Error: rpki.sailx.co/repo/Sail-Internet-Inc/1/3C5CED7446CA235C3927C79AB081FAFABEF0A190.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki.sailx.co/repo/Sail-Internet-Inc/1/3C5CED7446CA235C3927C79AB081FAFABEF0A190.mft
File:                     3C5CED7446CA235C3927C79AB081FAFABEF0A190.mft (raw, json)
Hash identifier:          PWH3fRWcEF3QRY/mjsFIjf/gt+G2rgqB8LwcUSj1ic0=
Subject key identifier:   C8:EC:6C:C0:05:06:09:7A:74:34:DE:30:12:08:32:75:50:D5:C6:29
Authority key identifier: 3C:5C:ED:74:46:CA:23:5C:39:27:C7:9A:B0:81:FA:FA:BE:F0:A1:90
Certificate issuer:       /CN=9f54a464d1671855d95accdb4316c93159c43576ef3fc67def
Certificate serial:       102600EB8CF341EB199EAE46CED74EC259D33B0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/249e7118-0a9a-465f-a7f0-52ef1aff8bd5/9f54a464d1671855d95accdb4316c93159c43576ef3fc67def.cer
Subject info access:      rsync://rpki.sailx.co/repo/Sail-Internet-Inc/1/3C5CED7446CA235C3927C79AB081FAFABEF0A190.mft
Manifest number:          34
Signing time:             Tue 29 Sep 2026 13:36:14 +0000
Manifest this update:     Tue 29 Sep 2026 13:31:14 +0000
Manifest next update:     Wed 30 Sep 2026 16:31:14 +0000
Files and hashes:         1: 36392e31322e362e302f32342d3234203d3e203633343530.roa (hash: Tbl+ao3ummwi3eo3f1qmLpPY1l2e7fYp+7mqjXyQ01k=)
                          2: 3C5CED7446CA235C3927C79AB081FAFABEF0A190.crl (hash: WyhjCmq7q/42HYD7B9rJr0225cu8Jq7G/pMrmFs3IPY=)
                          3: 36392e31322e342e302f32322d3232203d3e203633343530.roa (hash: vgGJlg6rUFJjmURI63CRHpKCAFanhtainzWe3n14Apk=)
                          4: 36392e31322e352e302f32342d3234203d3e203633343530.roa (hash: gh8ZDyRzCulokXYI5eq27VaOw66EmOlvl8uq8SuAI10=)
Validation:               OK
Signature path:           rsync://rpki.sailx.co/repo/Sail-Internet-Inc/1/3C5CED7446CA235C3927C79AB081FAFABEF0A190.crl
                          rsync://rpki.sailx.co/repo/Sail-Internet-Inc/1/3C5CED7446CA235C3927C79AB081FAFABEF0A190.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/249e7118-0a9a-465f-a7f0-52ef1aff8bd5/9f54a464d1671855d95accdb4316c93159c43576ef3fc67def.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/249e7118-0a9a-465f-a7f0-52ef1aff8bd5/249e7118-0a9a-465f-a7f0-52ef1aff8bd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/249e7118-0a9a-465f-a7f0-52ef1aff8bd5/249e7118-0a9a-465f-a7f0-52ef1aff8bd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/249e7118-0a9a-465f-a7f0-52ef1aff8bd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 16:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:26:00:eb:8c:f3:41:eb:19:9e:ae:46:ce:d7:4e:c2:59:d3:3b:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f54a464d1671855d95accdb4316c93159c43576ef3fc67def
        Validity
            Not Before: Sep 29 13:31:14 2026 GMT
            Not After : Sep 30 16:31:14 2026 GMT
