Error: rsync://rpki.ripe.net/repository/DEFAULT/GFsdaKRh-iQmhlQnUBQjgq3yxTs.cer: certificate revoked on Sun 20 Sep 2026 14:06:15 +0000

Manifest

$ rpki-client -vvvf krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.mft
File:                     185B1D68A461FA242686542750142382ADF2C53B.mft (raw, json)
Hash identifier:          nrZssbLxeu3WCiL/NNCJRjTT6trgmEv4b1ZZ1q66Hbs=
Subject key identifier:   A0:DE:65:FB:CB:63:E7:F1:DD:7E:45:04:E2:2B:90:C5:CC:0D:17:28
Authority key identifier: 18:5B:1D:68:A4:61:FA:24:26:86:54:27:50:14:23:82:AD:F2:C5:3B
Certificate issuer:       /CN=185b1d68a461fa242686542750142382adf2c53b
Certificate serial:       15F9AF9916E8B531AFCD9816ED8F2316CBDC86F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GFsdaKRh-iQmhlQnUBQjgq3yxTs.cer
Subject info access:      rsync://krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.mft
Manifest number:          86
Signing time:             Sat 19 Sep 2026 23:55:18 +0000
Manifest this update:     Sat 19 Sep 2026 23:50:18 +0000
Manifest next update:     Mon 21 Sep 2026 03:43:18 +0000
Files and hashes:         1: 185B1D68A461FA242686542750142382ADF2C53B.crl (hash: W/2HzvP80twlw/mMlAGkwgmM/ZE/+UCYApMTM/QiuY0=)
                          2: AS219418.asa (hash: 5xy+Qqo7weeLV+Mh1cf12o+jn5ZxdJnxo/myV7tUrwA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:f9:af:99:16:e8:b5:31:af:cd:98:16:ed:8f:23:16:cb:dc:86:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=185b1d68a461fa242686542750142382adf2c53b
        Validity
            Not Before: Sep 19 23:50:18 2026 GMT
            Not After : Sep 21 03:43:18 2026 GMT
        Subject: CN=A0DE65FBCB63E7F1DD7E4504E22B90C5CC0D1728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e0:8c:a8:ab:0f:86:a4:f6:8d:6e:db:63:d8:
                    2c:0a:d1:20:c1:59:c9:3b:a0:b8:67:11:ff:59:f1:
                    07:ca:76:f9:96:42:68:d2:48:44:92:bb:42:96:e5:
                    fa:6c:3a:ed:9b:bd:38:84:e5:ce:b8:0d:9a:b7:ec:
                    89:df:19:0e:55:b1:8b:df:c9:19:d8:47:a8:00:bd:
                    04:2a:15:63:07:5b:46:3c:06:41:59:02:03:33:57:
                    7c:f5:a9:37:73:8b:61:68:3a:1b:3b:f7:a0:b3:56:
                    0f:d1:ee:34:f5:1d:e5:9b:eb:ef:40:cb:1b:5b:1d:
                    6c:17:41:14:ac:4f:a2:5d:ea:7b:2d:3c:6b:6f:ef:
                    0d:14:67:9b:3b:7d:01:a8:b9:bd:76:ba:36:a6:30:
                    e2:43:0e:e0:93:49:a8:8d:a0:1c:e1:90:94:bd:dc:
                    0e:60:69:7b:87:a7:5b:ad:52:27:64:c6:51:a1:05:
                    27:bf:69:af:1d:fd:c4:b0:d8:71:67:0b:ab:19:46:
                    f1:9b:58:84:43:c8:0c:6e:72:bb:f5:63:f9:5e:4a:
                    9e:f2:84:33:30:a6:53:c6:22:25:e5:53:b5:83:0b:
                    98:7f:6d:0e:68:ce:40:47:0b:ae:ed:36:5b:c7:89:
                    76:00:3e:99:a8:3b:23:da:ba:38:c0:e2:1f:03:3e:
                    50:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:DE:65:FB:CB:63:E7:F1:DD:7E:45:04:E2:2B:90:C5:CC:0D:17:28
            X509v3 Authority Key Identifier:
                keyid:18:5B:1D:68:A4:61:FA:24:26:86:54:27:50:14:23:82:AD:F2:C5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFsdaKRh-iQmhlQnUBQjgq3yxTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:8b:7d:35:80:d1:b2:86:a9:2e:47:00:f3:99:99:1a:20:73:
         c3:84:0d:14:12:58:95:38:89:d0:f3:e1:0f:29:24:5e:10:a0:
         b2:50:80:93:60:a4:fa:d7:6d:e3:31:ad:21:29:83:35:a2:58:
         bb:14:a5:2b:02:5e:2e:44:61:58:e4:20:0f:e6:ef:0d:0d:15:
         c9:a6:d4:b1:66:59:7a:39:54:5f:44:51:37:b2:d9:70:c4:b1:
         da:f2:4e:00:06:3c:cd:28:10:a5:ca:f2:69:29:58:6c:db:fc:
         ca:af:c4:e6:d1:60:80:51:7c:0f:e2:30:88:4e:de:0f:e8:e8:
         e1:8a:61:53:7c:5f:a3:59:47:61:d0:e8:3d:6c:ff:d5:8b:57:
         87:15:95:95:57:7a:fa:b9:bd:0a:4f:9a:7a:68:be:10:5a:87:
         2c:c9:9a:ff:04:e5:ed:05:d6:7f:25:f7:8a:ff:66:35:78:19:
         c8:08:27:6e:f6:ca:63:c6:4b:b1:89:c6:14:f9:90:47:89:0a:
         ca:44:b5:f1:c3:a1:ab:56:d2:51:e7:62:c7:c3:25:56:7b:e8:
         63:c3:a7:ed:36:89:48:16:a8:ad:a4:3a:54:ae:be:07:41:49:
         3a:21:c9:2d:15:7a:78:4d:db:97:9e:4e:a1:a4:db:74:a4:9d:
         6e:9a:b8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:08:46 2026 by rpki-client