$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer File: 99D922574ADCFE8B3741930044512F9A57EF91A4.cer (raw, json) Hash identifier: 4F/ZzZgWwmuyXwlZfwJQki1ZCyTapPGDzNsQdvOv2Ns= Subject key identifier: 99:D9:22:57:4A:DC:FE:8B:37:41:93:00:44:51:2F:9A:57:EF:91:A4 Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 6A7A6F60500AE81E5B4C9170883CC6E8AB631B1D Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 31 May 2025 17:15:50 +0000 Certificate not after: Sat 30 May 2026 17:20:50 +0000 Subordinate resources: IP: 2a07:54c0::/32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Jun 2025 01:07:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:7a:6f:60:50:0a:e8:1e:5b:4c:91:70:88:3c:c6:e8:ab:63:1b:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: May 31 17:15:50 2025 GMT Not After : May 30 17:20:50 2026 GMT Subject: CN=99D922574ADCFE8B3741930044512F9A57EF91A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:10:c9:56:2d:39:2d:da:f0:ba:6a:9f:1d:28: 0a:e0:3a:e6:d9:53:bc:a1:2e:15:48:19:bc:70:85: 7c:b0:d2:ca:8a:95:9c:34:de:75:a5:7b:0c:08:17: 26:86:98:b0:83:c8:35:b7:27:6f:87:bd:aa:36:57: 80:49:01:01:42:3a:da:b6:10:47:a3:70:ae:8f:ad: 05:ec:e6:e0:63:a1:21:7e:ff:a7:e2:25:1d:52:1b: 52:70:16:13:c7:bb:13:78:1c:99:24:55:ca:2a:48: 35:d8:44:4e:07:d0:95:28:e6:49:3f:0d:6a:3b:09: 1b:8a:b4:ec:e9:2d:de:f4:a1:9f:1f:67:6f:a1:78: f4:da:bf:78:b9:f5:fc:5d:c9:2b:a7:09:fc:fb:f2: 9c:4f:7f:a4:20:67:be:e5:c9:30:a6:03:dc:c2:4b: 0c:21:ec:5f:b7:c8:06:22:9e:38:81:e5:89:a9:e2: 0f:fb:32:dd:3f:0f:b2:e8:a7:66:b0:ec:f0:61:fc: 8b:83:42:e8:3f:45:4a:ec:f6:cc:45:8b:69:1b:c7: 5f:ea:a5:cf:8d:63:78:58:bb:52:e9:ec:f8:00:8d: 35:be:c6:f5:97:5a:00:f3:a4:2c:cb:c7:22:22:c3: fc:ad:05:95:3a:f0:66:b7:ae:d8:1a:28:43:9c:af: 08:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 99:D9:22:57:4A:DC:FE:8B:37:41:93:00:44:51:2F:9A:57:EF:91:A4 X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c0::/32 Signature Algorithm: sha256WithRSAEncryption 8a:bf:c5:98:ff:8a:cd:f7:25:89:58:66:13:5f:a2:42:af:d4: c3:e1:84:4a:05:f4:a5:c3:f6:ea:b3:26:a1:cd:d3:d6:17:92: be:c6:f1:3b:15:1e:42:39:49:0e:c1:02:4e:ea:9e:9e:94:1c: 4d:c9:bb:f2:80:78:e4:2c:f5:0e:47:53:ad:29:34:ab:ac:ed: 45:b0:53:6f:8c:75:05:27:47:a4:96:f1:64:80:5e:f2:b2:29: bb:fc:03:ab:6c:b0:75:4c:e4:fe:32:fc:79:d4:aa:ed:c6:75: 8b:c5:df:00:d8:6d:82:aa:53:9c:b1:ab:36:cd:8a:67:f2:9a: a9:2b:db:46:c3:f2:ae:62:3f:a5:ce:72:69:f9:36:9f:37:5b: 70:97:ff:b4:7c:16:bf:b2:fd:3e:b9:4b:9b:0f:37:67:a3:e5: bc:69:7c:5e:e8:43:45:65:a9:46:45:c0:c6:49:5d:1e:c9:75: 08:74:b3:4d:53:90:17:87:7f:46:7e:f9:30:cb:93:fb:26:84: fc:68:a0:96:a4:72:ba:c7:59:79:d1:22:4c:ce:47:71:ab:9f: 6d:41:7d:44:e7:51:43:c9:fa:fa:c8:e4:e4:65:ec:5e:e0:25: 80:a7:95:7c:f6:4e:1d:ac:9a:33:ec:77:64:e5:c0:b3:6c:b6: 6d:86:fd:fe -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUanpvYFAK6B5bTJFwiDzG6KtjGx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yNTA1MzExNzE1NTBaFw0yNjA1MzAxNzIwNTBaMDMxMTAvBgNV BAMTKDk5RDkyMjU3NEFEQ0ZFOEIzNzQxOTMwMDQ0NTEyRjlBNTdFRjkxQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0EMlWLTkt2vC6ap8dKArgOubZ U7yhLhVIGbxwhXyw0sqKlZw03nWlewwIFyaGmLCDyDW3J2+Hvao2V4BJAQFCOtq2 EEejcK6PrQXs5uBjoSF+/6fiJR1SG1JwFhPHuxN4HJkkVcoqSDXYRE4H0JUo5kk/ DWo7CRuKtOzpLd70oZ8fZ2+hePTav3i59fxdySunCfz78pxPf6QgZ77lyTCmA9zC Swwh7F+3yAYinjiB5Ymp4g/7Mt0/D7Lop2aw7PBh/IuDQug/RUrs9sxFi2kbx1/q pc+NY3hYu1Lp7PgAjTW+xvWXWgDzpCzLxyIiw/ytBZU68Ga3rtgaKEOcrwixAgMB AAGjggMSMIIDDjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSZ2SJXStz+izdB kwBEUS+aV++RpDAfBgNVHSMEGDAWgBRB9lfPNWTyM7l39ArKXkvRDh4vjjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC80MUY2NTdDRjM1NjRGMjMzQjk3N0Y0MEFD QTVFNEJEMTBFMUUyRjhFLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi80MUY2NTdDRjM1NjRGMjMzQjk3 N0Y0MEFDQTVFNEJEMTBFMUUyRjhFLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5YjNkLzIv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS82ZmY3YTk4OS1lY2RmLTQzZDYtODZlMS1mNmMzOTM1YjliM2Qv Mi85OUQ5MjI1NzRBRENGRThCMzc0MTkzMDA0NDUxMkY5QTU3RUY5MUE0Lm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAqB1TAMA0GCSqGSIb3DQEBCwUAA4IBAQCKv8WY /4rN9yWJWGYTX6JCr9TD4YRKBfSlw/bqsyahzdPWF5K+xvE7FR5COUkOwQJO6p6e lBxNybvygHjkLPUOR1OtKTSrrO1FsFNvjHUFJ0eklvFkgF7ysim7/AOrbLB1TOT+ Mvx51KrtxnWLxd8A2G2CqlOcsas2zYpn8pqpK9tGw/KuYj+lznJp+TafN1twl/+0 fBa/sv0+uUubDzdno+W8aXxe6ENFZalGRcDGSV0eyXUIdLNNU5AXh39Gfvkwy5P7 JoT8aKCWpHK6x1l50SJMzkdxq59tQX1E51FDyfr6yOTkZexe4CWAp5V89k4drJoz 7Hdk5cCzbLZthv3+ -----END CERTIFICATE-----Generated at Sun Jun 1 10:53:43 2025 by rpki-client