Error: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc/8d36ad9b3d8d460800b3dd50c620b1d43ecf8c7dd01aeb0cc2.cer: CRL has expired

Manifest

$ rpki-client -vvvf rsync.rpki.as205941.org/repo/AS205941/4/C2A29F890B4BA854C140D7922D924183BE3DEB07.mft
File:                     C2A29F890B4BA854C140D7922D924183BE3DEB07.mft (raw, json)
Hash identifier:          T3BO/b+jrYReVi5CIfaj4lV15RYcSlvtfCs86uWG7HM=
Subject key identifier:   C7:F4:57:C7:2A:A6:E8:35:4A:0C:1F:82:28:1D:78:15:31:79:1E:BD
Authority key identifier: C2:A2:9F:89:0B:4B:A8:54:C1:40:D7:92:2D:92:41:83:BE:3D:EB:07
Certificate issuer:       /CN=C2A29F890B4BA854C140D7922D924183BE3DEB07
Certificate serial:       167D69021A95A380FFED7AFB600D192D8D2BBAD9
Authority info access:    rsync://rpki-rps.arin.net/repository/bf4c9c8b5d0040b9808d0a991d2c3dc7/1/C2A29F890B4BA854C140D7922D924183BE3DEB07.cer
Subject info access:      rsync://rsync.rpki.as205941.org/repo/AS205941/4/C2A29F890B4BA854C140D7922D924183BE3DEB07.mft
Manifest number:          12
Signing time:             Thu 12 Nov 2026 10:43:38 +0000
Manifest this update:     Thu 12 Nov 2026 10:38:38 +0000
Manifest next update:     Fri 13 Nov 2026 10:46:38 +0000
Files and hashes:         1: C2A29F890B4BA854C140D7922D924183BE3DEB07.crl (hash: WdU3X2Cysi1fp3tMD7kSav3lLYXZIhFwNB5xZzO6OTE=)
                          2: 3134322e3234392e3137342e302f32342d3332203d3e20343033323031.roa (hash: N0W6BAT/VgFooMw4XzS9omGa8LDIO9Muh4vnFFXfKn8=)
                          3: 323630323a666138363a6666653a3a2f34382d313238203d3e20323035393431.roa (hash: 77cjmT0kFnrPv1om67ICzooZWNI//SnGWe6KjtcSR7I=)
                          4: 3134322e3234392e3137342e302f32342d3332203d3e20323035393431.roa (hash: r8lrGqZ82uUKhs2w3H0wycghpluM80qxDDVqMvW8OEk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:7d:69:02:1a:95:a3:80:ff:ed:7a:fb:60:0d:19:2d:8d:2b:ba:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2A29F890B4BA854C140D7922D924183BE3DEB07
        Validity
            Not Before: Nov 12 10:38:38 2026 GMT
            Not After : Nov 13 10:46:38 2026 GMT
        Subject: CN=C7F457C72AA6E8354A0C1F82281D781531791EBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:23:df:45:67:f7:b5:27:5a:57:ef:41:62:ca:
                    ed:4a:ec:f5:07:c0:e4:d5:f9:43:c3:bb:4c:00:bb:
                    c3:a5:20:da:be:b5:8c:f1:7c:d9:dc:22:16:8e:72:
                    d6:1a:a6:1a:94:a7:ec:01:d2:87:95:ab:79:77:74:
                    45:fe:0e:ff:eb:71:71:d6:64:40:55:31:bc:97:59:
                    e8:7b:9d:fe:cc:21:8f:28:d6:1d:ad:5d:9e:89:09:
                    e1:1b:72:17:3c:76:e5:1b:df:87:bc:af:bd:c1:6d:
                    b6:7e:1e:c3:31:60:9e:98:eb:c6:db:d7:22:8a:4a:
                    ad:77:05:bc:48:ff:08:e3:87:2e:45:62:e1:8b:6e:
                    f0:46:b3:eb:ef:b6:e8:c3:c0:0a:84:07:f0:11:ab:
                    a2:d6:0e:fc:a0:56:f5:b7:01:ad:08:2c:4d:a2:9a:
                    db:ff:c3:2b:52:70:f6:e8:35:67:b4:c8:a9:98:98:
                    81:14:e6:1a:e9:0c:85:3f:d7:73:af:d8:08:09:98:
                    5b:a8:94:e3:11:3e:dc:4f:e6:8f:5d:72:b9:38:f8:
                    1b:81:8d:a0:d8:07:06:a7:ee:92:50:84:6e:1d:75:
                    16:9c:1f:96:a5:81:59:d6:59:85:10:d1:94:cf:ff:
                    f2:25:35:ed:5d:6e:3e:82:0a:1f:24:8a:97:89:5b:
                    32:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F4:57:C7:2A:A6:E8:35:4A:0C:1F:82:28:1D:78:15:31:79:1E:BD
