$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.cer File: C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.cer (raw, json) Hash identifier: +9itrPTZJ8aeTXN3hWt8GeXVMKMa1uMViIYNDqI3eN8= Subject key identifier: C3:08:5C:3C:31:F2:D4:5E:DE:2A:7F:FB:B1:96:5B:BF:15:4E:69:B3 Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 29714DB07E03E25AC9DBD3E670FAA5E3DA7B7C56 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/1/C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sun 05 Nov 2023 01:08:28 +0000 Certificate not after: Sun 03 Nov 2024 01:13:28 +0000 Subordinate resources: IP: 2a07:54c7:4000::/36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 22 Jun 2024 18:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:71:4d:b0:7e:03:e2:5a:c9:db:d3:e6:70:fa:a5:e3:da:7b:7c:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: Nov 5 01:08:28 2023 GMT Not After : Nov 3 01:13:28 2024 GMT Subject: CN=C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7b:95:03:21:87:28:7c:47:31:5a:83:23:c0: f3:ee:58:a6:42:ee:52:34:48:8a:30:d2:4f:38:34: 97:43:00:8e:99:22:02:16:db:1e:36:73:cf:11:8b: e7:c4:34:36:57:64:7f:a5:d8:1c:ab:6e:92:5c:b8: 43:6f:f1:75:d3:e4:4f:bd:aa:e7:d0:40:09:a8:ea: 23:be:60:2c:40:c7:a7:3b:b3:ac:b3:00:15:74:0b: b9:57:7a:6d:85:79:80:18:06:92:fd:58:1a:e4:ff: 28:fe:f7:c0:52:28:18:98:ab:16:55:12:20:55:86: 2f:53:10:c5:89:55:b3:ea:6e:92:8c:d6:77:0b:0f: e4:92:46:cf:78:d4:0f:04:97:35:16:a9:36:62:21: e6:d6:10:d2:78:bb:0f:81:2b:09:24:ce:79:0f:36: 68:15:9e:6d:45:a8:25:88:e1:c5:68:cd:fe:6f:71: e4:5c:4c:e9:d4:99:da:a9:eb:7f:81:12:d9:bc:0a: d6:6a:a5:ad:e7:29:61:f7:73:ca:26:e8:92:1e:cf: ec:e6:e2:fa:30:da:54:09:91:c5:c4:bd:70:ae:fc: fe:8f:0f:75:60:70:86:dd:c4:2a:ac:ce:08:8d:7f: 0c:41:0c:6d:c0:58:10:75:9f:de:03:a6:84:a3:79: e6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C3:08:5C:3C:31:F2:D4:5E:DE:2A:7F:FB:B1:96:5B:BF:15:4E:69:B3 X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/1/C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c7:4000::/36 Signature Algorithm: sha256WithRSAEncryption 3a:09:b0:f7:0e:a5:b9:f6:2c:75:0e:83:48:ef:2c:d8:9b:92: ca:43:8d:d4:80:cb:08:3b:64:eb:86:5b:38:2f:11:87:60:3e: 8c:6a:f3:0a:4f:82:d8:53:8f:46:72:fb:34:55:2e:8b:3a:53: 5a:b2:73:4d:e7:ac:fc:b4:05:40:ea:8a:f6:7b:70:b0:c3:30: 31:c2:19:e7:01:f5:b4:c0:29:25:59:84:1a:c7:b5:3e:46:7e: bf:c6:29:14:4d:d8:ab:89:80:f2:60:bc:d8:be:bc:a5:6c:d7: d6:1f:7a:6c:25:35:e1:71:b7:a6:60:81:d6:c4:7b:20:01:ae: 41:36:94:f1:50:fa:63:dd:64:09:73:9f:05:62:da:93:78:5a: eb:49:ba:1b:36:7f:eb:7a:9d:02:ac:d2:71:c1:22:66:b1:16: e5:97:ba:d7:5d:69:70:3d:b9:39:db:a5:70:bb:94:54:6f:8a: 08:d7:ff:f4:a8:ff:a5:26:af:62:b9:8e:9a:90:dc:ce:a2:d2: a9:57:94:02:45:67:d9:31:2b:41:09:f9:89:17:35:60:c1:1e: f3:56:4b:89:ed:a5:d3:88:10:e2:4d:b0:04:84:99:29:81:22: 30:9b:d7:32:9f:f6:e0:ed:89:26:16:9d:c2:d4:99:e5:ac:b2: 95:31:09:cc -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgIUKXFNsH4D4lrJ29PmcPql49p7fFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yMzExMDUwMTA4MjhaFw0yNDExMDMwMTEzMjhaMDMxMTAvBgNV BAMTKEMzMDg1QzNDMzFGMkQ0NUVERTJBN0ZGQkIxOTY1QkJGMTU0RTY5QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIe5UDIYcofEcxWoMjwPPuWKZC 7lI0SIow0k84NJdDAI6ZIgIW2x42c88Ri+fENDZXZH+l2ByrbpJcuENv8XXT5E+9 qufQQAmo6iO+YCxAx6c7s6yzABV0C7lXem2FeYAYBpL9WBrk/yj+98BSKBiYqxZV EiBVhi9TEMWJVbPqbpKM1ncLD+SSRs941A8ElzUWqTZiIebWENJ4uw+BKwkkznkP NmgVnm1FqCWI4cVozf5vceRcTOnUmdqp63+BEtm8CtZqpa3nKWH3c8om6JIez+zm 4vow2lQJkcXEvXCu/P6PD3VgcIbdxCqszgiNfwxBDG3AWBB1n94DpoSjeeaBAgMB AAGjggMTMIIDDzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTDCFw8MfLUXt4q f/uxllu/FU5pszAfBgNVHSMEGDAWgBRB9lfPNWTyM7l39ArKXkvRDh4vjjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC80MUY2NTdDRjM1NjRGMjMzQjk3N0Y0MEFD QTVFNEJEMTBFMUUyRjhFLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi80MUY2NTdDRjM1NjRGMjMzQjk3 N0Y0MEFDQTVFNEJEMTBFMUUyRjhFLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvYmNiYmYwYmYtYTJlMC00MmE0LTgyOTMtNzExNDk2ZWI2NmQyLzEv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9iY2JiZjBiZi1hMmUwLTQyYTQtODI5My03MTE0OTZlYjY2ZDIv MS9DMzA4NUMzQzMxRjJENDVFREUyQTdGRkJCMTk2NUJCRjE1NEU2OUIzLm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQqB1THQDANBgkqhkiG9w0BAQsFAAOCAQEAOgmw 9w6lufYsdQ6DSO8s2JuSykON1IDLCDtk64ZbOC8Rh2A+jGrzCk+C2FOPRnL7NFUu izpTWrJzTees/LQFQOqK9ntwsMMwMcIZ5wH1tMApJVmEGse1PkZ+v8YpFE3Yq4mA 8mC82L68pWzX1h96bCU14XG3pmCB1sR7IAGuQTaU8VD6Y91kCXOfBWLak3ha60m6 GzZ/63qdAqzSccEiZrEW5Ze6111pcD25OdulcLuUVG+KCNf/9Kj/pSavYrmOmpDc zqLSqVeUAkVn2TErQQn5iRc1YMEe81ZLie2l04gQ4k2wBISZKYEiMJvXMp/24O2J JhadwtSZ5ayylTEJzA== -----END CERTIFICATE-----Generated at Sat Jun 22 03:55:50 2024 by rpki-client on console-ams.rpki-client.org