Error: rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft
File:                     88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft (raw, json)
Hash identifier:          2img3U3VAkWwEqM4atrbkoQu/wk050s6mrXmOP/I/O4=
Subject key identifier:   2B:FC:93:26:CD:09:89:CB:06:DE:64:FD:B1:57:64:88:26:EC:96:D4
Authority key identifier: 88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
Certificate issuer:       /CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Certificate serial:       04062384FE1F2F3E330C02D9C2D47C0B7949AE24
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft
Manifest number:          025B
Signing time:             Wed 23 Sep 2026 23:00:40 +0000
Manifest this update:     Wed 23 Sep 2026 22:55:40 +0000
Manifest next update:     Thu 24 Sep 2026 23:12:40 +0000
Files and hashes:         1: 326130373a353463303a666665653a3a2f34382d3438203d3e20323030343534.roa (hash: 2ZBaNtPaE/+smzK+8aqGHHgZK55Ap8sXf895fgT3o8M=)
                          2: 326130373a353463303a666665653a3a2f34382d3438203d3e203534363831.roa (hash: z4Gzjl0mySZsE+yzL/7MkPUw87YsrhJ5sncZVCUXAkM=)
                          3: 326130373a353463303a666665653a3a2f34382d3438203d3e20323030363736.roa (hash: 8r3vc5/d6vdW7fHoiknDlOKvOYsWfYQBP51qSrchMK0=)
                          4: 326130373a353463303a666665653a3a2f34382d3438203d3e203539363738.roa (hash: IVw343EIyqlr6Q9NO8j9NuBVM9SixAXimHVlxkTAWZE=)
                          5: 326130373a353463303a666665653a3a2f34382d3438203d3e20323030393532.roa (hash: KMNhkQJHqwCwFD05qI7l6V8aD6zflu+hW4gX63/9xVk=)
                          6: 326130373a353463303a666665653a3a2f34382d3438203d3e203537383730.roa (hash: 5OtlO1CvVlB1/ObOQdJeEsyrPkWRIRWc2imLQ9A4D4I=)
                          7: 326130373a353463303a666665653a3a2f34382d3438203d3e203539393933.roa (hash: zYMY1oRpDAf55aUvq23IaxbYyAuR2YNn8C/LIZIanhU=)
                          8: 326130373a353463303a666665653a3a2f34382d3438203d3e20323133313633.roa (hash: 8xFsHIPWfBRUqsUfFyGq2pCYYG5vV8Yckx+Nhnh8T9I=)
                          9: 326130373a353463303a666665653a3a2f34382d3438203d3e20323131333830.roa (hash: 8R2JcWoytSLEkAmJo/iEjnbb3JAgqvMX892011pEYDM=)
                          10: 326130373a353463303a666665653a3a2f34382d3438203d3e203630373433.roa (hash: 5BGotA0saITIe/3H61hfIHY0kn8or1h5bnZPaj2WKrQ=)
                          11: 326130373a353463303a666665653a3a2f34382d3438203d3e20323030363930.roa (hash: 0U1RCBcUZlWR+6opXVSRxTSSloe/CuSjjQf0aTQmDHI=)
                          12: 326130373a353463303a666665653a3a2f34382d3438203d3e203630393030.roa (hash: h5ZFRGSx/ShsDQRErKYWHA1KlO4d0yuRV2TvVnPSvoc=)
                          13: 326130373a353463303a666665653a3a2f34382d3438203d3e20323130363435.roa (hash: MJJCb7GPFoZpPxTgi2OnS55nlkcyZR2mLg/Fx57oupM=)
                          14: 326130373a353463303a666665653a3a2f34382d3438203d3e20323033363139.roa (hash: RpX+SnW9OqE3RHHAXJHLCnucZdFtkrSA9+x0t5REzZs=)
                          15: 88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl (hash: ri0rxGIOxOVWd5VGl+8fpR75OeuzsB5o0KtcNAVy+f0=)
