$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer File: A816FDA8ADEC8085A8A348E698709DE583B219B5.cer (raw, json) Hash identifier: kcInqzdgUVPHHGdqc39e+5A5hPSj4ONCwvGFI0tKUYk= Subject key identifier: A8:16:FD:A8:AD:EC:80:85:A8:A3:48:E6:98:70:9D:E5:83:B2:19:B5 Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 3CF266D2BFB57F46CEB68BDBB8C0A2AEC3B1545C Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Mon 14 Oct 2024 03:14:32 +0000 Certificate not after: Mon 13 Oct 2025 03:19:32 +0000 Subordinate resources: IP: 2a07:54c7:5000::/36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:f2:66:d2:bf:b5:7f:46:ce:b6:8b:db:b8:c0:a2:ae:c3:b1:54:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: Oct 14 03:14:32 2024 GMT Not After : Oct 13 03:19:32 2025 GMT Subject: CN=A816FDA8ADEC8085A8A348E698709DE583B219B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:46:50:fe:a6:e3:c7:cf:d2:f3:00:a0:d6:93: 3f:a8:69:16:2f:b7:e7:44:94:84:3b:af:aa:1e:74: 4d:65:36:86:ab:26:c9:8f:3c:ba:4f:9b:a3:60:a9: e3:51:29:d4:da:e3:49:19:d8:5e:0d:fa:e4:7b:46: ef:39:f4:5c:61:3a:02:f9:35:68:1d:23:cc:4a:61: a5:ce:42:c7:0c:cf:94:24:38:0b:b5:6c:8f:f0:2c: 88:ab:c6:39:b1:77:e8:24:ad:05:8d:a3:3e:a7:54: 2a:c3:0e:0b:41:54:3f:49:cd:52:93:9c:5c:18:c6: 70:c7:7b:8d:b7:c3:46:50:7b:b4:8f:34:ff:81:b5: 3b:51:36:d8:90:47:7b:2b:9d:34:9c:14:66:ce:96: c6:72:21:5f:31:87:78:12:9b:11:9e:4b:40:6e:c5: 77:97:6d:e6:21:2f:b8:e4:c6:4b:38:84:b5:85:8f: 36:e6:2b:86:13:9e:15:72:dd:f5:82:dd:60:57:65: ba:a9:e7:a5:08:dd:13:c9:3b:d2:bb:54:34:08:0d: 2c:dc:b3:00:ba:7b:d0:cb:86:cd:fd:b0:5c:ff:b5: 10:7a:65:f0:e9:e5:0e:c3:93:94:85:37:0e:11:07: ff:8c:74:bc:4a:a9:ea:eb:ae:16:03:c2:42:16:85: 4a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A8:16:FD:A8:AD:EC:80:85:A8:A3:48:E6:98:70:9D:E5:83:B2:19:B5 X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c7:5000::/36 Signature Algorithm: sha256WithRSAEncryption 5c:8f:45:54:75:a5:d1:07:05:12:06:fe:6c:25:90:bb:1b:02: 33:03:be:08:52:15:e0:aa:a8:ec:5b:6a:7d:0e:ae:e2:b1:b2: 54:26:92:1c:7e:51:b1:08:36:e0:07:11:3a:00:ac:95:23:4c: 5e:c2:05:a3:e2:6e:14:b3:6b:2c:56:26:e6:03:ed:5e:db:bb: 39:cf:7d:6b:45:7e:fc:10:da:b9:45:df:bb:c6:e3:41:8a:68: 4c:28:e5:6f:44:cd:2b:d9:b1:19:b5:65:df:72:ad:69:e2:ed: 8c:d8:aa:df:8a:e6:2f:3c:4f:1b:12:60:ba:57:fb:7e:93:8b: 72:4d:12:31:d0:90:b7:4d:94:e0:69:45:68:cc:d5:8b:77:f6: f0:bb:91:b3:31:57:e8:88:8a:dd:3a:e3:fa:58:96:a3:00:1b: 7d:58:e7:e6:19:6a:6b:44:81:29:08:eb:60:d6:7f:89:1b:0a: 96:29:83:ff:18:a6:d4:e2:f8:d5:98:49:6c:03:9f:15:4f:22: b1:66:54:11:0c:f3:24:d6:a1:92:9b:15:36:a7:14:28:11:96: bc:0d:48:97:a5:61:a4:2e:80:58:85:07:9d:10:20:35:d8:9f: 70:d5:88:90:83:40:70:47:71:04:bb:22:7d:dc:cb:b9:b1:ca: 44:dc:c3:8e -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgIUPPJm0r+1f0bOtovbuMCirsOxVFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yNDEwMTQwMzE0MzJaFw0yNTEwMTMwMzE5MzJaMDMxMTAvBgNV BAMTKEE4MTZGREE4QURFQzgwODVBOEEzNDhFNjk4NzA5REU1ODNCMjE5QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCORlD+puPHz9LzAKDWkz+oaRYv t+dElIQ7r6oedE1lNoarJsmPPLpPm6NgqeNRKdTa40kZ2F4N+uR7Ru859FxhOgL5 NWgdI8xKYaXOQscMz5QkOAu1bI/wLIirxjmxd+gkrQWNoz6nVCrDDgtBVD9JzVKT nFwYxnDHe423w0ZQe7SPNP+BtTtRNtiQR3srnTScFGbOlsZyIV8xh3gSmxGeS0Bu xXeXbeYhL7jkxks4hLWFjzbmK4YTnhVy3fWC3WBXZbqp56UI3RPJO9K7VDQIDSzc swC6e9DLhs39sFz/tRB6ZfDp5Q7Dk5SFNw4RB/+MdLxKqerrrhYDwkIWhUrNAgMB AAGjggMTMIIDDzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSoFv2oreyAhaij SOaYcJ3lg7IZtTAfBgNVHSMEGDAWgBRB9lfPNWTyM7l39ArKXkvRDh4vjjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC80MUY2NTdDRjM1NjRGMjMzQjk3N0Y0MEFD QTVFNEJEMTBFMUUyRjhFLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi80MUY2NTdDRjM1NjRGMjMzQjk3 N0Y0MEFDQTVFNEJEMTBFMUUyRjhFLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1NjRhLzAv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS81ODIxYzQ3ZS1lODE1LTQyZGUtYmQ2Yi0xOWEyZTFhZTU2NGEv MC9BODE2RkRBOEFERUM4MDg1QThBMzQ4RTY5ODcwOURFNTgzQjIxOUI1Lm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQqB1THUDANBgkqhkiG9w0BAQsFAAOCAQEAXI9F VHWl0QcFEgb+bCWQuxsCMwO+CFIV4Kqo7FtqfQ6u4rGyVCaSHH5RsQg24AcROgCs lSNMXsIFo+JuFLNrLFYm5gPtXtu7Oc99a0V+/BDauUXfu8bjQYpoTCjlb0TNK9mx GbVl33KtaeLtjNiq34rmLzxPGxJgulf7fpOLck0SMdCQt02U4GlFaMzVi3f28LuR szFX6IiK3Trj+liWowAbfVjn5hlqa0SBKQjrYNZ/iRsKlimD/xim1OL41ZhJbAOf FU8isWZUEQzzJNahkpsVNqcUKBGWvA1Il6VhpC6AWIUHnRAgNdifcNWIkINAcEdx BLsifdzLubHKRNzDjg== -----END CERTIFICATE-----Generated at Thu Nov 21 12:08:36 2024 by rpki-client on console-fra.rpki-client.org