
Error: rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft
File: 43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft (raw, json)
Hash identifier: pAuXND8NR0xei+QYgoFu4McoPaxa2yepKtjWoyudGNA=
Subject key identifier: 7B:83:6C:82:B2:3C:E0:EF:0B:DE:48:54:D7:6F:DB:95:EA:D1:3F:65
Authority key identifier: 43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7
Certificate issuer: /CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
Certificate serial: 3B7BEBDA46E8CD52A3731F0D25B77BC84840A4F1
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft
Manifest number: 0258
Signing time: Wed 23 Sep 2026 14:40:40 +0000
Manifest this update: Wed 23 Sep 2026 14:35:40 +0000
Manifest next update: Thu 24 Sep 2026 18:37:40 +0000
Files and hashes: 1: 326130353a646663313a313030343a3a2f34382d3438203d3e203134363138.roa (hash: INj8nHxwPeNXx6CCKg4RD0kbIAkx+NS6ZnTz4Rv1ZL4=)
2: 326130353a646663313a313031343a3a2f34382d3438203d3e203534323138.roa (hash: xyShU3gulnzZN0a+rYIvgWlDu10NqWQLZl3hBhUp4lA=)
3: 326130353a646663313a313031343a3a2f34382d3438203d3e203539363738.roa (hash: 7Qg16d5UjzTvvA20LCq7XI+cnBk0NS7Bkp8lEpeT5dA=)
4: 326130353a646663313a313030353a3a2f34382d3438203d3e203534323138.roa (hash: ZmoOnatwXAhq6piyjplbxrAgytF+z0nQC5FYO259tVE=)
5: 326130353a646663313a313030303a3a2f34302d3430203d3e203534323138.roa (hash: gCZsDOPFWI1uQJVT//rktnc/Seupe1OJvSVGAqffjUc=)
6: 326130353a646663313a313030303a3a2f34372d3437203d3e203534323138.roa (hash: eEgD1JY9gwdzkIT57lXbNaxLJPj1ufaM3LPeXaUyO90=)
7: 43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl (hash: mqj/jYdRPnqKahVnf0ccIGHQOQLDIe0hq3utNAQ7rE4=)
8: 326130353a646663313a313030373a3a2f34382d3438203d3e203534323138.roa (hash: Ezk7JvekJpBllIMGiUZhD2yWgfgrMyoba3291J4yaC0=)
9: 326130353a646663313a313030343a3a2f34382d3438203d3e203136353039.roa (hash: kSJzfBQsScaJvuw8WOhYZvNhcTU9pJ0mUl1g2IfLvlU=)
10: 326130353a646663313a313030343a3a2f34382d3438203d3e203534323138.roa (hash: o+dcrNBsYXmSDefpwXK+HK7lZ1WIDPpDgbyJMDtKajo=)
11: 326130353a646663313a313032383a3a2f34382d3438203d3e203534323138.roa (hash: Gz5zcQ21/RtVA+3C7EYaEpV7+GYbDoSvADgZOuLVKPk=)
12: 326130613a363034303a346230303a3a2f34302d3430203d3e203539363738.roa (hash: nRaKcC4NBPssuUcem1FRWt9qGZSz3sE+ddCblVRurE4=)
13: 326130613a363034303a346234623a3a2f34382d3438203d3e20313939353435.roa (hash: q4sePGUBif26NLO9p7MthrFRp2SCnu6Mkqd00SLrYGQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl
rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 04:17:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:7b:eb:da:46:e8:cd:52:a3:73:1f:0d:25:b7:7b:c8:48:40:a4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
Validity
Not Before: Sep 23 14:35:40 2026 GMT
Not After : Sep 24 18:37:40 2026 GMT
Subject: CN=7B836C82B23CE0EF0BDE4854D76FDB95EAD13F65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:17:e5:c2:dd:47:d3:10:19:03:ab:b3:a0:b6:
81:ff:4f:65:c5:22:a8:25:5b:20:4f:b8:70:84:e0:
82:01:2c:57:36:40:7b:fc:c3:7b:60:9c:93:e3:f6:
2f:b3:27:0e:91:2e:e8:35:f3:30:90:e4:c5:09:45:
5e:e5:d8:2d:c3:fa:4e:cb:20:b3:9f:71:1c:5d:2c:
a7:3f:6d:f5:a8:9c:a4:a7:08:05:ac:c6:07:0b:31:
c3:fb:d4:06:69:f1:5c:0d:58:fa:68:fe:1b:37:64:
fe:b7:be:cc:5e:7d:bc:e7:a5:01:77:d4:e9:64:85:
11:2c:3a:17:d6:0d:73:e0:0a:9f:b3:ff:eb:ba:f8:
cd:22:d6:8b:30:a6:87:a0:65:69:a5:5d:81:1b:fb:
4d:cb:82:ba:2c:9a:bb:b0:ce:d0:af:71:ec:6e:38:
3f:47:67:6b:85:f6:cb:c5:78:c4:e4:18:0a:e8:8a:
bc:83:67:37:3f:a9:77:c4:00:28:e6:8b:7d:9b:8d:
6f:16:a0:51:8c:c2:8f:1e:c8:51:15:af:6e:27:37:
87:09:b1:c7:36:0e:be:8a:14:f2:de:c5:e7:9b:8f:
20:f2:10:d4:e4:dc:63:52:0e:17:7b:4c:27:9e:ff:
02:b4:c1:8e:58:ba:76:0a:41:25:7e:05:7f:ef:a9:
93:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:83:6C:82:B2:3C:E0:EF:0B:DE:48:54:D7:6F:DB:95:EA:D1:3F:65
X509v3 Authority Key Identifier:
keyid:43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:86:54:5b:e5:25:33:a3:87:2d:ee:e4:31:47:10:30:34:df:
89:76:33:3d:4f:32:fa:02:fd:7c:3e:7c:7b:7d:bb:5b:70:95:
d0:08:20:e7:33:28:b5:07:ee:12:ce:71:aa:ec:c8:77:44:fb:
27:53:02:d1:9a:3e:7a:f1:17:e8:0b:da:ef:7d:9b:6f:3d:bd:
89:fb:50:f2:57:eb:89:64:a6:0a:5e:52:5f:82:43:87:aa:33:
70:93:88:71:4f:10:90:a4:68:3c:74:03:b2:8b:45:de:49:d6:
ea:7c:3e:2f:3c:f3:1e:0a:c7:ce:71:74:d1:a1:b2:49:35:3b:
99:a4:9d:f2:2f:22:96:46:1d:a4:a3:c3:82:f4:ff:3c:fb:b8:
cf:83:e7:e7:36:71:c5:67:c0:2d:5d:d3:85:1c:50:c5:06:2d:
22:97:e5:4e:3f:8d:ec:31:78:a1:2e:f1:ec:1b:bb:01:d3:11:
70:c0:26:de:7c:3e:e4:97:78:f7:8b:63:70:fa:04:e4:77:3e:
55:d2:28:1c:28:54:6a:b4:6d:03:23:86:cb:32:fb:e6:a3:8b:
02:9c:dc:0f:de:5e:cf:8b:29:6b:a9:5e:8c:0a:79:c2:43:cf:
16:7d:60:1d:c9:ac:49:54:bc:5d:f4:43:16:5f:61:6b:95:ae:
1b:4b:87:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:17:28 2026 by rpki-client