
Error: rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft
File: 88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft (raw, json)
Hash identifier: u0U80kQE/KTOYhdWkDGb1qpIThO8UE36XRmedzv2Kic=
Subject key identifier: 36:B3:C2:C6:5D:4E:C1:0B:3F:09:06:C0:1D:4B:E2:19:9F:49:80:BB
Authority key identifier: 88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
Certificate issuer: /CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Certificate serial: 65B64B2275A3F85897F5B0464DE4D0D29F579384
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft
Manifest number: 0257
Signing time: Mon 21 Sep 2026 00:45:36 +0000
Manifest this update: Mon 21 Sep 2026 00:40:36 +0000
Manifest next update: Tue 22 Sep 2026 03:35:36 +0000
Files and hashes: 1: 326130373a353463303a666665653a3a2f34382d3438203d3e203534363831.roa (hash: z4Gzjl0mySZsE+yzL/7MkPUw87YsrhJ5sncZVCUXAkM=)
2: 326130373a353463303a666665653a3a2f34382d3438203d3e203539393933.roa (hash: zYMY1oRpDAf55aUvq23IaxbYyAuR2YNn8C/LIZIanhU=)
3: 326130373a353463303a666665653a3a2f34382d3438203d3e20323130363435.roa (hash: MJJCb7GPFoZpPxTgi2OnS55nlkcyZR2mLg/Fx57oupM=)
4: 326130373a353463303a666665653a3a2f34382d3438203d3e20323030363736.roa (hash: 8r3vc5/d6vdW7fHoiknDlOKvOYsWfYQBP51qSrchMK0=)
5: 326130373a353463303a666665653a3a2f34382d3438203d3e203539363738.roa (hash: IVw343EIyqlr6Q9NO8j9NuBVM9SixAXimHVlxkTAWZE=)
6: 326130373a353463303a666665653a3a2f34382d3438203d3e20323030343534.roa (hash: 2ZBaNtPaE/+smzK+8aqGHHgZK55Ap8sXf895fgT3o8M=)
7: 326130373a353463303a666665653a3a2f34382d3438203d3e203530373535.roa (hash: VP0T3vJDrcQRhu24IsBxLL2NmHzOPfupYaV6NBcwHiI=)
8: 326130373a353463303a666665653a3a2f34382d3438203d3e203630373433.roa (hash: 5BGotA0saITIe/3H61hfIHY0kn8or1h5bnZPaj2WKrQ=)
9: 326130373a353463303a666665653a3a2f34382d3438203d3e20323030363930.roa (hash: 0U1RCBcUZlWR+6opXVSRxTSSloe/CuSjjQf0aTQmDHI=)
10: 326130373a353463303a666665653a3a2f34382d3438203d3e20323133313633.roa (hash: 8xFsHIPWfBRUqsUfFyGq2pCYYG5vV8Yckx+Nhnh8T9I=)
11: 326130373a353463303a666665653a3a2f34382d3438203d3e20323131333830.roa (hash: 8R2JcWoytSLEkAmJo/iEjnbb3JAgqvMX892011pEYDM=)
12: 326130373a353463303a666665653a3a2f34382d3438203d3e203630393030.roa (hash: h5ZFRGSx/ShsDQRErKYWHA1KlO4d0yuRV2TvVnPSvoc=)
13: 326130373a353463303a666665653a3a2f34382d3438203d3e20323033363139.roa (hash: RpX+SnW9OqE3RHHAXJHLCnucZdFtkrSA9+x0t5REzZs=)
14: 326130373a353463303a666665653a3a2f34382d3438203d3e203537383730.roa (hash: 5OtlO1CvVlB1/ObOQdJeEsyrPkWRIRWc2imLQ9A4D4I=)
