Error: rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
Error: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer: certificate revoked on Mon 26 Oct 2026 11:52:33 +0000

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft
File:                     D539CF929B6A6A2B9596B922F417FAD917799ED7.mft (raw, json)
Hash identifier:          x31zove7b6VmtiYrozGYy0ij3HJylUOvP67cpllhZfI=
Subject key identifier:   EA:80:38:45:52:50:0E:CF:FF:FE:D1:AE:6E:CE:A4:43:44:F2:28:45
Authority key identifier: D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7
Certificate issuer:       /CN=D539CF929B6A6A2B9596B922F417FAD917799ED7
Certificate serial:       04A579DB161616F9DD25C7A2A8FC97D41592B396
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft
Manifest number:          04E0
Signing time:             Sun 25 Oct 2026 20:19:17 +0000
Manifest this update:     Sun 25 Oct 2026 20:14:17 +0000
Manifest next update:     Mon 26 Oct 2026 23:58:17 +0000
Files and hashes:         1: D539CF929B6A6A2B9596B922F417FAD917799ED7.crl (hash: MMwdYdM4fU+PVpI8j43qEiv3OqdraDSG+jAJPB0sc3Q=)
                          2: 323830343a343832633a3a2f33322d3438203d3e20323637313032.roa (hash: LEA9vDzQJLKKOYYh86Ctx9GDjZX9B441ozGpSCmd91s=)
                          3: 34352e3232382e3134302e302f32322d3234203d3e20323637313032.roa (hash: eP0r+wZovEoOi3AFVmS1ks40+jUeBeX9l/i7mThdIlg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:a5:79:db:16:16:16:f9:dd:25:c7:a2:a8:fc:97:d4:15:92:b3:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D539CF929B6A6A2B9596B922F417FAD917799ED7
        Validity
            Not Before: Oct 25 20:14:17 2026 GMT
            Not After : Oct 26 23:58:17 2026 GMT
        Subject: CN=EA80384552500ECFFFFED1AE6ECEA44344F22845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:be:7f:64:68:d4:3f:2f:04:eb:a8:cf:d6:bb:
                    71:62:60:16:3f:6e:40:fe:c8:68:3c:03:79:f7:d8:
                    e3:7d:22:15:58:3a:18:ca:92:24:99:d4:6f:b9:13:
                    14:b1:ed:30:c6:69:71:bf:18:af:27:85:72:02:34:
                    01:b6:ba:0c:69:9f:32:75:c4:44:24:8c:f3:61:66:
                    1b:de:b9:81:90:1f:0a:4f:09:53:05:df:93:02:20:
                    75:5b:85:e0:44:0c:bb:56:d3:e6:d5:19:68:ca:74:
                    cc:8b:b0:8c:af:05:9e:66:13:5b:d6:81:e2:82:84:
                    36:e5:f3:58:c9:2d:22:19:5d:55:b4:93:14:af:e5:
                    d4:b7:23:99:0b:bb:a2:18:50:cd:9d:a1:97:f5:3d:
                    be:1c:b6:f1:9e:07:62:1b:6e:31:e8:77:01:f6:fd:
                    08:8a:dc:e2:4b:d0:68:19:1d:38:d2:7f:5d:2c:1b:
                    1c:1f:9b:5e:17:78:35:18:0b:04:94:04:e5:88:9d:
                    b6:67:0a:b5:d3:d6:c1:4f:f6:cf:25:d7:fd:c2:2e:
                    aa:d1:dd:2f:7a:5a:d2:fa:b3:fe:06:41:f6:e1:ac:
                    2b:12:8c:3f:a1:8a:43:85:98:49:39:75:89:fc:0a:
                    87:cf:15:10:ca:be:75:89:1a:9d:68:9d:aa:13:84:
