Error: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer: CRL has expired

Manifest

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
File:                     A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft (raw, json)
Hash identifier:          FH90/W/8R7Jks7wC57/9fDYN68K2s2SAAmnr06c9RLc=
Subject key identifier:   B4:1E:F2:3F:AF:5C:CB:0D:C8:85:5F:88:AC:C0:D8:03:A3:02:BD:25
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       454481A1221A5ABAA853324216BA3DBC41909EA0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
Manifest number:          080B
Signing time:             Thu 05 Nov 2026 17:54:51 +0000
Manifest this update:     Thu 05 Nov 2026 17:49:51 +0000
Manifest next update:     Fri 06 Nov 2026 21:00:51 +0000
Files and hashes:         1: AS29802.roa (hash: A36L7tb7vRA333PC7Wf+h/8nWXk2Xo4mRFTEi9JtPhA=)
                          2: A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl (hash: Hjz3TMbQRlsSUwj+epyB0AWnKRYacc/5vBAfNi0BLw8=)
                          3: AS215294.roa (hash: kV0T4U+Uu+2wGD8Kc4Jfp3Xh97zA8Clbgturvq95LV8=)
                          4: AS6079.roa (hash: HxrZ58QECkRWaC1/D/xkxdgrdlTUC4o4H1il2lUsouY=)
                          5: AS13213.roa (hash: 7iQn/oybSfMv4r1Li+F5w7cLtnkHVnXFM6byd/HSaAM=)
                          6: AS396356.roa (hash: Q2evE0oOkPdEdsSNVtHDZWQNrymOgOdVXrT61sMyIZE=)
                          7: AS9009.roa (hash: iI+gkTe4CxFLpBoTIB4pxTQSA1is9bDBzvEGA9LPwaU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:44:81:a1:22:1a:5a:ba:a8:53:32:42:16:ba:3d:bc:41:90:9e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Nov  5 17:49:51 2026 GMT
            Not After : Nov  6 21:00:51 2026 GMT
        Subject: CN=B41EF23FAF5CCB0DC8855F88ACC0D803A302BD25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:cc:33:b6:3b:2b:1e:29:e4:b1:a7:03:ef:cb:
                    44:a4:08:c7:dd:4d:3f:f1:e7:43:01:ce:dd:8b:b0:
                    19:cf:c8:f8:a2:52:b5:cc:bf:7b:e9:44:44:4a:0d:
                    76:94:ce:71:7e:64:78:71:f4:68:ed:2f:ea:6b:fe:
                    71:88:cb:fb:2b:47:09:33:d1:1b:b4:80:8a:f9:d5:
                    5e:b1:eb:60:4b:aa:18:ae:70:de:06:e1:e1:75:49:
                    16:a6:ea:af:49:dd:d5:95:b4:98:66:a8:da:7b:cb:
                    1b:94:0a:f3:e9:fb:5c:5d:fb:2a:9f:64:e2:b4:0a:
                    35:27:1f:42:d2:d3:68:c3:e2:0e:33:ca:2a:cc:13:
                    c6:fd:98:e7:0d:1a:1c:82:1e:5d:aa:c2:75:cb:e3:
                    cc:89:84:a3:3d:14:3e:d2:e5:a6:f7:1c:b2:23:79:
                    42:7a:cf:29:8b:53:3b:86:dc:da:af:b1:99:1b:26:
                    fb:c7:5f:ff:43:96:1d:5e:c1:ef:ea:8e:7a:87:a7:
                    21:b0:e2:39:e8:79:36:3b:4f:33:4c:35:58:8b:9b:
                    15:b5:2c:bc:84:49:fc:fc:e1:de:55:bd:26:46:38:
                    dc:87:7a:8f:1e:d7:28:2d:5a:0d:8c:61:82:f7:e4:
                    a0:b6:8d:ad:4e:0d:b2:72:d1:d5:2a:e5:5d:f6:16:
                    14:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:1E:F2:3F:AF:5C:CB:0D:C8:85:5F:88:AC:C0:D8:03:A3:02:BD:25
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:48:05:b0:0e:f5:5f:31:bf:02:4a:cb:6f:69:9d:d9:70:c5:
         52:27:27:b2:1a:f1:17:18:29:9d:89:41:90:0b:0f:18:13:bb:
         ab:93:9b:bf:d9:9a:f0:70:a1:08:7d:50:e3:29:2b:45:e0:a0:
         2a:f7:48:1e:e5:9e:f7:32:a6:1b:c0:5a:11:59:87:52:b3:bc:
         c6:6a:e5:59:7c:dd:e6:fa:f6:0b:de:b3:89:db:1b:6a:41:fa:
         c7:91:58:96:83:1f:e0:bf:4f:b1:25:c6:87:c4:c9:c1:31:75:
         9a:d1:76:b6:9b:e1:29:72:5d:05:b2:89:9f:33:21:f8:ac:c8:
         b0:8c:77:3c:76:0b:15:0d:e9:65:47:9d:77:61:31:2b:68:2a:
         87:5e:aa:42:de:a3:d8:96:be:59:5d:e9:a8:ac:58:2e:7d:87:
         4a:79:a4:dc:b2:e4:32:2e:93:0e:da:a7:7a:bf:a0:92:77:15:
         bf:c5:a3:34:46:a3:df:89:b1:41:49:4c:9c:97:46:85:95:17:
         d3:94:e5:78:8f:66:5d:62:98:07:61:a6:ef:51:e8:25:61:57:
         a2:d7:31:d3:8d:4a:e3:da:5b:52:db:52:a0:87:62:56:3f:65:
         69:8c:2d:8c:64:76:78:35:19:59:10:94:a5:25:68:47:62:e2:
         09:dd:93:24
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIURUSBoSIaWrqoUzJCFro9vEGQnqAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2ZkNmE1N2Y0NmM4NTcyMDhjNTVmYmYxNzBiMzY4YTM0
MGVlZDFiMDY5YjFlM2MxY2MwHhcNMjYxMTA1MTc0OTUxWhcNMjYxMTA2MjEwMDUx
WjAzMTEwLwYDVQQDEyhCNDFFRjIzRkFGNUNDQjBEQzg4NTVGODhBQ0MwRDgwM0Ez
MDJCRDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28wztjsrHink
sacD78tEpAjH3U0/8edDAc7di7AZz8j4olK1zL976URESg12lM5xfmR4cfRo7S/q
a/5xiMv7K0cJM9EbtICK+dVesetgS6oYrnDeBuHhdUkWpuqvSd3VlbSYZqjae8sb
lArz6ftcXfsqn2TitAo1Jx9C0tNow+IOM8oqzBPG/ZjnDRocgh5dqsJ1y+PMiYSj
PRQ+0uWm9xyyI3lCes8pi1M7htzar7GZGyb7x1//Q5YdXsHv6o56h6chsOI56Hk2
O08zTDVYi5sVtSy8hEn8/OHeVb0mRjjch3qPHtcoLVoNjGGC9+Sgto2tTg2yctHV
KuVd9hYUmQIDAQABo4ICvDCCArgwHQYDVR0OBBYEFLQe8j+vXMsNyIVfiKzA2AOj
Ar0lMB8GA1UdIwQYMBaAFKWWf7TBcIcaPKREnrmfLuPrevqXMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBhZTkxZGYwMTgwZGJkNDMwYzgyMmZhLzMv
QTU5NjdGQjRDMTcwODcxQTNDQTQ0NDlFQjk5RjJFRTNFQjdBRkE5Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzZlNTc5ZjViLWVjNzYtNDU3Yi05OWQ1LTQ2NmM3ZTRmZWZjYy83ZmQ2
YTU3ZjQ2Yzg1NzIwOGM1NWZiZjE3MGIzNjhhMzQwZWVkMWIwNjliMWUzYzFjYy5j
ZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODBhZTkxZGYwMTgwZGJk
NDMwYzgyMmZhLzMvQTU5NjdGQjRDMTcwODcxQTNDQTQ0NDlFQjk5RjJFRTNFQjdB
RkE5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJ
KoZIhvcNAQELBQADggEBACtIBbAO9V8xvwJKy29pndlwxVInJ7Ia8RcYKZ2JQZAL
DxgTu6uTm7/ZmvBwoQh9UOMpK0XgoCr3SB7lnvcyphvAWhFZh1KzvMZq5Vl83eb6
9gves4nbG2pB+seRWJaDH+C/T7ElxofEycExdZrRdrab4SlyXQWyiZ8zIfisyLCM
dzx2CxUN6WVHnXdhMStoKodeqkLeo9iWvlld6aisWC59h0p5pNyy5DIukw7ap3q/
oJJ3Fb/FozRGo9+JsUFJTJyXRoWVF9OU5XiPZl1imAdhpu9R6CVhV6LXMdONSuPa
W1LbUqCHYlY/ZWmMLYxkdng1GVkQlKUlaEdi4gndkyQ=
-----END CERTIFICATE-----
Generated at Sat Nov 7 13:21:38 2026 by rpki-client