Error: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245.cer: certificate revoked on Tue 11 Aug 2026 11:03:16 +0000

Manifest

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245/a9c50514-eeba-4ab2-b8e0-2a64274eb245.mft
File:                     a9c50514-eeba-4ab2-b8e0-2a64274eb245.mft (raw, json)
Hash identifier:          Fy6ppYjSlrenio5Y1x2VdoTdArfl03s94gT39YT7bHg=
Subject key identifier:   95:95:F9:D8:53:F5:DD:50:39:FB:B3:AC:EE:D2:B6:2C:A6:3C:BD:F7
Authority key identifier: DD:96:29:8E:1D:68:C3:A1:A2:39:C8:B5:D5:92:C3:98:C6:C1:3D:55
Certificate issuer:       /CN=a9c50514-eeba-4ab2-b8e0-2a64274eb245
Certificate serial:       010D0C9F4328584ECBD2E75A02090C86E6D5F380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245/a9c50514-eeba-4ab2-b8e0-2a64274eb245.mft
Manifest number:          010D0C9F432858414A6A2A37940949E8B5D05C0B
Signing time:             Tue 11 Aug 2026 01:02:22 +0000
Manifest this update:     Tue 11 Aug 2026 01:02:22 +0000
Manifest next update:     Thu 13 Aug 2026 14:00:00 +0000
Files and hashes:         1: 8bfcecec-c636-3445-9dea-84788f85c1a6.roa (hash: HXHOoGkHNX894hB0duUyzYF0VZPLfew+wU3MAXsA5nU=)
                          2: a9c50514-eeba-4ab2-b8e0-2a64274eb245.crl (hash: cyqn4XMoYH4pwgxVwn0qj/8B3PPoXmy3QIHp8Hja2zQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d2:e7:5a:02:09:0c:86:e6:d5:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9c50514-eeba-4ab2-b8e0-2a64274eb245
        Validity
            Not Before: Aug 11 01:02:22 2026 GMT
            Not After : Aug 13 14:00:00 2026 GMT
        Subject: CN=43fb432c-09ae-43e6-8df7-802eb1dd1253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d0:df:73:67:93:0f:1f:d8:a3:0b:21:6e:27:
                    fe:a8:2d:57:7d:31:71:8d:59:c8:bd:4c:86:ff:93:
                    3d:a6:b0:6a:37:ff:df:e1:b9:ba:d1:fb:4b:89:ee:
                    70:5b:6e:f7:2c:a8:86:15:e7:49:c9:e5:3e:33:de:
                    75:e4:92:1c:0a:76:35:7d:51:ad:8b:a7:98:55:5f:
                    e6:2b:82:cc:ca:c8:ea:2c:94:7b:86:db:a3:ca:52:
                    d0:af:22:9b:cd:7a:39:cf:2c:46:d0:23:25:6c:41:
                    29:82:30:10:31:31:6d:0f:95:63:f1:5e:a7:a5:38:
                    e2:f2:71:9e:09:f3:c7:41:b2:24:85:0c:48:47:30:
                    34:51:67:fa:5e:ba:e5:33:27:8e:74:57:86:0d:3e:
                    b0:1f:95:e3:3a:19:57:fc:48:00:b8:32:7f:4f:33:
                    31:f5:9f:4c:41:a3:75:dc:de:59:1b:31:05:17:64:
                    2c:65:70:2b:5f:85:3f:f6:82:16:fc:91:cb:f7:54:
                    22:dd:3d:b4:13:07:c9:58:86:75:34:ad:e0:54:66:
                    53:05:65:39:c0:57:a6:de:23:d1:1a:fc:ae:8f:75:
                    28:96:71:9d:24:59:93:36:29:2f:6a:02:1e:8e:0b:
                    41:35:b0:79:13:d7:d0:87:fa:10:41:78:ad:34:c9:
                    23:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:95:F9:D8:53:F5:DD:50:39:FB:B3:AC:EE:D2:B6:2C:A6:3C:BD:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245/a9c50514-eeba-4ab2-b8e0-2a64274eb245.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245/a9c50514-eeba-4ab2-b8e0-2a64274eb245.crl

            X509v3 Authority Key Identifier:
                keyid:DD:96:29:8E:1D:68:C3:A1:A2:39:C8:B5:D5:92:C3:98:C6:C1:3D:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:fb:74:3d:6f:42:5c:6a:bd:59:c1:ce:36:cc:c7:ed:f3:61:
         77:28:6e:2c:df:47:6b:83:af:0c:de:60:47:18:1e:30:93:ac:
         16:ad:b3:44:e0:ba:09:e6:5a:d3:61:dc:51:d3:67:39:ee:3f:
         19:3f:49:3d:3e:ff:ac:75:9a:20:40:5b:9a:3b:76:b2:a3:86:
         6a:2e:01:83:12:58:28:39:df:4d:88:46:0a:be:35:83:f2:08:
         bb:cb:67:53:3a:fd:f2:a2:b8:f4:2d:12:72:0b:af:5c:14:f8:
         c4:fa:37:e4:d7:e4:3a:5e:8d:17:11:d6:88:0d:9b:50:59:25:
         2a:7a:6f:74:3d:85:05:60:77:c8:2b:3b:2c:c5:10:a7:ed:03:
         55:18:cd:d9:26:18:85:21:56:20:12:d5:1f:47:aa:f0:ab:c5:
         1b:df:47:94:bf:82:9a:8d:83:e6:f4:0f:34:36:97:18:40:0a:
         b2:42:64:54:fb:87:2e:69:e1:34:aa:3e:34:53:fd:22:ce:3d:
         eb:d4:93:21:fb:bf:a7:8b:fe:9a:89:d5:aa:6a:f3:65:7b:37:
         13:12:e7:1b:79:60:68:1e:c8:e1:7e:19:70:d2:51:11:65:d9:
         b9:6a:7e:bf:b1:45:16:b9:5c:6a:94:dd:0c:ee:b5:6b:f9:ec:
         b4:ad:c4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:06:03 2026 by rpki-client