$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer File: F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer (raw, json) Hash identifier: 1m0kYwD3mYbBVC48zxoF18Uoz8A2l1GmlwUu5GiXm/w= Subject key identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 38C6315A5E57B144C3B8F643FF00777621E55FCD Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Manifest: rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.mft caRepository: rsync://rpki.cc/repo/MythicalKitten/12/ Notify URL: https://rpki.cc/rrdp/notification.xml Certificate not before: Fri 20 Sep 2024 00:01:57 +0000 Certificate not after: Fri 19 Sep 2025 00:06:57 +0000 Subordinate resources: IP: 2a07:54c1::/36 IP: 2a07:54c1:3200::/40 IP: 2a07:54c1:6000::/36 IP: 2a07:54c1:8000::/36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Nov 2024 06:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:c6:31:5a:5e:57:b1:44:c3:b8:f6:43:ff:00:77:76:21:e5:5f:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: Sep 20 00:01:57 2024 GMT Not After : Sep 19 00:06:57 2025 GMT Subject: CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:17:7d:34:fe:64:49:c7:95:85:ae:fe:f4:3f: 69:9b:cb:51:5e:59:6e:27:43:24:92:50:97:39:6d: ac:b8:d3:7d:52:2e:de:b8:a3:49:16:92:86:df:2c: dd:54:0c:af:de:65:1a:fb:94:61:7a:94:8e:98:ad: 04:68:2d:d0:58:74:f5:42:72:9d:2f:58:c0:cb:5f: e6:f8:9a:32:73:8a:45:6e:7f:36:4d:a0:fb:69:02: 97:f4:0a:27:4b:bd:95:a7:5e:35:1c:d7:ad:d5:de: 55:c5:87:98:ca:ca:00:61:72:d8:f7:ce:b8:b1:f7: 06:c8:e9:b1:07:50:38:69:d3:10:e1:55:7c:7e:44: 63:38:01:ac:43:6a:98:71:7a:ed:95:68:a5:69:10: d9:70:0d:48:76:5a:8a:3a:fe:60:95:03:ed:e5:05: a3:e0:4a:2c:b3:8d:a5:e4:98:d6:31:f8:3a:0f:f1: ba:f7:8b:ed:e7:3f:a6:ce:1a:3c:bf:f7:16:9e:1b: f3:e0:e8:02:27:23:50:45:d9:1d:cb:43:13:99:dd: 40:32:29:7d:c0:d2:c4:ee:50:c6:17:f5:c5:27:a3: 7b:9f:a9:fb:ba:2b:e1:66:1b:f7:d6:c3:94:53:ad: 64:ad:af:48:1c:be:50:53:5a:59:b0:35:91:79:ca: 43:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: CA Repository - URI:rsync://rpki.cc/repo/MythicalKitten/12/ RPKI Manifest - URI:rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.mft RPKI Notify - URI:https://rpki.cc/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1::/36 2a07:54c1:3200::/40 2a07:54c1:6000::/36 2a07:54c1:8000::/36 Signature Algorithm: sha256WithRSAEncryption 1f:c0:9b:68:d0:f2:43:2a:98:a8:88:96:38:1c:b5:d1:b9:53: 45:a5:91:d4:e4:74:6e:7d:7f:75:33:a6:0e:24:2b:0a:11:92: f9:19:4c:0f:7b:33:6e:65:db:68:55:b2:06:dd:29:a8:04:fb: 60:98:f0:59:7a:58:35:af:94:f8:cd:ec:14:e2:99:0a:8a:65: 