Error: rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer: certificate revoked on Thu 02 Jul 2026 15:23:02 +0000

Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
File:                     rw3BKw8bUz2NBOxhF9a55RL8qp8.mft (raw, json)
Hash identifier:          jJY/VHMnWGbakQIN8twEkurPKRPnKlFOSR+XPhtZFW0=
Subject key identifier:   11:51:C7:51:72:D0:D7:68:37:AB:EB:E5:4A:88:64:59:61:92:17:A7
Authority key identifier: AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
Certificate issuer:       /CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Certificate serial:       019F22EC4540A0970EBEDF08F88691B76623
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
Manifest number:          1739
Signing time:             Thu 02 Jul 2026 13:02:17 +0000
Manifest this update:     Thu 02 Jul 2026 13:02:17 +0000
Manifest next update:     Fri 03 Jul 2026 13:02:17 +0000
Files and hashes:         1: JHlwQGDbvrC4juRVad57B3oI92U.roa (hash: oSK/eP8u/19D2+8PlzxQLpygFc07vdIXajuQXABfEZE=)
                          2: fomrS4dX5UyQctRbUOlEOReM51s.roa (hash: OwhdfcJ0K62trAYFFVz/ZuzwZmZiy8nl9/D+tMVNouE=)
                          3: rw3BKw8bUz2NBOxhF9a55RL8qp8.crl (hash: 8j4z67HhyiwvMR8ddHnTPoDvOrr2nOrr5ThRPb1gZ3w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:ec:45:40:a0:97:0e:be:df:08:f8:86:91:b7:66:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
        Validity
            Not Before: Jul  2 13:02:17 2026 GMT
            Not After : Jul  3 13:02:17 2026 GMT
        Subject: CN=1151c75172d0d76837abebe54a886459619217a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:08:6a:0c:fa:d9:cd:48:c6:2d:68:e0:cb:5e:
                    84:65:73:e2:e3:cd:fb:2c:64:20:39:3f:26:fa:d3:
                    16:92:0d:e7:b0:dc:69:8c:be:c0:98:38:bd:95:04:
                    b6:71:02:7f:ef:0b:1b:16:5f:0b:9c:8f:fc:07:ce:
                    28:ad:61:f4:76:bd:52:30:52:9b:f8:11:2c:5b:64:
                    9b:7e:5d:a8:c8:41:e0:48:c0:d4:c2:68:8a:cf:c0:
                    c9:27:e4:90:5c:5e:ec:3d:ee:87:01:dd:59:3c:0a:
                    50:e0:2b:4f:b9:a1:52:9d:00:0f:74:80:c6:f7:9f:
                    75:1d:66:b3:05:18:9f:71:71:a9:a7:0e:43:b3:a8:
                    ed:54:bf:2a:b2:6b:70:15:ad:bb:a4:5d:93:40:7f:
                    c1:11:05:15:67:18:f1:e1:60:65:8d:d6:55:9e:e6:
                    41:26:36:7a:e9:cb:05:6d:94:a2:db:5d:62:f4:8e:
                    3b:00:f0:a9:0b:66:07:1f:61:c6:fe:71:3a:1f:af:
                    db:e5:f2:58:47:9b:1e:af:55:6e:ec:91:cc:15:97:
                    0f:0b:d2:33:df:12:19:8f:14:1a:63:bf:c6:ca:33:
                    19:19:d2:29:03:62:64:9a:28:d9:30:2c:02:31:97:
                    6e:f7:30:d9:bc:f0:68:19:b4:aa:61:d7:18:8c:43:
                    65:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:51:C7:51:72:D0:D7:68:37:AB:EB:E5:4A:88:64:59:61:92:17:A7
            X509v3 Authority Key Identifier:
                keyid:AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:c4:72:7f:1b:8d:41:bd:6a:b2:e9:ae:ce:8b:d7:f6:82:c1:
         7e:02:a4:10:24:09:17:f5:a3:67:c5:e1:cd:86:db:78:ab:f0:
         4d:38:78:b0:c3:14:ba:5d:06:46:4d:1f:71:88:9a:56:db:4f:
         de:a4:07:dd:fb:a5:ef:d0:77:8a:b0:36:03:9e:f9:64:5d:3e:
         f0:fa:f2:50:2c:77:c4:7d:9c:71:b8:5d:7b:88:c5:50:00:1f:
         29:d7:43:72:4b:1c:36:95:2e:f3:5a:64:1a:48:a1:5a:cd:0b:
         43:05:78:1b:22:e5:78:a2:29:bc:4e:76:81:70:b2:36:03:d8:
         44:ba:0c:46:58:d8:3e:b8:50:16:d6:08:da:9c:b2:08:4b:f2:
         00:c3:d2:04:ea:d2:7a:3a:12:3a:2f:38:1a:65:15:b0:8c:15:
         56:61:27:c5:ad:10:f0:3c:7c:88:67:08:d4:4c:53:8a:c6:57:
         0f:04:ea:e4:d5:61:9c:45:d8:ab:f8:81:ca:c4:13:2a:61:96:
         8b:00:eb:5e:79:07:51:41:73:5a:58:c6:32:12:ba:be:51:aa:
         30:4a:00:92:a7:01:46:e3:1b:34:9a:05:b9:1d:3e:3a:77:1c:
         70:05:c3:e2:8a:04:f5:60:61:18:8c:4a:8a:9b:8d:26:9c:bd:
         d0:d2:8f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:57:59 2026 by rpki-client