Error: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D8A96BE43E9FE347873058CD625D12612C5B798.cer: certificate revoked on Mon 21 Sep 2026 18:00:19 +0000

Manifest

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/3FEF661EC2ABA29EEF3E07E04168ED1D783502C60A99873200BA37F191B44049/0/1D8A96BE43E9FE347873058CD625D12612C5B798.mft
File:                     1D8A96BE43E9FE347873058CD625D12612C5B798.mft (raw, json)
Hash identifier:          jvMVtqY1mBVQn/OITZfz4T1pGQZOutiS8qm8BWX3ORg=
Subject key identifier:   D1:FB:F1:BE:E7:53:58:98:AC:B4:DA:6B:25:9C:88:B7:CA:24:D4:5B
Authority key identifier: 1D:8A:96:BE:43:E9:FE:34:78:73:05:8C:D6:25:D1:26:12:C5:B7:98
Certificate issuer:       /CN=1D8A96BE43E9FE347873058CD625D12612C5B798
Certificate serial:       3D223C1D38767B97B61D1EF97FB3400ABB871E1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D8A96BE43E9FE347873058CD625D12612C5B798.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3FEF661EC2ABA29EEF3E07E04168ED1D783502C60A99873200BA37F191B44049/0/1D8A96BE43E9FE347873058CD625D12612C5B798.mft
Manifest number:          01D1
Signing time:             Sun 20 Sep 2026 10:01:20 +0000
Manifest this update:     Sun 20 Sep 2026 09:56:20 +0000
Manifest next update:     Fri 25 Sep 2026 12:12:20 +0000
Files and hashes:         1: 3137302e3233332e3134342e302f32322d3234203d3e203237383433.roa (hash: JD/ia6Aol9Voig1GsY7HfgE9fG6BaSy5HjKpUy20Q3w=)
                          2: 1D8A96BE43E9FE347873058CD625D12612C5B798.crl (hash: zSN03CpVepmzC01nVcoYOtWUMF2GxsHyq9GkaA1Gqgs=)
                          3: 3134332e3230382e3133322e302f32322d3234203d3e203237383433.roa (hash: 5UZNGWA8XVLhvTYRxPGIU8GjyfMkOaNKqGhEneDGOSY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:22:3c:1d:38:76:7b:97:b6:1d:1e:f9:7f:b3:40:0a:bb:87:1e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D8A96BE43E9FE347873058CD625D12612C5B798
        Validity
            Not Before: Sep 20 09:56:20 2026 GMT
            Not After : Sep 25 12:12:20 2026 GMT
        Subject: CN=D1FBF1BEE7535898ACB4DA6B259C88B7CA24D45B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4d:71:cc:36:e8:83:d9:47:75:7d:f3:7d:ae:
                    94:f0:ae:4a:75:15:44:ea:67:9d:61:44:ee:70:06:
                    95:d4:34:ab:11:de:e6:e1:7b:db:d8:07:53:d3:ae:
                    0e:23:1d:e9:92:03:d2:af:90:9a:49:85:e4:4b:58:
                    ea:c1:58:9f:ea:b5:b9:8d:68:4d:fd:3b:a9:10:c1:
                    a5:a5:a2:5b:98:f6:9c:8c:4a:3e:94:3f:21:c4:f7:
                    bc:b4:b6:f7:9d:40:cd:2a:98:e0:ba:46:6f:23:50:
                    a5:8f:29:b6:8d:bb:ab:59:4a:3d:81:cf:68:60:16:
                    eb:b7:b6:00:ee:4c:24:28:c4:06:db:2c:60:a3:ee:
                    9a:d1:dc:6d:ca:06:fe:01:76:e1:7f:39:28:2c:a7:
                    c2:c2:21:76:3c:ae:3f:db:5f:ce:6b:ec:b5:93:69:
                    b9:f2:66:a6:3e:5a:b1:c3:08:c2:c6:ba:87:a9:67:
                    2d:31:d8:85:34:84:8c:ac:87:f0:11:da:b4:60:d4:
                    88:b0:ea:42:0f:04:ce:7a:5d:61:1f:52:ad:07:96:
                    cb:ea:81:5f:12:c2:32:76:1a:dd:ff:b6:9d:9f:76:
                    c1:ee:12:72:3c:c1:6e:47:03:99:a8:87:43:a3:af:
                    5a:22:0e:e2:43:b2:af:9e:9f:4f:bb:50:72:26:32:
                    d7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:FB:F1:BE:E7:53:58:98:AC:B4:DA:6B:25:9C:88:B7:CA:24:D4:5B
            X509v3 Authority Key Identifier:
                keyid:1D:8A:96:BE:43:E9:FE:34:78:73:05:8C:D6:25:D1:26:12:C5:B7:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3FEF661EC2ABA29EEF3E07E04168ED1D783502C60A99873200BA37F191B44049/0/1D8A96BE43E9FE347873058CD625D12612C5B798.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D8A96BE43E9FE347873058CD625D12612C5B798.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FEF661EC2ABA29EEF3E07E04168ED1D783502C60A99873200BA37F191B44049/0/1D8A96BE43E9FE347873058CD625D12612C5B798.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:08:03:6f:f7:6d:e4:61:71:08:0b:87:8f:f4:cf:d2:47:be:
         d8:c8:8c:eb:ec:a5:97:93:5d:94:b8:0b:7c:36:30:c2:aa:e8:
         39:2b:17:39:79:ad:08:8e:8e:51:e7:d4:86:d6:52:25:19:09:
         47:47:df:3f:26:71:e2:2d:d7:94:81:b2:56:f0:19:8f:3d:2d:
         e0:a5:8b:2a:53:27:0a:57:46:16:57:f0:2f:c0:1a:6b:77:46:
         0b:23:79:b4:a7:f7:0f:e4:8d:ff:c6:2f:29:50:fc:c3:e1:9a:
         15:85:41:62:8e:be:32:87:c8:b3:23:bc:0b:2f:83:3b:a5:26:
         af:78:48:c3:7b:ef:d1:9e:e5:c6:2f:63:9a:cc:e3:22:26:26:
         98:48:8e:a2:63:98:15:c6:a3:f7:78:15:72:cd:6b:a4:ad:07:
         6e:25:0e:ba:a0:5c:4c:26:62:62:0b:1a:c4:f3:a8:cc:ef:2c:
         20:e6:46:59:38:4d:aa:00:71:b3:20:f7:50:a1:ec:d9:90:39:
         b0:7f:8d:d2:8e:1f:3e:1d:4e:31:a6:89:69:d2:af:93:62:41:
         f8:de:49:b8:f8:f7:cb:b4:20:8e:a6:d7:b9:da:3c:e5:65:4f:
         1a:af:60:9e:48:5e:27:3f:be:90:79:e7:d8:e7:d2:a1:13:b9:
         2e:98:fe:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 04:00:21 2026 by rpki-client