
Error: rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
Error: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer: certificate revoked on Mon 26 Oct 2026 11:52:33 +0000
Manifest
$ rpki-client -vvvf rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft
File: D539CF929B6A6A2B9596B922F417FAD917799ED7.mft (raw, json)
Hash identifier: x31zove7b6VmtiYrozGYy0ij3HJylUOvP67cpllhZfI=
Subject key identifier: EA:80:38:45:52:50:0E:CF:FF:FE:D1:AE:6E:CE:A4:43:44:F2:28:45
Authority key identifier: D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7
Certificate issuer: /CN=D539CF929B6A6A2B9596B922F417FAD917799ED7
Certificate serial: 04A579DB161616F9DD25C7A2A8FC97D41592B396
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft
Manifest number: 04E0
Signing time: Sun 25 Oct 2026 20:19:17 +0000
Manifest this update: Sun 25 Oct 2026 20:14:17 +0000
Manifest next update: Mon 26 Oct 2026 23:58:17 +0000
Files and hashes: 1: D539CF929B6A6A2B9596B922F417FAD917799ED7.crl (hash: MMwdYdM4fU+PVpI8j43qEiv3OqdraDSG+jAJPB0sc3Q=)
2: 323830343a343832633a3a2f33322d3438203d3e20323637313032.roa (hash: LEA9vDzQJLKKOYYh86Ctx9GDjZX9B441ozGpSCmd91s=)
3: 34352e3232382e3134302e302f32322d3234203d3e20323637313032.roa (hash: eP0r+wZovEoOi3AFVmS1ks40+jUeBeX9l/i7mThdIlg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:a5:79:db:16:16:16:f9:dd:25:c7:a2:a8:fc:97:d4:15:92:b3:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D539CF929B6A6A2B9596B922F417FAD917799ED7
Validity
Not Before: Oct 25 20:14:17 2026 GMT
Not After : Oct 26 23:58:17 2026 GMT
Subject: CN=EA80384552500ECFFFFED1AE6ECEA44344F22845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:be:7f:64:68:d4:3f:2f:04:eb:a8:cf:d6:bb:
71:62:60:16:3f:6e:40:fe:c8:68:3c:03:79:f7:d8:
e3:7d:22:15:58:3a:18:ca:92:24:99:d4:6f:b9:13:
14:b1:ed:30:c6:69:71:bf:18:af:27:85:72:02:34:
01:b6:ba:0c:69:9f:32:75:c4:44:24:8c:f3:61:66:
1b:de:b9:81:90:1f:0a:4f:09:53:05:df:93:02:20:
75:5b:85:e0:44:0c:bb:56:d3:e6:d5:19:68:ca:74:
cc:8b:b0:8c:af:05:9e:66:13:5b:d6:81:e2:82:84:
36:e5:f3:58:c9:2d:22:19:5d:55:b4:93:14:af:e5:
d4:b7:23:99:0b:bb:a2:18:50:cd:9d:a1:97:f5:3d:
be:1c:b6:f1:9e:07:62:1b:6e:31:e8:77:01:f6:fd:
08:8a:dc:e2:4b:d0:68:19:1d:38:d2:7f:5d:2c:1b:
1c:1f:9b:5e:17:78:35:18:0b:04:94:04:e5:88:9d:
b6:67:0a:b5:d3:d6:c1:4f:f6:cf:25:d7:fd:c2:2e:
aa:d1:dd:2f:7a:5a:d2:fa:b3:fe:06:41:f6:e1:ac:
2b:12:8c:3f:a1:8a:43:85:98:49:39:75:89:fc:0a:
87:cf:15:10:ca:be:75:89:1a:9d:68:9d:aa:13:84:
08:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:80:38:45:52:50:0E:CF:FF:FE:D1:AE:6E:CE:A4:43:44:F2:28:45
X509v3 Authority Key Identifier:
keyid:D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:94:21:f7:18:c4:22:a2:13:ac:8c:4d:b5:3d:67:ee:55:fa:
c2:ed:39:91:98:09:39:04:10:09:5e:68:c4:34:9a:92:b2:7c:
a3:49:d9:53:10:88:e2:1c:f1:f1:21:0d:6f:48:b7:d8:29:e6:
20:40:36:d6:ec:95:a1:75:85:83:f5:71:51:e5:81:d9:50:92:
5f:86:dd:da:7b:49:ef:f6:a1:0b:d5:0f:61:26:9b:27:72:de:
7e:ac:94:81:b1:93:34:03:aa:f5:92:19:99:02:31:2f:7e:5e:
aa:60:f9:55:b3:d2:c1:2a:9c:3f:e8:96:4b:7d:3d:4d:1e:17:
f1:87:46:f9:ba:89:cb:f2:ef:3f:2c:1c:1d:23:f4:c4:d5:d0:
07:f9:2f:51:8f:0e:aa:e1:87:9f:fd:40:57:d1:53:68:34:39:
ed:ec:2a:3c:59:67:8f:22:f2:e8:9f:41:c7:2c:0e:f9:c4:29:
3c:7e:26:2c:44:99:58:a6:0f:3a:8d:09:45:15:47:e3:ef:11:
12:2a:16:74:2f:11:3c:34:15:ec:47:ac:2f:ba:be:03:5a:04:
72:92:7d:6b:01:c5:93:dd:74:c8:9b:0d:3a:53:c3:bc:24:94:
8d:f5:14:e2:ce:b5:11:c7:32:56:07:18:cc:d8:f4:5e:20:92:
e0:9f:d4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 07:07:51 2026 by rpki-client