Error: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.cer: CRL has expired

Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.mft
File:                     642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.mft (raw, json)
Hash identifier:          BbJct9hyYx1NFip+Q6G7hyWTR7jtB+gaX+9sEk2D87w=
Subject key identifier:   C7:B3:9F:1E:4D:B2:91:33:0F:59:F2:FC:61:93:D8:1B:9F:BD:97:76
Authority key identifier: 64:2D:D3:E1:A1:22:CE:A1:0A:EF:0A:C9:BB:C8:28:5D:D0:A7:C7:B5
Certificate issuer:       /CN=642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5
Certificate serial:       66720955F41641DE931B2DD9BAD84F41395D7FCB
Authority info access:    rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.mft
Manifest number:          6D
Signing time:             Mon 14 Sep 2026 21:34:39 +0000
Manifest this update:     Mon 14 Sep 2026 21:29:39 +0000
Manifest next update:     Wed 16 Sep 2026 00:19:39 +0000
Files and hashes:         1: 642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.crl (hash: bXo5MuKn7INdYJ0eRTmk4LM2VvwJ7o27Y283eAuJm5g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:72:09:55:f4:16:41:de:93:1b:2d:d9:ba:d8:4f:41:39:5d:7f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5
        Validity
            Not Before: Sep 14 21:29:39 2026 GMT
            Not After : Sep 16 00:19:39 2026 GMT
        Subject: CN=C7B39F1E4DB291330F59F2FC6193D81B9FBD9776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:37:95:42:b1:ba:f7:29:fd:ec:01:7c:ea:f2:
                    f3:25:f0:c4:c6:28:e1:a6:1b:dd:98:ac:75:3a:e3:
                    33:d5:ab:4f:52:e2:75:51:64:b8:fb:c8:e2:67:a5:
                    dd:b4:d9:41:d2:c6:29:b8:28:60:a7:58:f4:8a:e8:
                    29:90:30:16:92:3a:f9:8a:35:e1:56:62:a1:33:97:
                    e9:a9:4c:51:fd:a8:8a:59:38:23:aa:b0:cc:91:dc:
                    63:34:59:85:18:38:14:ed:c5:8e:c7:13:0e:e1:15:
                    33:e8:83:51:46:ac:ec:85:c2:3a:73:fe:ed:f8:3d:
                    b6:a7:6d:d7:95:79:6a:49:1f:2a:23:0a:60:84:97:
                    77:c4:29:67:5b:d7:f6:8e:f3:04:8f:cd:41:cc:28:
                    ce:00:38:54:ea:6e:42:dd:89:20:95:3c:b0:bb:8b:
                    f8:a9:af:38:88:8c:4f:9f:4c:90:7c:06:97:aa:2a:
                    3d:14:04:2a:35:5a:d0:60:09:ba:7f:06:dc:e7:ed:
                    f9:42:bc:7a:23:29:45:65:50:d2:36:e6:a7:c6:95:
                    e5:c0:84:3a:15:80:38:23:9d:6c:7a:64:73:34:b4:
                    72:09:a8:c1:22:96:78:e4:22:4e:62:f3:87:6a:69:
                    67:b7:ce:54:36:83:94:57:b2:b2:67:5e:f1:b1:ff:
                    15:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B3:9F:1E:4D:B2:91:33:0F:59:F2:FC:61:93:D8:1B:9F:BD:97:76
            X509v3 Authority Key Identifier:
                keyid:64:2D:D3:E1:A1:22:CE:A1:0A:EF:0A:C9:BB:C8:28:5D:D0:A7:C7:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:14:af:0b:21:27:1b:7e:bf:54:c3:7e:60:77:68:66:2b:cc:
         26:56:64:4b:f2:1e:84:ec:7b:eb:bd:5b:de:ba:d1:ac:9d:79:
         0f:b6:70:7f:3b:5a:8b:4c:52:ed:49:87:7c:c5:52:4b:7e:53:
         68:57:68:25:49:f9:26:b9:3f:7e:81:f5:66:ff:86:bd:43:4b:
         ab:0e:b9:85:be:3a:cb:91:30:8c:30:c8:a4:bf:a1:67:5d:2d:
         a9:41:1f:b3:ae:51:9f:7a:46:b0:39:93:b5:78:0b:c5:32:65:
         46:83:18:a6:61:1e:eb:b9:a7:2f:7b:1d:5b:ad:ae:88:69:41:
         0a:f2:79:98:76:d9:b2:3a:0b:20:52:c3:fc:17:7c:70:bd:5d:
         db:71:c4:39:81:c2:07:a1:07:fc:93:15:b6:59:26:04:c5:a8:
         e4:e1:dd:64:fd:00:39:5e:ce:94:64:64:ba:38:66:97:24:84:
         5d:63:82:57:7d:51:6e:72:d2:6c:e9:2e:09:c5:8b:0e:1f:88:
         22:79:d9:a2:37:a7:d0:c7:80:cd:15:75:2c:3b:a5:20:b7:11:
         d7:84:de:61:47:fa:04:fc:c5:26:95:3f:77:b0:c4:ec:00:31:
         5a:a9:5a:8d:97:49:c9:7f:8d:8c:e1:a8:7b:0d:3d:80:e5:e0:
         b6:d4:d8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:23:13 2026 by rpki-client