Error: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D8310BF161C17828D8C8E9341BF055481B108A.cer: certificate revoked on Tue 20 Oct 2026 16:48:29 +0000

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/HEPmq54S7VB9RCN8cETasmrFeGDWnpnpQAnYAM3wDH6B/0/D8D8310BF161C17828D8C8E9341BF055481B108A.mft
File:                     D8D8310BF161C17828D8C8E9341BF055481B108A.mft (raw, json)
Hash identifier:          MKphImX8K6HIfyC6qC+sl8t+JVuY0JltRmvKsOgJP8k=
Subject key identifier:   2A:9E:5B:DF:BB:C2:30:17:5C:C3:2E:79:64:ED:35:08:F5:E8:F3:C0
Authority key identifier: D8:D8:31:0B:F1:61:C1:78:28:D8:C8:E9:34:1B:F0:55:48:1B:10:8A
Certificate issuer:       /CN=D8D8310BF161C17828D8C8E9341BF055481B108A
Certificate serial:       5907445D486AD2D6717366FEE510707E328DD64A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D8310BF161C17828D8C8E9341BF055481B108A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEPmq54S7VB9RCN8cETasmrFeGDWnpnpQAnYAM3wDH6B/0/D8D8310BF161C17828D8C8E9341BF055481B108A.mft
Manifest number:          8B
Signing time:             Wed 14 Oct 2026 20:30:26 +0000
Manifest this update:     Wed 14 Oct 2026 20:25:26 +0000
Manifest next update:     Thu 15 Oct 2026 22:29:26 +0000
Files and hashes:         1: 323830343a393835343a3a2f33322d313238203d3e20323735363831.roa (hash: pBQCnitnC2KK6biAca0iFm7QN7pel9/X2RUyXq/jUE4=)
                          2: D8D8310BF161C17828D8C8E9341BF055481B108A.crl (hash: gzJlbMkUHAPdBHjDSdR7P/eiFw7ivehEF/UEhERY2/E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:07:44:5d:48:6a:d2:d6:71:73:66:fe:e5:10:70:7e:32:8d:d6:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8D8310BF161C17828D8C8E9341BF055481B108A
        Validity
            Not Before: Oct 14 20:25:26 2026 GMT
            Not After : Oct 15 22:29:26 2026 GMT
        Subject: CN=2A9E5BDFBBC230175CC32E7964ED3508F5E8F3C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:53:e0:a9:29:11:a1:02:47:78:f7:42:95:0c:
                    89:83:0a:37:46:b6:30:49:0b:33:5a:35:af:91:be:
                    5c:28:d5:c5:b9:b8:87:9b:5d:82:0b:58:f9:10:1b:
                    d1:36:e0:b3:ed:60:1e:73:4d:4f:da:00:80:2a:52:
                    f5:0e:2c:90:4c:b0:d2:3f:31:cb:48:59:60:0b:e6:
                    69:4b:2a:6e:0c:3c:4a:00:14:97:5d:5f:3c:9d:d8:
                    11:28:3b:54:78:dc:07:9e:79:0f:53:c7:a8:ca:a0:
                    33:b7:8a:f9:28:10:b3:27:19:c4:a6:50:cb:6a:ad:
                    ca:ae:12:c2:0d:90:b6:40:60:a1:fd:62:f3:37:49:
                    b6:46:c0:98:b3:7d:b8:61:5d:80:2d:aa:b6:48:2d:
                    47:2f:a3:55:1c:49:cd:1e:50:c0:9c:d7:03:10:a6:
                    00:3b:cd:a8:f7:93:67:cd:0d:20:b9:36:36:d5:7f:
                    af:8b:23:eb:fd:6d:0e:fd:a3:46:9c:1e:0d:cd:a6:
                    bb:63:01:af:a4:74:4b:27:f1:d6:df:9f:0a:a5:5b:
                    ac:e5:ba:de:b3:38:23:ca:85:18:91:f4:44:e9:6a:
                    59:d2:09:41:8e:cb:34:1f:5b:c8:e1:16:eb:02:4b:
                    59:59:6a:74:4a:2d:7f:61:71:01:c3:ad:a9:cb:6d:
                    f8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:9E:5B:DF:BB:C2:30:17:5C:C3:2E:79:64:ED:35:08:F5:E8:F3:C0
            X509v3 Authority Key Identifier:
