Error: rpki.sailx.co/repo/Sail-Internet-Inc/1/3C5CED7446CA235C3927C79AB081FAFABEF0A190.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki.sailx.co/repo/Sail-Internet-Inc/1/3C5CED7446CA235C3927C79AB081FAFABEF0A190.mft
File:                     3C5CED7446CA235C3927C79AB081FAFABEF0A190.mft (raw, json)
Hash identifier:          ikGC/pTTUkv4KX73slXhFAciWqNAV5g6/r4jaT45TZU=
Subject key identifier:   20:D9:01:77:CD:8A:C2:31:EF:DD:E3:55:2E:E5:69:27:14:46:32:2A
Authority key identifier: 3C:5C:ED:74:46:CA:23:5C:39:27:C7:9A:B0:81:FA:FA:BE:F0:A1:90
Certificate issuer:       /CN=9f54a464d1671855d95accdb4316c93159c43576ef3fc67def
Certificate serial:       1E341AEC0399E4222A9E24CFE2A2D2A65108F1B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/249e7118-0a9a-465f-a7f0-52ef1aff8bd5/9f54a464d1671855d95accdb4316c93159c43576ef3fc67def.cer
Subject info access:      rsync://rpki.sailx.co/repo/Sail-Internet-Inc/1/3C5CED7446CA235C3927C79AB081FAFABEF0A190.mft
Manifest number:          29
Signing time:             Sun 20 Sep 2026 23:25:04 +0000
Manifest this update:     Sun 20 Sep 2026 23:20:04 +0000
Manifest next update:     Tue 22 Sep 2026 02:20:04 +0000
Files and hashes:         1: 36392e31322e362e302f32342d3234203d3e203633343530.roa (hash: Tbl+ao3ummwi3eo3f1qmLpPY1l2e7fYp+7mqjXyQ01k=)
                          2: 36392e31322e342e302f32322d3232203d3e203633343530.roa (hash: vgGJlg6rUFJjmURI63CRHpKCAFanhtainzWe3n14Apk=)
                          3: 36392e31322e352e302f32342d3234203d3e203633343530.roa (hash: gh8ZDyRzCulokXYI5eq27VaOw66EmOlvl8uq8SuAI10=)
                          4: 3C5CED7446CA235C3927C79AB081FAFABEF0A190.crl (hash: YVQvyG+DtXJa5AMSZl2fPIoUwugm2fkFzEvWY3m/mEQ=)
Validation:               OK
Signature path:           rsync://rpki.sailx.co/repo/Sail-Internet-Inc/1/3C5CED7446CA235C3927C79AB081FAFABEF0A190.crl
                          rsync://rpki.sailx.co/repo/Sail-Internet-Inc/1/3C5CED7446CA235C3927C79AB081FAFABEF0A190.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/249e7118-0a9a-465f-a7f0-52ef1aff8bd5/9f54a464d1671855d95accdb4316c93159c43576ef3fc67def.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/249e7118-0a9a-465f-a7f0-52ef1aff8bd5/249e7118-0a9a-465f-a7f0-52ef1aff8bd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/249e7118-0a9a-465f-a7f0-52ef1aff8bd5/249e7118-0a9a-465f-a7f0-52ef1aff8bd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/249e7118-0a9a-465f-a7f0-52ef1aff8bd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 02:20:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:34:1a:ec:03:99:e4:22:2a:9e:24:cf:e2:a2:d2:a6:51:08:f1:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f54a464d1671855d95accdb4316c93159c43576ef3fc67def
        Validity
            Not Before: Sep 20 23:20:04 2026 GMT
            Not After : Sep 22 02:20:04 2026 GMT
