Error: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer: CRL has expired

Manifest

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.mft
File:                     b35fc23a-e422-4c61-a25a-b73b0963b6f7.mft (raw, json)
Hash identifier:          FKAUoj3IvWk5XNdNqupWY5tU1BvRY2+8otUpREbtfBY=
Subject key identifier:   24:3F:E9:D2:C3:80:CD:23:7D:5A:45:26:ED:37:55:91:58:80:AC:15
Authority key identifier: 8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE
Certificate issuer:       /CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
Certificate serial:       010D0C9F4328584FCF55C338E112091D8E1D7400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.mft
Manifest number:          010D0C9F43285844998427B86FB83ED25ABB179A
Signing time:             Thu 12 Nov 2026 00:00:23 +0000
Manifest this update:     Thu 12 Nov 2026 00:00:23 +0000
Manifest next update:     Sun 15 Nov 2026 00:00:00 +0000
Files and hashes:         1: 1bc87842-5d25-3a72-85e2-db4dcde05f2f.roa (hash: ED2c9phUm0mCsYb5YMqInWXJGBMIab68L+DmdnDnlbQ=)
                          2: 22200234-8a76-3ea0-ab1f-38189fcca213.roa (hash: tpVQ3re20Pb7hSTgJsGhmRJ3NWy5bah8sQuf6huzsEs=)
                          3: 26125667-09fc-3849-ad03-b3300d2580a2.roa (hash: 7s4AJU1I8uJQOTWyXNsDCG2bLZ3SXgqOI/XXDGZN+Ik=)
                          4: 31e5d2f4-7f67-3d06-8455-9039ef65a131.roa (hash: xI/Kwt/Cd6xJE/PqqtPU8QOC2yaQIKepKA2QoW6g+8w=)
                          5: 3ca3f98a-f03f-3c03-a810-5bc050d2acb5.asa (hash: /bbfbl/4REU7HKmBaZgLIybgIuEqs+knXPXk01LCw8Q=)
                          6: 4d1f008f-67a9-308d-9f82-30e56f078c23.roa (hash: h2S8KdICVKY0dKK+IxpULJYQ9p1QGY4R/mKFjzuJJQI=)
                          7: 6acb1833-c2ce-36da-8c43-6342dad7e2e6.roa (hash: Un/bj1FAFvT80OZlCYzbd5F4lfBY+yv+268iUgjXV+I=)
                          8: 6f88faeb-048c-323b-b45c-aea95234c099.roa (hash: Yw7C3KyMxIhmvTD9kTI2eXiJlVFiAiVwNnabESmcO50=)
                          9: 8739209d-0492-3814-9eef-35e5f7d13167.roa (hash: /71HuJump1WC37zHLLCYK6F6Ei0Jl7Vob/J/eqKsl+M=)
                          10: a3c8c1ab-06f2-3c28-b813-61e398b5b9cd.roa (hash: Nut7wQxSojWmp5riyV/O0qgDVz/uQaV2Q3iBa3GJXCM=)
                          11: aebdf556-2f6a-3251-b1c2-5b9e20c527e2.roa (hash: ga8ndZ8gi5HHKhNc2n0oaOqxevVfBUP3eTER9SapqJA=)
                          12: b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl (hash: o2w+eKNgUOhgb8ZDyK5jXfstywOWdNBsdT+Kygzbr9s=)
                          13: d68b1747-8766-30c7-9761-0368f3106f64.roa (hash: Qyd3slvul6egcWGz/pE/qMSaQxu9PD56DaLt0dGBigc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:cf:55:c3:38:e1:12:09:1d:8e:1d:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
        Validity
            Not Before: Nov 12 00:00:23 2026 GMT
            Not After : Nov 15 00:00:00 2026 GMT
        Subject: CN=08d2131e-43aa-4b25-92c7-b40518c7c226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7c:d7:f7:ef:a8:a6:0f:2f:a6:96:e0:a0:26:
                    b7:f3:f5:91:e5:28:84:a6:29:4b:94:aa:42:7a:ee:
                    84:a6:c4:59:3a:a4:b0:be:81:a1:4d:51:6d:12:c3:
                    51:91:2b:3a:53:0f:c2:54:e5:74:33:d0:1e:7f:36:
                    cb:a7:1a:65:c0:c1:94:77:88:83:af:99:16:24:8e:
                    85:68:80:27:62:02:a2:bd:ce:79:7f:d9:52:65:f9:
                    39:de:de:b4:aa:85:85:72:c2:e7:1c:3d:e2:2a:a8:
                    59:43:5e:19:07:ec:21:ac:1a:b8:9a:6e:e9:ad:0e:
                    a2:98:59:c8:d5:de:16:f0:c3:53:b0:4a:36:85:15:
                    57:fa:32:6c:13:c6:17:a4:58:51:f5:0c:77:0c:42:
                    ae:fb:35:61:fc:41:14:64:91:91:e9:a1:31:67:b7:
                    94:6e:74:6e:2c:7a:70:8c:62:43:35:6a:6a:8a:b7:
                    fd:13:a8:bb:b7:1d:2f:70:b7:27:8b:a3:79:52:65:
                    96:b4:f8:82:0c:b5:59:86:88:01:78:b9:a0:7b:9b:
                    dc:82:93:61:a2:2b:2d:9e:d9:10:5c:c2:b8:5c:44:
                    50:77:7a:6c:39:ec:9f:35:ef:cd:58:59:62:ce:38:
                    4a:7f:18:a5:d8:eb:41:da:60:47:55:0c:36:e8:fc:
                    d8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:3F:E9:D2:C3:80:CD:23:7D:5A:45:26:ED:37:55:91:58:80:AC:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl

            X509v3 Authority Key Identifier:
                keyid:8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:83:ff:14:2e:bd:fa:b4:d5:5a:60:e6:e8:cd:dd:1d:4d:6f:
         14:ba:18:03:82:b4:a5:cd:09:61:e4:54:46:54:13:58:da:d6:
         b2:e9:84:cf:39:78:d0:48:38:68:83:8b:82:93:80:08:71:d2:
         38:00:91:c6:f5:05:ef:05:92:d8:e1:cd:0a:9e:bb:7d:d0:2a:
         e6:a7:2b:ff:f6:72:ad:bf:c5:f1:7a:5a:80:7c:6a:5d:5d:48:
         90:b3:86:c1:4f:5d:ed:38:d8:8d:86:39:7a:0a:78:17:fa:2e:
         6e:65:f0:c0:62:f9:d3:e5:b9:a6:94:6e:1f:ae:e3:2d:31:3c:
         18:f4:a2:98:66:95:5b:81:4a:8c:66:6f:e8:26:9d:7c:4f:64:
         a6:88:8f:fa:28:c5:9e:fc:f3:fe:f9:2c:af:38:eb:5a:d5:b0:
         84:71:4a:32:1e:57:be:22:ce:75:76:9d:38:56:3c:56:dc:5e:
         73:ed:64:91:3a:7d:94:6c:dc:fc:ff:20:a5:c6:dd:82:86:10:
         64:33:8b:45:f0:4d:3d:ca:0a:05:76:fc:d4:dd:c4:78:fa:33:
         65:1b:02:5d:bb:1a:cb:22:89:34:f0:39:d6:1b:e8:41:66:90:
         17:32:28:2e:7d:49:8c:2a:ef:98:80:7c:91:dc:9e:ed:15:f6:
         20:84:a7:e4
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE/PVcM44RIJHY4ddAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjM1ZmMyM2EtZTQyMi00YzYxLWEyNWEtYjczYjA5NjNi
NmY3MB4XDTI2MTExMjAwMDAyM1oXDTI2MTExNTAwMDAwMFowLzEtMCsGA1UEAxMk
MDhkMjEzMWUtNDNhYS00YjI1LTkyYzctYjQwNTE4YzdjMjI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnzX9++opg8vppbgoCa38/WR5SiEpilLlKpC
eu6EpsRZOqSwvoGhTVFtEsNRkSs6Uw/CVOV0M9AefzbLpxplwMGUd4iDr5kWJI6F
aIAnYgKivc55f9lSZfk53t60qoWFcsLnHD3iKqhZQ14ZB+whrBq4mm7prQ6imFnI
1d4W8MNTsEo2hRVX+jJsE8YXpFhR9Qx3DEKu+zVh/EEUZJGR6aExZ7eUbnRuLHpw
jGJDNWpqirf9E6i7tx0vcLcni6N5UmWWtPiCDLVZhogBeLmge5vcgpNhoistntkQ
XMK4XERQd3psOeyfNe/NWFlizjhKfxil2OtB2mBHVQw26PzY9QIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFCQ/6dLDgM0jfVpFJu03VZFYgKwVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMzVm
YzIzYS1lNDIyLTRjNjEtYTI1YS1iNzNiMDk2M2I2ZjcvYjM1ZmMyM2EtZTQyMi00
YzYxLWEyNWEtYjczYjA5NjNiNmY3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjM1ZmMyM2EtZTQyMi00YzYxLWEy
NWEtYjczYjA5NjNiNmY3L2IzNWZjMjNhLWU0MjItNGM2MS1hMjVhLWI3M2IwOTYz
YjZmNy5jcmwwHwYDVR0jBBgwFoAUjS9eZJw3d6zMTnUYB7+cZ2lqHf4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iMzVmYzIzYS1lNDIyLTRjNjEtYTI1YS1iNzNi
MDk2M2I2ZjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBYg/8ULr36tNVaYObozd0d
TW8UuhgDgrSlzQlh5FRGVBNY2tay6YTPOXjQSDhog4uCk4AIcdI4AJHG9QXvBZLY
4c0Knrt90Crmpyv/9nKtv8XxelqAfGpdXUiQs4bBT13tONiNhjl6CngX+i5uZfDA
YvnT5bmmlG4fruMtMTwY9KKYZpVbgUqMZm/oJp18T2SmiI/6KMWe/PP++SyvOOta
1bCEcUoyHle+Is51dp04VjxW3F5z7WSROn2UbNz8/yClxt2ChhBkM4tF8E09ygoF
dvzU3cR4+jNlGwJduxrLIok08DnWG+hBZpAXMigufUmMKu+YgHyR3J7tFfYghKfk
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:42:05 2026 by rpki-client