                    08:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:80:38:45:52:50:0E:CF:FF:FE:D1:AE:6E:CE:A4:43:44:F2:28:45
            X509v3 Authority Key Identifier:
                keyid:D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:94:21:f7:18:c4:22:a2:13:ac:8c:4d:b5:3d:67:ee:55:fa:
         c2:ed:39:91:98:09:39:04:10:09:5e:68:c4:34:9a:92:b2:7c:
         a3:49:d9:53:10:88:e2:1c:f1:f1:21:0d:6f:48:b7:d8:29:e6:
         20:40:36:d6:ec:95:a1:75:85:83:f5:71:51:e5:81:d9:50:92:
         5f:86:dd:da:7b:49:ef:f6:a1:0b:d5:0f:61:26:9b:27:72:de:
         7e:ac:94:81:b1:93:34:03:aa:f5:92:19:99:02:31:2f:7e:5e:
         aa:60:f9:55:b3:d2:c1:2a:9c:3f:e8:96:4b:7d:3d:4d:1e:17:
         f1:87:46:f9:ba:89:cb:f2:ef:3f:2c:1c:1d:23:f4:c4:d5:d0:
         07:f9:2f:51:8f:0e:aa:e1:87:9f:fd:40:57:d1:53:68:34:39:
         ed:ec:2a:3c:59:67:8f:22:f2:e8:9f:41:c7:2c:0e:f9:c4:29:
         3c:7e:26:2c:44:99:58:a6:0f:3a:8d:09:45:15:47:e3:ef:11:
         12:2a:16:74:2f:11:3c:34:15:ec:47:ac:2f:ba:be:03:5a:04:
         72:92:7d:6b:01:c5:93:dd:74:c8:9b:0d:3a:53:c3:bc:24:94:
         8d:f5:14:e2:ce:b5:11:c7:32:56:07:18:cc:d8:f4:5e:20:92:
         e0:9f:d4:09
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBKV52xYWFvndJceiqPyX1BWSs5YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDUzOUNGOTI5QjZBNkEyQjk1OTZCOTIyRjQxN0ZBRDkx
Nzc5OUVENzAeFw0yNjEwMjUyMDE0MTdaFw0yNjEwMjYyMzU4MTdaMDMxMTAvBgNV
BAMTKEVBODAzODQ1NTI1MDBFQ0ZGRkZFRDFBRTZFQ0VBNDQzNDRGMjI4NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmvn9kaNQ/LwTrqM/Wu3FiYBY/
bkD+yGg8A3n32ON9IhVYOhjKkiSZ1G+5ExSx7TDGaXG/GK8nhXICNAG2ugxpnzJ1
xEQkjPNhZhveuYGQHwpPCVMF35MCIHVbheBEDLtW0+bVGWjKdMyLsIyvBZ5mE1vW
geKChDbl81jJLSIZXVW0kxSv5dS3I5kLu6IYUM2doZf1Pb4ctvGeB2IbbjHodwH2
/QiK3OJL0GgZHTjSf10sGxwfm14XeDUYCwSUBOWInbZnCrXT1sFP9s8l1/3CLqrR
3S96WtL6s/4GQfbhrCsSjD+hikOFmEk5dYn8CofPFRDKvnWJGp1onaoThAghAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU6oA4RVJQDs///tGubs6kQ0TyKEUwHwYDVR0j
BBgwFoAU1TnPkptqaiuVlrki9Bf62Rd5ntcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHRhM1dIWDVjd3E4OGdmTEVjclBlYWp0Ulh2QVB1UFhYTHoxc3NONzNT
M1QvMS9ENTM5Q0Y5MjlCNkE2QTJCOTU5NkI5MjJGNDE3RkFEOTE3Nzk5RUQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1MzlDRjkyOUI2QTZBMkI5
NTk2QjkyMkY0MTdGQUQ5MTc3OTlFRDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RHRhM1dIWDVjd3E4OGdmTEVjclBlYWp0Ulh2QVB1UFhYTHoxc3NONzNTM1QvMS9E
NTM5Q0Y5MjlCNkE2QTJCOTU5NkI5MjJGNDE3RkFEOTE3Nzk5RUQ3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABpQh9xjEIqITrIxNtT1n7lX6wu05kZgJOQQQCV5oxDSakrJ8o0nZUxCI4hzx
8SENb0i32CnmIEA21uyVoXWFg/VxUeWB2VCSX4bd2ntJ7/ahC9UPYSabJ3LefqyU
gbGTNAOq9ZIZmQIxL35eqmD5VbPSwSqcP+iWS309TR4X8YdG+bqJy/LvPywcHSP0
xNXQB/kvUY8OquGHn/1AV9FTaDQ57ewqPFlnjyLy6J9BxywO+cQpPH4mLESZWKYP
Oo0JRRVH4+8REioWdC8RPDQV7EesL7q+A1oEcpJ9awHFk910yJsNOlPDvCSUjfUU
4s61EccyVgcYzNj0XiCS4J/UCQ==
-----END CERTIFICATE-----
Generated at Fri Oct 30 07:07:51 2026 by rpki-client