Error: rsync://rpki.ripe.net/repository/DEFAULT/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.cer: certificate revoked on Mon 10 Aug 2026 07:46:01 +0000

Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft
File:                     TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft (raw, json)
Hash identifier:          5HdFT2txUvPHzGx4pdJHy0iVpKk2tOmXLGqkujMawes=
Subject key identifier:   3F:F1:66:CA:7D:E7:F1:BC:46:4B:84:B6:C9:55:64:C2:84:DB:C4:E2
Authority key identifier: 4D:2F:4D:10:8A:C1:84:BD:1B:53:2F:F8:8F:C6:64:4A:DE:16:DA:75
Certificate issuer:       /CN=4d2f4d108ac184bd1b532ff88fc6644ade16da75
Certificate serial:       019FEA0C178A67AD31A9A3EE11A0DFE28A8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft
Manifest number:          0D7D
Signing time:             Mon 10 Aug 2026 05:01:28 +0000
Manifest this update:     Mon 10 Aug 2026 05:01:28 +0000
Manifest next update:     Tue 11 Aug 2026 05:01:28 +0000
Files and hashes:         1: TS9NEIrBhL0bUy_4j8ZkSt4W2nU.crl (hash: EhTy6cqJ+ivTSRnZfCqMYLap+X0rkKm/ihC/f2GCvJA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ea:0c:17:8a:67:ad:31:a9:a3:ee:11:a0:df:e2:8a:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2f4d108ac184bd1b532ff88fc6644ade16da75
        Validity
            Not Before: Aug 10 05:01:28 2026 GMT
            Not After : Aug 11 05:01:28 2026 GMT
        Subject: CN=3ff166ca7de7f1bc464b84b6c95564c284dbc4e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:97:e3:ea:bc:00:e7:a3:9a:85:4a:db:58:71:
                    06:e5:23:d1:18:1e:f7:c7:92:0f:6b:a8:61:30:66:
                    a2:06:26:49:7b:a1:00:f1:54:f5:58:36:b8:ea:6f:
                    61:b4:ba:e1:19:4f:53:f1:6f:d8:f5:eb:19:d4:2c:
                    75:f6:dd:53:7a:27:88:f5:97:77:f5:21:97:d8:b8:
                    2f:87:e6:53:25:9e:78:d7:f8:e4:37:b5:d1:0c:e4:
                    e4:5f:42:76:a5:e4:77:fc:5a:a2:53:32:91:00:a1:
                    61:3d:84:c1:04:36:b3:65:08:f6:20:da:17:38:e7:
                    f8:f2:4d:36:56:c1:32:f8:f0:b4:df:6f:12:88:f3:
                    1e:ab:bb:79:1c:a4:f1:84:ec:ae:ba:06:26:af:07:
                    9c:06:9c:c8:89:1f:c5:b4:c3:c9:5d:61:2d:e1:5f:
                    a8:54:08:4a:86:63:b0:12:09:3a:43:61:0a:9f:0e:
                    9f:d0:a0:99:ba:0a:a1:b9:9d:c1:40:87:7e:32:b8:
                    5c:fb:da:37:02:b3:c3:94:58:b9:b6:c8:14:46:33:
                    fe:bd:10:0f:68:f7:08:b6:3b:9e:e0:44:83:cf:7a:
                    84:3b:0a:ba:31:4b:d6:a3:e3:85:21:ce:f5:bc:8b:
                    f3:4a:72:68:5f:6b:b4:85:b9:40:e2:93:c3:ee:71:
                    ea:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F1:66:CA:7D:E7:F1:BC:46:4B:84:B6:C9:55:64:C2:84:DB:C4:E2
            X509v3 Authority Key Identifier:
                keyid:4D:2F:4D:10:8A:C1:84:BD:1B:53:2F:F8:8F:C6:64:4A:DE:16:DA:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:5d:d7:a2:f6:24:e3:3f:21:dc:65:b0:1c:7c:65:43:51:78:
         52:e9:d6:86:4f:23:99:7e:ab:12:28:ec:34:94:59:f3:b6:27:
         ae:11:4c:74:36:e6:72:0f:65:ea:f7:0c:af:71:2a:fe:b7:89:
         71:af:d3:08:6d:5e:ea:f0:fe:03:9f:25:c8:8a:82:0b:37:91:
         4a:9a:a9:c9:3c:6e:41:d5:d5:e3:0e:8f:01:de:f9:55:e2:0b:
         b3:bf:06:62:c9:ac:81:6e:66:07:c3:a6:59:27:15:eb:7a:cc:
         cd:0c:77:c4:ca:b2:ca:48:e4:22:cf:66:66:90:3e:63:27:62:
         be:0b:e8:13:b9:fe:a6:80:2e:79:25:97:74:5d:b4:66:49:18:
         d4:a6:b9:33:9d:14:75:35:11:a0:7d:c5:c7:c7:8d:75:73:ed:
         ac:71:04:2d:19:ed:71:08:a8:60:81:97:5d:53:9e:5a:c2:be:
         a1:28:17:c1:af:02:29:12:63:2a:be:07:7d:23:94:46:73:f6:
         79:e4:4d:14:51:7d:11:9c:d5:15:01:e5:7e:53:81:d4:cb:d2:
         ec:a7:3c:06:7c:2b:66:1e:df:26:c5:72:04:6a:8d:4b:6b:be:
         a9:fb:da:70:48:c7:7c:94:67:b9:f5:8a:55:69:d5:b2:c2:d3:
         c9:c2:38:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:53:04 2026 by rpki-client