Error: rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
Error: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.cer: certificate revoked on Tue 06 Oct 2026 02:48:32 +0000

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft
File:                     4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft (raw, json)
Hash identifier:          q/494gtLtJlbwBaxSK/BMI7EqZEEoEwWkkzTpncMM5s=
Subject key identifier:   1E:35:14:EC:2C:15:24:2C:71:71:25:12:67:0C:50:38:20:C3:81:B7
Authority key identifier: 4E:F0:7D:51:4B:A1:D6:B2:FB:DA:6C:4D:C3:60:BE:B7:50:D3:C9:C4
Certificate issuer:       /CN=4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4
Certificate serial:       3C396D4F57CD39F2BFCD35C7DCAC717ED6746C9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft
Manifest number:          027A
Signing time:             Wed 30 Sep 2026 06:10:07 +0000
Manifest this update:     Wed 30 Sep 2026 06:05:07 +0000
Manifest next update:     Thu 01 Oct 2026 09:34:07 +0000
Files and hashes:         1: 3136382e3139362e3231362e302f32322d3234203d3e20323635343733.roa (hash: SxZQAE35KjoIKxtvw4hCd1ykd1xc9GMr7GBWpJeHEWE=)
                          2: 4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.crl (hash: wRRZ55jn7B36yLOwW+zoEmPOl5/ZF8lHPTjBQpzf1Vg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:39:6d:4f:57:cd:39:f2:bf:cd:35:c7:dc:ac:71:7e:d6:74:6c:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4
        Validity
            Not Before: Sep 30 06:05:07 2026 GMT
            Not After : Oct  1 09:34:07 2026 GMT
        Subject: CN=1E3514EC2C15242C71712512670C503820C381B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:aa:59:79:73:19:ea:2e:c0:ee:36:dd:db:3e:
                    7e:74:71:31:b4:85:ff:42:da:85:e7:44:3c:a3:a9:
                    4a:ba:53:94:70:51:61:d3:f5:4c:76:5b:65:e3:c1:
                    07:04:4c:6d:75:ce:53:33:4d:18:ae:7e:b8:51:a0:
                    a7:2f:da:bf:8e:bb:2d:ea:37:67:fb:01:3e:9e:d8:
                    f6:d2:9d:dc:e5:e4:bc:cd:65:7e:0c:9e:99:15:99:
                    a6:d6:e8:bd:56:74:dc:ad:6b:fa:f0:1f:85:5f:8c:
                    91:80:0b:62:7d:0e:e5:67:ec:ad:ad:cb:e8:3a:1e:
                    39:17:56:54:c6:e6:15:8f:3f:5c:1e:10:bc:45:b2:
                    dd:e3:49:a8:fe:42:37:7a:17:75:5b:c6:42:26:f3:
                    9b:5f:fc:f3:11:20:e5:ad:e1:7b:4f:35:00:5a:d6:
                    8c:be:1b:09:2e:5d:63:db:4e:29:c1:09:a1:6b:10:
                    15:cd:d7:7b:cb:c5:a2:8c:80:b8:0c:02:62:e8:9e:
                    74:2e:70:b0:21:d2:d4:7e:e8:93:74:cf:84:6f:6f:
                    a3:5d:33:a2:61:20:ab:40:41:17:c3:56:29:9f:8b:
                    d6:0e:fa:43:ab:f6:18:1d:06:6b:d4:3b:a8:ce:fb:
                    b5:4b:c8:61:4e:d7:43:0e:98:20:21:77:9d:20:5a:
                    df:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:35:14:EC:2C:15:24:2C:71:71:25:12:67:0C:50:38:20:C3:81:B7
            X509v3 Authority Key Identifier:
                keyid:4E:F0:7D:51:4B:A1:D6:B2:FB:DA:6C:4D:C3:60:BE:B7:50:D3:C9:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:55:9e:09:de:09:5d:72:bc:5b:01:ea:93:65:ad:87:f1:19:
         98:bf:42:29:76:4f:4e:85:13:fb:17:8c:ae:df:91:0b:dc:1b:
         36:53:cb:00:5a:68:79:91:db:c1:2b:45:52:84:9f:e6:e2:56:
         7a:0e:21:e2:26:5d:69:3d:27:8b:ba:52:6f:1b:01:ad:19:06:
         a0:1d:13:43:d8:27:cf:51:b7:e9:a3:ae:38:0d:ab:58:cb:7f:
         e4:f7:f8:73:c3:9f:57:01:b4:e7:0d:e2:ec:b5:e3:97:af:86:
         bb:b1:a7:70:e0:8f:45:5b:49:37:19:40:1a:e0:17:cf:86:9f:
         8b:99:89:40:66:10:08:35:4a:b2:ce:ab:aa:cd:d4:1c:1d:ff:
         50:74:19:f8:99:eb:49:8b:dc:b1:88:1a:8e:62:14:10:8b:aa:
         db:05:56:e2:ef:33:70:c3:09:10:a9:63:42:45:b1:37:32:84:
         1c:15:e7:84:96:96:7a:10:f8:d4:33:82:4e:9e:4a:86:c5:9e:
         10:9a:fa:58:ad:3a:75:23:e7:c3:7f:fb:42:e1:f3:11:a5:fd:
         a2:af:72:a9:09:c1:58:43:6b:b9:84:78:d0:7d:24:71:4b:f1:
         39:8b:c5:5c:9e:9f:b4:0b:b5:42:5f:97:e0:38:7d:91:5c:46:
         10:17:b4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 15:28:11 2026 by rpki-client