Error: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD3997EA624B2747F06E77D914122EADEC4D0B7D.cer: certificate revoked on Mon 05 Oct 2026 22:08:31 +0000

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft
File:                     DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft (raw, json)
Hash identifier:          2ts/UWoMA1IiZ1zR8ZjRhugJCXDI50+7bgsSrE2EAGw=
Subject key identifier:   BE:60:CA:CC:3A:F5:6D:2A:80:A6:2B:21:CE:76:20:1E:D4:38:6C:4E
Authority key identifier: DD:39:97:EA:62:4B:27:47:F0:6E:77:D9:14:12:2E:AD:EC:4D:0B:7D
Certificate issuer:       /CN=DD3997EA624B2747F06E77D914122EADEC4D0B7D
Certificate serial:       27FD6D41E28FFB0B5B65DFCD51B5E961B7DD5F8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD3997EA624B2747F06E77D914122EADEC4D0B7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft
Manifest number:          02E1
Signing time:             Sun 04 Oct 2026 22:17:09 +0000
Manifest this update:     Sun 04 Oct 2026 22:12:09 +0000
Manifest next update:     Mon 05 Oct 2026 23:27:09 +0000
Files and hashes:         1: 323830343a353764303a3a2f33322d3438203d3e20323638303838.roa (hash: Z22x3jHa30rt4HcUEQtomMiHmgJYeN0dKA5/K8X8X4Y=)
                          2: DD3997EA624B2747F06E77D914122EADEC4D0B7D.crl (hash: g7P7ZWKea1b5TPbUCSO0DsYrEpQ43B1Y0R6D6CCanRQ=)
                          3: 34352e3136382e3130302e302f32322d3234203d3e20323638303838.roa (hash: mYcu1MZK68DUcNdnKW4LQA9C+SawpaBLKo0KqPDDSCw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:fd:6d:41:e2:8f:fb:0b:5b:65:df:cd:51:b5:e9:61:b7:dd:5f:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD3997EA624B2747F06E77D914122EADEC4D0B7D
        Validity
            Not Before: Oct  4 22:12:09 2026 GMT
            Not After : Oct  5 23:27:09 2026 GMT
        Subject: CN=BE60CACC3AF56D2A80A62B21CE76201ED4386C4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d3:f8:ac:c3:63:ba:ab:a4:15:f6:50:5a:65:
                    88:45:07:90:64:89:95:22:9e:f7:89:04:2b:29:99:
                    9e:5a:0f:b0:9a:0a:d2:d8:55:13:14:ff:ec:5e:8a:
                    b1:ab:ad:33:ff:a3:9b:44:47:1f:8b:83:f2:e4:6d:
                    d7:bf:59:43:74:19:cc:46:c6:eb:29:9d:ca:d6:53:
                    43:5f:d6:b5:c2:ed:4e:4f:92:a9:24:ce:4c:cf:50:
                    49:f5:d0:87:ef:c6:a3:0e:3a:34:3d:0b:06:78:9a:
                    df:72:e8:45:28:88:4f:f1:18:d4:59:c8:23:e7:d1:
                    c6:34:a4:40:de:58:7f:4c:a8:20:0c:dc:f9:f4:71:
                    3e:7d:5b:a6:eb:1e:73:9f:a7:a8:02:b4:14:b4:6f:
                    0e:e7:37:06:22:90:03:97:04:fa:b1:4b:d9:95:b2:
                    08:4e:8b:ec:97:44:7e:7c:d0:a9:d3:ee:20:a5:9f:
                    bb:f7:69:40:a4:1c:69:6a:85:8d:ae:59:7e:af:e5:
                    47:5d:43:b9:77:6c:c5:8d:cc:b1:2a:b5:04:6e:5f:
                    be:c4:49:a9:02:aa:4d:42:a1:3e:ad:b8:f7:77:15:
                    7e:b9:cf:b7:26:1d:f7:ec:f1:5e:8f:e2:6f:af:0e:
                    56:96:9a:1b:b4:a0:06:d6:3c:5b:65:a5:2d:f5:2b:
                    96:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:60:CA:CC:3A:F5:6D:2A:80:A6:2B:21:CE:76:20:1E:D4:38:6C:4E
            X509v3 Authority Key Identifier:
                keyid:DD:39:97:EA:62:4B:27:47:F0:6E:77:D9:14:12:2E:AD:EC:4D:0B:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD3997EA624B2747F06E77D914122EADEC4D0B7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:a9:5d:49:06:38:2d:e4:4f:e3:70:b9:d3:86:7c:82:0f:6c:
         16:34:f0:31:fe:a7:f9:2c:8e:13:e6:07:4f:e7:ea:96:49:6d:
         61:e6:14:8c:94:7e:a3:38:81:39:7b:a2:5d:dd:6e:52:ae:ed:
         ff:7a:1d:82:af:6f:44:c7:4a:3e:2a:17:b8:ec:8b:ba:5e:14:
         d3:42:7d:02:e3:81:9e:69:6a:76:16:ed:68:b3:1d:21:51:cf:
         1d:3c:b7:8a:05:50:a0:89:ce:e0:50:97:fa:f6:06:95:19:19:
         de:61:f6:ca:8a:22:2a:6a:21:95:8d:4c:d8:f5:e5:d0:6d:43:
         65:9d:ea:a8:02:b8:79:60:9a:77:ca:0c:b5:45:d2:ce:1d:95:
         41:c1:68:19:af:83:bb:9c:12:3d:93:0e:dd:2d:51:4d:19:38:
         13:41:92:1a:2c:10:e1:95:fd:8d:7a:af:9c:c9:31:6a:5d:a4:
         0b:f5:a0:94:67:2f:e9:d3:9f:2c:72:d3:56:82:81:7d:d6:c8:
         7d:5e:d3:08:c6:a2:6d:d6:42:a4:16:f2:85:79:ac:1b:bd:ab:
         91:b2:71:f8:76:49:d1:6a:c8:7b:b4:ea:ad:b9:7a:3a:85:0f:
         e8:e3:dc:70:c0:d6:2a:d9:c0:eb:d7:38:e7:b4:c9:58:a9:73:
         66:e0:2e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:43:29 2026 by rpki-client