Error: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer: CRL has expired

Manifest

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.mft
File:                     8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.mft (raw, json)
Hash identifier:          oT1DJCcrLIHMmavblyCFIjrDm3qgZ3KhJTjkQRlVBuI=
Subject key identifier:   DF:B5:20:D2:B5:D9:C5:11:1F:13:8B:70:45:2E:66:24:FA:04:FF:FC
Authority key identifier: B6:7F:57:84:BA:40:74:5E:DC:4F:E4:B1:F0:64:B7:99:79:38:68:3C
Certificate issuer:       /CN=8387d894-d2ba-4e33-8e84-44b9d9d6e3d5
Certificate serial:       010D0C9F4328584FD16DC4D3443075A51B8646C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.mft
Manifest number:          010D0C9F4328584842AEA7D4A339FCE1EFCDC0CA
Signing time:             Thu 12 Nov 2026 18:00:23 +0000
Manifest this update:     Thu 12 Nov 2026 18:00:23 +0000
Manifest next update:     Sat 14 Nov 2026 18:00:00 +0000
Files and hashes:         1: 0395e48a-e337-3165-b134-5c62b28818bd.roa (hash: 64wIWdhG2xBEOT4k5ZsfP4eTZAS9InA6dejG+S9qDQM=)
                          2: 4a3e3800-5ec5-3b00-932f-a0909a00190a.roa (hash: z4KO4ddqydEdSnnko6ryzDV9tCoO85OKPXVud1Kzi9Y=)
                          3: 522ee799-00c1-3c81-9a66-32d095f18a7d.roa (hash: JMfrBYfY7bmH8BWQrFbsdP6fGS+aBKrNa7oTbDBQYIo=)
                          4: 8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.crl (hash: oAnEW9wV+JzzNe5utLcGzz636UtpVjKSEB9bN3RPceY=)
                          5: bab99bc5-d663-3ba0-b545-5274edb63cfa.roa (hash: JROgAT9Bh86tWajo3z+J65gEvhSAmHJM1nFtB2i+8TA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:d1:6d:c4:d3:44:30:75:a5:1b:86:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8387d894-d2ba-4e33-8e84-44b9d9d6e3d5
        Validity
            Not Before: Nov 12 18:00:23 2026 GMT
            Not After : Nov 14 18:00:00 2026 GMT
        Subject: CN=982994b4-d3b8-456a-8b9c-377470594e9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9f:b7:88:d1:11:41:e3:fd:8b:4f:cf:fd:91:
                    60:9d:60:9a:c6:ff:cf:81:2f:7a:32:75:76:37:49:
                    3f:d8:06:26:d9:65:f3:db:8b:e5:e0:f3:e8:b7:06:
                    6a:7b:d3:b8:74:aa:ad:8c:ce:a8:5b:b8:9b:ea:9d:
                    3f:fc:7e:8b:00:aa:70:b5:b8:59:b7:86:c9:bd:a1:
                    19:87:07:c0:ec:db:fe:07:17:0f:a4:70:11:9c:36:
                    f0:03:e0:16:c2:ed:e1:e4:18:7b:3c:19:46:10:b2:
                    05:19:b8:ff:1a:5c:69:69:07:09:54:ab:3e:c4:48:
                    35:f5:f7:2c:b4:be:2e:ba:a8:2f:9e:4c:2a:a8:cf:
                    0a:68:a5:cf:be:26:77:fd:74:8b:08:b7:cc:97:7a:
                    0c:a6:9b:fb:9d:e3:35:d6:00:0c:30:7f:a1:64:9f:
                    97:0a:05:5b:fa:02:93:07:b4:df:f5:00:84:c5:1d:
                    26:50:29:d5:d4:f3:15:de:56:09:31:d8:49:ce:03:
                    09:b4:bd:f4:38:d0:f5:7e:26:62:12:79:10:10:c4:
                    b9:5b:22:07:a0:db:63:08:06:cc:94:ea:59:d0:18:
                    0f:68:20:c8:fc:a2:51:be:e8:10:84:7d:bf:08:e1:
                    0d:ac:65:34:74:02:4b:d6:00:d6:a9:c3:00:42:30:
                    87:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B5:20:D2:B5:D9:C5:11:1F:13:8B:70:45:2E:66:24:FA:04:FF:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.crl

            X509v3 Authority Key Identifier:
                keyid:B6:7F:57:84:BA:40:74:5E:DC:4F:E4:B1:F0:64:B7:99:79:38:68:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:c9:13:8d:ad:2c:ec:5b:69:0c:64:ea:34:d4:1a:8f:b1:4a:
         4c:78:32:e7:49:bc:54:6e:06:81:30:73:1f:f2:03:88:8c:f5:
         24:1c:2e:2a:b3:0f:db:56:29:54:5b:0d:05:bf:43:93:0b:23:
         32:d5:d0:31:09:20:ab:9e:3e:18:25:a5:10:ab:65:01:06:09:
         c2:35:d4:aa:9a:94:cb:b9:0c:7a:b1:5d:7e:74:11:07:5c:91:
         d2:91:ce:16:af:45:d2:1b:ca:13:dd:32:d7:eb:d3:90:5c:d6:
         8b:16:83:26:49:0c:83:dc:e5:4e:e0:41:43:da:55:37:4b:1a:
         30:aa:8b:7f:2d:94:e7:2e:a5:5f:5e:13:4e:7b:cd:b5:e5:11:
         79:81:b8:67:d2:89:43:9f:c7:46:d7:09:6f:28:a3:03:17:f2:
         d8:ee:e2:3e:c3:1b:0f:92:d1:75:c4:66:b2:62:da:6f:fb:9b:
         32:00:56:7e:93:8c:79:ad:9b:ea:05:19:b4:0b:f1:b0:72:a3:
         57:c4:cb:a7:96:c9:8b:11:78:cd:75:15:b7:f0:f5:5c:cd:34:
         02:f8:0d:e7:79:5a:d1:c9:55:29:5f:7e:fc:dc:b6:61:2a:66:
         47:8d:09:63:46:44:7d:7f:fb:00:91:f0:fa:57:a1:97:36:a5:
         b5:44:fb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:15:07 2026 by rpki-client