Error: rpki.multacom.com/repo/MCOMCA/4/38260C2D165C381E80B7B7F912E400BB0BD4C56B.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki.multacom.com/repo/MCOMCA/4/38260C2D165C381E80B7B7F912E400BB0BD4C56B.mft
File:                     38260C2D165C381E80B7B7F912E400BB0BD4C56B.mft (raw, json)
Hash identifier:          voQn5Mw1yKt85G0ISs2WngN5JHn3ZT5LhiS2hAGpNYY=
Subject key identifier:   A6:54:80:5F:43:C3:91:12:55:EA:F3:D7:66:75:2F:AB:82:70:84:66
Authority key identifier: 38:26:0C:2D:16:5C:38:1E:80:B7:B7:F9:12:E4:00:BB:0B:D4:C5:6B
Certificate issuer:       /CN=9472d9ad7826d60a862d99a35d9e7a985c4b82798a791f3087
Certificate serial:       4C547B99EAA8821C2F250B2B1E580269021CF5A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4f378bb-02a9-45e4-973f-ed01a76dc2e6/9472d9ad7826d60a862d99a35d9e7a985c4b82798a791f3087.cer
Subject info access:      rsync://rpki.multacom.com/repo/MCOMCA/4/38260C2D165C381E80B7B7F912E400BB0BD4C56B.mft
Manifest number:          0BBA
Signing time:             Sun 27 Sep 2026 06:27:28 +0000
Manifest this update:     Sun 27 Sep 2026 06:22:28 +0000
Manifest next update:     Mon 28 Sep 2026 09:02:28 +0000
Files and hashes:         1: 38260C2D165C381E80B7B7F912E400BB0BD4C56B.crl (hash: 0HuqnmrqMlIeDXKZow/KfPiHxGWMPn9oAHExhCCpuy0=)
Validation:               OK
Signature path:           rsync://rpki.multacom.com/repo/MCOMCA/4/38260C2D165C381E80B7B7F912E400BB0BD4C56B.crl
                          rsync://rpki.multacom.com/repo/MCOMCA/4/38260C2D165C381E80B7B7F912E400BB0BD4C56B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4f378bb-02a9-45e4-973f-ed01a76dc2e6/9472d9ad7826d60a862d99a35d9e7a985c4b82798a791f3087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4f378bb-02a9-45e4-973f-ed01a76dc2e6/e4f378bb-02a9-45e4-973f-ed01a76dc2e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4f378bb-02a9-45e4-973f-ed01a76dc2e6/e4f378bb-02a9-45e4-973f-ed01a76dc2e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4f378bb-02a9-45e4-973f-ed01a76dc2e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 09:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:54:7b:99:ea:a8:82:1c:2f:25:0b:2b:1e:58:02:69:02:1c:f5:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9472d9ad7826d60a862d99a35d9e7a985c4b82798a791f3087
        Validity
            Not Before: Sep 27 06:22:28 2026 GMT
            Not After : Sep 28 09:02:28 2026 GMT
        Subject: CN=A654805F43C3911255EAF3D766752FAB82708466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0f:90:09:79:7a:aa:62:ed:14:c2:a7:a0:de:
                    a6:b9:5a:4b:17:35:01:f7:74:11:a5:96:70:dc:d0:
                    cc:2f:34:e7:9c:9c:d8:08:77:c0:4c:e0:13:18:21:
                    14:59:3f:8b:fe:6a:11:4e:3b:ba:e0:18:76:b2:ca:
                    b4:bd:bf:c5:23:19:ef:b3:dc:19:78:d5:a0:e4:06:
                    fa:ac:ef:82:da:9d:5c:49:be:1b:09:06:68:cd:9e:
                    25:fc:04:ae:69:c2:da:54:d4:90:84:a3:8c:f5:f4:
                    38:77:11:54:b6:1d:58:7c:4f:75:1e:e7:5b:39:e3:
                    3e:6c:60:0a:fa:50:85:b9:e2:6e:12:9a:70:23:b3:
                    8d:e3:90:ae:4e:9a:b4:97:36:58:57:cc:1e:d9:5d:
                    ed:52:c0:b8:4b:e2:c3:89:be:94:51:4b:71:75:8d:
                    18:21:2b:ac:7c:b6:4b:93:a4:5c:65:e2:b1:87:33:
                    04:4e:af:ba:94:28:12:93:49:f3:bd:02:8b:4a:af:
                    a6:45:11:a4:4a:f1:2d:75:63:1c:5d:55:b5:3d:db:
                    ce:ac:00:8e:05:9c:8b:6b:1a:73:b7:26:d6:fa:f4:
                    d9:0a:37:13:5c:a8:cf:7d:af:25:b7:d1:cd:12:51:
                    08:0d:6f:c1:b8:0b:1a:22:9f:a6:bb:e3:d3:31:b5:
                    ac:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:54:80:5F:43:C3:91:12:55:EA:F3:D7:66:75:2F:AB:82:70:84:66
            X509v3 Authority Key Identifier:
                keyid:38:26:0C:2D:16:5C:38:1E:80:B7:B7:F9:12:E4:00:BB:0B:D4:C5:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.multacom.com/repo/MCOMCA/4/38260C2D165C381E80B7B7F912E400BB0BD4C56B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4f378bb-02a9-45e4-973f-ed01a76dc2e6/9472d9ad7826d60a862d99a35d9e7a985c4b82798a791f3087.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.multacom.com/repo/MCOMCA/4/38260C2D165C381E80B7B7F912E400BB0BD4C56B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:a6:c2:88:e4:da:63:45:5b:7c:ae:6d:ac:37:6e:7d:3f:04:
         fc:6e:a0:4c:6b:40:1a:f6:28:2e:66:68:1c:38:27:df:2f:97:
         32:39:03:e6:46:0c:41:d6:5a:7c:d9:63:24:71:14:0a:6a:0c:
         7a:9c:94:51:7b:ca:2c:ca:a3:03:ef:f4:9a:28:d0:df:af:7e:
         4e:ed:38:25:78:0f:30:f1:14:b4:48:2b:f9:d4:09:3c:74:3e:
         e9:81:5e:7e:1a:7b:5c:14:fe:4f:7c:be:85:ce:54:0a:08:bd:
         18:7e:33:22:28:f8:ae:8e:ab:e9:c0:e6:dd:c3:d3:39:62:bc:
         68:34:86:87:4f:04:43:43:f5:56:f3:1c:54:62:39:6e:8b:f2:
         f5:f9:f4:1f:2b:46:4e:b4:af:7b:0c:0d:ae:fd:19:0e:fa:e8:
         ee:38:72:48:87:2e:ff:41:0f:cd:52:24:9c:7e:79:f1:5f:8a:
         e9:27:e5:ef:cd:1c:ae:c5:02:36:95:c0:43:4b:f8:e8:a1:8e:
         ff:82:71:34:e4:b1:1d:cb:e5:65:e9:6b:bd:a6:ba:73:90:d3:
         b5:12:3f:d6:99:9e:69:ca:ed:17:ff:b1:d3:21:a4:c1:0d:48:
         bc:10:41:3b:e7:65:0f:61:7d:ef:84:5a:64:98:79:3e:4a:6a:
         b1:f6:8f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:10:16 2026 by rpki-client