$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/84B73A995F7E469C0FFD988D851B866DACA9AB74.cer File: 84B73A995F7E469C0FFD988D851B866DACA9AB74.cer (raw, json) Hash identifier: sXjNPlnUMwq7ujRFG/taVjh0Bdu8cDMh/T3qujGspGY= Subject key identifier: 84:B7:3A:99:5F:7E:46:9C:0F:FD:98:8D:85:1B:86:6D:AC:A9:AB:74 Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 1CACFE341F8B65DA96436998CCE2339646093B90 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/1/84B73A995F7E469C0FFD988D851B866DACA9AB74.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 19 Sep 2023 02:09:59 +0000 Certificate not after: Tue 17 Sep 2024 02:14:59 +0000 Subordinate resources: IP: 2a07:54c1:d000::/36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Jun 2024 13:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:ac:fe:34:1f:8b:65:da:96:43:69:98:cc:e2:33:96:46:09:3b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: Sep 19 02:09:59 2023 GMT Not After : Sep 17 02:14:59 2024 GMT Subject: CN=84B73A995F7E469C0FFD988D851B866DACA9AB74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f0:f9:c0:5c:18:d4:1f:91:18:99:a2:3e:11: 4f:5a:55:c3:6c:38:7d:77:e9:7c:62:c8:54:0a:a4: 70:df:b5:7e:80:e3:a1:18:c3:d1:6e:a1:82:92:d4: d8:d5:95:1d:95:5b:41:1a:fb:a4:f1:d7:60:fe:c7: 89:d1:4c:b7:75:dc:0a:75:b7:89:cd:84:c6:f9:de: ee:9c:66:05:72:9a:c6:e3:a6:10:92:d5:10:70:4c: 40:2b:61:7d:c0:13:36:3a:5f:51:e1:a8:d2:b7:de: 1a:f0:4f:62:fe:64:d9:38:a1:bb:d3:a1:df:71:0c: 96:26:53:41:fe:61:16:b6:cc:1c:42:3d:9a:52:8f: 73:70:c9:dc:4a:88:1a:ec:53:d9:5d:5d:46:7d:df: 6c:4d:4c:fc:3e:2b:7b:dc:4d:02:5d:4f:e1:03:4a: 27:25:66:be:9f:9c:f4:7a:f4:5e:3e:21:a9:29:63: 9c:8e:f4:b7:cf:0b:6a:73:45:92:c2:cd:0b:c0:be: 58:e5:76:aa:91:09:cf:c7:2c:25:5a:9d:3f:4e:0e: 1d:da:5b:59:3f:b2:2f:a2:35:7e:eb:32:b6:ac:d7: f0:c1:a5:a7:d5:13:33:a5:e2:b8:ab:5f:32:65:b5: 39:12:e7:ec:3c:d4:01:3b:e6:17:90:97:8c:90:e9: b0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 84:B7:3A:99:5F:7E:46:9C:0F:FD:98:8D:85:1B:86:6D:AC:A9:AB:74 X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/1/84B73A995F7E469C0FFD988D851B866DACA9AB74.