
Error: rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/8ADE8116850374B4769C4C4E4353E5E0E9407CD0.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
Error: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ADE8116850374B4769C4C4E4353E5E0E9407CD0.cer: certificate revoked on Fri 25 Sep 2026 17:06:09 +0000
Manifest
$ rpki-client -vvvf rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/8ADE8116850374B4769C4C4E4353E5E0E9407CD0.mft
File: 8ADE8116850374B4769C4C4E4353E5E0E9407CD0.mft (raw, json)
Hash identifier: GOF1x6OGSjWYUvIgeQXrB4DoqQF3i6vQTCWV40M1MC4=
Subject key identifier: 3C:3E:EF:11:A5:FA:98:DF:C4:18:C7:A1:F4:FF:DF:A8:43:9D:9D:68
Authority key identifier: 8A:DE:81:16:85:03:74:B4:76:9C:4C:4E:43:53:E5:E0:E9:40:7C:D0
Certificate issuer: /CN=8ADE8116850374B4769C4C4E4353E5E0E9407CD0
Certificate serial: 22C4AB68FE5FD92A1066D25A560FF576C2A4FF86
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ADE8116850374B4769C4C4E4353E5E0E9407CD0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/8ADE8116850374B4769C4C4E4353E5E0E9407CD0.mft
Manifest number: 01AF
Signing time: Thu 24 Sep 2026 19:45:43 +0000
Manifest this update: Thu 24 Sep 2026 19:40:43 +0000
Manifest next update: Fri 25 Sep 2026 22:48:43 +0000
Files and hashes: 1: 3139312e3234322e3230342e302f32322d3234203d3e20323633343830.roa (hash: m8Ol3QHgQV/NxxerYvPjBh6L24nL+SrudjQ6gSm3HwU=)
2: 8ADE8116850374B4769C4C4E4353E5E0E9407CD0.crl (hash: l+7lpfiHC+BlgqtwbWXsbQVjADB9JpyV9RuAgt1wABY=)
3: 323830343a313238303a3a2f33322d3438203d3e20323633343830.roa (hash: HT86lFwac3xA5KwQF9AYmpBO77xFDL7FpXmE7N+84+0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:c4:ab:68:fe:5f:d9:2a:10:66:d2:5a:56:0f:f5:76:c2:a4:ff:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ADE8116850374B4769C4C4E4353E5E0E9407CD0
Validity
Not Before: Sep 24 19:40:43 2026 GMT
Not After : Sep 25 22:48:43 2026 GMT
Subject: CN=3C3EEF11A5FA98DFC418C7A1F4FFDFA8439D9D68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:27:9e:05:d6:38:7c:c6:c5:9a:b2:38:19:08:
2b:5e:47:0f:fc:12:8c:16:f1:09:15:a2:e3:b6:b6:
35:ad:b7:cb:96:4c:c4:8b:1a:d7:f6:25:c2:92:69:
76:4a:9f:9a:7d:b3:6c:08:4c:78:11:92:9c:72:0e:
fc:e6:91:8f:ea:9e:9a:ed:99:fe:4a:4d:f9:88:01:
b6:d4:9a:6d:e3:f1:94:0f:06:1a:bb:3b:d4:02:78:
17:33:f1:e7:25:a8:a9:81:92:56:13:ba:48:0d:a3:
b9:cb:73:6c:31:b2:17:58:dc:f3:c3:32:06:a0:dc:
c5:e3:45:29:05:83:81:14:c6:b7:64:48:4f:4b:e1:
17:67:2b:2c:ad:a4:bb:6a:80:65:54:15:2e:dd:94:
64:13:3a:b8:1f:25:87:9f:ed:af:b2:e8:10:f4:1d:
73:60:14:af:34:b3:15:89:5f:d6:2d:4f:4e:dc:72:
b9:eb:1b:8c:ef:e7:87:cf:84:5f:bb:c2:d4:16:8e:
1d:a5:a0:04:d0:f2:9e:2e:76:e0:11:45:06:74:20:
9e:7b:d7:df:1b:bc:1a:51:a1:d7:9d:01:c5:e0:85:
e9:39:9f:ea:ba:54:5d:78:3c:e0:57:31:ff:63:08:
ca:6a:a7:b7:19:f1:87:f5:17:a6:d4:9d:6e:4d:30:
1c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3E:EF:11:A5:FA:98:DF:C4:18:C7:A1:F4:FF:DF:A8:43:9D:9D:68
X509v3 Authority Key Identifier:
