$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer File: 99D922574ADCFE8B3741930044512F9A57EF91A4.cer (raw, json) Hash identifier: 9qTi23eBTM0zQV/Gs3up5BcHxW7l2Df36WLjSfveY0c= Subject key identifier: 99:D9:22:57:4A:DC:FE:8B:37:41:93:00:44:51:2F:9A:57:EF:91:A4 Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 701238A45EDE4A294C9CE4FA94C3E6BFBBEE253E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 29 Jun 2024 11:21:01 +0000 Certificate not after: Sat 28 Jun 2025 11:26:01 +0000 Subordinate resources: IP: 2a07:54c0::/32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Sep 2024 02:53:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:12:38:a4:5e:de:4a:29:4c:9c:e4:fa:94:c3:e6:bf:bb:ee:25:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: Jun 29 11:21:01 2024 GMT Not After : Jun 28 11:26:01 2025 GMT Subject: CN=99D922574ADCFE8B3741930044512F9A57EF91A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:10:c9:56:2d:39:2d:da:f0:ba:6a:9f:1d:28: 0a:e0:3a:e6:d9:53:bc:a1:2e:15:48:19:bc:70:85: 7c:b0:d2:ca:8a:95:9c:34:de:75:a5:7b:0c:08:17: 26:86:98:b0:83:c8:35:b7:27:6f:87:bd:aa:36:57: 80:49:01:01:42:3a:da:b6:10:47:a3:70:ae:8f:ad: 05:ec:e6:e0:63:a1:21:7e:ff:a7:e2:25:1d:52:1b: 52:70:16:13:c7:bb:13:78:1c:99:24:55:ca:2a:48: 35:d8:44:4e:07:d0:95:28:e6:49:3f:0d:6a:3b:09: 1b:8a:b4:ec:e9:2d:de:f4:a1:9f:1f:67:6f:a1:78: f4:da:bf:78:b9:f5:fc:5d:c9:2b:a7:09:fc:fb:f2: 9c:4f:7f:a4:20:67:be:e5:c9:30:a6:03:dc:c2:4b: 0c:21:ec:5f:b7:c8:06:22:9e:38:81:e5:89:a9:e2: 0f:fb:32:dd:3f:0f:b2:e8:a7:66:b0:ec:f0:61:fc: 8b:83:42:e8:3f:45:4a:ec:f6:cc:45:8b:69:1b:c7: 5f:ea:a5:cf:8d:63:78:58:bb:52:e9:ec:f8:00:8d: 35:be:c6:f5:97:5a:00:f3:a4:2c:cb:c7:22:22:c3: fc:ad:05:95:3a:f0:66:b7:ae:d8:1a:28:43:9c:af: 08:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 99:D9:22:57:4A:DC:FE:8B:37:41:93:00:44:51:2F:9A:57:EF:91:A4 X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c0::/32 Signature Algorithm: sha256WithRSAEncryption ac:af:f8:86:1b:51:dc:fd:7d:11:ff:7e:90:5c:7a:df:50:c1: 24:eb:f1:61:bc:29:9f:29:2b:ea:6d:61:1d:9c:b2:dd:7d:f9: 17:9d:37:bb:9c:3c:ae:19:c1:d2:17:15:de:da:16:80:4f:ea: 75:4a:4d:2b:77:27:07:25:7e:68:f7:52:16:b4:90:00:cc:12: 37:ed:ce:06:30:c2:a7:a1:eb:a6:68:c4:aa:f0:b3:bb:c5:3e: b2:8c:a7:b9:15:30:06:06:ef:38:87:6a:95:a9:51:d0:fe:f6: ac:e1:f1:4f:2e:1f:2a:80:20:33:f9:8e:46:a1:2d:50:73:5e: 6d:ba:92:32:02:87:c9:2f:3f:40:cd:79:25:e5:7f:f4:ee:42: 16:fd:a9:68:33:fe:bd:12:46:a3:57:8a:af:50:23:c2:5b:8d: 53:21:2e:3a:68:48:92:54:ff:f9:e1:dc:ce:27:f1:ff:87:2c: 2b:24:e5:35:70:7a:cd:c9:e8:4d:35:ab:e9:30:4b:6a:62:2e: 7a:c1:f9:04:40:7f:d1:0f:c2:42:b1:b5:2d:b9:c8:3a:df:18: ed:94:7c:41:f3:5c:ab:cf:0e:8b:4c:1e:34:3d:e5:58:e3:9e: 26:32:6b:b9:3e:24:ab:56:d5:08:10:b9:96:af:ae:67:38:b8: a8:1d:bb:48 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUcBI4pF7eSilMnOT6lMPmv7vuJT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yNDA2MjkxMTIxMDFaFw0yNTA2MjgxMTI2MDFaMDMxMTAvBgNV BAMTKDk5RDkyMjU3NEFEQ0ZFOEIzNzQxOTMwMDQ0NTEyRjlBNTdFRjkxQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0EMlWLTkt2vC6ap8dKArgOubZ U7yhLhVIGbxwhXyw0sqKlZw03nWlewwIFyaGmLCDyDW3J2+Hvao2V4BJAQFCOtq2 EEejcK6PrQXs5uBjoSF+/6fiJR1SG1JwFhPHuxN4HJkkVcoqSDXYRE4H0JUo5kk/ DWo7CRuKtOzpLd70oZ8fZ2+hePTav3i59fxdySunCfz78pxPf6QgZ77lyTCmA9zC Swwh7F+3yAYinjiB5Ymp4g/7Mt0/D7Lop2aw7PBh/IuDQug/RUrs9sxFi2kbx1/q pc+NY3hYu1Lp7PgAjTW+xvWXWgDzpCzLxyIiw/ytBZU68Ga3rtgaKEOcrwixAgMB AAGjggMSMIIDDjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSZ2SJXStz+izdB kwBEUS+aV++RpDAfBgNVHSMEGDAWgBRB9lfPNWTyM7l39ArKXkvRDh4vjjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC80MUY2NTdDRjM1NjRGMjMzQjk3N0Y0MEFD QTVFNEJEMTBFMUUyRjhFLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi80MUY2NTdDRjM1NjRGMjMzQjk3 N0Y0MEFDQTVFNEJEMTBFMUUyRjhFLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5YjNkLzIv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS82ZmY3YTk4OS1lY2RmLTQzZDYtODZlMS1mNmMzOTM1YjliM2Qv Mi85OUQ5MjI1NzRBRENGRThCMzc0MTkzMDA0NDUxMkY5QTU3RUY5MUE0Lm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAqB1TAMA0GCSqGSIb3DQEBCwUAA4IBAQCsr/iG G1Hc/X0R/36QXHrfUMEk6/FhvCmfKSvqbWEdnLLdffkXnTe7nDyuGcHSFxXe2haA T+p1Sk0rdycHJX5o91IWtJAAzBI37c4GMMKnoeumaMSq8LO7xT6yjKe5FTAGBu84 h2qVqVHQ/vas4fFPLh8qgCAz+Y5GoS1Qc15tupIyAofJLz9AzXkl5X/07kIW/alo M/69EkajV4qvUCPCW41TIS46aEiSVP/54dzOJ/H/hywrJOU1cHrNyehNNavpMEtq Yi56wfkEQH/RD8JCsbUtucg63xjtlHxB81yrzw6LTB40PeVY454mMmu5PiSrVtUI ELmWr65nOLioHbtI -----END CERTIFICATE-----Generated at Sat Sep 7 08:29:56 2024 by rpki-client on console-ams.rpki-client.org