:c4:20:
                    81:1b:80:f3:ef:85:a2:0c:4d:56:ee:c5:db:23:aa:
                    ec:a0:67:48:8d:51:67:5d:bd:16:4a:ea:04:b6:14:
                    b0:38:b9:94:9d:13:5a:bb:c5:c7:96:31:4a:c3:d2:
                    ed:71:36:34:8b:35:a7:0d:a7:91:e3:4c:76:f5:05:
                    e2:8c:4e:5e:1b:61:11:ff:80:bf:23:e8:26:53:15:
                    6e:a6:5e:cf:fc:7f:fb:c2:44:1a:86:5a:7f:62:16:
                    a7:e9:0b:d4:e7:d7:24:0a:09:3c:c7:45:18:c2:85:
                    29:53:c5:f0:0c:35:95:87:39:f8:0e:1e:ee:d9:5c:
                    eb:70:6a:ae:9c:0e:b0:7e:af:f0:2a:e3:61:cc:75:
                    02:0d:cb:6d:24:e2:c6:ca:e7:85:de:d8:49:4c:d4:
                    7f:a6:7b:b3:4c:ae:4d:72:61:6c:03:af:56:0a:9c:
                    5d:fe:ef:f4:93:e0:60:3a:48:0b:43:a7:84:12:b8:
                    29:dd:7b:5f:12:cd:83:fb:cd:2b:6e:5b:c7:b3:56:
                    82:9d:95:a3:7d:1a:e3:00:49:43:c8:de:fa:35:99:
                    ba:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0E:9F:10:0E:6D:99:A4:9F:1F:24:28:60:95:31:32:54:B3:E5:59
            X509v3 Authority Key Identifier:
                keyid:A1:65:31:9A:A3:6D:4F:FD:2A:5D:9A:2B:E4:2F:5C:2E:F0:E2:0B:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:90:61:8a:70:ad:5e:15:75:a0:5b:8c:83:ca:66:99:71:ff:
         0d:d8:e7:38:b6:6c:fd:11:9c:5e:39:4a:f0:ba:e9:8c:0a:c9:
         0a:57:ae:f6:ff:bc:21:1a:63:23:39:b1:ea:ab:19:c4:79:64:
         9f:ec:43:0a:33:7d:d0:43:a0:e2:d5:d5:38:52:ce:42:bc:4b:
         40:98:8b:ad:cf:01:6d:79:9e:c3:ad:77:86:66:ac:cf:ff:45:
         65:4a:d0:e1:c8:4a:1b:fa:28:33:af:e7:98:33:f1:11:56:be:
         e8:b3:4a:bc:42:5c:42:96:9d:75:2a:f3:a2:1f:4b:00:27:bc:
         07:8e:25:d8:26:02:54:b4:52:02:85:bf:e8:73:62:b6:d6:0a:
         90:23:cd:23:9c:2f:62:e3:3f:37:df:b1:15:c3:56:ac:cc:e0:
         4c:1b:5d:1a:f1:84:bf:a9:16:d4:9d:04:3e:3d:a6:b5:22:2d:
         1c:2c:1c:52:42:47:55:11:bc:81:65:0a:b5:32:e4:15:c8:f0:
         20:f9:98:d0:7f:b0:0b:40:97:8f:a8:b3:90:af:e8:14:f0:f0:
         6a:40:1c:1c:53:74:1a:3a:45:0a:50:99:cc:cb:ad:43:9e:de:
         56:f7:3f:1d:f7:4c:f4:fd:66:1b:38:aa:ce:68:17:96:03:38:
         7b:50:29:73
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUf2E8nry14t/eA6qolOVJWXqS7dEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE2NTMxOUFBMzZENEZGRDJBNUQ5QTJCRTQyRjVDMkVG
