$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/ED7E642F8C5FB6C6E897FE906D788ADA542E8EED.cer File: ED7E642F8C5FB6C6E897FE906D788ADA542E8EED.cer (raw, json) Hash identifier: g//XYCzaDz3f423tjI7UArjDOYSUeoqvwZ/FsOLhffM= Subject key identifier: ED:7E:64:2F:8C:5F:B6:C6:E8:97:FE:90:6D:78:8A:DA:54:2E:8E:ED Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 66F094CF2CE280F504C5B5F448109A987EFC28EF Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/2/ED7E642F8C5FB6C6E897FE906D788ADA542E8EED.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 14 Oct 2023 04:37:07 +0000 Certificate not after: Sat 12 Oct 2024 04:42:07 +0000 Subordinate resources: IP: 2a07:54c7:3000::/36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Jun 2024 13:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:f0:94:cf:2c:e2:80:f5:04:c5:b5:f4:48:10:9a:98:7e:fc:28:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: Oct 14 04:37:07 2023 GMT Not After : Oct 12 04:42:07 2024 GMT Subject: CN=ED7E642F8C5FB6C6E897FE906D788ADA542E8EED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ed:86:9e:42:b2:13:04:cc:de:40:d6:23:60: 6d:69:24:f0:96:0d:05:cb:3a:aa:1d:40:51:f3:65: c7:93:af:85:e3:c7:5c:47:e1:75:91:a9:0a:e1:17: 54:90:29:b4:a8:11:07:b2:c8:9b:4c:e3:66:52:92: 53:d3:7b:9d:fc:01:04:3c:f3:29:3d:58:70:eb:96: 2d:d2:d9:23:2f:8f:68:62:c0:a4:9a:30:5f:27:c0: cf:45:ec:92:8b:29:8f:e4:08:81:6d:54:7f:27:3d: ae:cc:e3:9d:94:a5:6a:3e:fb:b3:1e:93:35:2f:60: 3e:97:8c:59:4a:ad:12:ff:28:c9:34:e5:bd:6f:6b: 8f:7f:5a:cd:d1:b0:a1:33:ec:42:24:7a:bc:36:05: 62:d2:b4:ba:3c:20:0a:97:4a:1b:ad:0f:63:96:f0: b6:eb:2b:6b:13:4c:f4:31:ff:ee:ce:a0:31:03:8a: 0a:ab:74:e5:29:d6:c9:8a:5b:4a:8d:9e:d8:e1:d5: 83:e9:d3:4c:38:98:f9:70:8f:dc:b9:a7:1a:da:41: d1:81:cc:17:61:3d:db:08:f2:5e:81:15:c7:14:84: 90:d7:71:99:4c:f1:e2:a2:c8:38:29:1e:41:59:b8: e2:cc:a9:98:9c:59:9f:f1:ea:db:1c:ab:ad:d5:de: 9a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: ED:7E:64:2F:8C:5F:B6:C6:E8:97:FE:90:6D:78:8A:DA:54:2E:8E:ED X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/2/ED7E642F8C5FB6C6E897FE906D788ADA542E8EED.