Error: rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer: certificate revoked on Tue 03 Mar 2026 08:05:29 +0000

Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft
File:                     dF5kPQIextIbR1rkYN3tz35rP2Y.mft (raw, json)
Hash identifier:          eT0uzWRitJFUCR4/Xm7oCrklhY5vykpS0rRq4ywC7+E=
Subject key identifier:   71:AE:54:D4:E3:40:99:E0:FB:76:F0:E0:FC:DC:0A:C8:CE:76:C8:7B
Authority key identifier: 74:5E:64:3D:02:1E:C6:D2:1B:47:5A:E4:60:DD:ED:CF:7E:6B:3F:66
Certificate issuer:       /CN=745e643d021ec6d21b475ae460ddedcf7e6b3f66
Certificate serial:       019CB136574F834151ED7DEDE2E38A3DAF8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft
Manifest number:          081B
Signing time:             Tue 03 Mar 2026 01:00:54 +0000
Manifest this update:     Tue 03 Mar 2026 01:00:54 +0000
Manifest next update:     Wed 04 Mar 2026 01:00:54 +0000
Files and hashes:         1: dF5kPQIextIbR1rkYN3tz35rP2Y.crl (hash: Y+8Jg+0vhBSWGp7RuS/xwK3seywREQeWPVtaMC7aY+8=)
                          2: dLfogzr8X0zgwgQvDlE2XwZPbe0.roa (hash: tDTZf4eBf+bkssqyGO4ElGt+Fnfkj8Ins0O4ZyBMK+Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b1:36:57:4f:83:41:51:ed:7d:ed:e2:e3:8a:3d:af:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=745e643d021ec6d21b475ae460ddedcf7e6b3f66
        Validity
            Not Before: Mar  3 01:00:54 2026 GMT
            Not After : Mar  4 01:00:54 2026 GMT
        Subject: CN=71ae54d4e34099e0fb76f0e0fcdc0ac8ce76c87b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a4:f4:a6:06:d4:b4:58:ce:36:2a:51:80:dc:
                    89:68:86:03:05:1f:26:25:0a:6b:3f:9e:47:c7:f1:
                    dd:49:50:0b:d4:b0:cc:73:cc:7e:8f:f8:c0:2f:4b:
                    a3:12:fc:53:52:75:00:a7:10:e8:71:6a:09:5f:d1:
                    8c:7d:4f:a4:05:e9:c4:30:76:88:35:db:e2:1d:ce:
                    c2:0f:33:b7:54:32:ac:44:49:f5:08:9e:87:14:14:
                    30:8b:65:21:81:7e:0b:d3:ab:6d:48:79:a2:65:3a:
                    96:52:34:5d:04:86:61:4a:fe:f2:6a:88:21:07:db:
                    a5:3f:81:03:14:01:d5:ea:8c:72:4f:f2:51:e2:d1:
                    93:40:48:0f:8a:b1:fb:b2:ea:31:68:1b:93:c6:cf:
                    0e:76:29:fe:28:f5:ca:44:45:44:dd:45:dd:7d:18:
                    3f:58:e6:8d:57:9f:0d:2e:0b:2e:29:03:9f:1a:1a:
                    c4:d5:a8:40:98:95:8d:ee:34:9f:7f:45:55:15:de:
                    5f:a3:93:1a:94:63:f8:f1:83:4f:a8:78:77:3d:b3:
                    62:01:23:92:d1:b3:3c:1b:16:f0:b4:a3:b8:a1:57:
                    86:c2:66:02:f5:fb:47:4d:3e:93:04:13:5d:d8:69:
                    5e:d7:c8:cc:84:56:1a:bf:62:a8:f4:6b:80:64:58:
                    0f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AE:54:D4:E3:40:99:E0:FB:76:F0:E0:FC:DC:0A:C8:CE:76:C8:7B
