$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer File: F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer (raw, json) Hash identifier: EuHRaW3/ZuektoWjBA6Rv/jyMeXh87kldw90CrBvt1k= Subject key identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 306BA4870F9125F0B5DE56754355324E908D52E8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Manifest: rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.mft caRepository: rsync://rpki.cc/repo/MythicalKitten/12/ Notify URL: https://rpki.cc/rrdp/notification.xml Certificate not before: Wed 18 Oct 2023 22:30:02 +0000 Certificate not after: Wed 16 Oct 2024 22:35:02 +0000 Subordinate resources: IP: 2a07:54c1::/36 IP: 2a07:54c1:3200::/40 IP: 2a07:54c1:6000::/36 IP: 2a07:54c1:8000::/36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 30 May 2024 13:30:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:6b:a4:87:0f:91:25:f0:b5:de:56:75:43:55:32:4e:90:8d:52:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: Oct 18 22:30:02 2023 GMT Not After : Oct 16 22:35:02 2024 GMT Subject: CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:17:7d:34:fe:64:49:c7:95:85:ae:fe:f4:3f: 69:9b:cb:51:5e:59:6e:27:43:24:92:50:97:39:6d: ac:b8:d3:7d:52:2e:de:b8:a3:49:16:92:86:df:2c: dd:54:0c:af:de:65:1a:fb:94:61:7a:94:8e:98:ad: 04:68:2d:d0:58:74:f5:42:72:9d:2f:58:c0:cb:5f: e6:f8:9a:32:73:8a:45:6e:7f:36:4d:a0:fb:69:02: 97:f4:0a:27:4b:bd:95:a7:5e:35:1c:d7:ad:d5:de: 55:c5:87:98:ca:ca:00:61:72:d8:f7:ce:b8:b1:f7: 06:c8:e9:b1:07:50:38:69:d3:10:e1:55:7c:7e:44: 63:38:01:ac:43:6a:98:71:7a:ed:95:68:a5:69:10: d9:70:0d:48:76:5a:8a:3a:fe:60:95:03:ed:e5:05: a3:e0:4a:2c:b3:8d:a5:e4:98:d6:31:f8:3a:0f:f1: ba:f7:8b:ed:e7:3f:a6:ce:1a:3c:bf:f7:16:9e:1b: f3:e0:e8:02:27:23:50:45:d9:1d:cb:43:13:99:dd: 40:32:29:7d:c0:d2:c4:ee:50:c6:17:f5:c5:27:a3: 7b:9f:a9:fb:ba:2b:e1:66:1b:f7:d6:c3:94:53:ad: 64:ad:af:48:1c:be:50:53:5a:59:b0:35:91:79:ca: 43:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: CA Repository - URI:rsync://rpki.cc/repo/MythicalKitten/12/ RPKI Manifest - URI:rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.mft RPKI Notify - URI:https://rpki.cc/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1::/36 2a07:54c1:3200::/40 2a07:54c1:6000::/36 2a07:54c1:8000::/36 Signature Algorithm: sha256WithRSAEncryption 7d:72:ca:68:54:eb:1c:6d:60:98:85:96:0d:be:78:30:02:7e: b8:3b:a5:a2:d6:00:47:b3:d6:a8:a7:e5:b6:ee:1c:88:9e:ea: cc:31:16:07:69:45:3e:f1:b4:43:03:76:23:ea:32:df:f6:f5: d6:ed:77:2f:07:d7:f7:3d:1a:e3:10:9d:4f:b3:55:ab:68:3d: 