Error: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.cer: certificate revoked on Wed 30 Sep 2026 03:48:31 +0000

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.mft
File:                     71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.mft (raw, json)
Hash identifier:          ftnUf1YtTvEGK/OhZ/b/Olvxwi6ABmTIEO3Cq78Is+w=
Subject key identifier:   54:E1:4C:84:D6:3B:A0:92:01:07:00:83:03:80:85:70:B8:63:E9:4B
Authority key identifier: 71:D6:E8:15:8F:9E:FE:91:E9:AC:06:7F:99:AA:E5:B3:4F:B7:C7:A8
Certificate issuer:       /CN=71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8
Certificate serial:       586170667FD3AFB53662DA116654F01E24AD8DF2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.mft
Manifest number:          01A0
Signing time:             Thu 24 Sep 2026 10:01:00 +0000
Manifest this update:     Thu 24 Sep 2026 09:56:00 +0000
Manifest next update:     Fri 25 Sep 2026 10:16:00 +0000
Files and hashes:         1: 323830343a373730633a3a2f33322d313238203d3e20323731313531.roa (hash: 48UGaUhw5lOAFlcmdxaBBOibUkrTKasIL2u+nKYFpVk=)
                          2: 3137392e34322e3131362e302f32322d3332203d3e20323731313531.roa (hash: c2uoTP3FqrUjeXOcSI2m+CDup+9yO7bW1GYM5OpldqI=)
                          3: 71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.crl (hash: whydm0a9rUMv4pZNtNOHToDCRfjKVjXXT58qLxZ0atc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:61:70:66:7f:d3:af:b5:36:62:da:11:66:54:f0:1e:24:ad:8d:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8
        Validity
            Not Before: Sep 24 09:56:00 2026 GMT
            Not After : Sep 25 10:16:00 2026 GMT
        Subject: CN=54E14C84D63BA0920107008303808570B863E94B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:59:9b:b5:1b:11:7b:a8:4e:74:86:7f:6e:5d:
                    c9:7f:2d:b7:74:7d:c5:e4:97:6e:3d:f9:29:bd:e6:
                    d6:23:da:c9:52:2c:9d:9a:c8:93:ea:71:f9:5b:e6:
                    1a:38:2e:3a:a3:f4:06:88:f4:cb:e9:ab:08:1a:ef:
                    41:ef:c7:68:f3:2b:de:f6:07:20:8a:37:62:ea:11:
                    61:6c:a4:88:b3:88:df:34:57:2c:b5:3a:df:69:e7:
                    b9:be:a5:35:8c:a0:19:b1:ce:16:49:b6:d1:75:ea:
                    8a:60:39:76:e2:57:7a:df:4e:ae:04:c4:67:a7:a9:
                    1d:4d:55:d9:e3:4b:70:c5:11:61:09:69:3b:6e:4e:
                    a0:d8:03:1d:85:ae:15:8d:7b:37:66:70:82:4a:48:
                    1e:48:d9:7e:99:51:91:eb:4d:ea:3d:42:bb:79:7d:
                    81:fb:ea:76:c6:47:26:64:6f:9e:95:6f:1b:22:8e:
                    8e:ec:80:99:de:db:a2:2d:cd:69:09:aa:9a:3f:26:
                    a8:e2:2e:23:83:5d:f2:ea:2e:10:3e:4d:7f:4b:aa:
                    21:52:bc:cf:99:61:b7:c1:e3:3d:d4:41:51:dd:09:
                    61:e2:b1:7d:a0:bb:24:a1:e2:8d:d5:6e:d0:ca:9a:
                    c9:23:9d:2e:bf:2d:55:b3:92:a1:33:b2:64:14:e8:
                    06:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E1:4C:84:D6:3B:A0:92:01:07:00:83:03:80:85:70:B8:63:E9:4B
            X509v3 Authority Key Identifier:
                keyid:71:D6:E8:15:8F:9E:FE:91:E9:AC:06:7F:99:AA:E5:B3:4F:B7:C7:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:f4:c8:dc:08:26:b6:5e:bb:14:0a:42:a1:90:76:53:b6:15:
         8f:a4:fe:b8:1d:2f:b1:28:f9:1b:00:f2:10:37:99:21:0c:c2:
         22:15:c1:25:45:fb:c2:4b:0c:4b:85:67:ce:ef:9b:53:fc:c7:
         2c:a6:e7:0e:ea:d0:95:64:d7:49:3b:2f:b3:0f:ac:23:76:0f:
         02:00:da:9a:78:ef:70:d2:7c:69:59:d2:d0:2c:fe:7c:2f:f4:
         4e:06:52:a5:e5:d3:6d:07:13:7a:2e:fc:53:31:1f:ae:54:e2:
         0b:60:95:16:5a:e2:68:be:04:1c:41:a1:35:41:fc:e2:07:06:
         02:45:c7:c6:c7:74:9d:77:15:70:a1:02:08:9b:97:ee:0e:33:
         09:16:bf:3c:2f:8b:7d:55:23:0c:9f:ed:d6:80:b6:2b:7f:e2:
         26:4a:27:06:ba:09:be:ca:df:99:bf:ab:f8:ac:8e:a9:dc:d9:
         06:f4:15:57:dc:2e:d0:a5:c3:62:f2:5e:d8:e0:50:e6:cb:4b:
         f7:b5:ee:59:c5:c3:72:bd:ac:4a:c3:7a:bc:a5:dc:6e:f1:ea:
         c7:56:63:b6:be:a6:94:3c:71:6b:1d:00:88:66:23:1b:06:91:
         ae:93:0c:f1:c6:4a:16:85:df:47:49:24:e2:c7:b3:5e:a3:a7:
         56:ee:9f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 08:26:06 2026 by rpki-client