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:d000::/36 Signature Algorithm: sha256WithRSAEncryption 1a:36:dd:30:ac:3f:74:90:bc:64:0c:79:62:b1:9c:63:e7:7d: 1a:63:d2:b4:2b:e9:91:99:e7:02:8b:4a:ec:a1:39:b8:5c:71: 56:28:c3:05:22:81:29:a4:b5:0e:63:6d:f7:10:15:15:bf:fd: 7b:94:c3:f9:c3:c3:7b:2e:50:e3:f1:bc:af:1d:23:5c:f2:2a: 40:b1:0b:73:35:d4:44:3a:c0:8b:d7:2d:2b:d6:d4:53:02:05: 09:25:f2:04:11:97:52:b3:e1:a1:fc:bc:28:81:10:84:d2:cb: 76:b4:71:7d:03:e8:1b:5f:5e:e0:37:40:f7:e1:91:32:f2:8c: 65:fe:eb:7d:2c:74:43:26:99:0d:2a:0c:64:47:7d:0f:63:46: 35:b1:fd:57:54:05:7e:36:9a:d0:8a:1c:61:8b:2e:74:b8:1e: e9:6f:82:13:10:42:c0:24:65:4a:11:28:ba:64:6f:04:fa:55: 7d:48:90:77:0b:c2:f2:9b:6b:b6:a2:eb:af:95:b3:bb:74:8f: 5e:0a:48:15:13:e2:e9:ff:ea:61:bc:b2:92:2f:17:b1:cc:3a: a1:63:2b:a2:6a:a0:ff:88:45:06:b8:a9:48:1b:1f:b0:7d:49: 6f:dd:7b:6d:8b:da:19:f9:b0:8b:ec:c5:e0:ed:a4:1a:6e:9a: 07:97:d6:a0 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgIUHKz+NB+LZdqWQ2mYzOIzlkYJO5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yMzA5MTkwMjA5NTlaFw0yNDA5MTcwMjE0NTlaMDMxMTAvBgNV BAMTKDg0QjczQTk5NUY3RTQ2OUMwRkZEOTg4RDg1MUI4NjZEQUNBOUFCNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ8PnAXBjUH5EYmaI+EU9aVcNs OH136XxiyFQKpHDftX6A46EYw9FuoYKS1NjVlR2VW0Ea+6Tx12D+x4nRTLd13Ap1 t4nNhMb53u6cZgVymsbjphCS1RBwTEArYX3AEzY6X1HhqNK33hrwT2L+ZNk4obvT od9xDJYmU0H+YRa2zBxCPZpSj3NwydxKiBrsU9ldXUZ932xNTPw+K3vcTQJdT+ED SiclZr6fnPR69F4+IakpY5yO9LfPC2pzRZLCzQvAvljldqqRCc/HLCVanT9ODh3a W1k/si+iNX7rMras1/DBpafVEzOl4rirXzJltTkS5+w81AE75heQl4yQ6bBfAgMB AAGjggMTMIIDDzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSEtzqZX35GnA/9 mI2FG4ZtrKmrdDAfBgNVHSMEGDAWgBRB9lfPNWTyM7l39ArKXkvRDh4vjjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC80MUY2NTdDRjM1NjRGMjMzQjk3N0Y0MEFD QTVFNEJEMTBFMUUyRjhFLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi80MUY2NTdDRjM1NjRGMjMzQjk3 N0Y0MEFDQTVFNEJEMTBFMUUyRjhFLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvOTgyZjg1YmMtM2Q2OS00OGEyLWI5YzMtN2VmMGE4MzljZTE5LzEv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS85ODJmODViYy0zZDY5LTQ4YTItYjljMy03ZWYwYTgzOWNlMTkv MS84NEI3M0E5OTVGN0U0NjlDMEZGRDk4OEQ4NTFCODY2REFDQTlBQjc0Lm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQqB1TB0DANBgkqhkiG9w0BAQsFAAOCAQEAGjbd MKw/dJC8ZAx5YrGcY+d9GmPStCvpkZnnAotK7KE5uFxxVijDBSKBKaS1DmNt9xAV Fb/9e5TD+cPDey5Q4/G8rx0jXPIqQLELczXURDrAi9ctK9bUUwIFCSXyBBGXUrPh ofy8KIEQhNLLdrRxfQPoG19e4DdA9+GRMvKMZf7rfSx0QyaZDSoMZEd9D2NGNbH9 V1QFfjaa0IocYYsudLge6W+CExBCwCRlShEoumRvBPpVfUiQdwvC8ptrtqLrr5Wz u3SPXgpIFRPi6f/qYbyyki8Xscw6oWMromqg/4hFBripSBsfsH1Jb917bYvaGfmw i+zF4O2kGm6aB5fWoA== -----END CERTIFICATE-----Generated at Sat Jun 1 04:19:25 2024 by rpki-client on console-fra.rpki-client.org