6a:b0:d0:f0:c6:80:97:0d:c5:12:a3:75:2c:e1:db:2e:79:d3: f1:f5:52:9d:4d:f5:01:d4:fd:d5:02:97:e3:3e:d2:13:46:be: bc:90:44:18:68:ca:95:76:6e:ae:89:da:49:68:24:71:4e:77: 24:3e:04:16:21:8c:c4:ab:10:4d:63:9c:9c:e6:8d:46:85:d0: 17:19:43:6c:ec:46:ac:68:ca:a1:36:32:17:91:a4:2f:47:ac: 49:35:d1:a9:e7:8f:47:df:44:17:e9:e8:d6:33:49:2f:e1:69: 96:09:14:38:04:ba:88:8a:55:d3:77:8d:17:a9:7d:4b:68:18: 26:43:84:97:08:d1:e5:ee:e5:0b:e7:7c:6c:e4:e4:eb:f3:46: da:ae:ae:75:fb:86:d9:6c:47:95:35:93:63:cf:8a:37:75:9e: 4f:6c:62:12:3c:d7:8d:c0:4a:d7:b0:28:77:c8:23:3b:f3:8d: 6a:e3:d0:86 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgIUOMYxWl5XsUTDuPZD/wB3diHlX80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yNDA5MjAwMDAxNTdaFw0yNTA5MTkwMDA2NTdaMDMxMTAvBgNV BAMTKEY5ODExOTg4QkFBQ0NEODE0NkMzQzdBQzRGNDhEMDBGOUY0NzIzMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuF300/mRJx5WFrv70P2mby1Fe WW4nQySSUJc5bay4031SLt64o0kWkobfLN1UDK/eZRr7lGF6lI6YrQRoLdBYdPVC cp0vWMDLX+b4mjJzikVufzZNoPtpApf0CidLvZWnXjUc163V3lXFh5jKygBhctj3 zrix9wbI6bEHUDhp0xDhVXx+RGM4AaxDaphxeu2VaKVpENlwDUh2Woo6/mCVA+3l BaPgSiyzjaXkmNYx+DoP8br3i+3nP6bOGjy/9xaeG/Pg6AInI1BF2R3LQxOZ3UAy KX3A0sTuUMYX9cUno3ufqfu6K+FmG/fWw5RTrWStr0gcvlBTWlmwNZF5ykPHAgMB AAGjggLEMIICwDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT5gRmIuqzNgUbD x6xPSNAPn0cjDjAfBgNVHSMEGDAWgBRB9lfPNWTyM7l39ArKXkvRDh4vjjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC80MUY2NTdDRjM1NjRGMjMzQjk3N0Y0MEFD QTVFNEJEMTBFMUUyRjhFLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi80MUY2NTdDRjM1NjRGMjMzQjk3 N0Y0MEFDQTVFNEJEMTBFMUUyRjhFLmNlcjCB2QYIKwYBBQUHAQsEgcwwgckwMwYI KwYBBQUHMAWGJ3JzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVuLzEy LzBfBggrBgEFBQcwCoZTcnN5bmM6Ly9ycGtpLmNjL3JlcG8vTXl0aGljYWxLaXR0 ZW4vMTIvRjk4MTE5ODhCQUFDQ0Q4MTQ2QzNDN0FDNEY0OEQwMEY5RjQ3MjMwRS5t ZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jYy9ycmRwL25vdGlmaWNhdGlv bi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5BggrBgEFBQcBBwEB/wQq MCgwJgQCAAIwIAMGBCoHVMEAAwYAKgdUwTIDBgQqB1TBYAMGBCoHVMGAMA0GCSqG SIb3DQEBCwUAA4IBAQAfwJto0PJDKpioiJY4HLXRuVNFpZHU5HRufX91M6YOJCsK EZL5GUwPezNuZdtoVbIG3SmoBPtgmPBZelg1r5T4zewU4pkKimVqsNDwxoCXDcUS o3Us4dsuedPx9VKdTfUB1P3VApfjPtITRr68kEQYaMqVdm6uidpJaCRxTnckPgQW IYzEqxBNY5yc5o1GhdAXGUNs7EasaMqhNjIXkaQvR6xJNdGp549H30QX6ejWM0kv 4WmWCRQ4BLqIilXTd40XqX1LaBgmQ4SXCNHl7uUL53xs5OTr80barq51+4bZbEeV NZNjz4o3dZ5PbGISPNeNwErXsCh3yCM7841q49CG -----END CERTIFICATE-----Generated at Sat Nov 23 16:20:23 2024 by rpki-client on console-fra.rpki-client.org