$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/6D6DAC42F0926B82CEC47D7D922AB4E1570EAF17.cer File: 6D6DAC42F0926B82CEC47D7D922AB4E1570EAF17.cer (raw, json) Hash identifier: NyOgD+wvsOboP6gBskmLrWtzjYA7uFcn6mudbzL+dms= Subject key identifier: 6D:6D:AC:42:F0:92:6B:82:CE:C4:7D:7D:92:2A:B4:E1:57:0E:AF:17 Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 63F2CE5137142AB74357E7349FB7267F300641F1 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Manifest: rsync://rpki.pudu.be/repo/pudu/2/6D6DAC42F0926B82CEC47D7D922AB4E1570EAF17.mft caRepository: rsync://rpki.pudu.be/repo/pudu/2/ Notify URL: https://rpki.pudu.be/rrdp/notification.xml Certificate not before: Mon 12 Feb 2024 03:27:52 +0000 Certificate not after: Mon 10 Feb 2025 03:32:52 +0000 Subordinate resources: IP: 2a07:54c1:4100::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 May 2024 23:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:f2:ce:51:37:14:2a:b7:43:57:e7:34:9f:b7:26:7f:30:06:41:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: Feb 12 03:27:52 2024 GMT Not After : Feb 10 03:32:52 2025 GMT Subject: CN=6D6DAC42F0926B82CEC47D7D922AB4E1570EAF17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ab:6f:89:e4:bf:9d:0b:72:5d:78:f8:2d:ce: 66:c3:86:5e:0b:48:71:92:4d:2f:d2:c7:21:86:b5: 02:88:28:d7:9b:b2:d5:a4:84:e3:7c:d2:90:21:f9: 3a:38:82:dd:40:72:e0:6b:af:bf:c8:f9:ee:52:47: 66:1b:62:b9:d9:11:78:57:d2:04:ac:d8:76:67:50: c5:ed:a5:15:8b:63:bb:b0:36:7b:dd:31:d0:5c:71: 92:e5:17:d9:90:03:e1:c1:a8:91:bd:38:18:44:47: f7:ef:48:ee:2a:54:09:15:cb:ac:5b:07:d9:7b:86: be:75:b5:3d:7c:af:0b:ba:31:05:9c:b5:13:75:fb: 83:df:3a:37:57:bc:4b:76:3f:a2:86:d3:fc:b3:5d: b7:7a:0c:75:2f:21:01:28:53:7a:50:ea:06:78:9d: a6:9a:d2:9b:e2:74:b3:07:6f:cd:2b:f4:5e:80:93: 89:dc:46:60:78:0c:e5:27:d4:8c:50:ac:92:18:53: 5a:3f:39:8f:55:c8:32:b9:ee:2f:80:57:c8:fb:64: 48:61:85:0e:39:81:6a:c6:50:cd:30:be:00:56:5d: b1:ae:fe:ec:47:74:97:30:b8:32:99:f9:70:5b:8c: db:dc:b1:86:7b:1f:c9:62:ce:fd:7d:b7:3d:dd:dd: 0e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6D:6D:AC:42:F0:92:6B:82:CE:C4:7D:7D:92:2A:B4:E1:57:0E:AF:17 X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: CA Repository - URI:rsync://rpki.pudu.be/repo/pudu/2/ RPKI Manifest - URI:rsync://rpki.pudu.be/repo/pudu/2/6D6DAC42F0926B82CEC47D7D922AB4E1570EAF17.mft RPKI Notify - URI:https://rpki.pudu.be/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:4100::/40 Signature Algorithm: sha256WithRSAEncryption 24:f0:23:66:7d:bb:70:6b:ee:7a:da:c0:44:4d:7f:32:d2:2e: 