$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.cer File: C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.cer (raw, json) Hash identifier: cIpyuitNv7jB0MJCVBLOU5MXpLGZR1JM3fAn45WIj7k= Subject key identifier: C3:08:5C:3C:31:F2:D4:5E:DE:2A:7F:FB:B1:96:5B:BF:15:4E:69:B3 Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 6F751A28EF4F5622151070CA0AB68AB9882729E9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/1/C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sun 06 Oct 2024 11:32:20 +0000 Certificate not after: Sun 05 Oct 2025 11:37:20 +0000 Subordinate resources: IP: 2a07:54c7:4000::/36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:75:1a:28:ef:4f:56:22:15:10:70:ca:0a:b6:8a:b9:88:27:29:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: Oct 6 11:32:20 2024 GMT Not After : Oct 5 11:37:20 2025 GMT Subject: CN=C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7b:95:03:21:87:28:7c:47:31:5a:83:23:c0: f3:ee:58:a6:42:ee:52:34:48:8a:30:d2:4f:38:34: 97:43:00:8e:99:22:02:16:db:1e:36:73:cf:11:8b: e7:c4:34:36:57:64:7f:a5:d8:1c:ab:6e:92:5c:b8: 43:6f:f1:75:d3:e4:4f:bd:aa:e7:d0:40:09:a8:ea: 23:be:60:2c:40:c7:a7:3b:b3:ac:b3:00:15:74:0b: b9:57:7a:6d:85:79:80:18:06:92:fd:58:1a:e4:ff: 28:fe:f7:c0:52:28:18:98:ab:16:55:12:20:55:86: 2f:53:10:c5:89:55:b3:ea:6e:92:8c:d6:77:0b:0f: e4:92:46:cf:78:d4:0f:04:97:35:16:a9:36:62:21: e6:d6:10:d2:78:bb:0f:81:2b:09:24:ce:79:0f:36: 68:15:9e:6d:45:a8:25:88:e1:c5:68:cd:fe:6f:71: e4:5c:4c:e9:d4:99:da:a9:eb:7f:81:12:d9:bc:0a: d6:6a:a5:ad:e7:29:61:f7:73:ca:26:e8:92:1e:cf: ec:e6:e2:fa:30:da:54:09:91:c5:c4:bd:70:ae:fc: fe:8f:0f:75:60:70:86:dd:c4:2a:ac:ce:08:8d:7f: 0c:41:0c:6d:c0:58:10:75:9f:de:03:a6:84:a3:79: e6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C3:08:5C:3C:31:F2:D4:5E:DE:2A:7F:FB:B1:96:5B:BF:15:4E:69:B3 X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/1/C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c7:4000::/36 Signature Algorithm: sha256WithRSAEncryption 53:e3:b8:01:84:0b:01:f1:b3:79:35:88:71:dc:92:5a:7a:21: b6:88:3c:27:94:f7:9a:0f:04:4d:a0:96:c8:ea:96:0e:27:a0: 3c:cc:c1:df:08:ef:9f:9b:a4:36:93:bf:8a:95:ad:68:1f:5a: 64:6d:a0:4f:80:ed:69:da:09:65:49:b7:0b:09:13:15:23:14: 8c:f4:e4:f4:7f:68:46:f7:14:45:de:ae:11:61:6e:b8:ad:cc: d2:3f:b7:a8:4f:b4:bc:e1:d7:f6:96:f8:4e:b3:b1:ba:67:80: 58:0c:b3:3c:e1:48:e8:0a:04:90:e1:26:1b:43:e6:49:50:02: 71:60:38:2c:f3:ef:9f:1f:37:9f:c0:c7:3e:58:7e:19:9c:1d: 9c:ff:2c:e5:ed:44:7b:3e:a4:88:2d:f8:70:d1:f7:fe:99:a9: d1:6e:7d:d3:86:a3:13:d7:0e:d7:68:30:4e:86:3f:dc:85:21: 9f:b6:b3:94:d0:fb:64:14:b3:0e:c1:57:4b:84:4d:be:dd:cd: 4c:ef:38:a5:76:b9:c0:5a:61:03:46:5f:26:ff:62:64:5f:1e: ad:16:63:61:cc:60:1e:28:70:75:84:f6:aa:f2:cc:6c:2b:d2: 56:1b:fd:d8:7b:01:26:ff:31:d9:00:b7:ce:ab:54:7a:8c:3d: 96:ef:83:c0 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgIUb3UaKO9PViIVEHDKCraKuYgnKekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yNDEwMDYxMTMyMjBaFw0yNTEwMDUxMTM3MjBaMDMxMTAvBgNV BAMTKEMzMDg1QzNDMzFGMkQ0NUVERTJBN0ZGQkIxOTY1QkJGMTU0RTY5QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIe5UDIYcofEcxWoMjwPPuWKZC 7lI0SIow0k84NJdDAI6ZIgIW2x42c88Ri+fENDZXZH+l2ByrbpJcuENv8XXT5E+9 qufQQAmo6iO+YCxAx6c7s6yzABV0C7lXem2FeYAYBpL9WBrk/yj+98BSKBiYqxZV EiBVhi9TEMWJVbPqbpKM1ncLD+SSRs941A8ElzUWqTZiIebWENJ4uw+BKwkkznkP NmgVnm1FqCWI4cVozf5vceRcTOnUmdqp63+BEtm8CtZqpa3nKWH3c8om6JIez+zm 4vow2lQJkcXEvXCu/P6PD3VgcIbdxCqszgiNfwxBDG3AWBB1n94DpoSjeeaBAgMB AAGjggMTMIIDDzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTDCFw8MfLUXt4q f/uxllu/FU5pszAfBgNVHSMEGDAWgBRB9lfPNWTyM7l39ArKXkvRDh4vjjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC80MUY2NTdDRjM1NjRGMjMzQjk3N0Y0MEFD QTVFNEJEMTBFMUUyRjhFLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi80MUY2NTdDRjM1NjRGMjMzQjk3 N0Y0MEFDQTVFNEJEMTBFMUUyRjhFLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvYmNiYmYwYmYtYTJlMC00MmE0LTgyOTMtNzExNDk2ZWI2NmQyLzEv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9iY2JiZjBiZi1hMmUwLTQyYTQtODI5My03MTE0OTZlYjY2ZDIv MS9DMzA4NUMzQzMxRjJENDVFREUyQTdGRkJCMTk2NUJCRjE1NEU2OUIzLm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQqB1THQDANBgkqhkiG9w0BAQsFAAOCAQEAU+O4 AYQLAfGzeTWIcdySWnohtog8J5T3mg8ETaCWyOqWDiegPMzB3wjvn5ukNpO/ipWt aB9aZG2gT4DtadoJZUm3CwkTFSMUjPTk9H9oRvcURd6uEWFuuK3M0j+3qE+0vOHX 9pb4TrOxumeAWAyzPOFI6AoEkOEmG0PmSVACcWA4LPPvnx83n8DHPlh+GZwdnP8s 5e1Eez6kiC34cNH3/pmp0W5904ajE9cO12gwToY/3IUhn7azlND7ZBSzDsFXS4RN vt3NTO84pXa5wFphA0ZfJv9iZF8erRZjYcxgHihwdYT2qvLMbCvSVhv92HsBJv8x 2QC3zqtUeow9lu+DwA== -----END CERTIFICATE-----Generated at Thu Nov 21 12:18:36 2024 by rpki-client on console-ams.rpki-client.org