
Error: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer: CRL has expired
Manifest
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: rTVMuVD4TFwoxzCp9PStT2Uf0SvwdjFEx/BfHT7Pwb0=
Subject key identifier: E0:47:A8:42:F9:61:3E:2D:C5:A0:EF:02:94:49:B2:BA:22:EA:2F:79
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 661CB4823E710707367FC2813213376C719DD0D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 03DE
Signing time: Thu 05 Nov 2026 12:07:56 +0000
Manifest this update: Thu 05 Nov 2026 12:02:56 +0000
Manifest next update: Fri 06 Nov 2026 12:23:56 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: /omqO31DQqJNa95pFgCPzP0pVFuzW9DnaW1o71dj1yg=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:1c:b4:82:3e:71:07:07:36:7f:c2:81:32:13:37:6c:71:9d:d0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Nov 5 12:02:56 2026 GMT
Not After : Nov 6 12:23:56 2026 GMT
Subject: CN=E047A842F9613E2DC5A0EF029449B2BA22EA2F79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:76:03:5b:08:ba:80:ab:c2:51:c4:f4:18:75:
49:13:d2:50:98:60:54:04:47:6f:1b:a7:13:a4:f5:
59:ca:12:76:fe:2d:c3:19:5c:dc:e8:46:07:38:3a:
31:d5:84:49:dd:d2:47:fd:01:dc:45:a7:56:8d:e0:
70:6a:70:52:a2:1d:db:fa:3b:cc:6e:a6:ac:2e:47:
ca:b3:4e:2a:3f:74:0f:77:ac:02:a7:71:13:1f:31:
1b:aa:34:83:ab:a2:de:62:8c:19:54:e9:74:cd:e4:
9e:bf:d8:46:c4:43:1f:23:76:28:d3:7a:f3:61:f0:
37:ce:ff:8a:cc:d1:ae:4e:96:e0:71:9f:d4:16:9b:
14:33:40:00:e7:07:5f:0b:38:2f:a6:e8:c9:9a:1d:
46:da:d4:31:48:c5:93:4d:f9:5b:28:02:60:23:af:
2b:dd:72:21:45:83:bf:2b:d3:35:01:2f:4c:59:a5:
17:99:91:d7:91:4b:61:43:2b:93:43:13:c5:8e:97:
b4:73:b3:56:c0:72:6a:b7:f5:e0:11:d3:41:06:16:
66:a2:fa:cf:54:12:09:44:0b:9a:df:7b:f7:72:dd:
92:d9:f7:c6:84:ed:d6:e4:80:9e:23:ad:bc:45:24:
97:e6:0f:12:01:eb:52:12:82:9d:21:f2:75:0f:18:
3b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:47:A8:42:F9:61:3E:2D:C5:A0:EF:02:94:49:B2:BA:22:EA:2F:79
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e6:13:9a:5a:ce:1a:92:47:53:83:17:c6:0d:17:e2:58:6d:
2e:c8:1f:5f:f9:77:cf:b4:46:73:ba:21:f5:df:9b:1f:16:d9:
22:15:44:36:36:1a:69:e7:05:08:4c:4e:19:e0:97:84:b9:12:
ea:1a:9b:4f:33:eb:0b:dd:b0:c5:fc:6a:87:ff:7a:0d:54:46:
67:66:39:2d:a6:3a:1b:99:cb:ad:12:c0:a8:68:ca:63:e1:19:
f0:2f:66:76:26:da:48:ba:21:2f:f6:44:b5:ea:f1:f7:21:82:
8b:7b:b9:f4:ec:68:f8:3c:6e:16:59:7a:fe:ba:f8:a0:e3:25:
1f:66:da:a0:62:ea:43:40:0b:e5:cb:d1:18:38:b5:92:1f:a7:
33:78:ec:1f:3c:16:76:cc:5c:9e:22:03:6c:7d:e3:d6:16:b9:
d4:24:4d:86:18:e6:a5:bd:83:80:ee:fa:1c:3d:b8:67:d1:e7:
0d:92:7c:fb:22:23:99:c7:c0:fc:10:4a:f2:8b:b0:f2:e6:58:
71:f6:3c:33:d0:28:59:00:d4:b7:40:c1:c2:c0:03:99:ad:5a:
17:b0:40:c8:d1:5b:a3:15:61:1c:06:6f:38:7d:4f:95:26:3e:
d3:1a:35:6f:bd:3a:76:ae:e9:08:18:d5:24:6f:d8:ab:d3:62:
a1:29:fb:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 11:09:12 2026 by rpki-client