Error: rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft
File:                     43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft (raw, json)
Hash identifier:          MhizZzdyyA7b5y2ubCKa6QzWqvgEMxb85PYQhuiJojY=
Subject key identifier:   6E:77:22:F1:5D:2D:01:AE:8D:4B:BD:9D:C3:A6:75:8A:AB:70:82:41
Authority key identifier: 43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7
Certificate issuer:       /CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
Certificate serial:       602FB6AEB94001CC3748520139902470F7D6201F
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft
Manifest number:          026B
Signing time:             Wed 07 Oct 2026 23:36:17 +0000
Manifest this update:     Wed 07 Oct 2026 23:31:17 +0000
Manifest next update:     Fri 09 Oct 2026 02:16:17 +0000
Files and hashes:         1: 326130613a363034303a346230303a3a2f34302d3430203d3e203539363738.roa (hash: nRaKcC4NBPssuUcem1FRWt9qGZSz3sE+ddCblVRurE4=)
                          2: 326130353a646663313a313030353a3a2f34382d3438203d3e203534323138.roa (hash: ZmoOnatwXAhq6piyjplbxrAgytF+z0nQC5FYO259tVE=)
                          3: 326130353a646663313a313032383a3a2f34382d3438203d3e203534323138.roa (hash: Gz5zcQ21/RtVA+3C7EYaEpV7+GYbDoSvADgZOuLVKPk=)
                          4: 326130353a646663313a313030373a3a2f34382d3438203d3e203534323138.roa (hash: Ezk7JvekJpBllIMGiUZhD2yWgfgrMyoba3291J4yaC0=)
                          5: 326130353a646663313a313030343a3a2f34382d3438203d3e203134363138.roa (hash: INj8nHxwPeNXx6CCKg4RD0kbIAkx+NS6ZnTz4Rv1ZL4=)
                          6: 326130353a646663313a313030343a3a2f34382d3438203d3e203136353039.roa (hash: kSJzfBQsScaJvuw8WOhYZvNhcTU9pJ0mUl1g2IfLvlU=)
                          7: 326130353a646663313a313031343a3a2f34382d3438203d3e203539363738.roa (hash: 7Qg16d5UjzTvvA20LCq7XI+cnBk0NS7Bkp8lEpeT5dA=)
                          8: 326130353a646663313a313031343a3a2f34382d3438203d3e203534323138.roa (hash: xyShU3gulnzZN0a+rYIvgWlDu10NqWQLZl3hBhUp4lA=)
                          9: 326130353a646663313a313030303a3a2f34302d3430203d3e203534323138.roa (hash: gCZsDOPFWI1uQJVT//rktnc/Seupe1OJvSVGAqffjUc=)
                          10: 326130353a646663313a313030343a3a2f34382d3438203d3e203534323138.roa (hash: o+dcrNBsYXmSDefpwXK+HK7lZ1WIDPpDgbyJMDtKajo=)
                          11: 43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl (hash: s0H1eaWMUPKC18YMTzHvHhSELAdzTFc7Kqg+VMdHfJw=)
                          12: 326130353a646663313a313030303a3a2f34372d3437203d3e203534323138.roa (hash: eEgD1JY9gwdzkIT57lXbNaxLJPj1ufaM3LPeXaUyO90=)
                          13: 326130613a363034303a346234623a3a2f34382d3438203d3e20313939353435.roa (hash: q4sePGUBif26NLO9p7MthrFRp2SCnu6Mkqd00SLrYGQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 02:16:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:2f:b6:ae:b9:40:01:cc:37:48:52:01:39:90:24:70:f7:d6:20:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
        Validity
            Not Before: Oct  7 23:31:17 2026 GMT
            Not After : Oct  9 02:16:17 2026 GMT
        Subject: CN=6E7722F15D2D01AE8D4BBD9DC3A6758AAB708241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:69:a7:cc:32:54:16:02:ca:21:68:e9:e8:05:
                    45:97:27:0c:d1:47:a9:06:f2:15:ce:fb:35:be:98:
                    5b:52:c1:8e:3c:c2:2f:d2:06:37:2b:6d:65:2e:0f:
                    86:eb:43:95:69:c8:0f:91:08:76:b6:06:72:5c:85:
                    9d:1d:1c:8b:47:3c:68:33:38:1c:87:ac:c2:a4:43:
                    8b:a4:03:b2:83:a0:da:df:c2:2d:69:c2:73:95:67:
                    85:4c:dc:18:d8:b7:3f:fe:5e:40:b1:50:44:cb:93:
                    d7:02:91:7d:b2:90:97:3c:b3:07:17:7c:25:38:45:
                    a9:d3:06:98:5a:6e:7f:f3:f9:97:50:d8:ed:fb:b8:
                    c2:a1:19:c3:b1:9c:4c:b9:6b:9c:ac:22:a2:b9:ae:
                    21:95:ea:73:64:fc:93:8d:e7:99:54:3d:f9:1b:b0:
                    f8:10:2d:3e:b0:35:f2:b8:57:75:4a:2d:ec:fd:76:
                    90:a8:f5:bf:c2:11:54:18:b3:2d:33:39:fd:cf:73:
                    35:52:46:0b:0b:ec:0b:16:3a:5b:19:1a:a4:97:95:
                    83:56:7b:56:71:61:30:b6:f9:ce:ea:04:f3:35:9a:
                    9e:63:74:6b:d8:cb:8a:38:cb:26:eb:42:3e:aa:be:
                    5f:a6:89:d8:13:3f:57:c5:a5:d0:7a:d6:51:d8:79:
                    68:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:77:22:F1:5D:2D:01:AE:8D:4B:BD:9D:C3:A6:75:8A:AB:70:82:41
            X509v3 Authority Key Identifier:
                keyid:43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:10:8a:f8:b5:a0:8c:8d:7a:ad:c4:8c:68:9e:b3:6d:71:ed:
         96:96:7d:59:51:06:dc:ea:d6:9a:36:bb:ba:f0:78:aa:56:08:
         e7:04:dd:a6:ca:f7:15:0c:a4:5b:b6:89:1f:f4:9c:95:75:43:
         4c:f9:2a:b0:46:11:18:93:fc:cf:79:2e:ac:ae:f1:52:fa:e6:
         5d:19:b5:15:69:23:83:f1:a9:8c:df:a8:a2:59:52:43:04:3a:
         d0:9c:67:49:d7:6c:cb:d6:e4:72:b1:68:a0:b9:bd:1d:2d:46:
         4c:68:71:fe:eb:a7:a9:f0:6d:a5:d1:49:11:b4:3b:f0:67:c5:
         77:0a:e5:4e:e4:40:32:34:b4:e5:0d:06:4d:5f:1a:cb:28:a1:
         b5:93:2d:d5:de:a7:65:6e:ff:74:96:1d:36:52:35:5c:71:2b:
         61:52:c3:e4:93:69:b2:3b:48:30:73:74:90:8f:89:e6:2b:3a:
         30:91:e7:ed:93:7b:e9:64:00:89:6b:b7:37:1e:77:39:f6:82:
         6d:ca:32:1c:c6:29:b6:3e:d1:ac:98:27:ca:67:67:81:a4:e1:
         be:6d:3d:c3:c2:38:14:26:ec:38:dc:e3:5a:ee:25:4a:35:3a:
         ea:3c:2f:e9:1e:c3:b3:5d:e4:a6:29:52:b4:b8:32:26:bf:10:
         d8:e9:90:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:54:36 2026 by rpki-client