MEUyMEI4RTAeFw0yNjEwMTQyMDE1MDBaFw0yNjEwMTUyMDIwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0VGNEIzNDE1QzEwMjcwMDhE
RThGOEJFRTlERUY2MjY2QUE4RTRGNDkwQUQ2N0JFNkM1Rjc2RjU2MThDRkVBNUY5
N0VCRkM5RTlDMDBBQjRERjg2QzQyMDgxMUI4MEYzRUY4NUEyMEM0RDU2RUVDNURC
MjNBQUVDQTA2NzQ4OEQ1MTY3NURCRDE2NEFFQTA0QjYxNEIwMzhCOTk0OUQxMzVB
QkJDNUM3OTYzMTRBQzNEMkVENzEzNjM0OEIzNUE3MERBNzkxRTM0Qzc2RjUwNUUy
OEM0RTVFMUI2MTExRkY4MEJGMjNFODI2NTMxNTZFQTY1RUNGRkM3RkZCQzI0NDFB
ODY1QTdGNjIxNkE3RTkwQkQ0RTdENzI0MEEwOTNDQzc0NTE4QzI4NTI5NTNDNUYw
MEMzNTk1ODczOUY4MEUxRUVFRDk1Q0VCNzA2QUFFOUMwRUIwN0VBRkYwMkFFMzYx
Q0M3NTAyMERDQjZEMjRFMkM2Q0FFNzg1REVEODQ5NENENDdGQTY3QkIzNENBRTRE
NzI2MTZDMDNBRjU2MEE5QzVERkVFRkY0OTNFMDYwM0E0ODBCNDNBNzg0MTJCODI5
REQ3QjVGMTJDRDgzRkJDRDJCNkU1QkM3QjM1NjgyOUQ5NUEzN0QxQUUzMDA0OTQz
QzhERUZBMzU5OUJBMDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzvSzQVwQJwCN6Pi+6d72Jmqo5PSQrWe+bF929WGM/qX5fr/J6cAK
tN+GxCCBG4Dz74WiDE1W7sXbI6rsoGdIjVFnXb0WSuoEthSwOLmUnRNau8XHljFK
w9LtcTY0izWnDaeR40x29QXijE5eG2ER/4C/I+gmUxVupl7P/H/7wkQahlp/Yhan
6QvU59ckCgk8x0UYwoUpU8XwDDWVhzn4Dh7u2VzrcGqunA6wfq/wKuNhzHUCDctt
JOLGyueF3thJTNR/pnuzTK5NcmFsA69WCpxd/u/0k+BgOkgLQ6eEErgp3XtfEs2D
+80rblvHs1aCnZWjfRrjAElDyN76NZm6BQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FKwOnxAObZmknx8kKGCVMTJUs+VZMB8GA1UdIwQYMBaAFKFlMZqjbU/9Kl2aK+Qv
XC7w4guOMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JxZDRrdWtLbWVOb2Y5
WEdEMkJTY2hzZHFkYUJVQ3RtM3gzM3JTcEZMY0gyLzEvQTE2NTMxOUFBMzZENEZG
RDJBNUQ5QTJCRTQyRjVDMkVGMEUyMEI4RS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BMTY1MzE5QUEzNkQ0RkZEMkE1RDlBMkJFNDJGNUMyRUYwRTIw
QjhFLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JxZDRrdWtLbWVOb2Y5WEdEMkJT
Y2hzZHFkYUJVQ3RtM3gzM3JTcEZMY0gyLzEvQTE2NTMxOUFBMzZENEZGRDJBNUQ5
QTJCRTQyRjVDMkVGMEUyMEI4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAF6QYYpwrV4VdaBbjIPKZplx
/w3Y5zi2bP0RnF45SvC66YwKyQpXrvb/vCEaYyM5seqrGcR5ZJ/sQwozfdBDoOLV
1ThSzkK8S0CYi63PAW15nsOtd4ZmrM//RWVK0OHIShv6KDOv55gz8RFWvuizSrxC
XEKWnXUq86IfSwAnvAeOJdgmAlS0UgKFv+hzYrbWCpAjzSOcL2LjPzffsRXDVqzM
4EwbXRrxhL+pFtSdBD49prUiLRwsHFJCR1URvIFlCrUy5BXI8CD5mNB/sAtAl4+o
s5Cv6BTw8GpAHBxTdBo6RQpQmczLrUOe3lb3Px33TPT9Zhs4qs5oF5YDOHtQKXM=
-----END CERTIFICATE-----
Generated at Sun Oct 25 18:56:28 2026 by rpki-client