Error: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer: certificate revoked on Tue 03 Nov 2026 10:27:57 +0000

Manifest

$ rpki-client -vvvf rsync.proxy-arp.network/repo/bgp43-u21/1/4EC2EBEEF1D41C396D96A3AC58414E9E8228517B.mft
File:                     4EC2EBEEF1D41C396D96A3AC58414E9E8228517B.mft (raw, json)
Hash identifier:          HJ0uMspUQJs2jN8JllwcxHeAblSK36UdAKF/3Lf0xV4=
Subject key identifier:   89:7C:3C:9E:AB:41:47:28:A4:C3:1F:51:FA:EC:2C:EE:79:C2:85:21
Authority key identifier: 4E:C2:EB:EE:F1:D4:1C:39:6D:96:A3:AC:58:41:4E:9E:82:28:51:7B
Certificate issuer:       /CN=4EC2EBEEF1D41C396D96A3AC58414E9E8228517B
Certificate serial:       7F6CE226045259DF7D502F997A8DC7E33E73BB22
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/4EC2EBEEF1D41C396D96A3AC58414E9E8228517B.cer
Subject info access:      rsync://rsync.proxy-arp.network/repo/bgp43-u21/1/4EC2EBEEF1D41C396D96A3AC58414E9E8228517B.mft
Manifest number:          0E
Signing time:             Thu 05 Nov 2026 14:16:32 +0000
Manifest this update:     Thu 05 Nov 2026 14:11:32 +0000
Manifest next update:     Fri 06 Nov 2026 17:13:32 +0000
Files and hashes:         1: 4EC2EBEEF1D41C396D96A3AC58414E9E8228517B.crl (hash: SYMZ34xgFS9Tl7y1S1DQ4DdAJ/VXODtwPC3+bp2Q5Xg=)
                          2: AS40419.roa (hash: ZpRJUhGfb/cvdZqU/TvVqC3eh9AZ3uCGLlRL33ceZ0c=)
                          3: AS218995.roa (hash: dMncAhBg9iSb2W1YVob2TyQUKrzcqwMXOqYv65w7Aws=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:6c:e2:26:04:52:59:df:7d:50:2f:99:7a:8d:c7:e3:3e:73:bb:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EC2EBEEF1D41C396D96A3AC58414E9E8228517B
        Validity
            Not Before: Nov  5 14:11:32 2026 GMT
            Not After : Nov  6 17:13:32 2026 GMT
        Subject: CN=897C3C9EAB414728A4C31F51FAEC2CEE79C28521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1f:02:6c:56:3b:23:e5:22:d5:91:9c:2d:59:
                    4e:b1:c3:ed:b0:02:c6:86:1a:72:11:44:57:96:01:
                    18:fc:03:a2:8c:84:35:97:1d:c2:80:d1:47:37:f6:
                    5a:57:34:fe:c0:75:c1:51:c1:eb:e0:1e:ff:97:9f:
                    16:f2:9e:f1:53:05:aa:c0:8a:b1:72:d2:0e:40:1b:
                    69:68:b9:c0:fe:77:ef:8a:53:ef:04:ca:2c:c7:c6:
                    cb:1d:e8:c3:d9:31:bc:49:cb:78:91:f9:af:8e:7c:
                    d0:89:8c:21:a7:f3:48:77:a8:70:01:98:51:58:97:
                    6d:5d:a4:17:de:44:88:81:2d:42:9f:fe:cf:bd:59:
                    88:f3:82:86:d9:95:69:83:96:44:7a:ea:1e:b3:7f:
                    d5:9e:eb:89:4b:4d:72:bc:f2:cc:72:fe:05:4f:fb:
                    d9:ef:91:28:b1:c0:02:0e:9b:02:51:88:c2:1d:43:
                    20:b0:f6:4d:44:0c:a6:50:86:9c:d1:25:cc:fd:c2:
                    a1:c9:59:87:30:8a:7e:1a:15:f3:a0:79:eb:8b:95:
                    60:81:f1:ed:02:4f:cb:b1:27:38:bb:63:52:46:49:
                    d1:41:39:86:d3:c3:aa:74:a5:a8:34:1f:28:53:b4:
                    36:fc:c2:23:8d:2a:69:9d:ae:fe:25:5c:a8:4e:19:
                    b9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:7C:3C:9E:AB:41:47:28:A4:C3:1F:51:FA:EC:2C:EE:79:C2:85:21
            X509v3 Authority Key Identifier:
                keyid:4E:C2:EB:EE:F1:D4:1C:39:6D:96:A3:AC:58:41:4E:9E:82:28:51:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.proxy-arp.network/repo/bgp43-u21/1/4EC2EBEEF1D41C396D96A3AC58414E9E8228517B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/4EC2EBEEF1D41C396D96A3AC58414E9E8228517B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.proxy-arp.network/repo/bgp43-u21/1/4EC2EBEEF1D41C396D96A3AC58414E9E8228517B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:5b:e6:05:a9:dc:e9:a8:17:b3:80:0e:00:1e:41:4b:b2:cb:
         ad:9d:fa:05:f7:c4:fa:75:4e:25:a9:8f:58:cf:01:d8:68:66:
         d7:92:f0:49:a3:4f:e3:4a:a5:e5:c1:9c:7d:29:71:be:16:fc:
         73:0f:ff:db:37:c3:b0:b7:bc:23:86:74:9b:81:92:fe:6b:2f:
         d3:70:5f:1f:f6:a8:a3:ee:0c:69:c1:f0:d6:4a:77:ec:92:5d:
         2d:31:1e:78:bf:73:30:b2:38:52:37:ed:25:10:41:f1:a1:0b:
         87:23:33:79:9a:2f:8b:f9:b5:60:d6:1c:8a:c1:df:53:a5:b1:
         83:c6:b4:9a:fe:60:04:ed:8e:07:29:cc:1e:a2:ee:81:7d:b8:
         4f:9b:55:42:c0:b6:4b:c5:ea:09:c8:21:77:b7:b6:e8:62:63:
         44:4c:a5:ea:46:70:36:8c:3e:85:09:7a:5e:e3:e1:dd:0a:b8:
         26:b5:89:7a:a7:57:60:46:6c:0a:58:1f:98:a4:82:85:80:24:
         92:01:54:b0:89:9c:c1:00:8e:2a:00:b8:fd:22:8d:30:fc:9a:
         14:9e:6f:f7:bc:a6:df:4b:4f:3b:f0:5a:25:a8:36:87:ee:c9:
         40:fd:23:b7:e2:e2:e1:48:b0:ea:46:bc:21:65:4b:ce:41:d3:
         11:d8:4e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:29:50 2026 by rpki-client