$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer File: 412292C0E24D8885B4760BC708F9E477870D9C70.cer (raw, json) Hash identifier: 4sSfNUac7HOLW+rfQ1pVbFm9fLlDTIFEPgoBio/09L4= Subject key identifier: 41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70 Authority key identifier: A6:EA:AC:49:01:42:9B:15:74:0A:BF:1D:9A:54:BF:B1:81:C6:F5:38 Certificate issuer: /CN=A6EAAC4901429B15740ABF1D9A54BFB181C6F538 Certificate serial: 7145F665312DF8A519794C7D46452FCA9C94C336 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A6EAAC4901429B15740ABF1D9A54BFB181C6F538.cer Manifest: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/412292C0E24D8885B4760BC708F9E477870D9C70.mft caRepository: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Fri 23 Feb 2024 21:11:22 +0000 Certificate not after: Fri 21 Feb 2025 21:16:22 +0000 Subordinate resources: IP: 2a07:54c0:ffee::/48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/A6EAAC4901429B15740ABF1D9A54BFB181C6F538.crl rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/A6EAAC4901429B15740ABF1D9A54BFB181C6F538.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A6EAAC4901429B15740ABF1D9A54BFB181C6F538.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 May 2024 08:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:45:f6:65:31:2d:f8:a5:19:79:4c:7d:46:45:2f:ca:9c:94:c3:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6EAAC4901429B15740ABF1D9A54BFB181C6F538 Validity Not Before: Feb 23 21:11:22 2024 GMT Not After : Feb 21 21:16:22 2025 GMT Subject: CN=412292C0E24D8885B4760BC708F9E477870D9C70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c6:e3:73:f7:af:1f:3f:d8:58:90:25:da:f1: a4:29:af:46:5f:f9:1e:6f:bb:18:58:d2:98:73:ca: d6:37:45:b2:7e:d6:f5:5a:84:a5:34:72:50:a8:b5: a7:c7:ce:69:fb:1e:06:b6:71:0c:b6:9a:32:a7:a8: 3e:4b:3c:ca:1f:5e:4f:7f:83:0c:d8:52:59:37:b9: f6:5e:dc:c2:c3:94:a6:6e:e9:06:18:24:5c:0c:99: 62:8c:5b:af:46:b6:ab:f0:53:ad:54:29:37:37:50: e1:05:2f:05:0b:d8:a0:10:92:7e:25:b3:0d:19:ee: 82:7d:5a:e3:64:f8:98:c0:57:18:77:6f:a0:13:df: 86:33:05:06:e3:b6:fd:e1:bb:f3:d5:ee:fc:f0:e3: 1c:2e:ed:37:0e:dd:65:ec:a8:d2:1d:86:0c:29:cd: fb:5c:b6:f3:90:d7:57:ca:9d:5d:38:06:78:ae:9e: ec:a4:fb:07:cb:0d:fa:87:55:67:f1:21:c1:75:63: 58:a0:ae:6d:27:76:2b:ac:83:1c:ee:29:64:f4:e3: c3:e8:fc:54:78:e7:6c:1e:01:e0:f5:25:87:58:b4: 09:93:e5:f1:83:5f:d0:48:b6:1b:df:5a:5a:08:26: ea:14:c5:38:ab:f7:be:a7:79:39:ee:69:9a:38:b5: 40:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70 X509v3 Authority Key Identifier: keyid:A6:EA:AC:49:01:42:9B:15:74:0A:BF:1D:9A:54:BF:B1:81:C6:F5:38 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/A6EAAC4901429B15740ABF1D9A54BFB181C6F538.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A6EAAC4901429B15740ABF1D9A54BFB181C6F538.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/412292C0E24D8885B4760BC708F9E477870D9C70.