
Error: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.cer: CRL has expired
Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.mft
File: 642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.mft (raw, json)
Hash identifier: BbJct9hyYx1NFip+Q6G7hyWTR7jtB+gaX+9sEk2D87w=
Subject key identifier: C7:B3:9F:1E:4D:B2:91:33:0F:59:F2:FC:61:93:D8:1B:9F:BD:97:76
Authority key identifier: 64:2D:D3:E1:A1:22:CE:A1:0A:EF:0A:C9:BB:C8:28:5D:D0:A7:C7:B5
Certificate issuer: /CN=642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5
Certificate serial: 66720955F41641DE931B2DD9BAD84F41395D7FCB
Authority info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.mft
Manifest number: 6D
Signing time: Mon 14 Sep 2026 21:34:39 +0000
Manifest this update: Mon 14 Sep 2026 21:29:39 +0000
Manifest next update: Wed 16 Sep 2026 00:19:39 +0000
Files and hashes: 1: 642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.crl (hash: bXo5MuKn7INdYJ0eRTmk4LM2VvwJ7o27Y283eAuJm5g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:72:09:55:f4:16:41:de:93:1b:2d:d9:ba:d8:4f:41:39:5d:7f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5
Validity
Not Before: Sep 14 21:29:39 2026 GMT
Not After : Sep 16 00:19:39 2026 GMT
Subject: CN=C7B39F1E4DB291330F59F2FC6193D81B9FBD9776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:37:95:42:b1:ba:f7:29:fd:ec:01:7c:ea:f2:
f3:25:f0:c4:c6:28:e1:a6:1b:dd:98:ac:75:3a:e3:
33:d5:ab:4f:52:e2:75:51:64:b8:fb:c8:e2:67:a5:
dd:b4:d9:41:d2:c6:29:b8:28:60:a7:58:f4:8a:e8:
29:90:30:16:92:3a:f9:8a:35:e1:56:62:a1:33:97:
e9:a9:4c:51:fd:a8:8a:59:38:23:aa:b0:cc:91:dc:
63:34:59:85:18:38:14:ed:c5:8e:c7:13:0e:e1:15:
33:e8:83:51:46:ac:ec:85:c2:3a:73:fe:ed:f8:3d:
b6:a7:6d:d7:95:79:6a:49:1f:2a:23:0a:60:84:97:
77:c4:29:67:5b:d7:f6:8e:f3:04:8f:cd:41:cc:28:
ce:00:38:54:ea:6e:42:dd:89:20:95:3c:b0:bb:8b:
f8:a9:af:38:88:8c:4f:9f:4c:90:7c:06:97:aa:2a:
3d:14:04:2a:35:5a:d0:60:09:ba:7f:06:dc:e7:ed:
f9:42:bc:7a:23:29:45:65:50:d2:36:e6:a7:c6:95:
e5:c0:84:3a:15:80:38:23:9d:6c:7a:64:73:34:b4:
72:09:a8:c1:22:96:78:e4:22:4e:62:f3:87:6a:69:
67:b7:ce:54:36:83:94:57:b2:b2:67:5e:f1:b1:ff:
15:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B3:9F:1E:4D:B2:91:33:0F:59:F2:FC:61:93:D8:1B:9F:BD:97:76
X509v3 Authority Key Identifier:
keyid:64:2D:D3:E1:A1:22:CE:A1:0A:EF:0A:C9:BB:C8:28:5D:D0:A7:C7:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:14:af:0b:21:27:1b:7e:bf:54:c3:7e:60:77:68:66:2b:cc:
26:56:64:4b:f2:1e:84:ec:7b:eb:bd:5b:de:ba:d1:ac:9d:79:
0f:b6:70:7f:3b:5a:8b:4c:52:ed:49:87:7c:c5:52:4b:7e:53:
68:57:68:25:49:f9:26:b9:3f:7e:81:f5:66:ff:86:bd:43:4b:
ab:0e:b9:85:be:3a:cb:91:30:8c:30:c8:a4:bf:a1:67:5d:2d:
a9:41:1f:b3:ae:51:9f:7a:46:b0:39:93:b5:78:0b:c5:32:65:
46:83:18:a6:61:1e:eb:b9:a7:2f:7b:1d:5b:ad:ae:88:69:41:
0a:f2:79:98:76:d9:b2:3a:0b:20:52:c3:fc:17:7c:70:bd:5d:
db:71:c4:39:81:c2:07:a1:07:fc:93:15:b6:59:26:04:c5:a8:
e4:e1:dd:64:fd:00:39:5e:ce:94:64:64:ba:38:66:97:24:84:
5d:63:82:57:7d:51:6e:72:d2:6c:e9:2e:09:c5:8b:0e:1f:88:
22:79:d9:a2:37:a7:d0:c7:80:cd:15:75:2c:3b:a5:20:b7:11:
d7:84:de:61:47:fa:04:fc:c5:26:95:3f:77:b0:c4:ec:00:31:
5a:a9:5a:8d:97:49:c9:7f:8d:8c:e1:a8:7b:0d:3d:80:e5:e0:
b6:d4:d8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:23:13 2026 by rpki-client