Error: rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
File:                     926CB33722A3493216283DC80CAE0EE9D58874F2.mft (raw, json)
Hash identifier:          mSZ0zqSZJQne+U6TT0rVm0cR2z+AWFXKeuBVXbZ8p6A=
Subject key identifier:   22:77:9F:25:BC:26:84:C8:C0:4B:25:3E:2C:0E:01:C6:DB:21:3F:3B
Authority key identifier: 92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2
Certificate issuer:       /CN=926cb33722a3493216283dc80cae0ee9d58874f2
Certificate serial:       7D063F040554798FA23B01C4EACE1E28B2C695EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
Manifest number:          072B
Signing time:             Tue 22 Sep 2026 06:34:36 +0000
Manifest this update:     Tue 22 Sep 2026 06:29:36 +0000
Manifest next update:     Wed 23 Sep 2026 09:11:36 +0000
Files and hashes:         1: 926CB33722A3493216283DC80CAE0EE9D58874F2.crl (hash: 0Rm7k7BK66Gt3+0cyYDI/VoRoSysXBPZrU7PyKPXK2o=)
                          2: 323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa (hash: uK0Qd/USy59AqNTwWN3wPV3irBo5HSGqpruSyYVoTWs=)
                          3: 323030313a3637633a313139303a626162653a3a2f36342d3634203d3e203537373832.roa (hash: /6JYnu74FnlMKLeMyxGRy9zINdjsl5pRxawy91gInjc=)
                          4: FF0595CB477C33B6B94C7E477213C842A6067D6B.cer (hash: wZK8GKavAyHxdXi2NXubIUtrqAxE1wgx7MB4jomVNVo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:06:3f:04:05:54:79:8f:a2:3b:01:c4:ea:ce:1e:28:b2:c6:95:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=926cb33722a3493216283dc80cae0ee9d58874f2
        Validity
            Not Before: Sep 22 06:29:36 2026 GMT
            Not After : Sep 23 09:11:36 2026 GMT
        Subject: CN=22779F25BC2684C8C04B253E2C0E01C6DB213F3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:51:ed:71:a1:59:7b:c8:2f:50:80:76:6f:d7:
                    8f:6f:b6:1c:5b:33:aa:09:05:89:80:07:8e:35:ad:
                    60:e9:47:1b:f5:61:e6:ac:ce:6d:9d:ad:b7:23:18:
                    00:9f:fc:e3:b0:d2:5d:d2:47:0a:5b:52:9f:e3:46:
                    9c:b7:7a:2d:9e:c1:88:aa:f8:4b:61:f3:c0:8f:85:
                    1f:b9:b4:9a:ed:70:2a:66:7e:61:33:39:3f:6f:57:
                    7e:59:b9:59:0a:f6:1f:38:b8:bf:d4:18:37:30:48:
                    b6:18:ef:e1:ff:98:b3:62:61:64:bb:f2:27:ab:da:
                    93:14:bf:cb:6b:e8:53:5f:92:39:bd:c5:0d:83:b6:
                    27:03:79:10:92:67:8e:90:9e:22:fc:41:76:9d:ee:
                    26:9a:85:90:96:8a:27:cd:f0:aa:11:e3:62:bc:7b:
                    1b:4a:6f:b3:97:c4:73:72:72:bc:96:04:dc:76:98:
                    83:3f:78:41:ce:8b:1f:f6:3e:58:81:eb:3c:96:43:
                    d9:bd:82:25:b8:db:ab:69:19:8e:12:f3:04:6a:ee:
                    85:25:df:29:ba:4a:b4:8a:9e:a8:ab:61:70:24:7f:
                    d5:54:54:8e:16:6f:7e:22:66:26:ad:d9:05:ba:c1:
                    1e:2a:4f:3c:84:47:2f:e2:a6:05:0d:c4:77:99:c3:
                    67:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:77:9F:25:BC:26:84:C8:C0:4B:25:3E:2C:0E:01:C6:DB:21:3F:3B
            X509v3 Authority Key Identifier:
                keyid:92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:fc:33:b4:15:17:96:f7:f7:c8:d3:5f:4e:61:87:c7:79:34:
         1a:d7:30:65:0a:5f:54:5a:ba:48:13:55:a2:0b:8f:b2:fb:17:
         0c:53:16:6a:97:8a:3d:20:ec:e7:b2:1e:32:b8:d5:6b:99:67:
         5b:b2:1d:e9:1d:ee:37:07:71:4e:f4:df:22:c2:16:4f:97:28:
         de:05:ee:c2:72:c7:01:b8:aa:b7:bd:0a:6e:56:37:88:17:9d:
         74:5d:61:9c:bb:59:74:ad:20:33:99:5e:6d:a4:1b:4f:1b:ff:
         05:b4:3c:a3:3d:cc:ec:d8:12:53:f9:61:27:06:ad:14:7a:8b:
         6e:97:ec:c7:0d:9d:8b:76:74:cb:41:42:36:e5:58:5c:6d:f0:
         dc:de:b3:76:e7:a4:9a:5d:e6:47:49:26:9f:fa:3c:ea:17:6b:
         7f:cb:12:ca:e5:eb:70:5c:6f:77:1b:65:b7:ce:4e:fa:79:49:
         a0:11:de:a7:5a:9e:58:e1:aa:65:99:88:4a:ed:76:32:25:73:
         aa:ed:40:3b:c7:af:b3:b3:6e:d7:1a:d8:d8:99:cf:95:54:6c:
         35:e1:e3:b1:38:56:de:10:92:f5:97:f9:6a:c6:73:f2:e0:46:
         e7:4d:ce:bb:a2:f3:3b:eb:ab:71:62:c9:f1:3a:80:c6:aa:56:
         b5:76:11:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:49:44 2026 by rpki-client