Error: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.cer: certificate has expired

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.mft
File:                     A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.mft (raw, json)
Hash identifier:          CsQgTuVOVMJXNaQHvNbFbcOH8667ID6NcwdGtLMNC7s=
Subject key identifier:   A6:E5:A3:D9:33:F4:28:15:6A:9D:AA:43:96:A7:AA:2E:D9:D1:50:76
Authority key identifier: A0:9F:FB:0F:DC:34:DD:07:96:1F:ED:BB:79:D8:59:3F:C2:81:12:F3
Certificate issuer:       /CN=A09FFB0FDC34DD07961FEDBB79D8593FC28112F3
Certificate serial:       585DAFCDA7C29FB8C7F5657CC2C43C073F060C66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.mft
Manifest number:          0377
Signing time:             Wed 03 Jun 2026 17:11:25 +0000
Manifest this update:     Wed 03 Jun 2026 17:06:25 +0000
Manifest next update:     Thu 04 Jun 2026 19:44:25 +0000
Files and hashes:         1: A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.crl (hash: I/aJlCPBsyC1LWlduZG5/fWWUtvYp9KoWrN6YeUXDPs=)
                          2: 3133382e39372e32302e302f32322d3234203d3e20323634313132.roa (hash: vaPBjNRU5cLfNq4Ajf17RP29ZF8znjhebKhB7JEHAqE=)
                          3: 323830343a323261303a3a2f33322d3438203d3e20323634313132.roa (hash: XUkg/RMARH1Dfo0HXIe/VkwDxry1vLL6HTSa7WxxHKM=)
                          4: 3137302e38332e3136302e302f32322d3234203d3e20323634313132.roa (hash: kjRXgE0/0tSktAP46xSsYXcpBUoV/kAEz7+o0rfOYak=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:5d:af:cd:a7:c2:9f:b8:c7:f5:65:7c:c2:c4:3c:07:3f:06:0c:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09FFB0FDC34DD07961FEDBB79D8593FC28112F3
        Validity
            Not Before: Jun  3 17:06:25 2026 GMT
            Not After : Jun  4 19:44:25 2026 GMT
        Subject: CN=A6E5A3D933F428156A9DAA4396A7AA2ED9D15076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bd:38:34:bf:28:10:f0:12:71:f0:0a:95:f6:
                    4f:3d:c1:56:85:36:6f:66:7a:00:c8:4d:62:62:2a:
                    95:d3:55:9a:c0:2c:14:e3:3d:21:b4:37:13:16:6f:
                    c7:e4:b5:c3:bc:bc:9f:c0:43:98:9c:28:9f:ee:7a:
                    8c:72:ef:9f:dc:c2:6e:09:ed:02:43:4b:c4:0e:9a:
                    3c:4a:fa:3f:46:a0:eb:6a:e3:59:85:11:e4:b3:e6:
                    f5:aa:b8:63:76:99:f6:e0:b2:64:72:50:f1:b9:31:
                    e1:aa:c5:2e:62:e4:84:7d:34:17:9f:c0:e8:d4:3d:
                    dc:d9:eb:1c:39:af:33:47:8d:56:05:18:5e:d4:18:
                    f1:35:0d:3a:bf:bd:b1:42:21:ea:5c:05:3e:6b:7d:
                    65:c2:fe:27:22:1c:ab:3b:60:0e:27:08:2f:bb:1c:
                    d2:dc:bf:a2:54:44:6c:f9:02:47:a3:93:df:78:8c:
                    ed:ab:ff:d9:c9:19:b9:fa:7e:15:c0:0c:86:88:f2:
                    be:9d:2c:9c:64:ea:d4:98:d4:1b:91:eb:52:a4:3b:
                    a7:9c:95:fb:13:24:1f:3c:88:18:4b:f1:6a:3c:d1:
                    9d:ea:84:66:e4:bd:04:34:e0:09:95:87:64:78:90:
                    1d:c9:bf:c3:43:9b:69:5e:30:d0:a1:c7:f3:e1:f0:
                    fb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E5:A3:D9:33:F4:28:15:6A:9D:AA:43:96:A7:AA:2E:D9:D1:50:76
            X509v3 Authority Key Identifier:
                keyid:A0:9F:FB:0F:DC:34:DD:07:96:1F:ED:BB:79:D8:59:3F:C2:81:12:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:9f:38:ce:69:23:c5:8d:58:43:70:38:23:97:af:3f:ec:1f:
         79:58:31:a7:e0:d0:a3:56:c4:1b:9d:d8:24:7e:6c:40:0d:10:
         f7:f5:ac:ef:fc:eb:15:ed:e8:ba:87:22:ae:4d:e1:c9:fb:a6:
         8f:52:62:83:67:67:8a:3e:0a:54:39:c7:e0:bf:e9:1a:2b:4d:
         f0:11:fc:f1:5e:df:7e:4e:dd:a4:43:86:e9:b1:fd:3f:5d:88:
         44:9f:a4:8c:61:59:71:2e:d7:f5:fe:a4:a3:69:98:f8:b0:68:
         ce:16:2b:19:b9:10:cf:43:b3:f8:87:0d:92:6d:48:f6:8e:65:
         c8:e4:34:5a:ce:db:ce:c7:f3:56:97:57:fe:b0:88:10:a0:82:
         9b:a3:88:e5:1a:97:f7:87:5d:34:08:48:d7:c9:3d:42:5b:af:
         36:87:24:f8:f4:52:86:03:51:35:ed:7f:57:bb:de:eb:e2:07:
         c7:61:8d:60:c7:d7:d1:ce:4d:43:59:32:f0:f8:2d:12:82:d3:
         9d:b9:e5:f1:1b:93:11:1a:3d:19:21:8e:ad:f8:4c:d4:f9:9e:
         c4:b2:33:e3:9d:0c:47:61:70:29:f7:d6:13:5f:ee:1c:54:ca:
         a4:0c:2a:ca:73:20:ba:b6:4e:8f:c9:09:11:ea:e4:82:b0:06:
         cc:b0:21:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:44:15 2026 by rpki-client