keyid:8A:DE:81:16:85:03:74:B4:76:9C:4C:4E:43:53:E5:E0:E9:40:7C:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/8ADE8116850374B4769C4C4E4353E5E0E9407CD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ADE8116850374B4769C4C4E4353E5E0E9407CD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/8ADE8116850374B4769C4C4E4353E5E0E9407CD0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0d:f1:e6:dd:2b:c6:05:ac:6e:ba:c0:6a:c5:dd:49:9f:25:
34:1a:c5:fe:c3:ac:e6:b9:0e:30:e0:89:52:a4:0e:97:8e:b0:
1f:1c:b9:2e:34:be:f2:f0:3b:79:b0:f7:78:3f:54:0c:75:94:
b5:13:1c:8f:4d:90:9e:ee:fc:e0:ca:44:9a:9d:61:62:fe:40:
3c:76:ac:38:cf:a6:5d:e3:1f:64:b9:b0:cf:d8:91:af:06:cd:
3a:24:6b:db:26:6d:96:7d:18:36:c0:ed:73:b6:13:6e:14:38:
bd:ff:8e:c2:4e:43:1a:88:d4:1f:0a:e7:1c:d9:55:57:43:6c:
31:f4:ac:f2:e2:41:56:b1:26:51:f2:87:f4:40:70:72:a2:c9:
d0:36:5d:8e:f3:56:75:70:f9:0a:58:05:7a:18:f6:e0:6e:dc:
33:82:bc:31:9b:07:1a:ae:73:55:37:1d:f1:9e:28:e3:d7:05:
03:f8:12:21:b1:09:e1:2d:5c:4c:59:c6:c4:39:e4:28:b4:0e:
f2:e1:75:33:16:79:a9:a0:b5:f0:2d:2b:f3:7e:4c:e9:8d:d4:
b7:08:a7:41:25:93:16:82:6c:6d:3e:ef:67:be:24:32:59:cb:
65:51:11:b5:00:b7:c4:db:ff:00:e0:25:b9:7d:56:be:20:6c:
03:0c:a8:b9
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUIsSraP5f2SoQZtJaVg/1dsKk/4YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEFERTgxMTY4NTAzNzRCNDc2OUM0QzRFNDM1M0U1RTBF
OTQwN0NEMDAeFw0yNjA5MjQxOTQwNDNaFw0yNjA5MjUyMjQ4NDNaMDMxMTAvBgNV
BAMTKDNDM0VFRjExQTVGQTk4REZDNDE4QzdBMUY0RkZERkE4NDM5RDlENjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzJ54F1jh8xsWasjgZCCteRw/8
EowW8QkVouO2tjWtt8uWTMSLGtf2JcKSaXZKn5p9s2wITHgRkpxyDvzmkY/qnprt
mf5KTfmIAbbUmm3j8ZQPBhq7O9QCeBcz8eclqKmBklYTukgNo7nLc2wxshdY3PPD
Mgag3MXjRSkFg4EUxrdkSE9L4RdnKyytpLtqgGVUFS7dlGQTOrgfJYef7a+y6BD0
HXNgFK80sxWJX9YtT07ccrnrG4zv54fPhF+7wtQWjh2loATQ8p4uduARRQZ0IJ57
198bvBpRodedAcXghek5n+q6VF14POBXMf9jCMpqp7cZ8Yf1F6bUnW5NMBzPAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUPD7vEaX6mN/EGMeh9P/fqEOdnWgwHwYDVR0j
BBgwFoAUit6BFoUDdLR2nExOQ1Pl4OlAfNAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9uSHJ2cDM5cDRlUmNEWnA4RlFoZW9uanpHQWtxa2RydjRaM3JpVGNFRjZK
LzAvOEFERTgxMTY4NTAzNzRCNDc2OUM0QzRFNDM1M0U1RTBFOTQwN0NEMC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84QURFODExNjg1MDM3NEI0NzY5
QzRDNEU0MzUzRTVFMEU5NDA3Q0QwLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25I
cnZwMzlwNGVSY0RacDhGUWhlb25qekdBa3FrZHJ2NFozcmlUY0VGNkovMC84QURF
ODExNjg1MDM3NEI0NzY5QzRDNEU0MzUzRTVFMEU5NDA3Q0QwLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
Lg3x5t0rxgWsbrrAasXdSZ8lNBrF/sOs5rkOMOCJUqQOl46wHxy5LjS+8vA7ebD3
eD9UDHWUtRMcj02Qnu784MpEmp1hYv5APHasOM+mXeMfZLmwz9iRrwbNOiRr2yZt
ln0YNsDtc7YTbhQ4vf+Owk5DGojUHwrnHNlVV0NsMfSs8uJBVrEmUfKH9EBwcqLJ
0DZdjvNWdXD5ClgFehj24G7cM4K8MZsHGq5zVTcd8Z4o49cFA/gSIbEJ4S1cTFnG
xDnkKLQO8uF1MxZ5qaC18C0r835M6Y3UtwinQSWTFoJsbT7vZ74kMlnLZVERtQC3
xNv/AOAluX1WviBsAwyouQ==
-----END CERTIFICATE-----
Generated at Mon Oct 19 07:48:00 2026 by rpki-client