        Subject: CN=C8EC6CC00506097A7434DE301208327550D5C629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:64:a0:db:ae:13:59:8b:3d:f1:9d:8f:d5:7b:
                    76:3e:04:f7:47:4f:0e:d0:59:3d:d7:3e:ed:7d:70:
                    8d:2c:4b:2b:b0:84:5b:f6:91:05:25:a6:23:53:c6:
                    13:f9:a9:af:0c:d9:d6:8e:a6:4e:80:b8:56:e7:cb:
                    d9:96:32:3a:cb:b6:46:79:7d:06:a5:2a:67:66:87:
                    5f:07:a1:de:a9:5b:65:76:3f:0d:2f:7e:6f:e4:4c:
                    76:0f:9d:b8:a1:62:16:9e:81:a2:10:80:4a:5e:f5:
                    3d:fc:8d:1a:0c:0e:3f:99:b5:d1:67:81:b1:db:e4:
                    ba:0e:2b:7b:19:2a:54:60:8e:8a:c3:21:87:5d:91:
                    e2:3a:24:71:f5:fe:e1:d4:b5:b5:a4:e0:a8:fd:49:
                    a9:df:0e:d6:a7:fe:85:82:7c:9a:9e:b2:0e:ec:c6:
                    af:ed:37:c3:24:4a:b9:27:be:ff:62:13:88:e8:6f:
                    da:65:53:28:8b:4e:8a:ce:7c:46:b5:41:eb:1d:a6:
                    0d:a4:ed:ae:6e:0a:1f:30:15:cb:3b:06:89:c4:5e:
                    91:10:76:ca:86:e5:98:90:fd:c9:9a:d1:18:bb:5d:
                    66:8a:9a:e2:55:aa:3c:5a:a7:50:a8:57:bd:d2:31:
                    61:47:70:be:64:f0:2f:50:e5:60:90:62:7a:ed:72:
                    aa:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:EC:6C:C0:05:06:09:7A:74:34:DE:30:12:08:32:75:50:D5:C6:29
            X509v3 Authority Key Identifier:
                keyid:3C:5C:ED:74:46:CA:23:5C:39:27:C7:9A:B0:81:FA:FA:BE:F0:A1:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/1/3C5CED7446CA235C3927C79AB081FAFABEF0A190.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/249e7118-0a9a-465f-a7f0-52ef1aff8bd5/9f54a464d1671855d95accdb4316c93159c43576ef3fc67def.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/1/3C5CED7446CA235C3927C79AB081FAFABEF0A190.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:b2:fd:e1:86:b6:aa:ca:b1:e8:79:8a:cb:7b:13:4a:47:9a:
         cf:7b:37:14:23:e5:ed:cd:74:a7:8d:e3:68:9c:84:ee:bc:cd:
         58:e4:72:13:2c:d3:2a:71:a6:9f:aa:6a:cc:15:4e:2d:6b:b4:
         3c:db:00:ce:71:32:b4:53:42:e8:81:ed:24:f6:b3:d3:5c:6c:
         92:03:05:8a:93:18:e0:8f:f2:39:44:42:a2:14:5b:cd:77:71:
         6e:43:e2:29:8b:b7:83:af:68:ee:26:a9:5f:14:1d:f3:e9:e5:
         a8:aa:72:40:79:71:5e:7e:fd:3a:f6:51:30:7d:c9:35:70:8e:
         d2:12:35:f8:0f:57:40:ca:26:39:39:b5:68:97:10:16:a1:2b:
         ec:43:5b:2f:26:08:fe:89:61:96:5a:f9:55:72:5a:f8:0a:0d:
         b0:20:27:1b:83:d5:97:eb:e0:b7:c8:e4:a3:77:2b:0b:78:be:
         01:e0:a9:fe:c2:a9:08:06:f3:21:75:cb:30:40:4c:e6:45:34:
         4e:3e:a3:24:6c:ea:25:2a:b6:02:65:c9:cc:79:ba:78:64:71:
         4d:0a:e2:29:0c:37:61:7a:43:d2:fb:ad:64:6e:48:e9:fa:7b:
         0f:2d:aa:ec:37:09:0a:eb:89:0e:af:fd:be:85:fd:5e:91:bc:
         34:18:27:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 04:00:34 2026 by rpki-client