{"protocol":"MNR-OCSP-1.0","produced_at":"2026-09-25T06:49:24.839Z","subject":{"type":"ca_key","id":"mn-ca-002"},"status":"KEY_COMPROMISE","recommendation":"DENY","evidence":{"source":"signed-crl","crl_format":"MNR-CRL-1.0","crl_this_update":"2026-09-16T21:22:08Z","crl_next_update":"2026-09-23T21:22:08Z","revoked_at":"2026-09-08T00:00:00Z","reason":"Private key material was found committed to a public repository. Any signature that only verifies under this key must be treated as untrusted."},"registry":{"key_id":"mn-revoc-002","algorithm":"Ed25519 (RFC 8032)","canonicalization":"RFC 8785 JCS","signed_payload_hash":"9463adbaf8332a2946713151aab9f56642be536496302b93f533bec5747c54b9","signature_hex":"9af75db1be5be9ca06d63c15ab4167f2076454e8bb97cf36f13b4174b0a46470cc35990c6a1b3b1580aebf92d676b0897ea4d1e21039660ce4be01b45d929d02","verify_instructions":"GET /uta/revocations/registry-key.json — Ed25519 verify over \"MNR-CRL-1.0:\" + JCS(payload-without-signature)","authoritative_crl":"/uta/revocations/crl.json"},"fail_closed":true}