            X509v3 Authority Key Identifier:
                keyid:C2:A2:9F:89:0B:4B:A8:54:C1:40:D7:92:2D:92:41:83:BE:3D:EB:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rpki.as205941.org/repo/AS205941/4/C2A29F890B4BA854C140D7922D924183BE3DEB07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/bf4c9c8b5d0040b9808d0a991d2c3dc7/1/C2A29F890B4BA854C140D7922D924183BE3DEB07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rpki.as205941.org/repo/AS205941/4/C2A29F890B4BA854C140D7922D924183BE3DEB07.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:b3:6b:1f:7a:8d:b9:7e:bd:18:a8:cc:1a:6e:fa:67:f0:33:
         9e:e0:db:a8:4d:58:03:75:d7:ff:e7:a8:31:f0:79:2a:f5:7e:
         59:56:55:61:36:bd:c6:f0:b6:90:d9:66:4c:67:d2:f0:4a:e0:
         c3:04:7b:69:a4:ec:21:34:6a:35:0a:fd:c8:ea:48:8d:fd:1d:
         74:c0:25:4d:10:39:e0:3d:bf:8c:47:34:52:35:82:18:49:2d:
         c6:26:09:c4:63:14:a4:9f:fe:5f:5e:82:4f:9e:7d:72:39:46:
         d9:9e:da:7c:46:26:e8:be:b5:f5:31:37:16:a3:fa:24:c0:36:
         73:29:ff:25:b0:94:60:70:d6:60:27:f2:19:4a:de:32:43:15:
         d5:2d:28:7e:d3:42:63:c1:0c:b4:fc:8d:6e:90:00:e7:86:2f:
         f1:8c:3a:c9:ce:6b:dd:10:f7:d2:0f:3f:85:3b:12:d7:81:60:
         d2:75:a6:26:3a:40:a8:e5:2f:45:3e:01:28:46:14:39:35:00:
         5d:4a:23:2a:09:31:97:72:02:db:de:78:71:b2:97:62:30:88:
         fa:6a:5a:dd:b3:ab:bc:f5:2c:ba:d2:47:d3:3b:36:96:e2:ff:
         81:6c:2f:1b:93:2f:cc:54:68:09:60:ce:35:8c:67:03:b8:9b:
         66:43:a3:9d
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgIUFn1pAhqVo4D/7Xr7YA0ZLY0rutkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzJBMjlGODkwQjRCQTg1NEMxNDBENzkyMkQ5MjQxODNC
RTNERUIwNzAeFw0yNjExMTIxMDM4MzhaFw0yNjExMTMxMDQ2MzhaMDMxMTAvBgNV
BAMTKEM3RjQ1N0M3MkFBNkU4MzU0QTBDMUY4MjI4MUQ3ODE1MzE3OTFFQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtI99FZ/e1J1pX70Fiyu1K7PUH
wOTV+UPDu0wAu8OlINq+tYzxfNncIhaOctYaphqUp+wB0oeVq3l3dEX+Dv/rcXHW
ZEBVMbyXWeh7nf7MIY8o1h2tXZ6JCeEbchc8duUb34e8r73BbbZ+HsMxYJ6Y68bb
1yKKSq13BbxI/wjjhy5FYuGLbvBGs+vvtujDwAqEB/ARq6LWDvygVvW3Aa0ILE2i
mtv/wytScPboNWe0yKmYmIEU5hrpDIU/13Ov2AgJmFuolOMRPtxP5o9dcrk4+BuB
jaDYBwan7pJQhG4ddRacH5algVnWWYUQ0ZTP//IlNe1dbj6CCh8kipeJWzKFAgMB
AAGjggInMIICIzAdBgNVHQ4EFgQUx/RXxyqm6DVKDB+CKB14FTF5Hr0wHwYDVR0j
BBgwFoAUwqKfiQtLqFTBQNeSLZJBg7496wcwDgYDVR0PAQH/BAQDAgeAMG0GA1Ud
HwRmMGQwYqBgoF6GXHJzeW5jOi8vcnN5bmMucnBraS5hczIwNTk0MS5vcmcvcmVw
by9BUzIwNTk0MS80L0MyQTI5Rjg5MEI0QkE4NTRDMTQwRDc5MjJEOTI0MTgzQkUz
REVCMDcuY3JsMIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5j
Oi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9iZjRjOWM4YjVkMDA0MGI5
ODA4ZDBhOTkxZDJjM2RjNy8xL0MyQTI5Rjg5MEI0QkE4NTRDMTQwRDc5MjJEOTI0
MTgzQkUzREVCMDcuY2VyMHgGCCsGAQUFBwELBGwwajBoBggrBgEFBQcwC4ZccnN5
bmM6Ly9yc3luYy5ycGtpLmFzMjA1OTQxLm9yZy9yZXBvL0FTMjA1OTQxLzQvQzJB
MjlGODkwQjRCQTg1NEMxNDBENzkyMkQ5MjQxODNCRTNERUIwNy5tZnQwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEB
AB+zax96jbl+vRiozBpu+mfwM57g26hNWAN11//nqDHweSr1fllWVWE2vcbwtpDZ
Zkxn0vBK4MMEe2mk7CE0ajUK/cjqSI39HXTAJU0QOeA9v4xHNFI1ghhJLcYmCcRj
FKSf/l9egk+efXI5Rtme2nxGJui+tfUxNxaj+iTANnMp/yWwlGBw1mAn8hlK3jJD
FdUtKH7TQmPBDLT8jW6QAOeGL/GMOsnOa90Q99IPP4U7EteBYNJ1piY6QKjlL0U+
AShGFDk1AF1KIyoJMZdyAtveeHGyl2IwiPpqWt2zq7z1LLrSR9M7Npbi/4FsLxuT
L8xUaAlgzjWMZwO4m2ZDo50=
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:12:45 2026 by rpki-client