                          16: 326130373a353463303a666665653a3a2f34382d3438203d3e20323130363637.roa (hash: CRjz36xKKnM/XT2veMOfgbu3sY6X+vm0sD+ABhtx27Y=)
                          17: 326130373a353463303a666665653a3a2f34382d3438203d3e203530373535.roa (hash: VP0T3vJDrcQRhu24IsBxLL2NmHzOPfupYaV6NBcwHiI=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 12:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:06:23:84:fe:1f:2f:3e:33:0c:02:d9:c2:d4:7c:0b:79:49:ae:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
        Validity
            Not Before: Sep 23 22:55:40 2026 GMT
            Not After : Sep 24 23:12:40 2026 GMT
        Subject: CN=2BFC9326CD0989CB06DE64FDB157648826EC96D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2c:04:59:dd:7c:fc:6d:a5:b2:01:70:6f:c0:
                    1c:52:69:bb:49:51:b7:80:99:19:e0:e6:5c:74:87:
                    77:79:f5:80:ab:7a:00:7d:6b:e5:a5:20:29:40:9a:
                    c7:37:43:58:f6:62:53:8d:8a:2a:fa:32:bc:fa:6c:
                    58:a3:b4:b4:b7:80:ba:7d:bc:50:e7:1b:ff:29:bf:
                    0a:83:64:da:b8:85:3f:ed:d2:6c:a2:76:56:4a:8f:
                    01:da:2b:01:a6:39:62:6b:15:7a:56:f8:d9:45:98:
                    6d:31:ee:71:a3:6a:40:96:7f:20:c9:d6:45:44:a6:
                    f7:4c:96:6c:3b:79:c9:26:d1:64:71:37:fd:92:ba:
                    d4:e2:f0:e3:70:09:93:f3:12:3c:71:65:38:4c:84:
                    7b:60:a4:b6:e4:33:fd:2c:78:0a:a6:32:f9:2d:6b:
                    3f:eb:2e:e4:68:b4:67:55:74:51:72:65:c2:65:65:
                    5c:1b:2e:dd:6f:b9:fc:9c:1b:1b:d8:cb:f5:62:28:
                    a2:83:23:ca:7a:f5:06:af:b9:51:82:4c:7a:40:1e:
                    a7:c4:2c:b9:36:aa:11:cd:0a:20:c2:f4:5e:0e:3a:
                    be:eb:b5:18:8d:c8:76:a0:a4:9e:02:f7:e2:f6:4a:
                    df:5b:18:00:2c:0a:9d:af:f2:7d:0e:12:ff:54:61:
                    3d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:FC:93:26:CD:09:89:CB:06:DE:64:FD:B1:57:64:88:26:EC:96:D4
            X509v3 Authority Key Identifier:
                keyid:88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:09:a0:b2:72:db:b7:55:27:b5:1d:b0:85:75:7c:b5:c4:d8:
         b9:30:2c:63:90:a7:5d:73:c2:df:c0:6d:ed:c4:08:c7:ef:58:
         38:81:1e:3e:3b:af:c1:ee:ff:a1:f2:f0:2f:14:56:eb:c3:45:
         17:46:8b:cb:0d:59:00:cd:23:c5:a9:ab:bd:0e:04:6f:ad:7f:
         13:15:54:03:3e:a8:f2:9d:87:42:4d:55:df:9a:3c:cc:c7:b0:
         b5:4e:bf:05:85:0e:27:71:10:cf:da:0a:36:05:62:37:9b:6d:
         46:15:86:5c:7a:41:53:84:bd:49:7f:5c:3d:c3:98:e5:1a:aa:
         a6:77:3a:a6:cf:12:93:7f:90:47:3f:17:cd:e7:92:48:e3:6d:
         f7:68:ed:be:30:d8:11:15:63:63:b4:a1:2d:5a:99:c6:70:7b:
         91:85:6f:55:40:1f:ba:0c:4c:39:b5:9b:30:80:c0:84:c1:70:
         90:29:d5:4a:2d:af:d1:6a:39:0e:09:c2:c3:e8:e9:42:c4:07:
         cd:50:4a:bd:ff:0a:05:85:df:e8:a1:31:89:3a:c5:03:1e:36:
         1f:1b:ac:24:b6:57:0a:dd:c4:07:d8:4f:07:25:7a:46:1d:b4:
         b6:4f:f3:d0:22:5d:ac:86:02:7c:a1:b0:1b:6c:65:11:63:7c:
         31:e1:78:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:42:15 2026 by rpki-client