Error: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer: CRL has expired

Manifest

$ rpki-client -vvvf akane.maru.co.jp/repo/as213471/0/D7ADE8D9C42FD67AC359D50CE5D9BE0A8AB0BD3F.mft
File:                     D7ADE8D9C42FD67AC359D50CE5D9BE0A8AB0BD3F.mft (raw, json)
Hash identifier:          5kRrIaLOj4GBYJXgBzzeIdDMxTjFNzgVBCzdZWKE+Zo=
Subject key identifier:   D7:55:3D:D9:04:3F:F9:06:7B:C4:1A:4D:4B:B9:E7:2F:0F:DC:59:F6
Authority key identifier: D7:AD:E8:D9:C4:2F:D6:7A:C3:59:D5:0C:E5:D9:BE:0A:8A:B0:BD:3F
Certificate issuer:       /CN=D7ADE8D9C42FD67AC359D50CE5D9BE0A8AB0BD3F
Certificate serial:       710897B2E664D902D5B3ECF11B6CD2C3A691FF7F
Authority info access:    rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/D7ADE8D9C42FD67AC359D50CE5D9BE0A8AB0BD3F.cer
Subject info access:      rsync://akane.maru.co.jp/repo/as213471/0/D7ADE8D9C42FD67AC359D50CE5D9BE0A8AB0BD3F.mft
Manifest number:          0F
Signing time:             Thu 05 Nov 2026 06:44:19 +0000
Manifest this update:     Thu 05 Nov 2026 06:39:19 +0000
Manifest next update:     Fri 06 Nov 2026 07:28:19 +0000
Files and hashes:         1: 326130623a346530373a64373a3a2f34382d3438203d3e20323133343731.roa (hash: C104CKdkEvcFyBn4SaDjtEh6XepNnX4UBtrRyRuonw0=)
                          2: 326130623a346530373a64343a3a2f34382d3438203d3e2030.roa (hash: fw7qzort7HNPrcNVU2/hGAkCeQnIIkApEie4FxNAQH4=)
                          3: 326130623a346530373a64363a3a2f34382d3438203d3e20323133343731.roa (hash: AKEINg1cr0NEYmlY5ZKluedb/ldBfNu0NxcysAbA/n4=)
                          4: 326130623a346530373a64353a3a2f34382d3438203d3e2030.roa (hash: rQCDkVB2HysD4lbzo41OypO2mAKxu4NuhTkHCF2PD4Q=)
                          5: D7ADE8D9C42FD67AC359D50CE5D9BE0A8AB0BD3F.crl (hash: McXo3BkZMp/gj/rycDJVuNSPlt07EPyUCjRuU3MJkiM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:08:97:b2:e6:64:d9:02:d5:b3:ec:f1:1b:6c:d2:c3:a6:91:ff:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7ADE8D9C42FD67AC359D50CE5D9BE0A8AB0BD3F
        Validity
            Not Before: Nov  5 06:39:19 2026 GMT
            Not After : Nov  6 07:28:19 2026 GMT
        Subject: CN=D7553DD9043FF9067BC41A4D4BB9E72F0FDC59F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:19:16:92:db:90:87:cd:0d:74:6b:fd:36:58:
                    dc:e2:af:2c:89:e2:0f:57:d2:e5:e3:33:e6:06:2a:
                    dc:9d:20:f0:9f:09:4b:9a:29:90:94:73:c1:74:c8:
                    63:52:d5:be:26:58:0d:7b:79:8e:33:df:d6:a3:5e:
                    e6:bb:cd:b1:91:af:32:94:1e:33:c1:42:1c:1c:af:
                    57:90:88:04:6d:f0:76:d5:7e:3d:6f:b4:cb:57:30:
                    5a:1a:a1:bf:99:c0:5f:e3:c7:b2:6a:f9:2a:12:5c:
                    2d:59:2b:12:ed:7b:c9:49:7c:6c:61:2c:8d:b1:9f:
                    4c:1c:be:62:e7:fa:4c:0e:b5:ee:fd:30:d2:52:51:
                    7d:1b:c1:5e:fd:99:bd:86:42:11:ea:2e:90:13:69:
                    24:d1:b7:ab:d1:df:1b:c9:66:2d:fc:2a:94:e1:aa:
                    3e:4e:48:54:ab:01:26:0a:7f:ac:cf:03:fd:c8:4c:
                    7a:fa:03:48:2a:2a:9c:0e:a1:55:3a:6d:3e:96:4f:
                    96:40:d5:8a:6c:97:d9:91:7a:58:9f:06:39:37:36:
                    a2:88:aa:5c:d6:a8:c0:f1:82:e4:e6:06:a7:87:c6:
                    ec:a5:95:63:2a:ea:2f:8e:7d:79:00:4c:d3:f2:6c:
                    c0:75:c1:87:7f:03:ad:b0:73:82:7b:ab:f3:4d:68:
                    41:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:55:3D:D9:04:3F:F9:06:7B:C4:1A:4D:4B:B9:E7:2F:0F:DC:59:F6
            X509v3 Authority Key Identifier:
                keyid:D7:AD:E8:D9:C4:2F:D6:7A:C3:59:D5:0C:E5:D9:BE:0A:8A:B0:BD:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://akane.maru.co.jp/repo/as213471/0/D7ADE8D9C42FD67AC359D50CE5D9BE0A8AB0BD3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/D7ADE8D9C42FD67AC359D50CE5D9BE0A8AB0BD3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://akane.maru.co.jp/repo/as213471/0/D7ADE8D9C42FD67AC359D50CE5D9BE0A8AB0BD3F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:c3:a4:56:ba:d9:37:1b:17:83:2f:10:bb:76:9d:c9:8a:c5:
         3d:2e:a6:70:60:65:27:d9:5d:9c:5f:aa:f4:bc:cd:05:b1:3e:
         a4:5f:86:ff:d4:00:ad:e3:b9:4d:92:28:36:78:4c:a2:ca:b0:
         4f:37:38:a5:ac:e0:2d:96:23:b1:98:59:9d:77:ba:78:46:cc:
         09:09:54:23:12:b8:10:ca:65:e2:70:ee:7d:a5:7e:79:78:b9:
         c7:3f:ad:1c:89:ad:b2:a0:87:0f:e5:fa:16:35:ce:1d:48:ee:
         f4:c9:58:7c:b1:b2:ee:77:d1:f9:27:ac:79:fe:b6:82:ba:ef:
         aa:e6:7e:5b:e5:b6:8f:e0:01:0c:76:67:47:10:ca:06:03:1a:
         6a:03:34:ef:07:a9:d7:a0:71:88:dd:dd:ab:29:37:1c:5c:3e:
         25:c3:cf:ce:d1:c1:3f:3a:80:c8:f8:71:17:69:4e:62:c9:75:
         7c:37:58:26:16:35:c8:34:73:ee:63:26:f3:58:75:fd:2f:06:
         d0:be:db:f8:83:0f:f3:7d:a8:5b:76:89:57:2b:b3:03:d7:b9:
         31:0e:8d:52:72:3f:8e:a3:d9:63:96:57:90:e0:0a:de:4b:c6:
         12:54:ed:c5:0a:7b:f2:ac:11:a1:5e:9b:40:05:8b:cc:60:0b:
         b3:3b:80:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 09:45:19 2026 by rpki-client