Error: rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/0/75A4972B7CD4E111D558A51F98974C6685D9043C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
Error: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75A4972B7CD4E111D558A51F98974C6685D9043C.cer: certificate revoked on Mon 05 Oct 2026 12:48:31 +0000

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/0/75A4972B7CD4E111D558A51F98974C6685D9043C.mft
File:                     75A4972B7CD4E111D558A51F98974C6685D9043C.mft (raw, json)
Hash identifier:          v2BRs+y40+OjFSdv7zg5/q3fgE3y9+Eyg7tmZ0KHMJs=
Subject key identifier:   AD:64:78:F8:93:9D:AD:E9:7B:81:97:98:3B:B6:C7:30:9F:A7:AE:6A
Authority key identifier: 75:A4:97:2B:7C:D4:E1:11:D5:58:A5:1F:98:97:4C:66:85:D9:04:3C
Certificate issuer:       /CN=75A4972B7CD4E111D558A51F98974C6685D9043C
Certificate serial:       5DD0096191ACF72E766B0ECC3708565DD2259B22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75A4972B7CD4E111D558A51F98974C6685D9043C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/0/75A4972B7CD4E111D558A51F98974C6685D9043C.mft
Manifest number:          02B5
Signing time:             Tue 29 Sep 2026 18:12:41 +0000
Manifest this update:     Tue 29 Sep 2026 18:07:41 +0000
Manifest next update:     Wed 30 Sep 2026 18:59:41 +0000
Files and hashes:         1: 75A4972B7CD4E111D558A51F98974C6685D9043C.crl (hash: NbwpctpDmIkNRGXGsYoSLkLZt14C+UPyyVcFJRf2hzs=)
                          2: 3138362e3234392e3234302e302f32312d3234203d3e20323633303237.roa (hash: 8L5zHPkgN3btTubQyhZjje/aZYVVn4dB7bgkm7uDDLY=)
                          3: 323830343a383833383a3a2f33322d3438203d3e20323633303237.roa (hash: WOvIsZiFeA4D+AkqcmTvBSaJtvK0sOhdJd7ZgIlYn3k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d0:09:61:91:ac:f7:2e:76:6b:0e:cc:37:08:56:5d:d2:25:9b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75A4972B7CD4E111D558A51F98974C6685D9043C
        Validity
            Not Before: Sep 29 18:07:41 2026 GMT
            Not After : Sep 30 18:59:41 2026 GMT
        Subject: CN=AD6478F8939DADE97B8197983BB6C7309FA7AE6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3f:27:4b:d4:27:f0:00:0a:6a:33:7d:77:a2:
                    36:65:48:33:6a:54:16:e6:d5:18:2f:4e:ed:79:70:
                    bc:6c:33:9b:e2:b4:1c:59:64:bb:9f:71:f7:5b:5d:
                    64:6a:aa:71:ef:f5:84:06:f6:9d:7a:83:d2:6d:86:
                    f2:29:d0:03:60:08:79:c7:37:6a:40:ac:31:ea:79:
                    6d:19:3d:a8:31:78:e5:b1:20:24:19:36:56:ee:0c:
                    a2:16:7d:4d:2c:0a:7d:4e:02:87:d5:bd:d3:e4:02:
                    9a:3f:ff:1f:63:b5:15:0a:22:c6:95:1f:af:92:b9:
                    c5:f1:6f:43:88:c4:af:fd:05:ae:65:7a:51:40:c2:
                    c3:1c:da:21:ed:16:d1:b0:34:27:7a:39:34:41:74:
                    45:c5:65:93:8e:51:6f:09:be:98:5a:3e:cd:61:6b:
                    4c:72:94:a3:7e:40:98:58:b5:85:d7:89:b0:d2:63:
                    36:b5:8e:02:26:e7:10:b3:98:d0:f0:f6:f6:b1:a0:
                    4a:55:c2:30:a7:83:09:ca:d6:ca:9a:e2:c4:b0:94:
                    56:78:af:cd:d3:3b:a4:d8:14:d3:f9:60:59:d6:eb:
                    ac:f0:9b:b7:e4:10:fb:fb:64:5e:3e:5d:e4:84:6f:
                    79:9b:7c:8b:23:46:0e:15:ca:5e:61:9e:c1:5d:b9:
                    e2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:64:78:F8:93:9D:AD:E9:7B:81:97:98:3B:B6:C7:30:9F:A7:AE:6A
            X509v3 Authority Key Identifier:
                keyid:75:A4:97:2B:7C:D4:E1:11:D5:58:A5:1F:98:97:4C:66:85:D9:04:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/0/75A4972B7CD4E111D558A51F98974C6685D9043C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75A4972B7CD4E111D558A51F98974C6685D9043C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/0/75A4972B7CD4E111D558A51F98974C6685D9043C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:16:b8:c0:2d:ff:d8:cd:36:cc:ed:3c:26:bd:80:77:27:99:
         83:17:aa:b9:67:79:ad:4f:c7:29:b1:c6:91:61:5a:9e:08:73:
         c5:93:62:83:00:be:a9:f2:db:88:66:56:6e:ac:53:cd:b6:1c:
         e2:f0:ed:89:94:85:24:00:ca:21:f2:8b:fc:21:d3:3b:31:b9:
         99:33:c3:76:ad:05:5f:f3:50:34:5f:06:00:c3:47:14:f0:fa:
         3b:13:5a:e8:d2:c4:fa:dc:ad:7b:50:5f:c6:e2:45:30:76:e7:
         e2:df:e6:df:0f:16:b2:fa:f1:b6:c7:ad:cb:71:45:4f:05:80:
         35:c9:6d:1d:aa:23:5b:c5:78:47:0f:69:72:ee:07:57:64:37:
         7e:28:24:5c:ce:10:0e:5f:f8:c3:09:6d:47:4d:25:b6:84:22:
         ba:8f:77:f0:c8:37:23:49:7c:f1:d3:12:6f:cf:1d:52:e4:dd:
         ce:4e:28:a3:29:4a:8d:10:56:b4:97:99:60:44:e5:c2:ff:86:
         df:7e:44:ae:13:93:d9:e0:3e:12:0d:07:cc:80:6b:ed:29:4e:
         5d:63:4c:17:e4:09:17:b9:56:7f:4a:a7:8a:c1:a7:b8:7f:4f:
         4b:e3:33:86:58:7e:87:91:6e:5a:50:9f:2b:15:67:7e:d2:20:
         0f:e8:25:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:10:44 2026 by rpki-client