Error: rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
Error: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer: certificate revoked on Tue 06 Oct 2026 02:48:30 +0000

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft
File:                     D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft (raw, json)
Hash identifier:          WWl6O/dPVP/8Nu1eYEGqRycUuYrvby5CodpkqYjeV2k=
Subject key identifier:   58:A1:19:E7:44:DB:7B:99:6B:37:D9:31:EB:46:26:73:AD:66:35:3C
Authority key identifier: D9:70:F1:7C:86:D4:D5:A9:C6:39:5E:9E:2D:16:01:BB:D9:FA:8B:DB
Certificate issuer:       /CN=D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB
Certificate serial:       3F6A071907593341EE58ACD776CDB4DCBC2C6204
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft
Manifest number:          0281
Signing time:             Wed 30 Sep 2026 06:45:14 +0000
Manifest this update:     Wed 30 Sep 2026 06:40:14 +0000
Manifest next update:     Thu 01 Oct 2026 09:05:14 +0000
Files and hashes:         1: D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl (hash: lHfRba9swFUxP7aG2H/jJQHkXnaEgBV7e9Z/Pn0MO5w=)
                          2: 34352e37312e3232302e302f32322d3234203d3e20323637363433.roa (hash: ARu+HiBlwjs5SJVY+5C32MR/FZIMOGcccntV0yboejc=)
                          3: 323830343a343461303a3a2f33322d3438203d3e20323637363433.roa (hash: cuvly3KsCe7VbHLKJipwwgzR8tpUXrjpdQpOoF48wMI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:6a:07:19:07:59:33:41:ee:58:ac:d7:76:cd:b4:dc:bc:2c:62:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB
        Validity
            Not Before: Sep 30 06:40:14 2026 GMT
            Not After : Oct  1 09:05:14 2026 GMT
        Subject: CN=58A119E744DB7B996B37D931EB462673AD66353C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a1:44:a9:55:e1:fc:23:ce:4b:d1:c7:61:86:
                    c8:45:ef:d5:1a:6a:b8:2b:ab:f7:8f:7a:aa:05:39:
                    46:ec:aa:a3:99:fa:cf:5d:88:0f:01:b3:1b:9b:58:
                    45:41:05:86:44:c7:e2:f4:29:ea:87:99:8c:5a:88:
                    dc:93:bd:4e:d5:44:53:98:9c:ec:1e:dc:7a:31:5f:
                    5d:55:46:4f:d5:e3:72:18:37:18:97:5f:8f:51:ce:
                    72:7a:8c:d8:3d:ce:d5:3e:0c:da:4a:f6:84:d5:a6:
                    1e:98:6d:67:d8:e4:8c:ec:05:24:aa:4b:02:94:66:
                    99:db:21:a2:fe:41:a7:be:3a:f4:86:ee:ae:71:04:
                    20:41:ad:e5:0a:0d:33:c4:08:58:80:6f:87:ed:c5:
                    90:a4:5d:e0:4b:1f:0c:8b:c7:71:65:84:c5:00:e6:
                    2b:09:24:8d:0e:b6:35:0e:e9:aa:03:71:55:2e:f4:
                    f3:2e:9a:6f:10:47:86:79:37:4f:9c:d2:e0:3a:83:
                    df:b7:a6:30:4b:df:39:2b:4f:59:76:5a:18:6f:e8:
                    8d:00:29:9c:12:d4:2f:08:26:33:8f:ba:0b:e8:48:
                    ad:86:f5:af:00:38:d8:53:e5:cd:c2:b1:f1:4c:c5:
                    9c:f2:2a:78:10:fb:1d:83:4d:23:2d:6a:bf:9e:76:
                    95:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A1:19:E7:44:DB:7B:99:6B:37:D9:31:EB:46:26:73:AD:66:35:3C
            X509v3 Authority Key Identifier:
                keyid:D9:70:F1:7C:86:D4:D5:A9:C6:39:5E:9E:2D:16:01:BB:D9:FA:8B:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:0e:a0:2f:27:05:a5:1e:4e:47:54:43:c3:d7:1a:82:36:98:
         8b:11:08:4f:db:9e:77:e5:82:93:4e:02:ca:01:c5:24:90:4d:
         67:b0:55:1b:51:f0:05:97:4c:b8:71:df:6e:e9:7c:72:3b:30:
         4a:ec:cb:cd:53:88:1d:c5:79:c9:70:53:b8:42:02:d2:5b:32:
         94:c0:c1:c3:d3:01:1b:4d:71:70:d7:a9:a7:2c:ce:2d:d1:55:
         91:ea:79:b1:68:4e:3d:48:40:03:f6:76:14:c6:7c:a0:10:d3:
         2f:71:e3:59:f0:16:01:66:3b:48:c0:05:03:68:00:54:c6:d6:
         71:b6:80:37:32:8d:55:17:06:2d:a5:04:af:20:db:55:e0:f0:
         d6:12:3e:e6:5b:51:ec:c3:13:d8:bb:1a:63:b3:40:34:99:a2:
         ea:61:e7:38:3b:57:57:41:33:95:5d:cc:23:00:15:56:b5:b8:
         46:2f:3d:c0:3c:fc:fd:39:bd:4b:18:e6:c3:89:27:58:25:1e:
         65:01:cf:98:37:79:72:d1:89:32:55:3b:32:89:f2:2a:15:06:
         f2:a7:c4:4d:63:02:75:22:4e:1f:b9:63:a0:65:86:8e:9c:a5:
         ce:c7:a1:81:17:52:5b:92:1d:6c:92:10:2e:9c:ff:50:d2:38:
         a2:74:22:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 06:06:28 2026 by rpki-client