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c0:ffee::/48 Signature Algorithm: sha256WithRSAEncryption 28:8f:cd:fd:05:6f:77:68:21:3a:8a:42:ec:0b:9e:6f:4e:0e: 07:9a:49:8b:e4:b1:28:66:46:45:05:e1:b9:04:f6:0f:c4:e9: 3a:ca:28:aa:2f:79:a2:e1:00:8e:99:0c:9a:4e:60:8c:81:86: 8d:31:9e:c3:c3:62:9d:0e:67:d7:2d:a3:4e:f3:63:ec:4a:cd: da:1a:e3:85:3d:e5:17:da:ff:04:f1:a0:d9:e5:9c:c4:e2:6e: b2:5d:09:ce:a8:16:b1:c8:6f:f2:cf:fa:8b:86:3e:ee:ca:30: 16:00:2b:cb:2b:34:79:93:41:9b:b3:20:50:51:05:3a:b7:c7: 12:ec:69:8c:66:24:01:db:24:ca:b0:2f:37:08:5c:55:74:2c: a3:04:a9:52:e2:8a:90:ea:6d:8d:12:e3:8e:48:98:9b:df:f6: f2:f8:21:b1:52:b6:97:f2:f9:5e:28:ec:f2:ed:3c:70:5f:38: 98:4a:aa:a6:77:17:74:27:14:94:8b:35:6c:b8:f7:cd:3f:2d: 11:7b:5d:8c:57:70:66:79:a6:d2:48:2e:fc:42:35:8e:5c:db: d7:c4:6a:89:6e:da:7b:3c:c2:aa:9e:72:71:e7:7b:da:55:45: db:59:76:be:fd:50:c6:20:30:7e:20:96:a4:21:90:94:c7:6b: e5:bc:32:db -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUcUX2ZTEt+KUZeUx9RkUvypyUwzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTZFQUFDNDkwMTQyOUIxNTc0MEFCRjFEOUE1NEJGQjE4 MUM2RjUzODAeFw0yNDAyMjMyMTExMjJaFw0yNTAyMjEyMTE2MjJaMDMxMTAvBgNV BAMTKDQxMjI5MkMwRTI0RDg4ODVCNDc2MEJDNzA4RjlFNDc3ODcwRDlDNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyxuNz968fP9hYkCXa8aQpr0Zf +R5vuxhY0phzytY3RbJ+1vVahKU0clCotafHzmn7Hga2cQy2mjKnqD5LPMofXk9/ gwzYUlk3ufZe3MLDlKZu6QYYJFwMmWKMW69GtqvwU61UKTc3UOEFLwUL2KAQkn4l sw0Z7oJ9WuNk+JjAVxh3b6AT34YzBQbjtv3hu/PV7vzw4xwu7TcO3WXsqNIdhgwp zftctvOQ11fKnV04Bniunuyk+wfLDfqHVWfxIcF1Y1igrm0ndiusgxzuKWT048Po /FR452weAeD1JYdYtAmT5fGDX9BIthvfWloIJuoUxTir976neTnuaZo4tUBRAgMB AAGjggMDMIIC/zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRBIpLA4k2IhbR2 C8cI+eR3hw2ccDAfBgNVHSMEGDAWgBSm6qxJAUKbFXQKvx2aVL+xgcb1ODAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80MzQ0ZmYyOS03MTg0LTQ3 YmQtOTE3Mi0zNjA5ZjU5Y2U2ZGYvMi9BNkVBQUM0OTAxNDI5QjE1NzQwQUJGMUQ5 QTU0QkZCMTgxQzZGNTM4LmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2FhMDA0YmExLTQxOWItNGRiNS1iYmQzLTVjY2E2MzNjYWUzZi8wL0E2RUFBQzQ5 MDE0MjlCMTU3NDBBQkYxRDlBNTRCRkIxODFDNkY1MzguY2VyMIIBIwYIKwYBBQUH AQsEggEVMIIBETBUBggrBgEFBQcwBYZIcnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MGM5ZmVlYzEyNDllLzQv MIGABggrBgEFBQcwCoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0 b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MGM5ZmVlYzEyNDllLzQvNDEyMjkyQzBF MjREODg4NUI0NzYwQkM3MDhGOUU0Nzc4NzBEOUM3MC5tZnQwNgYIKwYBBQUHMA2G Kmh0dHBzOi8vcnJkcC1ycHMuYXJpbi5uZXQvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAKgdUwP/uMA0GCSqGSIb3DQEBCwUAA4IBAQAoj839BW93aCE6ikLsC55vTg4H mkmL5LEoZkZFBeG5BPYPxOk6yiiqL3mi4QCOmQyaTmCMgYaNMZ7Dw2KdDmfXLaNO 82PsSs3aGuOFPeUX2v8E8aDZ5ZzE4m6yXQnOqBaxyG/yz/qLhj7uyjAWACvLKzR5 k0GbsyBQUQU6t8cS7GmMZiQB2yTKsC83CFxVdCyjBKlS4oqQ6m2NEuOOSJib3/by +CGxUraX8vleKOzy7TxwXziYSqqmdxd0JxSUizVsuPfNPy0Re12MV3BmeabSSC78 QjWOXNvXxGqJbtp7PMKqnnJx53vaVUXbWXa+/VDGIDB+IJakIZCUx2vlvDLb -----END CERTIFICATE-----Generated at Thu May 16 15:35:56 2024 by rpki-client on console-fra.rpki-client.org