Error: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer: CRL has expired

Manifest

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File:                     3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier:          rTVMuVD4TFwoxzCp9PStT2Uf0SvwdjFEx/BfHT7Pwb0=
Subject key identifier:   E0:47:A8:42:F9:61:3E:2D:C5:A0:EF:02:94:49:B2:BA:22:EA:2F:79
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer:       /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial:       661CB4823E710707367FC2813213376C719DD0D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number:          03DE
Signing time:             Thu 05 Nov 2026 12:07:56 +0000
Manifest this update:     Thu 05 Nov 2026 12:02:56 +0000
Manifest next update:     Fri 06 Nov 2026 12:23:56 +0000
Files and hashes:         1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: /omqO31DQqJNa95pFgCPzP0pVFuzW9DnaW1o71dj1yg=)
                          2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:1c:b4:82:3e:71:07:07:36:7f:c2:81:32:13:37:6c:71:9d:d0:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
        Validity
            Not Before: Nov  5 12:02:56 2026 GMT
            Not After : Nov  6 12:23:56 2026 GMT
        Subject: CN=E047A842F9613E2DC5A0EF029449B2BA22EA2F79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:76:03:5b:08:ba:80:ab:c2:51:c4:f4:18:75:
                    49:13:d2:50:98:60:54:04:47:6f:1b:a7:13:a4:f5:
                    59:ca:12:76:fe:2d:c3:19:5c:dc:e8:46:07:38:3a:
                    31:d5:84:49:dd:d2:47:fd:01:dc:45:a7:56:8d:e0:
                    70:6a:70:52:a2:1d:db:fa:3b:cc:6e:a6:ac:2e:47:
                    ca:b3:4e:2a:3f:74:0f:77:ac:02:a7:71:13:1f:31:
                    1b:aa:34:83:ab:a2:de:62:8c:19:54:e9:74:cd:e4:
                    9e:bf:d8:46:c4:43:1f:23:76:28:d3:7a:f3:61:f0:
                    37:ce:ff:8a:cc:d1:ae:4e:96:e0:71:9f:d4:16:9b:
                    14:33:40:00:e7:07:5f:0b:38:2f:a6:e8:c9:9a:1d:
                    46:da:d4:31:48:c5:93:4d:f9:5b:28:02:60:23:af:
                    2b:dd:72:21:45:83:bf:2b:d3:35:01:2f:4c:59:a5:
                    17:99:91:d7:91:4b:61:43:2b:93:43:13:c5:8e:97:
                    b4:73:b3:56:c0:72:6a:b7:f5:e0:11:d3:41:06:16:
                    66:a2:fa:cf:54:12:09:44:0b:9a:df:7b:f7:72:dd:
                    92:d9:f7:c6:84:ed:d6:e4:80:9e:23:ad:bc:45:24:
                    97:e6:0f:12:01:eb:52:12:82:9d:21:f2:75:0f:18:
                    3b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:47:A8:42:F9:61:3E:2D:C5:A0:EF:02:94:49:B2:BA:22:EA:2F:79
            X509v3 Authority Key Identifier:
                keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:e6:13:9a:5a:ce:1a:92:47:53:83:17:c6:0d:17:e2:58:6d:
         2e:c8:1f:5f:f9:77:cf:b4:46:73:ba:21:f5:df:9b:1f:16:d9:
         22:15:44:36:36:1a:69:e7:05:08:4c:4e:19:e0:97:84:b9:12:
         ea:1a:9b:4f:33:eb:0b:dd:b0:c5:fc:6a:87:ff:7a:0d:54:46:
         67:66:39:2d:a6:3a:1b:99:cb:ad:12:c0:a8:68:ca:63:e1:19:
         f0:2f:66:76:26:da:48:ba:21:2f:f6:44:b5:ea:f1:f7:21:82:
         8b:7b:b9:f4:ec:68:f8:3c:6e:16:59:7a:fe:ba:f8:a0:e3:25:
         1f:66:da:a0:62:ea:43:40:0b:e5:cb:d1:18:38:b5:92:1f:a7:
         33:78:ec:1f:3c:16:76:cc:5c:9e:22:03:6c:7d:e3:d6:16:b9:
         d4:24:4d:86:18:e6:a5:bd:83:80:ee:fa:1c:3d:b8:67:d1:e7:
         0d:92:7c:fb:22:23:99:c7:c0:fc:10:4a:f2:8b:b0:f2:e6:58:
         71:f6:3c:33:d0:28:59:00:d4:b7:40:c1:c2:c0:03:99:ad:5a:
         17:b0:40:c8:d1:5b:a3:15:61:1c:06:6f:38:7d:4f:95:26:3e:
         d3:1a:35:6f:bd:3a:76:ae:e9:08:18:d5:24:6f:d8:ab:d3:62:
         a1:29:fb:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 11:09:12 2026 by rpki-client