Error: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.cer: certificate has expired

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.mft
File:                     1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.mft (raw, json)
Hash identifier:          nUQt+NPgfYHRlmDcbsIVKpHnFty5AE4xOXzGVGZ8RUg=
Subject key identifier:   EB:81:8D:2C:32:40:1D:5C:20:E9:70:CA:94:73:3C:27:8A:92:7D:F5
Authority key identifier: 1A:CA:9F:BA:B5:A5:57:98:45:3E:BC:32:81:3B:FF:AB:CB:11:12:C0
Certificate issuer:       /CN=1ACA9FBAB5A55798453EBC32813BFFABCB1112C0
Certificate serial:       23C9C616C27488D24EF03C0D7876F8C126D83389
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.mft
Manifest number:          01A5
Signing time:             Fri 10 Jul 2026 11:01:07 +0000
Manifest this update:     Fri 10 Jul 2026 10:56:07 +0000
Manifest next update:     Sat 11 Jul 2026 14:28:07 +0000
Files and hashes:         1: 1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.crl (hash: 7zE3vGpTvHc79csfwOB6YB+UBeE+g4UndgdfFlvTBtw=)
                          2: 323830343a383237303a3a2f33322d3334203d3e203631363038.roa (hash: uUEwAyOnSKMgNrv6cimHSGDyRpN3j7PzrC2gtxszUfQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c9:c6:16:c2:74:88:d2:4e:f0:3c:0d:78:76:f8:c1:26:d8:33:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ACA9FBAB5A55798453EBC32813BFFABCB1112C0
        Validity
            Not Before: Jul 10 10:56:07 2026 GMT
            Not After : Jul 11 14:28:07 2026 GMT
        Subject: CN=EB818D2C32401D5C20E970CA94733C278A927DF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fe:0c:86:f7:69:86:8e:82:ac:c4:2b:f6:46:
                    0e:be:dc:11:db:3b:45:bd:06:ac:b3:fa:0d:d1:f0:
                    56:68:38:a1:14:f1:3c:34:c9:9c:06:4e:4b:01:bf:
                    99:b0:48:a2:be:66:eb:9c:b0:56:c4:2c:f9:fd:9b:
                    fe:93:f8:e2:1c:d3:2a:fd:ac:19:2a:e2:82:6e:8d:
                    c1:ce:ba:de:6e:da:e9:ab:e1:6c:2a:51:08:b0:eb:
                    00:54:d2:b0:74:f8:f8:0e:63:74:65:f0:b0:c0:64:
                    37:99:bd:6e:5c:0c:37:e3:d9:89:f4:3e:54:93:a5:
                    68:46:c8:e3:cc:f2:09:b3:4b:86:5a:79:78:80:f4:
                    70:cc:19:3d:55:85:e7:79:1e:e5:27:59:56:00:fe:
                    ab:f6:21:d8:73:be:42:fe:fe:f1:a4:2a:d4:79:2c:
                    e1:8e:89:66:0e:ae:cc:9a:06:ca:04:35:00:0d:62:
                    b6:26:ca:df:a4:d1:7e:7d:c8:57:9b:12:84:8f:46:
                    4d:1a:dd:fc:c6:ba:77:80:a5:02:39:35:37:0c:a6:
                    55:0d:6f:d3:b1:92:a9:6c:a9:54:70:98:07:c0:24:
                    f3:d6:ac:3b:15:17:b3:eb:f2:8d:f6:2f:5a:35:30:
                    12:2f:8e:59:76:da:43:5a:8d:b0:1f:93:f1:a1:5c:
                    b0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:81:8D:2C:32:40:1D:5C:20:E9:70:CA:94:73:3C:27:8A:92:7D:F5
            X509v3 Authority Key Identifier:
                keyid:1A:CA:9F:BA:B5:A5:57:98:45:3E:BC:32:81:3B:FF:AB:CB:11:12:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:47:14:c3:0b:35:df:15:34:30:9e:26:af:eb:0c:57:03:70:
         b8:98:d5:2a:b3:4a:90:bc:5d:fc:01:3d:cc:ab:a8:b1:f6:9c:
         5c:17:91:0d:35:12:1c:af:7b:83:39:83:06:1c:75:85:41:75:
         83:5c:4a:a4:34:30:50:a1:b7:66:c3:f9:f5:73:77:b4:74:80:
         1b:8f:c2:21:4b:41:36:35:8e:bd:42:63:25:8c:52:db:e6:f8:
         af:46:87:c1:3f:8e:38:67:7b:be:56:3b:8d:39:3b:f8:73:af:
         4a:b5:08:a2:fe:e5:2d:9a:c8:16:12:1b:c8:6a:9b:d2:65:e9:
         8b:2c:f0:fd:9d:c8:f4:ec:0a:2b:9d:eb:3c:b7:f7:a9:4c:28:
         76:bb:42:56:cf:4f:f5:29:92:03:d1:63:13:28:89:c7:0f:18:
         b6:28:0c:e5:cf:00:d4:e8:84:f1:bc:93:3f:d9:fa:cc:14:bb:
         f3:74:49:f3:63:46:79:d0:c4:67:1d:de:b7:e3:1e:9f:7c:32:
         c8:9b:18:fe:9e:51:1a:35:90:e5:6a:8c:b9:d3:fa:99:5b:3e:
         a2:30:fd:96:d5:5d:24:2b:e1:14:3a:2b:e3:55:a9:f8:e4:35:
         85:b5:51:cc:1f:22:2d:07:a3:b1:39:57:9e:86:01:f5:f6:72:
         61:13:d7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:07:07 2026 by rpki-client