Error: rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/13FA28C10847DE82ACF957B5591AB6E0E23F5057.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
Error: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13FA28C10847DE82ACF957B5591AB6E0E23F5057.cer: certificate revoked on Wed 14 Oct 2026 11:48:30 +0000

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/13FA28C10847DE82ACF957B5591AB6E0E23F5057.mft
File:                     13FA28C10847DE82ACF957B5591AB6E0E23F5057.mft (raw, json)
Hash identifier:          +zsp9takqQqqWp0tfKTHTkRNqMidw3AwZTeKxDAK/bw=
Subject key identifier:   6E:00:04:64:CC:E6:A7:D3:29:02:69:09:AE:18:B2:36:1D:DC:0B:74
Authority key identifier: 13:FA:28:C1:08:47:DE:82:AC:F9:57:B5:59:1A:B6:E0:E2:3F:50:57
Certificate issuer:       /CN=13FA28C10847DE82ACF957B5591AB6E0E23F5057
Certificate serial:       633417576DE4931BEE1D71B97A6953BBF6917DED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13FA28C10847DE82ACF957B5591AB6E0E23F5057.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/13FA28C10847DE82ACF957B5591AB6E0E23F5057.mft
Manifest number:          01A5
Signing time:             Thu 08 Oct 2026 17:52:41 +0000
Manifest this update:     Thu 08 Oct 2026 17:47:41 +0000
Manifest next update:     Fri 09 Oct 2026 18:29:41 +0000
Files and hashes:         1: 323830343a336465633a3a2f33332d3333203d3e20323636353633.roa (hash: ycaX6arQYKHYEh/r3xx6VPAHxnn6TnNRJkoOxAneMcY=)
                          2: 323830343a336465633a383030303a3a2f34302d3430203d3e20323636353633.roa (hash: H4t7sUl8InhVXstI2QjzxxsSmIeJgNW3pP+I62XbFxc=)
                          3: 34352e362e3139382e302f32342d3234203d3e20323636353633.roa (hash: s0XvGz6QeWFrpQ1Z/0fw5KNpi1xfUqTzsaVPgHB+Sjs=)
                          4: 13FA28C10847DE82ACF957B5591AB6E0E23F5057.crl (hash: 6e+URJfJK3gPoHT6/z6Gor6K76M1eEyzWQl1ZqzBOa4=)
                          5: 34352e362e3139372e302f32342d3234203d3e20323636353633.roa (hash: 2Pq5RIKdbRUQShsrU7GSikzCoU8agHmSvBpLFjRmuLA=)
                          6: 34352e362e3139362e302f32342d3234203d3e20323636353633.roa (hash: NomOdTUJfY0wwbgzC4N5XeGVQ6xBb+6vePnbMF4k6Es=)
                          7: 34352e362e3139392e302f32342d3234203d3e20323636353633.roa (hash: XLRxV1b5hSKYc+hsM86C0staQxyB1CmTZS7sbhV+XIk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:34:17:57:6d:e4:93:1b:ee:1d:71:b9:7a:69:53:bb:f6:91:7d:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13FA28C10847DE82ACF957B5591AB6E0E23F5057
        Validity
            Not Before: Oct  8 17:47:41 2026 GMT
            Not After : Oct  9 18:29:41 2026 GMT
        Subject: CN=6E000464CCE6A7D329026909AE18B2361DDC0B74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ac:dc:2b:39:39:39:b7:0c:04:c9:6b:1a:af:
                    5c:52:e6:06:c7:26:eb:38:8c:d5:c2:1a:ec:c7:fc:
                    5a:5d:81:69:86:e0:c8:c1:b1:7a:a3:8b:d8:a5:d6:
                    8f:c6:ab:45:26:38:bb:52:bc:cd:e2:6d:13:35:51:
                    a9:da:30:11:3c:1d:f9:be:eb:d7:6c:ea:d4:ec:0f:
                    1a:7a:31:51:e8:a1:a2:c2:2b:1e:f9:d4:1c:a4:c9:
                    9d:38:1b:ec:7b:0e:be:4b:0f:25:2b:8b:6b:e9:c9:
                    97:0f:0d:08:3f:93:5a:34:ca:2c:19:d2:5f:8d:a9:
                    20:89:64:52:5e:46:51:d2:03:a5:92:15:0c:18:26:
                    5f:e2:71:3f:f7:9e:e0:0f:e1:b6:78:d5:20:03:15:
                    82:a5:a5:a3:8a:06:de:e4:a5:94:6f:c7:20:d5:14:
                    bc:1e:de:c1:c4:0c:d6:fb:4a:eb:19:e9:de:5c:2d:
                    35:2f:e9:26:d1:fb:c0:97:6f:a2:d6:1e:91:80:4e:
                    2c:65:3f:16:f6:9c:f2:73:6c:cb:9d:07:43:83:8e:
                    d7:9f:d5:55:0d:c0:84:78:f5:16:67:3a:4e:ea:27:
                    03:95:1b:f3:67:c6:49:91:f3:80:96:f0:9c:a0:65:
                    f3:00:40:33:c7:65:3d:36:9a:1a:cf:a1:72:f6:d3:
                    ba:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:00:04:64:CC:E6:A7:D3:29:02:69:09:AE:18:B2:36:1D:DC:0B:74
            X509v3 Authority Key Identifier:
                keyid:13:FA:28:C1:08:47:DE:82:AC:F9:57:B5:59:1A:B6:E0:E2:3F:50:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/13FA28C10847DE82ACF957B5591AB6E0E23F5057.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13FA28C10847DE82ACF957B5591AB6E0E23F5057.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/13FA28C10847DE82ACF957B5591AB6E0E23F5057.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:0f:ea:cc:3b:72:36:d2:13:1c:85:be:ac:72:b6:2c:13:50:
         7e:f8:58:fd:31:1f:5b:d0:4f:60:7c:c1:e3:79:ba:c6:4b:b0:
         b8:40:f0:e1:b4:eb:fa:5c:2f:af:d3:1a:0e:bd:00:f8:36:33:
         d7:ad:57:0f:3c:ed:01:a6:40:63:e8:d5:0f:d7:f1:83:2e:09:
         f3:1f:1f:aa:d9:2f:e8:bc:ba:ac:42:fe:e5:6a:9e:7a:a4:70:
         76:df:1c:15:f0:60:88:f3:0f:0d:e1:2f:f4:b2:c3:91:ef:f4:
         ef:8b:af:ed:a4:05:76:92:03:25:35:4c:9a:d9:65:bd:f5:44:
         3f:82:20:79:74:42:1c:9b:5c:6c:38:af:88:ea:99:98:65:6c:
         f2:80:00:45:4b:ea:16:cd:a9:61:d1:82:49:89:53:00:70:23:
         02:66:94:b7:ae:b2:e0:54:09:a8:da:4d:b8:37:a5:64:8e:39:
         f0:0f:e2:f9:02:5e:d4:11:d3:51:b3:c0:1e:1c:bb:01:77:4a:
         2a:72:b5:29:49:d5:a2:ba:02:58:cb:9a:a7:e6:d0:d5:2d:a2:
         f5:c6:1b:38:86:c2:93:5a:5a:8f:31:94:4f:ae:ab:a2:9d:1b:
         53:2a:57:7f:62:a9:6c:5a:32:ed:e8:3c:b2:5d:0a:fa:fc:06:
         f1:5f:20:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 06:21:41 2026 by rpki-client