
Error: rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
Error: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.cer: certificate revoked on Tue 06 Oct 2026 02:48:32 +0000
Manifest
$ rpki-client -vvvf rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft
File: 4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft (raw, json)
Hash identifier: q/494gtLtJlbwBaxSK/BMI7EqZEEoEwWkkzTpncMM5s=
Subject key identifier: 1E:35:14:EC:2C:15:24:2C:71:71:25:12:67:0C:50:38:20:C3:81:B7
Authority key identifier: 4E:F0:7D:51:4B:A1:D6:B2:FB:DA:6C:4D:C3:60:BE:B7:50:D3:C9:C4
Certificate issuer: /CN=4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4
Certificate serial: 3C396D4F57CD39F2BFCD35C7DCAC717ED6746C9C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft
Manifest number: 027A
Signing time: Wed 30 Sep 2026 06:10:07 +0000
Manifest this update: Wed 30 Sep 2026 06:05:07 +0000
Manifest next update: Thu 01 Oct 2026 09:34:07 +0000
Files and hashes: 1: 3136382e3139362e3231362e302f32322d3234203d3e20323635343733.roa (hash: SxZQAE35KjoIKxtvw4hCd1ykd1xc9GMr7GBWpJeHEWE=)
2: 4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.crl (hash: wRRZ55jn7B36yLOwW+zoEmPOl5/ZF8lHPTjBQpzf1Vg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:39:6d:4f:57:cd:39:f2:bf:cd:35:c7:dc:ac:71:7e:d6:74:6c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4
Validity
Not Before: Sep 30 06:05:07 2026 GMT
Not After : Oct 1 09:34:07 2026 GMT
Subject: CN=1E3514EC2C15242C71712512670C503820C381B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:aa:59:79:73:19:ea:2e:c0:ee:36:dd:db:3e:
7e:74:71:31:b4:85:ff:42:da:85:e7:44:3c:a3:a9:
4a:ba:53:94:70:51:61:d3:f5:4c:76:5b:65:e3:c1:
07:04:4c:6d:75:ce:53:33:4d:18:ae:7e:b8:51:a0:
a7:2f:da:bf:8e:bb:2d:ea:37:67:fb:01:3e:9e:d8:
f6:d2:9d:dc:e5:e4:bc:cd:65:7e:0c:9e:99:15:99:
a6:d6:e8:bd:56:74:dc:ad:6b:fa:f0:1f:85:5f:8c:
91:80:0b:62:7d:0e:e5:67:ec:ad:ad:cb:e8:3a:1e:
39:17:56:54:c6:e6:15:8f:3f:5c:1e:10:bc:45:b2:
dd:e3:49:a8:fe:42:37:7a:17:75:5b:c6:42:26:f3:
9b:5f:fc:f3:11:20:e5:ad:e1:7b:4f:35:00:5a:d6:
8c:be:1b:09:2e:5d:63:db:4e:29:c1:09:a1:6b:10:
15:cd:d7:7b:cb:c5:a2:8c:80:b8:0c:02:62:e8:9e:
74:2e:70:b0:21:d2:d4:7e:e8:93:74:cf:84:6f:6f:
a3:5d:33:a2:61:20:ab:40:41:17:c3:56:29:9f:8b:
d6:0e:fa:43:ab:f6:18:1d:06:6b:d4:3b:a8:ce:fb:
b5:4b:c8:61:4e:d7:43:0e:98:20:21:77:9d:20:5a:
df:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:35:14:EC:2C:15:24:2C:71:71:25:12:67:0C:50:38:20:C3:81:B7
X509v3 Authority Key Identifier:
keyid:4E:F0:7D:51:4B:A1:D6:B2:FB:DA:6C:4D:C3:60:BE:B7:50:D3:C9:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:55:9e:09:de:09:5d:72:bc:5b:01:ea:93:65:ad:87:f1:19:
98:bf:42:29:76:4f:4e:85:13:fb:17:8c:ae:df:91:0b:dc:1b:
36:53:cb:00:5a:68:79:91:db:c1:2b:45:52:84:9f:e6:e2:56:
7a:0e:21:e2:26:5d:69:3d:27:8b:ba:52:6f:1b:01:ad:19:06:
a0:1d:13:43:d8:27:cf:51:b7:e9:a3:ae:38:0d:ab:58:cb:7f:
e4:f7:f8:73:c3:9f:57:01:b4:e7:0d:e2:ec:b5:e3:97:af:86:
bb:b1:a7:70:e0:8f:45:5b:49:37:19:40:1a:e0:17:cf:86:9f:
8b:99:89:40:66:10:08:35:4a:b2:ce:ab:aa:cd:d4:1c:1d:ff:
50:74:19:f8:99:eb:49:8b:dc:b1:88:1a:8e:62:14:10:8b:aa:
db:05:56:e2:ef:33:70:c3:09:10:a9:63:42:45:b1:37:32:84:
1c:15:e7:84:96:96:7a:10:f8:d4:33:82:4e:9e:4a:86:c5:9e:
10:9a:fa:58:ad:3a:75:23:e7:c3:7f:fb:42:e1:f3:11:a5:fd:
a2:af:72:a9:09:c1:58:43:6b:b9:84:78:d0:7d:24:71:4b:f1:
39:8b:c5:5c:9e:9f:b4:0b:b5:42:5f:97:e0:38:7d:91:5c:46:
10:17:b4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 15:28:11 2026 by rpki-client