Error: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/53e8b8b4-44ef-4a6a-a05b-e7ac3ea803f8.cer: CRL has expired

Manifest

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/53e8b8b4-44ef-4a6a-a05b-e7ac3ea803f8/53e8b8b4-44ef-4a6a-a05b-e7ac3ea803f8.mft
File:                     53e8b8b4-44ef-4a6a-a05b-e7ac3ea803f8.mft (raw, json)
Hash identifier:          2faWxgksbpXItZ1QQyHUjmoQLh3SQDOIvLir+TpNLiA=
Subject key identifier:   51:D3:B9:88:A5:7A:73:FE:6D:CE:E8:C3:34:B2:D2:50:7F:49:15:01
Authority key identifier: D7:98:9D:5E:4B:38:59:C6:F3:C4:9E:76:04:8C:7D:7F:10:F9:1C:06
Certificate issuer:       /CN=53e8b8b4-44ef-4a6a-a05b-e7ac3ea803f8
Certificate serial:       010D0C9F4328584FCF914B391C948CF4AD0815C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/53e8b8b4-44ef-4a6a-a05b-e7ac3ea803f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/53e8b8b4-44ef-4a6a-a05b-e7ac3ea803f8/53e8b8b4-44ef-4a6a-a05b-e7ac3ea803f8.mft
Manifest number:          010D0C9F4328584D5E3DCF5B859378BEA7C69426
Signing time:             Thu 12 Nov 2026 02:00:24 +0000
Manifest this update:     Thu 12 Nov 2026 02:00:24 +0000
Manifest next update:     Sun 15 Nov 2026 02:00:00 +0000
Files and hashes:         1: 53e8b8b4-44ef-4a6a-a05b-e7ac3ea803f8.crl (hash: ubm9OBrJeXMvEm6N65e12J6VePyai0FoCATyNCqbnfY=)
                          2: 8a12c7c2-da96-3d53-aa45-ed61bb6dd3db.roa (hash: c//6hILmPv5BpzAUJURTtFsn9l3ZxydCe1i/O4azSDQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:cf:91:4b:39:1c:94:8c:f4:ad:08:15:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53e8b8b4-44ef-4a6a-a05b-e7ac3ea803f8
        Validity
            Not Before: Nov 12 02:00:24 2026 GMT
            Not After : Nov 15 02:00:00 2026 GMT
        Subject: CN=0010df23-bec9-4709-bff8-ede79a874399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:64:39:c0:6b:de:3e:51:be:ba:3f:56:eb:44:
                    df:6c:11:cb:4a:f9:3a:32:5f:0d:b6:46:9a:6c:b0:
                    5c:65:3a:5a:a0:55:0a:66:43:69:83:62:6c:52:2e:
                    11:35:bd:8f:a0:5e:7c:eb:a4:5c:d1:d4:66:0e:c6:
                    54:82:1b:db:ca:26:ea:d8:e8:52:0f:7d:26:36:d7:
                    d8:e0:f7:78:f6:a9:af:99:12:1c:b1:43:58:14:5a:
                    d9:76:ff:ee:a2:59:f5:ac:a5:e7:74:86:c0:9f:f2:
                    f7:aa:c2:1f:10:dc:96:93:85:79:f9:6e:c1:8c:99:
                    f0:d1:d2:9e:3d:c8:64:25:b0:41:e9:a6:ef:73:f8:
                    98:a0:89:66:2e:39:b2:81:a6:75:4f:07:40:ed:be:
                    23:f6:a5:fc:9b:9e:7d:a4:c2:4f:03:2f:3e:71:10:
                    cf:b6:dd:7c:93:6b:ec:4b:b5:a0:a6:6d:21:4a:d2:
                    93:a0:57:c0:f0:44:74:18:c9:7a:d7:55:db:5b:0e:
                    17:af:ed:82:ad:10:17:5e:88:a7:07:b2:38:0d:fb:
                    41:db:35:83:ca:c4:fe:81:6e:3f:a3:cf:65:02:25:
                    ef:7a:cf:8d:f9:2b:5c:ed:98:2b:03:2b:6f:f1:65:
                    fb:77:0c:1f:9b:99:d3:f0:e4:c1:87:0a:83:23:d1:
                    33:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D3:B9:88:A5:7A:73:FE:6D:CE:E8:C3:34:B2:D2:50:7F:49:15:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/53e8b8b4-44ef-4a6a-a05b-e7ac3ea803f8/53e8b8b4-44ef-4a6a-a05b-e7ac3ea803f8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/53e8b8b4-44ef-4a6a-a05b-e7ac3ea803f8/53e8b8b4-44ef-4a6a-a05b-e7ac3ea803f8.crl

            X509v3 Authority Key Identifier:
                keyid:D7:98:9D:5E:4B:38:59:C6:F3:C4:9E:76:04:8C:7D:7F:10:F9:1C:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/53e8b8b4-44ef-4a6a-a05b-e7ac3ea803f8.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:e4:78:0a:76:1b:bb:80:ff:d7:c9:98:09:00:27:0a:41:b9:
         e6:fb:cc:23:3a:ca:1a:c8:9d:df:93:37:40:6c:10:1b:42:31:
         c9:1e:21:8e:e4:64:12:ec:75:c8:d3:09:92:dd:24:01:86:e2:
         f5:91:0a:42:59:60:e1:be:15:8c:a7:82:d2:2d:06:d4:05:b4:
         ce:6b:51:59:e5:ab:0c:66:68:3b:99:42:ac:8c:d6:fa:0f:0a:
         b5:e9:89:37:dc:03:02:53:4f:ce:4c:f0:b1:6b:ef:e5:c1:19:
         75:d3:6e:a9:8f:7b:c6:9d:c7:06:f7:9c:b1:94:27:a5:46:fb:
         06:fa:16:c5:73:33:de:62:69:8d:62:77:e2:02:eb:a7:b0:06:
         cb:f2:f5:da:b0:72:c4:e3:97:49:44:3b:fb:8d:38:4d:0c:d1:
         f8:ae:eb:56:5b:e5:da:3e:f5:10:86:88:d1:8d:88:fa:88:24:
         a8:ff:9d:bf:45:42:e3:71:be:63:ff:70:66:56:ea:0e:a0:02:
         ac:4d:7e:2b:22:2d:0a:0e:71:7b:2a:37:a3:d0:1b:00:44:da:
         cc:ac:fe:c5:71:00:db:9b:9a:f3:07:28:ca:48:f9:7c:20:2e:
         75:67:ef:39:dd:16:97:72:6e:17:67:29:70:ed:11:41:c3:65:
         c6:fd:8e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:23:31 2026 by rpki-client