$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer File: A816FDA8ADEC8085A8A348E698709DE583B219B5.cer (raw, json) Hash identifier: BywSOSHfXmVyE+iiRog6R1j9fwF19lXbkeab8tlTHxg= Subject key identifier: A8:16:FD:A8:AD:EC:80:85:A8:A3:48:E6:98:70:9D:E5:83:B2:19:B5 Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 623716CEF976B13F7FF5F3559CA0811AE71E1AE3 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sun 12 Nov 2023 23:46:29 +0000 Certificate not after: Sun 10 Nov 2024 23:51:29 +0000 Subordinate resources: IP: 2a07:54c7:5000::/36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Jun 2024 13:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:37:16:ce:f9:76:b1:3f:7f:f5:f3:55:9c:a0:81:1a:e7:1e:1a:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: Nov 12 23:46:29 2023 GMT Not After : Nov 10 23:51:29 2024 GMT Subject: CN=A816FDA8ADEC8085A8A348E698709DE583B219B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:46:50:fe:a6:e3:c7:cf:d2:f3:00:a0:d6:93: 3f:a8:69:16:2f:b7:e7:44:94:84:3b:af:aa:1e:74: 4d:65:36:86:ab:26:c9:8f:3c:ba:4f:9b:a3:60:a9: e3:51:29:d4:da:e3:49:19:d8:5e:0d:fa:e4:7b:46: ef:39:f4:5c:61:3a:02:f9:35:68:1d:23:cc:4a:61: a5:ce:42:c7:0c:cf:94:24:38:0b:b5:6c:8f:f0:2c: 88:ab:c6:39:b1:77:e8:24:ad:05:8d:a3:3e:a7:54: 2a:c3:0e:0b:41:54:3f:49:cd:52:93:9c:5c:18:c6: 70:c7:7b:8d:b7:c3:46:50:7b:b4:8f:34:ff:81:b5: 3b:51:36:d8:90:47:7b:2b:9d:34:9c:14:66:ce:96: c6:72:21:5f:31:87:78:12:9b:11:9e:4b:40:6e:c5: 77:97:6d:e6:21:2f:b8:e4:c6:4b:38:84:b5:85:8f: 36:e6:2b:86:13:9e:15:72:dd:f5:82:dd:60:57:65: ba:a9:e7:a5:08:dd:13:c9:3b:d2:bb:54:34:08:0d: 2c:dc:b3:00:ba:7b:d0:cb:86:cd:fd:b0:5c:ff:b5: 10:7a:65:f0:e9:e5:0e:c3:93:94:85:37:0e:11:07: ff:8c:74:bc:4a:a9:ea:eb:ae:16:03:c2:42:16:85: 4a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A8:16:FD:A8:AD:EC:80:85:A8:A3:48:E6:98:70:9D:E5:83:B2:19:B5 X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c7:5000::/36 Signature Algorithm: sha256WithRSAEncryption ac:ca:08:b9:7a:4b:8e:5c:c5:a1:85:68:6d:de:9f:a7:03:10: 11:63:59:3e:37:42:d3:5e:b0:78:0c:dd:dc:8f:42:be:0c:b4: 96:c1:3b:21:f4:34:2b:1a:18:e9:b3:e8:23:f4:b0:c8:e3:a2: 71:54:21:61:87:6d:25:52:e4:0d:06:03:ac:fc:9d:d7:7c:01: d6:d3:e9:fa:ae:c3:60:8b:ff:57:eb:a9:06:b8:7a:39:fc:ee: 48:09:2c:f7:2f:e9:09:1b:f5:75:a4:31:e3:72:b5:4b:0b:2d: 75:d6:43:75:07:43:32:59:95:4a:ae:63:a0:1a:3b:eb:05:0f: 48:ca:83:d9:67:b8:4f:25:f8:16:e0:a5:73:30:11:1f:4e:77: 0d:22:84:55:17:e7:97:13:63:de:ae:9b:5c:8b:d4:e1:49:0a: ce:e9:88:d5:01:82:03:fd:d3:cb:fb:b4:c7:7e:ff:ce:c0:76: 39:0b:58:82:55:79:19:11:d9:ca:b8:9c:83:07:7e:09:c9:1a: 60:1f:6a:86:73:e3:74:83:e5:e9:01:71:41:5e:19:d9:62:04: e6:8b:5f:0b:01:7b:98:77:31:ec:50:bf:33:73:25:5f:41:bd: ba:1a:0a:c7:60:03:b2:c8:0f:4c:90:77:63:5f:fa:83:f4:ab: 39:52:aa:50 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgIUYjcWzvl2sT9/9fNVnKCBGuceGuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yMzExMTIyMzQ2MjlaFw0yNDExMTAyMzUxMjlaMDMxMTAvBgNV BAMTKEE4MTZGREE4QURFQzgwODVBOEEzNDhFNjk4NzA5REU1ODNCMjE5QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCORlD+puPHz9LzAKDWkz+oaRYv t+dElIQ7r6oedE1lNoarJsmPPLpPm6NgqeNRKdTa40kZ2F4N+uR7Ru859FxhOgL5 NWgdI8xKYaXOQscMz5QkOAu1bI/wLIirxjmxd+gkrQWNoz6nVCrDDgtBVD9JzVKT nFwYxnDHe423w0ZQe7SPNP+BtTtRNtiQR3srnTScFGbOlsZyIV8xh3gSmxGeS0Bu xXeXbeYhL7jkxks4hLWFjzbmK4YTnhVy3fWC3WBXZbqp56UI3RPJO9K7VDQIDSzc swC6e9DLhs39sFz/tRB6ZfDp5Q7Dk5SFNw4RB/+MdLxKqerrrhYDwkIWhUrNAgMB AAGjggMTMIIDDzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSoFv2oreyAhaij SOaYcJ3lg7IZtTAfBgNVHSMEGDAWgBRB9lfPNWTyM7l39ArKXkvRDh4vjjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC80MUY2NTdDRjM1NjRGMjMzQjk3N0Y0MEFD QTVFNEJEMTBFMUUyRjhFLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi80MUY2NTdDRjM1NjRGMjMzQjk3 N0Y0MEFDQTVFNEJEMTBFMUUyRjhFLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1NjRhLzAv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS81ODIxYzQ3ZS1lODE1LTQyZGUtYmQ2Yi0xOWEyZTFhZTU2NGEv MC9BODE2RkRBOEFERUM4MDg1QThBMzQ4RTY5ODcwOURFNTgzQjIxOUI1Lm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQqB1THUDANBgkqhkiG9w0BAQsFAAOCAQEArMoI uXpLjlzFoYVobd6fpwMQEWNZPjdC016weAzd3I9Cvgy0lsE7IfQ0KxoY6bPoI/Sw yOOicVQhYYdtJVLkDQYDrPyd13wB1tPp+q7DYIv/V+upBrh6OfzuSAks9y/pCRv1 daQx43K1SwstddZDdQdDMlmVSq5joBo76wUPSMqD2We4TyX4FuClczARH053DSKE VRfnlxNj3q6bXIvU4UkKzumI1QGCA/3Ty/u0x37/zsB2OQtYglV5GRHZyricgwd+ CckaYB9qhnPjdIPl6QFxQV4Z2WIE5otfCwF7mHcx7FC/M3MlX0G9uhoKx2ADssgP TJB3Y1/6g/SrOVKqUA== -----END CERTIFICATE-----Generated at Sat Jun 1 04:19:25 2024 by rpki-client on console-fra.rpki-client.org