Error: rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer: certificate revoked on Thu 02 Jul 2026 15:22:53 +0000

Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
File:                     OACZqBs0b5q8ryYFb1t3CU0c8RM.mft (raw, json)
Hash identifier:          m2JhigesY8M/MBGs3fxa66Vs7BWBDzlAVCJKYemyExE=
Subject key identifier:   5B:10:BD:BB:EE:05:F1:A4:4B:09:81:C4:56:BA:AA:19:07:AF:20:81
Authority key identifier: 38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
Certificate issuer:       /CN=380099a81b346f9abcaf26056f5b77094d1cf113
Certificate serial:       019F22EBAC7598C664F34CE88AD12106C0EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
Manifest number:          1995
Signing time:             Thu 02 Jul 2026 13:01:38 +0000
Manifest this update:     Thu 02 Jul 2026 13:01:38 +0000
Manifest next update:     Fri 03 Jul 2026 13:01:38 +0000
Files and hashes:         1: 5tf62tGZz7nxnApGHs0XPt8oyEo.roa (hash: eqObETU4MUet/YxGyvd+4bjlEhpIkWmlGdSy4IzjRT0=)
                          2: C4lzeE9s0JPh3LMFogAb2-unpfM.roa (hash: B/VA7Y5H146Nk4o0VlZHFllZAXs0gNzPmZMsk3LGaPk=)
                          3: GlGwuQ4tVBcVbzdxZ764xAH4ZKY.roa (hash: dAsL5YC+dtQ5UOuP3k5Dc/1X4NRNua75JEno17YoMPc=)
                          4: MhSY36OZkDXTKKOaDPZo_gxxyys.roa (hash: 2VWhIerfpwbk0gwrISpBPr4SWZ289fTqKRc3I0+Rsfg=)
                          5: OACZqBs0b5q8ryYFb1t3CU0c8RM.crl (hash: 572yYmAa3lXznVfzDr6MQiEqspl5T0/8vy+woenGQ2c=)
                          6: SV9q8qOenCpWfyZ_KmzmoZ8gOso.roa (hash: 316dq0EbdTMXN9J+sZt1LaGvCQCGOGhyEJsLNYpVENg=)
                          7: Un1O1eVRsl-RNFGZVC7Hh1zlUso.roa (hash: wb6n3U2bPJOBiqYHITV1Aqlnrh4S2E/QbN0YryOpk2o=)
                          8: h2NmHgEuIROZq_hEdlknexmBTGM.roa (hash: 7SwAGH9Cu/tcgfRdpv3e3i4Xnp328jS2BOR70XX2pq0=)
                          9: n6AwAFReNaZdbkfki7LETtgHQPk.roa (hash: 1R1A1mLyenvEeIw8x55MsxtBChYHFqi/CKG9tPv+lwk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:eb:ac:75:98:c6:64:f3:4c:e8:8a:d1:21:06:c0:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380099a81b346f9abcaf26056f5b77094d1cf113
        Validity
            Not Before: Jul  2 13:01:38 2026 GMT
            Not After : Jul  3 13:01:38 2026 GMT
        Subject: CN=5b10bdbbee05f1a44b0981c456baaa1907af2081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7a:09:84:e0:a3:16:51:4c:3c:99:08:ae:23:
                    1d:4a:d0:af:85:be:51:6c:11:c7:25:06:d9:db:7d:
                    eb:dd:91:37:e8:38:cc:da:32:d3:48:a8:2f:d3:57:
                    da:b4:94:b6:0d:d5:8e:83:fa:25:83:e6:0d:44:80:
                    35:73:b1:21:65:e7:eb:45:5c:fe:55:c0:4a:c2:2f:
                    1c:eb:e6:5a:5a:f1:65:bf:c7:c5:ed:23:4f:6a:c1:
                    91:b0:13:72:fd:38:ee:5a:7d:b2:2a:e5:73:23:38:
                    14:05:86:93:bf:d4:9c:46:a9:00:e2:98:a1:f2:54:
                    8c:66:ce:df:18:ac:84:b5:5c:cf:37:34:b9:9d:96:
                    15:48:f3:49:c2:27:92:73:81:d8:cc:b3:b8:55:1d:
                    2d:9d:48:ad:e4:24:af:ac:a6:4c:36:c0:45:7f:80:
                    11:d4:8b:f3:7f:16:37:fb:11:bf:8f:91:f6:f4:09:
                    8e:e6:6d:c0:c8:bb:f8:69:a4:bd:64:78:9f:62:e5:
                    2b:f3:df:8b:92:7f:b3:50:1e:0d:b7:aa:93:61:d2:
                    6a:5c:b1:dd:76:16:90:ae:87:93:0f:1c:dd:19:a0:
                    4a:9a:9b:8c:ef:0d:47:02:ac:bf:d9:f1:00:36:17:
                    0f:00:99:a8:fb:80:a8:09:00:a5:ea:7c:1b:ea:c2:
                    6d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:10:BD:BB:EE:05:F1:A4:4B:09:81:C4:56:BA:AA:19:07:AF:20:81
            X509v3 Authority Key Identifier:
                keyid:38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:8d:bb:38:0a:09:8a:3a:34:e8:95:63:39:4d:a1:60:20:a8:
         a4:82:eb:7d:aa:74:20:d1:f2:97:b9:82:0a:b3:e1:29:75:f8:
         05:ac:92:34:90:9b:28:75:05:cc:99:29:6c:6f:a4:6d:f1:c4:
         a5:93:b2:65:db:11:85:42:70:07:b4:4b:a8:4a:f6:19:b6:7f:
         5c:8e:aa:4d:91:78:68:54:61:fe:f3:b6:e9:62:7c:19:25:54:
         55:f1:0e:24:09:49:1c:f0:a6:fc:7e:83:da:35:ca:e7:e1:f2:
         7e:24:93:f3:ec:8f:2c:85:41:32:05:5b:e0:60:50:bc:c0:4a:
         85:4d:b2:13:92:60:91:c1:17:31:c2:67:3e:be:10:4d:57:49:
         68:6f:6b:6e:f9:c4:c4:a1:5f:b9:a5:39:90:aa:23:a6:29:64:
         9b:8c:78:28:46:4a:54:6a:be:3d:c9:ce:e7:9e:4a:80:86:a2:
         0f:78:db:ef:fb:9f:95:20:94:f1:a9:f2:fa:9e:fb:13:a0:38:
         00:8e:f6:36:75:0d:d8:1a:28:f9:ec:9f:ca:c5:3b:f1:03:c6:
         96:4f:49:19:e5:42:14:31:97:ac:db:dd:17:81:98:a9:ca:34:
         b3:e0:fe:58:3d:2a:a6:19:7b:67:de:89:da:aa:26:69:64:18:
         10:51:1d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:24:33 2026 by rpki-client