                keyid:D8:D8:31:0B:F1:61:C1:78:28:D8:C8:E9:34:1B:F0:55:48:1B:10:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEPmq54S7VB9RCN8cETasmrFeGDWnpnpQAnYAM3wDH6B/0/D8D8310BF161C17828D8C8E9341BF055481B108A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D8310BF161C17828D8C8E9341BF055481B108A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEPmq54S7VB9RCN8cETasmrFeGDWnpnpQAnYAM3wDH6B/0/D8D8310BF161C17828D8C8E9341BF055481B108A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:d6:af:fc:c8:34:a8:96:0a:68:d4:35:48:dd:ff:50:e1:f6:
         39:cd:1c:3c:17:94:41:ac:62:1e:18:31:95:fe:4c:b6:bb:93:
         67:be:ba:2f:ce:b9:65:bc:82:2d:a2:0b:3d:03:fb:78:7e:e2:
         cc:22:e4:ed:0e:72:ac:7b:8b:92:e0:41:14:47:fe:f4:ea:e4:
         0e:dc:1a:25:98:63:ec:49:81:74:63:00:39:c7:e5:9f:2c:c5:
         6a:74:be:1b:6f:f8:7b:d5:a2:ce:ea:51:36:c4:bc:4a:be:b3:
         56:1a:5c:d4:9a:3d:eb:87:1c:1e:68:44:b1:08:e3:dc:e7:34:
         ce:13:8e:c2:2b:68:a7:6a:54:83:5f:3d:76:65:85:a9:f6:97:
         d4:cd:d2:3e:67:b5:de:da:36:d7:58:a4:8f:e6:e0:c4:72:b6:
         44:ce:16:cb:26:11:9b:1e:d5:ad:1d:9a:2b:9e:65:4e:ce:c1:
         00:ae:96:63:61:56:b3:97:9d:21:aa:1e:5a:01:d9:08:ec:8b:
         c6:9c:c4:14:7d:49:a7:fd:92:cc:ad:b8:e7:13:15:13:9c:1a:
         cf:0b:98:08:03:81:16:32:d1:77:20:26:5a:3d:24:62:d4:a7:
         b6:ae:7d:a5:7b:1f:00:c3:56:39:b2:92:bb:97:0c:e0:f2:95:
         ff:97:51:32
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWQdEXUhq0tZxc2b+5RBwfjKN1kowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhEODMxMEJGMTYxQzE3ODI4RDhDOEU5MzQxQkYwNTU0
ODFCMTA4QTAeFw0yNjEwMTQyMDI1MjZaFw0yNjEwMTUyMjI5MjZaMDMxMTAvBgNV
BAMTKDJBOUU1QkRGQkJDMjMwMTc1Q0MzMkU3OTY0RUQzNTA4RjVFOEYzQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+U+CpKRGhAkd490KVDImDCjdG
tjBJCzNaNa+Rvlwo1cW5uIebXYILWPkQG9E24LPtYB5zTU/aAIAqUvUOLJBMsNI/
MctIWWAL5mlLKm4MPEoAFJddXzyd2BEoO1R43AeeeQ9Tx6jKoDO3ivkoELMnGcSm
UMtqrcquEsINkLZAYKH9YvM3SbZGwJizfbhhXYAtqrZILUcvo1UcSc0eUMCc1wMQ
pgA7zaj3k2fNDSC5NjbVf6+LI+v9bQ79o0acHg3NprtjAa+kdEsn8dbfnwqlW6zl
ut6zOCPKhRiR9ETpalnSCUGOyzQfW8jhFusCS1lZanRKLX9hcQHDranLbfgtAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUKp5b37vCMBdcwy55ZO01CPXo88AwHwYDVR0j
BBgwFoAU2NgxC/FhwXgo2MjpNBvwVUgbEIowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEVQbXE1NFM3VkI5UkNOOGNFVGFzbXJGZUdEV25wbnBRQW5ZQU0zd0RI
NkIvMC9EOEQ4MzEwQkYxNjFDMTc4MjhEOEM4RTkzNDFCRjA1NTQ4MUIxMDhBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4RDgzMTBCRjE2MUMxNzgy
OEQ4QzhFOTM0MUJGMDU1NDgxQjEwOEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SEVQbXE1NFM3VkI5UkNOOGNFVGFzbXJGZUdEV25wbnBRQW5ZQU0zd0RINkIvMC9E
OEQ4MzEwQkYxNjFDMTc4MjhEOEM4RTkzNDFCRjA1NTQ4MUIxMDhBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANtav/Mg0qJYKaNQ1SN3/UOH2Oc0cPBeUQaxiHhgxlf5MtruTZ766L865ZbyC
LaILPQP7eH7izCLk7Q5yrHuLkuBBFEf+9OrkDtwaJZhj7EmBdGMAOcflnyzFanS+
G2/4e9WizupRNsS8Sr6zVhpc1Jo964ccHmhEsQjj3Oc0zhOOwitop2pUg189dmWF
qfaX1M3SPme13to211ikj+bgxHK2RM4WyyYRmx7VrR2aK55lTs7BAK6WY2FWs5ed
IaoeWgHZCOyLxpzEFH1Jp/2SzK245xMVE5wazwuYCAOBFjLRdyAmWj0kYtSntq59
pXsfAMNWObKSu5cM4PKV/5dRMg==
-----END CERTIFICATE-----
Generated at Mon Oct 26 19:50:10 2026 by rpki-client