Error: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer: CRL has expired

Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
File:                     ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft (raw, json)
Hash identifier:          swisaSS/jgXtQ7O7D5Q41bq3DlSpRLhtr5cyoGNw2Y0=
Subject key identifier:   63:3C:25:BE:82:74:F4:F1:62:7B:AE:0A:BE:CD:E0:9A:EE:58:37:24
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Certificate issuer:       /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial:       20D3E7B5CF7D3F194A1648B0FB3883E125244D37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
Manifest number:          0662
Signing time:             Thu 05 Nov 2026 13:04:03 +0000
Manifest this update:     Thu 05 Nov 2026 12:59:03 +0000
Manifest next update:     Fri 06 Nov 2026 16:38:03 +0000
Files and hashes:         1: 3139332e3230332e3230342e302f32342d3234203d3e203439343638.roa (hash: VN4e+deu8014Bud4Ylse4hxNH0QvvP4p6XiVLjfDUhw=)
                          2: 38392e34322e3131312e302f32342d3234203d3e203239383032.roa (hash: L8E/k5WG1P2zSzdmF8rJ5boiZXvKF22tBofIgUqK42s=)
                          3: 34362e3130322e3233332e302f32342d3234203d3e203233383635.roa (hash: 6hPXDpxoSp9EuEfmiuPb4M+w0B+aK71BZeoPnB8RMa8=)
                          4: 37372e38312e3133382e302f32342d3234203d3e203136323736.roa (hash: cSfuwk5t8sYaMQRs6xIWOg8/5JnKDK/SFBVUi2XUWiI=)
                          5: 37372e38312e3133372e302f32342d3234203d3e20333939363431.roa (hash: 12VqqOdLZaAJa3aHa+Cq0IgL9Ra+dgjtL5I1Sa/ga7w=)
                          6: 3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa (hash: HBNUOQKudEQDcJp49GkJ9KtZ4GtR0YuEZnBMnkiRWNc=)
                          7: 3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa (hash: hrQEkt0NpUNHioADxhgUOeG4b/FoGPyrx13F5DScoSc=)
                          8: 38392e34322e3131312e302f32342d3234203d3e203631333137.roa (hash: zuBRLO+8gED/P8Eo04HfZLlz2ygMpUXoQgp4z4sshfo=)
                          9: 38392e34322e3131302e302f32342d3234203d3e20313337343130.roa (hash: t7w2AjhEwLDRTkiiVetjh9gWTBqs8BnpR2as5Kppaoc=)
                          10: 39332e3131332e32352e302f32342d3234203d3e20323135363539.roa (hash: I0itF5+/8CondhM9QNDfv0y0vQPHYwTgwfaL4yXTNmo=)
                          11: 34362e3130322e3233322e302f32342d3234203d3e203231383539.roa (hash: WpG9gX//WKHDX5DGlDbw7tPwHCU7DWx+UmniDEM55WE=)
                          12: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl (hash: +3CD7U2XplnAo9dko/v0a0qPvVIdhUJAlhC2Rcru1zI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d3:e7:b5:cf:7d:3f:19:4a:16:48:b0:fb:38:83:e1:25:24:4d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
        Validity
            Not Before: Nov  5 12:59:03 2026 GMT
            Not After : Nov  6 16:38:03 2026 GMT
        Subject: CN=633C25BE8274F4F1627BAE0ABECDE09AEE583724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8e:12:a9:f5:2c:28:52:51:8f:d2:8f:8e:eb:
                    16:3c:12:0d:27:be:b2:1a:fb:4b:20:ee:81:46:8b:
                    4b:5e:5f:f1:e7:79:6e:76:ae:2d:dd:01:c5:22:53:
                    51:7e:3c:b8:86:7f:da:2d:34:70:ab:23:3b:c9:78:
                    b0:a2:26:94:ca:0c:14:2b:d4:61:53:ed:36:fe:45:
                    60:10:4e:39:2c:d9:45:7e:51:48:68:76:74:a2:a2:
                    31:4c:b6:b3:8f:a2:6d:81:fa:17:1d:cb:e6:dd:6f:
                    55:58:13:85:a9:0b:73:2d:30:d4:39:cc:f3:d4:48:
                    d3:79:98:6a:e3:eb:f2:da:cc:66:ae:91:34:df:bf:
                    97:53:61:02:c9:8a:d3:e8:67:11:27:75:68:b0:2e:
                    ac:72:d8:ac:96:6e:1e:7f:da:53:b2:e2:1d:34:a1:
                    80:89:ca:f2:d3:49:08:96:fc:42:6e:52:41:eb:f7:
                    15:7a:c1:cd:7b:12:03:6a:65:c5:3b:72:10:46:94:
                    1e:55:98:bd:68:06:75:86:2f:b0:ce:6c:1a:c3:0a:
                    99:70:6a:4d:5e:ce:d5:f1:63:f4:27:82:91:ee:6a:
                    fa:ff:8a:c3:1a:cd:91:33:e8:92:4b:4a:e2:9f:1a:
                    11:8e:02:b5:8a:ec:dd:15:d0:ac:8f:1c:a1:07:7f:
                    e0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3C:25:BE:82:74:F4:F1:62:7B:AE:0A:BE:CD:E0:9A:EE:58:37:24
            X509v3 Authority Key Identifier:
                keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:b3:28:7e:d2:b1:02:b2:59:8f:f1:09:47:fa:31:a9:ae:1a:
         10:41:8b:ae:ae:b1:e5:0b:aa:28:29:36:1f:0c:f3:27:30:c5:
         d1:a3:bd:9c:c5:cb:c9:f1:88:c1:71:f0:e5:16:06:fb:1d:fd:
         4a:cc:32:b3:e7:fc:fc:26:a9:f5:10:4f:fc:c7:d5:c5:08:02:
         5f:50:32:2f:cf:e4:21:57:f3:4b:98:15:03:af:9f:fa:22:eb:
         7f:94:cf:17:a1:13:95:2a:8d:3d:7e:90:d0:f7:ab:e3:78:76:
         8f:79:ae:c2:6a:0a:12:28:7b:8a:05:db:db:8d:d7:ca:4d:c8:
         b6:18:b8:25:03:11:9f:64:e4:e5:52:5e:fe:b0:d0:5f:3e:28:
         67:fa:7b:65:7d:6c:ea:75:32:1c:fd:fd:9e:06:46:a4:43:7e:
         9c:e6:1f:32:57:2b:4b:0d:ce:b9:b2:dc:d5:8b:04:cd:ff:86:
         34:33:72:6d:95:9e:d6:8c:36:2c:53:ac:2d:e6:8c:a9:be:e2:
         2b:fe:e8:ef:23:8b:20:56:9f:5d:05:d3:9f:a7:a2:ae:8f:bb:
         c7:46:5c:f1:c9:2f:d1:94:53:0e:81:06:85:2b:ca:01:58:d7:
         ce:7a:e0:0c:86:ba:e1:e3:a5:50:11:7b:68:64:63:40:a6:b7:
         5a:ec:b4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 09:10:53 2026 by rpki-client