
Error: rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
Error: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer: certificate revoked on Mon 26 Oct 2026 09:48:57 +0000
Manifest
$ rpki-client -vvvf rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.mft
File: BF45F5442049793490E484E18AD1516C8FDC8087.mft (raw, json)
Hash identifier: +dbxi4ktt4ovWrZ6eHj5EoEMbH0tPlmmHs8q4nMl0os=
Subject key identifier: 27:08:5B:F5:FD:AC:8F:CB:64:B4:B6:D5:8A:39:2A:E1:2A:F3:FF:FC
Authority key identifier: BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87
Certificate issuer: /CN=BF45F5442049793490E484E18AD1516C8FDC8087
Certificate serial: 6B50069E7701232B114E12DE779DFA7A744F6323
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.mft
Manifest number: 03DD
Signing time: Tue 20 Oct 2026 14:28:09 +0000
Manifest this update: Tue 20 Oct 2026 14:23:09 +0000
Manifest next update: Wed 21 Oct 2026 16:00:09 +0000
Files and hashes: 1: 323830343a373762303a3a2f33322d3634203d3e203532363339.roa (hash: Gt0i3W+EGyOwmcRI2UbmRZoVgbKEbhYnUzu0WqJQjUs=)
2: 3137392e34392e3134342e302f32322d3332203d3e20323032.roa (hash: tEpAdEOJ9U9pBbWXEzGt8aP1/CaVRuncqOvci0crDic=)
3: 3137392e34392e3134342e302f32322d3332203d3e2033333536.roa (hash: IMlvYIOZd4kFaLN/nA98J35q03e7MUTSSxXSgJE3w5A=)
4: 3137392e34392e3134342e302f32322d3332203d3e203532363339.roa (hash: 1Rdu+6D/6SRfoWYwx4TQXLZ/QZfdW+L+PqLNd8BSusM=)
5: BF45F5442049793490E484E18AD1516C8FDC8087.crl (hash: PKtI/Ne+Ca3MW9MnFe9fRidD8gxAA2TD4KHHLasCRCs=)
6: 3137392e34392e3134342e302f32322d3234203d3e20323731313933.roa (hash: 3VONtANlffbgl59CDPI3i8TgYb3jL06p+NjQdxpLeRY=)
7: 3137392e34392e3134342e302f32322d3332203d3e20323033.roa (hash: 2u84EM5AYvQ+8v+rwbPeZ1hbqfGxWzoiepFfeZTfgrM=)
8: 323830343a373762303a3a2f33322d3634203d3e2033333536.roa (hash: KMxeMzXYGN25nMPwZrKi2DIcJhdSlrQ02BzBFW514kI=)
9: 323830343a373762303a3a2f33322d3438203d3e20323731313933.roa (hash: fjD2LWOqViPDKL6KPGIp6gh8Kkvs/oVyMwsa42rB1zw=)
10: 323830343a373762303a3a2f33322d3634203d3e20323033.roa (hash: 6j6tw5PiubxzdGVs6XVLtlL3nNjMu5TGC/UWgK8O6Es=)
11: 323830343a373762303a3a2f33322d3634203d3e20323032.roa (hash: +Fq/LqTDFvoQf3C3OD0kkoBTgZth99e2SfXtJjdJUj0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:50:06:9e:77:01:23:2b:11:4e:12:de:77:9d:fa:7a:74:4f:63:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF45F5442049793490E484E18AD1516C8FDC8087
Validity
Not Before: Oct 20 14:23:09 2026 GMT
Not After : Oct 21 16:00:09 2026 GMT
Subject: CN=27085BF5FDAC8FCB64B4B6D58A392AE12AF3FFFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:37:53:b3:f9:01:4b:5b:0e:2c:32:ea:c2:c7:
d4:08:b7:e7:22:c7:f3:1e:91:7b:5e:6e:ae:9c:27:
89:89:1f:62:92:a4:d7:1e:ab:bb:ef:1b:d8:c4:d1:
2d:10:b2:4d:a4:93:05:3d:21:67:cc:15:b1:42:e5:
f7:14:a5:df:45:75:3a:a2:4b:ed:6d:bd:fa:bc:96:
b7:bd:dc:06:71:ba:1e:84:7c:d1:a8:10:bf:3d:aa:
9e:d2:6b:80:5a:3b:7a:88:b4:28:97:20:e9:98:d0:
be:96:11:db:fd:a1:ae:65:62:ad:87:2c:0e:04:11:
58:16:f1:f6:16:50:c4:bc:71:92:48:c4:fd:aa:5f:
09:29:cc:cc:d9:c6:92:42:f0:36:70:72:9d:7b:72:
71:4a:15:d4:84:20:68:ab:e2:b2:6d:d7:64:8f:f3:
e5:96:80:52:5a:44:5c:ed:7c:6f:c7:29:5f:a0:ee:
35:4a:f7:dd:26:f2:a6:bf:aa:28:f2:57:61:b7:d3:
be:b3:8d:69:ec:05:fd:da:8b:34:94:a6:0f:aa:5e:
25:f1:2a:7b:21:51:d8:17:c3:1f:b6:55:88:6e:51:
cc:91:9a:78:fa:d8:77:b6:c3:60:d1:a2:57:e8:ba:
1f:0d:a6:94:27:f2:c1:6b:e9:e0:4d:d6:d2:48:f1:
a8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:08:5B:F5:FD:AC:8F:CB:64:B4:B6:D5:8A:39:2A:E1:2A:F3:FF:FC
X509v3 Authority Key Identifier:
keyid:BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ee:0c:0c:bd:c0:bf:c0:f7:ae:62:ff:0a:e7:bc:56:b8:4a:
05:7d:5e:3c:a6:de:57:3e:4f:30:50:5c:00:91:bf:de:7a:23:
4f:d8:ed:dd:bf:5f:75:b6:0b:f8:ee:7a:bd:40:9b:c4:9c:c5:
24:66:44:80:f3:ad:0d:5c:b3:6a:cb:71:60:77:8b:8b:a1:e7:
b4:c6:5f:7b:0d:87:a5:9b:30:8e:3f:92:00:7c:f9:7e:23:98:
c2:5d:b0:6f:0c:2b:a7:b4:fc:8b:8d:f2:54:4d:f1:8f:03:29:
4c:bf:14:b2:79:ac:71:58:83:5a:e6:4d:d9:d4:b9:5d:1a:b8:
ca:77:9b:2a:bf:d5:4c:3f:85:8d:99:82:35:9a:28:e3:4c:2d:
a1:ad:28:65:98:05:0e:c5:22:48:24:00:7d:fc:bb:e9:39:e4:
7f:ee:3a:f1:c5:99:76:ce:bc:18:bb:24:8d:a5:44:59:ba:68:
75:22:95:9c:d8:ad:c9:49:4f:82:89:68:51:8d:ae:ad:93:1c:
a6:96:e8:6d:4e:42:1d:f5:ac:05:d1:0a:5c:5a:41:e8:9b:5c:
7c:b0:19:0e:03:f6:27:cd:7d:fc:c4:16:9d:cd:e9:db:22:33:
bd:59:ec:8e:f7:c5:4e:85:4b:50:cf:a0:cb:2d:e9:b6:4b:d8:
c5:03:95:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 07:06:58 2026 by rpki-client