59:bc:ee:c7:a9:69:54:0d:d6:66:59:a3:21:ef:15:c7:4f:d3: 2b:08:7a:8e:2a:fb:7e:98:29:e0:a7:0a:50:8c:01:77:74:b8: 75:65:9c:4a:0b:39:7c:a5:df:6c:fd:94:05:ed:7d:98:61:ae: 67:72:72:6b:85:3c:42:df:2d:63:6a:f5:78:df:a8:3c:7a:92: be:f8:72:4a:7b:12:6e:cb:c5:fe:1e:59:0f:ff:33:7a:ab:91: ae:21:fa:0f:c6:23:73:e3:ca:16:3e:57:c1:e1:67:51:e5:f9: 53:5b:fa:a3:48:a6:08:bf:33:79:bc:49:ef:9e:ed:bd:3c:90: c6:bd:00:b7:df:39:ab:c8:32:f4:20:5d:e4:6d:80:8c:f8:ef: 29:c0:df:31:63:2d:f5:fd:7a:50:88:bf:26:86:ed:5e:0b:65: 14:53:35:49:6a:db:ba:2a:58:54:6d:4a:42:32:4c:1b:a9:84: 31:3d:60:dd:c4:ed:9f:66:59:e3:a6:14:b0:64:19:4f:85:4e: 44:f9:6c:aa:ac:ef:88:1c:11:33:d9:99:3d:a6:02:35:b8:e3: 5b:fe:95:f5:20:9e:c0:2c:9a:49:86:77:6b:0a:27:b9:a7:98: f9:2a:e5:9f -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUY/LOUTcUKrdDV+c0n7cmfzAGQfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yNDAyMTIwMzI3NTJaFw0yNTAyMTAwMzMyNTJaMDMxMTAvBgNV BAMTKDZENkRBQzQyRjA5MjZCODJDRUM0N0Q3RDkyMkFCNEUxNTcwRUFGMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbq2+J5L+dC3JdePgtzmbDhl4L SHGSTS/SxyGGtQKIKNebstWkhON80pAh+To4gt1AcuBrr7/I+e5SR2YbYrnZEXhX 0gSs2HZnUMXtpRWLY7uwNnvdMdBccZLlF9mQA+HBqJG9OBhER/fvSO4qVAkVy6xb B9l7hr51tT18rwu6MQWctRN1+4PfOjdXvEt2P6KG0/yzXbd6DHUvIQEoU3pQ6gZ4 naaa0pvidLMHb80r9F6Ak4ncRmB4DOUn1IxQrJIYU1o/OY9VyDK57i+AV8j7ZEhh hQ45gWrGUM0wvgBWXbGu/uxHdJcwuDKZ+XBbjNvcsYZ7H8lizv19tz3d3Q5FAgMB AAGjggKlMIICoTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRtbaxC8JJrgs7E fX2SKrThVw6vFzAfBgNVHSMEGDAWgBRB9lfPNWTyM7l39ArKXkvRDh4vjjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC80MUY2NTdDRjM1NjRGMjMzQjk3N0Y0MEFD QTVFNEJEMTBFMUUyRjhFLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi80MUY2NTdDRjM1NjRGMjMzQjk3 N0Y0MEFDQTVFNEJEMTBFMUUyRjhFLmNlcjCB0gYIKwYBBQUHAQsEgcUwgcIwLQYI KwYBBQUHMAWGIXJzeW5jOi8vcnBraS5wdWR1LmJlL3JlcG8vcHVkdS8yLzBZBggr BgEFBQcwCoZNcnN5bmM6Ly9ycGtpLnB1ZHUuYmUvcmVwby9wdWR1LzIvNkQ2REFD NDJGMDkyNkI4MkNFQzQ3RDdEOTIyQUI0RTE1NzBFQUYxNy5tZnQwNgYIKwYBBQUH MA2GKmh0dHBzOi8vcnBraS5wdWR1LmJlL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIA AjAIAwYAKgdUwUEwDQYJKoZIhvcNAQELBQADggEBACTwI2Z9u3Br7nrawERNfzLS Llm87sepaVQN1mZZoyHvFcdP0ysIeo4q+36YKeCnClCMAXd0uHVlnEoLOXyl32z9 lAXtfZhhrmdycmuFPELfLWNq9XjfqDx6kr74ckp7Em7Lxf4eWQ//M3qrka4h+g/G I3PjyhY+V8HhZ1Hl+VNb+qNIpgi/M3m8Se+e7b08kMa9ALffOavIMvQgXeRtgIz4 7ynA3zFjLfX9elCIvyaG7V4LZRRTNUlq27oqWFRtSkIyTBuphDE9YN3E7Z9mWeOm FLBkGU+FTkT5bKqs74gcETPZmT2mAjW441v+lfUgnsAsmkmGd2sKJ7mnmPkq5Z8= -----END CERTIFICATE-----Generated at Fri May 17 08:09:14 2024 by rpki-client on console-ams.rpki-client.org