        Subject: CN=20D90177CD8AC231EFDDE3552EE569271446322A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:89:6c:00:36:25:a1:88:ba:fd:8f:9e:05:56:
                    af:9d:89:08:03:f8:35:1a:78:e2:5f:5a:b7:b5:56:
                    93:d9:df:d8:80:a0:d3:67:8e:4b:47:28:ef:47:79:
                    56:f1:a5:13:9c:e1:a4:6e:b1:5b:75:52:8f:63:2f:
                    35:b6:4b:e8:e1:4f:ee:ec:c7:c8:28:e6:0a:30:04:
                    69:5b:c6:b1:d6:3e:4f:5d:37:5b:7e:a9:cc:bf:99:
                    2c:ac:e4:44:8d:a7:87:20:5e:14:54:a1:9c:96:40:
                    3c:65:3e:92:44:d1:22:2e:45:e7:88:c4:77:1e:1e:
                    f3:93:cb:25:e5:d1:3c:6b:71:22:3c:f5:d3:1e:bc:
                    a5:10:5b:81:04:54:06:c3:bc:ae:2c:10:dc:5e:66:
                    93:e6:6d:ff:30:be:5c:6f:3c:1c:71:f6:13:d6:43:
                    48:cb:9c:bf:6a:41:ad:e2:62:10:ad:ec:32:b2:c2:
                    35:fe:9f:4d:10:3a:df:91:1b:f1:19:ca:fd:51:b7:
                    f6:3e:90:72:5d:2e:6b:1e:1d:d4:67:19:01:74:56:
                    19:1d:69:92:01:a7:cc:d1:b7:61:89:aa:7f:36:5e:
                    31:0e:16:30:51:1b:df:14:f4:5b:3e:ee:7d:38:70:
                    9b:64:a7:dd:e4:6e:97:93:c6:eb:2b:15:39:03:b0:
                    c4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D9:01:77:CD:8A:C2:31:EF:DD:E3:55:2E:E5:69:27:14:46:32:2A
            X509v3 Authority Key Identifier:
                keyid:3C:5C:ED:74:46:CA:23:5C:39:27:C7:9A:B0:81:FA:FA:BE:F0:A1:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/1/3C5CED7446CA235C3927C79AB081FAFABEF0A190.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/249e7118-0a9a-465f-a7f0-52ef1aff8bd5/9f54a464d1671855d95accdb4316c93159c43576ef3fc67def.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/1/3C5CED7446CA235C3927C79AB081FAFABEF0A190.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:02:fe:a9:e8:c6:de:e4:e9:f5:54:1d:4a:70:38:b0:94:59:
         3a:3f:81:00:a1:6a:dc:0f:c1:6e:c5:67:31:58:13:9a:ae:9d:
         e4:b5:79:03:34:14:87:f7:aa:73:4a:26:df:da:b6:3b:82:b9:
         69:4a:a0:4b:db:9c:0a:7f:b2:b7:3f:f8:88:1b:d3:29:d8:e1:
         82:ea:1d:46:04:de:18:4f:7d:87:07:b6:be:13:dd:10:be:84:
         fc:00:6e:52:40:5a:b8:6b:a5:ba:d4:9e:f6:eb:45:27:b0:9e:
         92:ff:87:d3:f4:ea:9f:2a:21:28:98:3b:55:37:0c:e4:de:ce:
         da:85:5b:eb:84:1f:6b:78:3a:31:5a:00:4b:95:bf:96:44:47:
         9a:e4:b5:4f:3e:84:77:da:e5:4c:9d:bc:08:4a:45:03:d3:62:
         b2:e9:b4:09:85:68:e4:08:2a:ab:ad:72:a2:6c:19:e3:91:7a:
         df:66:81:69:06:0b:fa:5b:45:51:d1:79:e4:8f:6f:9e:f5:3c:
         f3:72:00:c0:c8:9f:94:df:f1:29:9e:35:97:15:cd:84:c4:d9:
         4f:98:5d:3b:4c:f0:25:ea:a8:e0:35:ce:fd:b5:c1:9c:c5:b9:
         c4:8b:63:d8:a9:53:ae:f6:8f:a2:c0:ec:e1:1c:e9:15:18:46:
         ea:78:41:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:36:19 2026 by rpki-client