$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer File: F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer (raw, json) Hash identifier: m2tgx4MmpjXxNxOBz0BgLrIeUbmrYuIeD/aylA2FRC0= Subject key identifier: F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 65FDA7C53D8E6F8840B4CF438B265824DD11263E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 31 Aug 2024 08:06:59 +0000 Certificate not after: Sat 30 Aug 2025 08:11:59 +0000 Subordinate resources: IP: 2a07:54c7:6000::/36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:fd:a7:c5:3d:8e:6f:88:40:b4:cf:43:8b:26:58:24:dd:11:26:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: Aug 31 08:06:59 2024 GMT Not After : Aug 30 08:11:59 2025 GMT Subject: CN=F1ABD9429F3A733668CAC698C113A9E343C99B3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b3:42:a3:6d:9d:c8:2e:c9:05:f4:75:3c:26: 0a:a6:30:0b:7b:94:49:ee:27:0b:41:e1:19:84:9f: 29:74:99:01:76:b2:ff:fd:d9:87:94:20:52:6f:51: 95:80:a1:36:ac:1a:1c:34:79:91:64:23:40:eb:01: 53:a7:03:b7:b8:fd:b8:d5:20:e9:9c:d9:11:c6:12: 24:f3:20:e2:45:4c:ec:c2:54:f4:91:b7:5c:b6:d5: 14:98:dc:97:fe:07:a2:d8:8b:99:04:1a:ea:6f:98: 5b:c5:d1:62:83:8e:4f:c9:e7:e8:cc:2c:03:86:f5: a9:3e:c7:76:c9:7b:3e:62:c7:a8:b9:50:87:9c:08: e3:38:32:de:f5:69:b8:c6:ea:9e:06:58:ff:b4:7b: 0c:d8:91:4c:32:17:1d:08:47:0e:70:12:93:d2:d3: 27:ed:3a:00:6d:92:ee:d3:7e:e5:77:75:b6:17:87: 30:9c:61:65:9c:29:17:10:c5:68:b1:23:d1:7a:c7: 82:d6:25:99:2f:a6:e2:57:27:4b:d3:27:b6:27:79: 3a:1f:ef:ba:b1:cf:ee:5c:bd:2e:ec:b3:7c:be:56: 62:c5:1c:71:b1:80:e9:98:3a:4a:a4:e9:7f:8d:92: 51:af:bf:11:89:e0:ad:c1:7d:e7:70:94:4f:43:1b: ed:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c7:6000::/36 Signature Algorithm: sha256WithRSAEncryption 58:69:01:11:1b:85:e8:80:84:46:e1:50:5b:8d:00:19:39:59: a7:86:d8:37:2c:63:c6:51:3b:8b:df:1f:e7:14:0f:92:89:da: 49:9a:16:e7:84:e1:a9:69:91:2f:90:fa:0a:68:c4:1d:70:02: a4:21:93:7f:5d:e1:5b:bd:db:f3:4d:0a:84:23:b8:15:a1:37: 66:8c:61:90:d0:ea:37:ef:d1:53:ce:c0:2d:e8:8b:30:d5:f2: 4d:71:10:cd:95:c7:3b:c7:34:b3:5e:e5:53:85:83:f7:19:12: d2:be:8a:34:00:3b:8d:05:17:ab:92:2d:87:52:2e:7f:dd:33: ca:e1:3d:a7:59:3d:0b:4d:83:bd:16:a6:d9:e0:46:e7:51:f8: b7:18:68:8c:92:34:66:cc:92:4b:ec:0f:42:c8:14:a7:87:fb: 93:5b:3c:c9:24:e5:e6:23:88:a8:a2:a1:26:ac:a3:b4:54:e2: 14:e5:0b:a5:ad:83:20:9d:7a:ec:21:7e:19:e1:61:b7:06:1c: 87:3e:c4:14:da:62:39:aa:da:38:9f:ce:5e:05:16:83:1a:49: dd:77:80:f4:8c:cd:d3:0d:67:61:5c:b0:2f:3e:6f:74:e2:0a: 4d:d9:7c:4b:08:2a:9b:5b:54:7f:d2:ae:38:7d:4b:ee:0e:df: 66:1a:5a:2e -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgIUZf2nxT2Ob4hAtM9DiyZYJN0RJj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yNDA4MzEwODA2NTlaFw0yNTA4MzAwODExNTlaMDMxMTAvBgNV BAMTKEYxQUJEOTQyOUYzQTczMzY2OENBQzY5OEMxMTNBOUUzNDNDOTlCM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbs0KjbZ3ILskF9HU8JgqmMAt7 lEnuJwtB4RmEnyl0mQF2sv/92YeUIFJvUZWAoTasGhw0eZFkI0DrAVOnA7e4/bjV IOmc2RHGEiTzIOJFTOzCVPSRt1y21RSY3Jf+B6LYi5kEGupvmFvF0WKDjk/J5+jM LAOG9ak+x3bJez5ix6i5UIecCOM4Mt71abjG6p4GWP+0ewzYkUwyFx0IRw5wEpPS 0yftOgBtku7TfuV3dbYXhzCcYWWcKRcQxWixI9F6x4LWJZkvpuJXJ0vTJ7YneTof 77qxz+5cvS7ss3y+VmLFHHGxgOmYOkqk6X+NklGvvxGJ4K3BfedwlE9DG+15AgMB AAGjggMTMIIDDzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTxq9lCnzpzNmjK xpjBE6njQ8mbPjAfBgNVHSMEGDAWgBRB9lfPNWTyM7l39ArKXkvRDh4vjjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC80MUY2NTdDRjM1NjRGMjMzQjk3N0Y0MEFD QTVFNEJEMTBFMUUyRjhFLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi80MUY2NTdDRjM1NjRGMjMzQjk3 N0Y0MEFDQTVFNEJEMTBFMUUyRjhFLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvZjUzNmExZTQtM2JmMC00MzUyLTkwNjEtNjY2OTRkMmJjYmQzLzAv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9mNTM2YTFlNC0zYmYwLTQzNTItOTA2MS02NjY5NGQyYmNiZDMv MC9GMUFCRDk0MjlGM0E3MzM2NjhDQUM2OThDMTEzQTlFMzQzQzk5QjNFLm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQqB1THYDANBgkqhkiG9w0BAQsFAAOCAQEAWGkB ERuF6ICERuFQW40AGTlZp4bYNyxjxlE7i98f5xQPkonaSZoW54ThqWmRL5D6CmjE HXACpCGTf13hW73b800KhCO4FaE3ZoxhkNDqN+/RU87ALeiLMNXyTXEQzZXHO8c0 s17lU4WD9xkS0r6KNAA7jQUXq5Ith1Iuf90zyuE9p1k9C02DvRam2eBG51H4txho jJI0ZsySS+wPQsgUp4f7k1s8ySTl5iOIqKKhJqyjtFTiFOULpa2DIJ167CF+GeFh twYchz7EFNpiOaraOJ/OXgUWgxpJ3XeA9IzN0w1nYVywLz5vdOIKTdl8Swgqm1tU f9KuOH1L7g7fZhpaLg== -----END CERTIFICATE-----Generated at Thu Nov 21 12:18:36 2024 by rpki-client on console-ams.rpki-client.org