            X509v3 Authority Key Identifier:
                keyid:74:5E:64:3D:02:1E:C6:D2:1B:47:5A:E4:60:DD:ED:CF:7E:6B:3F:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:e9:e5:c8:0d:0d:12:f1:1e:2a:1c:a0:b8:ae:28:c4:4c:2b:
         77:89:47:bc:82:df:98:0f:18:48:b6:50:9a:6f:94:5f:91:67:
         99:12:7f:f6:c9:8c:ca:22:7d:12:5f:00:17:74:cf:ec:d7:a8:
         3b:b7:1c:33:af:38:09:64:5a:6b:60:44:aa:0f:e2:14:f0:45:
         41:a0:44:d2:a8:e9:f0:08:b8:61:bc:61:2c:db:bb:73:23:bb:
         84:9f:16:ed:0a:e9:67:cc:92:c5:c6:4a:2c:d1:e5:41:e4:85:
         0f:61:95:80:5c:0c:36:20:8f:82:2b:51:f0:d8:0c:cf:41:7c:
         c7:a2:b6:20:b1:ce:45:97:16:e0:4d:7f:ac:8f:d8:f2:f1:1e:
         68:7d:f1:c4:eb:8f:1d:a4:b1:3e:11:9f:4d:ef:57:b7:6d:55:
         3d:5b:f7:6d:45:46:55:bf:f2:2b:1d:2c:38:0b:b1:4c:c2:38:
         63:59:2a:b3:ad:64:05:d0:a5:22:d0:7a:05:d8:d0:76:e2:e8:
         34:4a:52:43:bf:8e:ee:99:00:41:49:19:67:fb:b4:77:d4:c4:
         79:66:a8:82:3e:37:eb:51:7e:b6:ec:4b:9e:bb:16:fe:97:8e:
         c7:19:f5:7c:f5:0a:71:e0:13:af:fb:5b:73:f4:1a:b2:8d:d1:
         be:8f:fd:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyxNldPg0FR7X3t4uOKPa+PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NWU2NDNkMDIxZWM2ZDIxYjQ3NWFlNDYwZGRlZGNmN2U2
YjNmNjYwHhcNMjYwMzAzMDEwMDU0WhcNMjYwMzA0MDEwMDU0WjAzMTEwLwYDVQQD
Eyg3MWFlNTRkNGUzNDA5OWUwZmI3NmYwZTBmY2RjMGFjOGNlNzZjODdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqT0pgbUtFjONipRgNyJaIYDBR8m
JQprP55Hx/HdSVAL1LDMc8x+j/jAL0ujEvxTUnUApxDocWoJX9GMfU+kBenEMHaI
NdviHc7CDzO3VDKsREn1CJ6HFBQwi2UhgX4L06ttSHmiZTqWUjRdBIZhSv7yaogh
B9ulP4EDFAHV6oxyT/JR4tGTQEgPirH7suoxaBuTxs8Odin+KPXKREVE3UXdfRg/
WOaNV58NLgsuKQOfGhrE1ahAmJWN7jSff0VVFd5fo5MalGP48YNPqHh3PbNiASOS
0bM8GxbwtKO4oVeGwmYC9ftHTT6TBBNd2Gle18jMhFYav2Ko9GuAZFgPKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGuVNTjQJng+3bw4PzcCsjOdsh7MB8GA1UdIwQY
MBaAFHReZD0CHsbSG0da5GDd7c9+az9mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEY1a1BRSWV4dEliUjFya1lOM3R6MzVyUDJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi80ZGE1ZDUtMzE1Mi00ZjU0LWEwYTkt
YTk1YWVmOWM5MWQ5LzEvZEY1a1BRSWV4dEliUjFya1lOM3R6MzVyUDJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi80ZGE1ZDUtMzE1Mi00ZjU0LWEwYTktYTk1YWVmOWM5MWQ5
LzEvZEY1a1BRSWV4dEliUjFya1lOM3R6MzVyUDJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+nlyA0N
EvEeKhyguK4oxEwrd4lHvILfmA8YSLZQmm+UX5FnmRJ/9smMyiJ9El8AF3TP7Neo
O7ccM684CWRaa2BEqg/iFPBFQaBE0qjp8Ai4YbxhLNu7cyO7hJ8W7QrpZ8ySxcZK
LNHlQeSFD2GVgFwMNiCPgitR8NgMz0F8x6K2ILHORZcW4E1/rI/Y8vEeaH3xxOuP
HaSxPhGfTe9Xt21VPVv3bUVGVb/yKx0sOAuxTMI4Y1kqs61kBdClItB6BdjQduLo
NEpSQ7+O7pkAQUkZZ/u0d9TEeWaogj4361F+tuxLnrsW/peOxxn1fPUKceATr/tb
c/Qaso3Rvo/9Ag==
-----END CERTIFICATE-----
Generated at Mon Oct 26 08:56:40 2026 by rpki-client