Bad signature on Python-3.11.9.tar.xz

[chludwig-haufe]

Bug report

Bug description:

My automated builds of Python 3.11.9 fail because gpg reports a bad signature:

$ curl -sSLO "https://www.python.org/ftp/python/3.11.9/Python-3.11.9.tar.xz"
$ curl -sSLO "https://www.python.org/ftp/python/3.11.9/Python-3.11.9.tar.xz.asc"
$ sha256sum Python-3.11.9.tar.xz Python-3.11.9.tar.xz.asc
9b1e896523fc510691126c864406d9360a3d1e986acbda59cda57b5abda45b87  Python-3.11.9.tar.xz
5b78788dbf9cef803955624e6bc36bc25c42c9c60c8d9e1e2876c74d70ba0fec  Python-3.11.9.tar.xz.asc
$ gpg --import python_release_signature_key.asc
gpg: key 64E628F8D684696D: "Pablo Galindo Salgado <pablogsal@gmail.com>" not changed
gpg: Total number processed: 1
gpg:              unchanged: 1
$ gpg --batch --verify Python-3.11.9.tar.xz.asc Python-3.11.9.tar.xz
gpg: Signature made Tue Apr  2 11:09:26 2024 UTC
gpg:                using RSA key CFDCA245B1043CF2A5F97865FFE87404168BD847
gpg: BAD signature from "Pablo Galindo Salgado <pablogsal@gmail.com>" [unknown]

If I check the signature on the gzipped archive https://www.python.org/ftp/python/3.11.9/Python-3.11.9.tgz in the same way, then gpg reports a good signature.

CPython versions tested on:

3.11

Operating systems tested on:

Linux

[Eclips4]

cc @pablogsal