15: 326130373a353463303a666665653a3a2f34382d3438203d3e20323130363637.roa (hash: CRjz36xKKnM/XT2veMOfgbu3sY6X+vm0sD+ABhtx27Y=)
16: 88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl (hash: NO7fdQG8ixCxQKCaVbYJnL51X6Md6D4PvviJ8s7II8I=)
17: 326130373a353463303a666665653a3a2f34382d3438203d3e20323030393532.roa (hash: KMNhkQJHqwCwFD05qI7l6V8aD6zflu+hW4gX63/9xVk=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:b6:4b:22:75:a3:f8:58:97:f5:b0:46:4d:e4:d0:d2:9f:57:93:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Validity
Not Before: Sep 21 00:40:36 2026 GMT
Not After : Sep 22 03:35:36 2026 GMT
Subject: CN=36B3C2C65D4EC10B3F0906C01D4BE2199F4980BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:30:d0:72:ba:e3:a9:1d:55:2e:a0:ce:88:6b:
6a:34:0b:08:1c:51:57:c3:01:d9:5d:d4:cd:0d:03:
a6:b9:77:f6:da:83:50:91:15:7c:d0:2f:ea:b3:19:
1d:d6:37:7a:7e:16:95:07:4c:6b:ac:c4:63:2c:2f:
90:fd:73:b7:53:dd:dc:1e:6b:f9:b1:ee:87:02:ec:
a1:23:23:8a:e5:37:17:67:0f:7b:5e:f4:40:fd:59:
26:dc:b2:dc:12:0a:0a:30:1a:d2:70:9d:6b:38:47:
bf:3d:f5:d4:b1:6b:7c:e2:39:d6:f6:a9:26:37:85:
8e:1a:69:9a:05:d7:6e:54:12:13:66:2d:61:39:f0:
b0:d8:38:bf:7c:73:87:d2:e2:f3:de:db:6d:bb:26:
77:a4:bf:77:5a:5a:3f:28:7a:ef:23:34:67:85:7c:
0a:18:ce:31:f0:f1:bb:c1:fd:8a:1e:3a:42:1c:ab:
0d:c4:50:2c:08:10:02:3d:0c:f2:96:31:99:23:14:
37:42:24:be:95:7b:6c:88:44:62:c2:b5:b9:2b:78:
96:62:3e:5e:52:24:06:bb:86:89:a2:e6:8d:f5:c1:
e0:c4:2b:25:f0:7e:40:a1:ee:f3:11:9a:74:24:6d:
b2:46:08:79:a1:44:bf:89:72:78:18:14:0f:02:6d:
06:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B3:C2:C6:5D:4E:C1:0B:3F:09:06:C0:1D:4B:E2:19:9F:49:80:BB
X509v3 Authority Key Identifier:
keyid:88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:99:a8:c4:7f:2a:f3:e7:86:c9:ac:63:5a:ed:4b:a4:76:60:
bf:2e:4c:5b:01:74:ac:6f:cd:bd:13:a0:b2:50:4c:9f:7a:ad:
f5:ad:2d:26:63:97:51:70:d3:d9:3d:da:10:72:e7:9c:ad:a9:
4b:57:e9:29:b5:6a:6f:cc:39:3b:6e:1d:7d:9f:b8:93:64:54:
36:84:ca:ff:90:08:af:70:e8:fb:cb:e3:63:dd:ba:9a:b4:99:
8e:3b:0f:4f:49:c7:d4:b4:c0:c5:04:1b:42:a7:61:11:cc:e1:
5a:16:e8:61:7d:68:d8:53:9c:23:56:c3:c1:be:86:99:8d:46:
42:31:1d:49:77:ea:89:92:2e:66:76:33:eb:4e:34:a2:45:3c:
03:d9:cf:a4:90:9d:fd:b0:a9:62:3f:a2:1a:99:62:16:3a:9a:
43:26:5e:d3:e2:b0:c6:57:53:10:3b:29:c8:09:7a:b2:29:3e:
24:4c:8b:a6:79:e5:31:74:db:d9:f4:09:01:6b:a7:82:d7:ed:
d4:d8:0f:e9:d9:e8:9f:25:0a:c2:aa:01:df:fa:18:4f:60:11:
a4:a6:fa:16:d2:c3:9d:19:1e:c2:47:5b:95:de:4c:8d:b8:c6:
f5:46:c5:c3:e2:e6:7f:02:b5:2e:17:76:78:3a:7e:22:35:d8:
9b:d6:6e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 07:14:47 2026 by rpki-client