Error: rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer: certificate revoked on Wed 21 Oct 2026 09:14:00 +0000

Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
File:                     j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft (raw, json)
Hash identifier:          ToDPjBYADsp1p5PUELVxHxqeoAiYxjEf8Gu6KDOOmpk=
Subject key identifier:   F0:FD:BE:89:2D:AF:5A:F1:38:2A:3F:5C:4C:19:87:E8:1E:AE:FC:F9
Authority key identifier: 8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41
Certificate issuer:       /CN=8fd26ad6f91ba4472814bae484a8df1f634c3341
Certificate serial:       01A15CD591AB09642D036A7DCC56686523AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
Manifest number:          1AB8
Signing time:             Wed 21 Oct 2026 05:01:02 +0000
Manifest this update:     Wed 21 Oct 2026 05:01:02 +0000
Manifest next update:     Thu 22 Oct 2026 05:01:02 +0000
Files and hashes:         1: RSVkemWa1QLaqs431tBHVz2eQlE.asa (hash: HphnJ607HnI2FsF02eMg/387XNECcYdqo4p0NHwuLx8=)
                          2: _QFYHtLUd5PrTEx3ytqrTgZXY4A.roa (hash: IMcdfSBLxJMlJLL2pxyXtKfsGbWAEaXixakUAiVwCV8=)
                          3: j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl (hash: LzyKEAvRPgpy8jlQoMmTRIZ+uhuyhf5gavT+xugvmiQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5c:d5:91:ab:09:64:2d:03:6a:7d:cc:56:68:65:23:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fd26ad6f91ba4472814bae484a8df1f634c3341
        Validity
            Not Before: Oct 21 05:01:02 2026 GMT
            Not After : Oct 22 05:01:02 2026 GMT
        Subject: CN=f0fdbe892daf5af1382a3f5c4c1987e81eaefcf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:40:1e:40:8f:33:ef:1f:56:d7:b8:77:fe:cd:
                    02:4e:6d:e6:5c:0c:6d:99:1b:0c:39:b4:e8:00:5b:
                    0c:b1:39:0c:17:51:48:fe:bf:9d:86:3e:3b:35:1e:
                    66:46:1d:39:6a:d5:8e:84:89:f9:a1:c8:69:cb:82:
                    cd:73:ae:fa:bc:4e:6c:80:aa:be:d6:ee:01:e1:2d:
                    aa:13:c1:03:c6:57:9c:72:cd:f4:4d:75:da:63:2e:
                    11:7d:19:9f:c0:ab:1c:10:bd:52:b8:57:8e:9c:b5:
                    5b:5b:3a:d0:1d:de:da:8f:73:08:46:86:a4:08:cd:
                    34:4a:f2:b5:5b:c2:fd:83:1b:85:5b:f6:91:dd:66:
                    6c:05:f6:b1:39:40:59:b4:30:49:b7:4d:07:1c:a5:
                    07:14:0e:d2:63:0d:55:74:d5:43:26:7a:cc:a6:1a:
                    fe:1c:4e:d3:6b:72:33:d3:96:b9:5d:47:6a:c0:ab:
                    32:c1:a9:16:8c:2d:e4:7b:d9:71:1f:58:7d:89:f8:
                    a0:27:e8:07:4e:84:98:14:8f:20:aa:1e:7b:f1:ac:
                    d0:04:8f:51:da:ba:3d:ec:c5:d5:96:1f:ab:88:7c:
                    b4:c4:f1:d8:96:dc:21:a1:d7:0e:15:ae:ae:d6:10:
                    ad:a6:4c:e9:e7:45:e4:ca:87:b8:0b:f4:f6:c5:42:
                    bf:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FD:BE:89:2D:AF:5A:F1:38:2A:3F:5C:4C:19:87:E8:1E:AE:FC:F9
            X509v3 Authority Key Identifier:
                keyid:8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:a1:0b:cb:07:16:e0:73:6f:6a:21:26:39:b8:3b:f2:04:d4:
         63:05:67:f3:ee:19:28:0f:39:c6:d1:fc:54:e8:9a:e9:c0:0a:
         ce:c8:8f:45:58:47:62:06:2e:c4:56:99:c9:5a:28:47:ce:b6:
         8d:40:c0:c3:51:48:2c:30:9d:9b:26:a3:77:5f:7f:ed:9f:83:
         36:f7:4c:24:97:28:6b:b1:bb:b1:bc:cf:72:33:7a:50:80:e9:
         9f:6a:e8:3f:71:74:10:88:60:2d:b2:85:78:c5:dd:23:6b:37:
         5c:dc:90:0f:e8:62:c3:7f:33:64:cf:14:8f:ff:e4:0f:c2:d2:
         34:eb:11:14:9c:12:75:dd:b5:ab:88:30:a5:48:76:7b:4e:6c:
         2b:3d:e7:a4:bb:b8:00:59:b1:9a:09:ee:f9:49:e8:b6:fb:4d:
         23:fc:d2:de:0a:05:56:b3:e2:9b:a4:af:5a:92:fa:a3:ce:43:
         78:5e:fd:d0:51:61:45:0a:42:e8:0e:6a:61:f8:d3:b4:32:90:
         eb:90:f8:65:d9:03:af:5f:5e:07:85:74:a2:e0:d5:ce:7c:b5:
         43:c7:18:e5:6a:44:cb:a9:ef:02:f5:1c:06:f6:38:e3:0f:1d:
         12:ff:b3:9d:13:69:77:9b:1c:43:bc:f0:3a:30:c6:84:a4:7b:
         78:24:d6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:27:19 2026 by rpki-client