Error: rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
File:                     3ADFF43986E042383993F6EB931F2081432E18D4.mft (raw, json)
Hash identifier:          Il2gOrBGBmkbneDbL2/xCq9jEsx6QESyfkySIBqjzWw=
Subject key identifier:   A5:7A:52:74:B2:75:2D:20:17:04:DC:43:DC:A0:98:7D:AB:1A:E1:4A
Authority key identifier: 3A:DF:F4:39:86:E0:42:38:39:93:F6:EB:93:1F:20:81:43:2E:18:D4
Certificate issuer:       /CN=3adff43986e042383993f6eb931f2081432e18d4
Certificate serial:       308E9B46C3160732BB3E8AD453678ACCE7804CB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
Manifest number:          0514
Signing time:             Wed 23 Sep 2026 08:35:40 +0000
Manifest this update:     Wed 23 Sep 2026 08:30:40 +0000
Manifest next update:     Thu 24 Sep 2026 09:14:40 +0000
Files and hashes:         1: 3ADFF43986E042383993F6EB931F2081432E18D4.crl (hash: +cuAspJSsulhrTrhb1tM07r0LixO/AaOuNo0iKR2naw=)
                          2: AS59678.asa (hash: 2FvpXOSTUdw5jOHpyEQZdH2x3a+CErN6zugHUFRZDBI=)
                          3: AS48606.asa (hash: EScNJdBzHg1nNNAt7ptD/C/ubDb9ZOP+thla79EX3TA=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:8e:9b:46:c3:16:07:32:bb:3e:8a:d4:53:67:8a:cc:e7:80:4c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3adff43986e042383993f6eb931f2081432e18d4
        Validity
            Not Before: Sep 23 08:30:40 2026 GMT
            Not After : Sep 24 09:14:40 2026 GMT
        Subject: CN=A57A5274B2752D201704DC43DCA0987DAB1AE14A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e5:4f:6e:ce:1f:81:52:55:d2:63:bd:b2:4f:
                    ab:38:5c:4c:b1:94:cd:46:70:2a:0c:16:fa:f6:a3:
                    d9:6b:10:aa:d2:89:59:f3:19:3f:94:d9:e0:46:58:
                    60:b5:dc:9b:df:b4:26:a1:cf:d0:cc:27:49:e3:60:
                    86:33:57:0a:79:30:8e:75:c4:74:f4:2a:7a:ae:b9:
                    2b:40:6c:dd:06:37:07:16:d9:e1:98:92:d1:d9:b8:
                    74:03:72:da:12:66:49:67:ae:bd:d6:70:49:11:6e:
                    70:19:cb:02:61:14:42:78:f4:72:ef:ba:1c:22:cb:
                    ea:5b:ec:63:3e:8b:c6:0e:70:f8:1f:7c:a2:1a:5a:
                    31:ad:f3:b9:26:62:56:21:cd:f8:26:b6:9d:ab:bd:
                    73:2d:ac:eb:21:ba:9b:00:a9:f7:c4:59:2f:4c:1a:
                    84:10:99:8c:13:fa:e7:f4:9a:2c:b6:9c:19:ac:71:
                    c9:69:64:60:2b:bb:c0:50:e3:b7:ba:db:eb:a4:21:
                    cb:90:e9:fa:a7:67:4a:ff:9b:2f:22:90:65:94:4b:
                    bb:94:0a:35:2f:f0:75:28:de:46:f7:ae:8a:04:75:
                    be:0b:b6:c4:d4:50:97:67:72:01:6a:d8:bc:ee:a4:
                    73:d9:b0:3e:f8:25:2c:b5:49:59:e6:af:69:15:51:
                    df:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7A:52:74:B2:75:2D:20:17:04:DC:43:DC:A0:98:7D:AB:1A:E1:4A
            X509v3 Authority Key Identifier:
                keyid:3A:DF:F4:39:86:E0:42:38:39:93:F6:EB:93:1F:20:81:43:2E:18:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:a9:16:f5:f2:7b:56:e2:42:c2:bb:7f:9f:1b:d3:27:68:7b:
         06:81:33:35:7d:db:47:2f:e1:e6:da:49:36:94:b4:c0:f6:ef:
         d9:9d:bd:9c:78:cc:e4:be:1a:d5:2c:be:7a:b5:cb:14:9c:23:
         b9:dc:1e:ea:53:aa:a0:0a:7d:d5:49:f6:2d:25:51:a8:dc:82:
         8d:5d:85:b9:53:5b:da:6e:27:03:06:06:d4:a5:bb:ba:7e:6f:
         b3:d9:51:92:50:1e:8f:b7:2b:59:a4:bc:ca:45:9f:f3:39:83:
         7d:b4:ae:57:a2:54:20:8c:1d:47:43:c3:9f:d5:20:19:7d:aa:
         9e:8c:66:09:e4:c5:16:20:0d:a0:30:ee:f6:d5:aa:7e:db:94:
         dc:38:5d:46:9c:db:14:af:87:4e:c0:9a:b5:be:d9:84:37:47:
         11:fa:da:29:f2:2f:2e:08:7b:d0:3d:9f:ad:92:64:20:ee:15:
         da:3a:74:d1:8c:19:2a:07:d9:a3:e0:16:f2:51:56:79:44:6f:
         74:dd:a7:aa:20:00:52:07:1c:8b:f8:70:06:26:d4:41:30:7f:
         d1:67:77:32:bb:85:56:f5:c0:e4:b0:7f:5f:97:18:c7:a0:f3:
         2b:e1:6e:35:ad:93:d2:cc:73:ea:0f:1b:b6:85:d2:f5:70:ae:
         e0:81:ee:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:12:48 2026 by rpki-client