35:61:20:49:6e:57:12:33:c5:fc:68:64:b5:d8:14:f5:8e:39: e8:63:fe:9d:bf:a3:54:32:00:89:a3:5d:1c:41:69:47:d6:18: 56:8c:2c:6d:a4:33:b0:38:14:0c:e1:fb:c6:fe:a6:4f:1c:ec: 30:d7:01:eb:5d:e0:8e:6e:38:6c:3c:30:b4:19:0e:9a:7c:93: e8:5a:7b:74:d6:c5:49:cd:14:46:ea:5b:e8:36:00:89:2a:62: f0:51:2d:df:d0:67:b8:e8:30:90:f2:60:a4:cd:cb:5b:d4:71: ac:be:d1:5e:a1:d3:21:19:5a:38:04:4a:07:d0:20:13:81:b3: 07:76:01:96:c5:58:8c:6e:d0:09:84:ed:ee:26:35:0a:e9:e9: 3e:5d:c5:69:6f:af:96:30:52:3e:e7:e2:a6:d7:db:71:48:ee: 2b:8b:6e:6e:ce:f4:42:80:0f:7e:2d:e4:bb:eb:19:14:ac:f9: 36:1f:8b:0e -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgIUMGukhw+RJfC13lZ1Q1UyTpCNUugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yMzEwMTgyMjMwMDJaFw0yNDEwMTYyMjM1MDJaMDMxMTAvBgNV BAMTKEY5ODExOTg4QkFBQ0NEODE0NkMzQzdBQzRGNDhEMDBGOUY0NzIzMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuF300/mRJx5WFrv70P2mby1Fe WW4nQySSUJc5bay4031SLt64o0kWkobfLN1UDK/eZRr7lGF6lI6YrQRoLdBYdPVC cp0vWMDLX+b4mjJzikVufzZNoPtpApf0CidLvZWnXjUc163V3lXFh5jKygBhctj3 zrix9wbI6bEHUDhp0xDhVXx+RGM4AaxDaphxeu2VaKVpENlwDUh2Woo6/mCVA+3l BaPgSiyzjaXkmNYx+DoP8br3i+3nP6bOGjy/9xaeG/Pg6AInI1BF2R3LQxOZ3UAy KX3A0sTuUMYX9cUno3ufqfu6K+FmG/fWw5RTrWStr0gcvlBTWlmwNZF5ykPHAgMB AAGjggLEMIICwDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT5gRmIuqzNgUbD x6xPSNAPn0cjDjAfBgNVHSMEGDAWgBRB9lfPNWTyM7l39ArKXkvRDh4vjjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC80MUY2NTdDRjM1NjRGMjMzQjk3N0Y0MEFD QTVFNEJEMTBFMUUyRjhFLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi80MUY2NTdDRjM1NjRGMjMzQjk3 N0Y0MEFDQTVFNEJEMTBFMUUyRjhFLmNlcjCB2QYIKwYBBQUHAQsEgcwwgckwMwYI KwYBBQUHMAWGJ3JzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVuLzEy LzBfBggrBgEFBQcwCoZTcnN5bmM6Ly9ycGtpLmNjL3JlcG8vTXl0aGljYWxLaXR0 ZW4vMTIvRjk4MTE5ODhCQUFDQ0Q4MTQ2QzNDN0FDNEY0OEQwMEY5RjQ3MjMwRS5t ZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jYy9ycmRwL25vdGlmaWNhdGlv bi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5BggrBgEFBQcBBwEB/wQq MCgwJgQCAAIwIAMGBCoHVMEAAwYAKgdUwTIDBgQqB1TBYAMGBCoHVMGAMA0GCSqG SIb3DQEBCwUAA4IBAQB9cspoVOscbWCYhZYNvngwAn64O6Wi1gBHs9aop+W27hyI nurMMRYHaUU+8bRDA3Yj6jLf9vXW7XcvB9f3PRrjEJ1Ps1WraD01YSBJblcSM8X8 aGS12BT1jjnoY/6dv6NUMgCJo10cQWlH1hhWjCxtpDOwOBQM4fvG/qZPHOww1wHr XeCObjhsPDC0GQ6afJPoWnt01sVJzRRG6lvoNgCJKmLwUS3f0Ge46DCQ8mCkzctb 1HGsvtFeodMhGVo4BEoH0CATgbMHdgGWxViMbtAJhO3uJjUK6ek+XcVpb6+WMFI+ 5+Km19txSO4ri25uzvRCgA9+LeS76xkUrPk2H4sO -----END CERTIFICATE-----Generated at Wed May 29 20:13:45 2024 by rpki-client on console-fra.rpki-client.org