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c7:3000::/36 Signature Algorithm: sha256WithRSAEncryption 0a:f9:d2:e1:d2:35:bf:32:0c:04:f3:da:59:5f:0e:1a:7e:f0: 28:59:03:2a:d0:88:d2:96:c0:86:64:ec:09:3a:5d:a1:d8:22: 5a:dc:36:69:78:dd:15:b1:fd:ec:96:62:72:ec:3c:72:88:4e: ff:33:54:2c:eb:cf:b6:51:35:81:87:c8:a3:09:28:18:01:ac: 39:be:04:d9:7c:01:3a:12:65:06:e2:55:9e:ef:1b:20:fb:59: 14:da:ed:c5:ea:d5:14:81:dc:92:a8:ff:81:d4:f9:40:14:22: d8:31:3a:c6:fb:b8:99:ae:45:10:df:7c:7a:fb:e2:22:47:cb: 70:ed:77:1d:3e:b8:61:6c:95:8a:8e:d8:5d:c5:df:d7:1f:da: a4:23:e2:09:1d:75:ba:61:74:40:d3:2b:0b:70:0c:0a:ce:96: e1:97:50:f8:5e:70:23:28:a8:79:75:9f:08:20:53:8b:40:26: a8:7e:38:08:d2:44:3a:fd:c5:78:bf:c6:29:50:c7:a9:6e:1b: e5:b7:ba:34:e6:5f:58:f9:95:61:70:46:ee:fa:b1:8c:8a:99: f4:c6:0a:7c:5b:29:6e:25:e4:10:a5:18:62:41:0c:bf:59:38: 62:ed:fa:4a:da:de:78:46:65:38:0c:4a:8b:2c:ef:02:c6:9f: 7c:f3:f9:01 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgIUZvCUzyzigPUExbX0SBCamH78KO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yMzEwMTQwNDM3MDdaFw0yNDEwMTIwNDQyMDdaMDMxMTAvBgNV BAMTKEVEN0U2NDJGOEM1RkI2QzZFODk3RkU5MDZENzg4QURBNTQyRThFRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu7YaeQrITBMzeQNYjYG1pJPCW DQXLOqodQFHzZceTr4Xjx1xH4XWRqQrhF1SQKbSoEQeyyJtM42ZSklPTe538AQQ8 8yk9WHDrli3S2SMvj2hiwKSaMF8nwM9F7JKLKY/kCIFtVH8nPa7M452UpWo++7Me kzUvYD6XjFlKrRL/KMk05b1va49/Ws3RsKEz7EIkerw2BWLStLo8IAqXShutD2OW 8LbrK2sTTPQx/+7OoDEDigqrdOUp1smKW0qNntjh1YPp00w4mPlwj9y5pxraQdGB zBdhPdsI8l6BFccUhJDXcZlM8eKiyDgpHkFZuOLMqZicWZ/x6tscq63V3ppnAgMB AAGjggMTMIIDDzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTtfmQvjF+2xuiX /pBteIraVC6O7TAfBgNVHSMEGDAWgBRB9lfPNWTyM7l39ArKXkvRDh4vjjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC80MUY2NTdDRjM1NjRGMjMzQjk3N0Y0MEFD QTVFNEJEMTBFMUUyRjhFLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi80MUY2NTdDRjM1NjRGMjMzQjk3 N0Y0MEFDQTVFNEJEMTBFMUUyRjhFLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvMTIzMWZkODYtYzUzOS00NmM3LTg5ZTktZjM3NTZmMzA3NWZhLzIv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS8xMjMxZmQ4Ni1jNTM5LTQ2YzctODllOS1mMzc1NmYzMDc1ZmEv Mi9FRDdFNjQyRjhDNUZCNkM2RTg5N0ZFOTA2RDc4OEFEQTU0MkU4RUVELm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQqB1THMDANBgkqhkiG9w0BAQsFAAOCAQEACvnS 4dI1vzIMBPPaWV8OGn7wKFkDKtCI0pbAhmTsCTpdodgiWtw2aXjdFbH97JZicuw8 cohO/zNULOvPtlE1gYfIowkoGAGsOb4E2XwBOhJlBuJVnu8bIPtZFNrtxerVFIHc kqj/gdT5QBQi2DE6xvu4ma5FEN98evviIkfLcO13HT64YWyVio7YXcXf1x/apCPi CR11umF0QNMrC3AMCs6W4ZdQ+F5wIyioeXWfCCBTi0AmqH44CNJEOv3FeL/GKVDH qW4b5be6NOZfWPmVYXBG7vqxjIqZ9MYKfFspbiXkEKUYYkEMv1k4Yu36StreeEZl OAxKiyzvAsaffPP5AQ== -----END CERTIFICATE-----Generated at Sat Jun 1 06:15:08 2024 by rpki-client on console-ams.rpki-client.org