$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/FA8F32A0B21DD2779315422B5A2184C649E03C0B.cer File: FA8F32A0B21DD2779315422B5A2184C649E03C0B.cer (raw, json) Hash identifier: IC6Df5qzBYIYOntXm3i0ISJed+JXK4QOPLs0jOGtkGA= Subject key identifier: FA:8F:32:A0:B2:1D:D2:77:93:15:42:2B:5A:21:84:C6:49:E0:3C:0B Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 0BC427DCF39882D81914FB9B4CCD3A2CA62D7B10 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 20 Aug 2024 14:14:55 +0000 Certificate not after: Tue 19 Aug 2025 14:19:55 +0000 Subordinate resources: IP: 2a07:54c1:f000::/36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:c4:27:dc:f3:98:82:d8:19:14:fb:9b:4c:cd:3a:2c:a6:2d:7b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: Aug 20 14:14:55 2024 GMT Not After : Aug 19 14:19:55 2025 GMT Subject: CN=FA8F32A0B21DD2779315422B5A2184C649E03C0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:56:76:c5:26:3e:aa:af:76:c4:0b:94:d0:dc: ec:c4:da:8b:0f:79:4f:ee:02:23:e8:0e:b1:78:98: b4:1c:0f:16:b2:68:0b:a5:a7:92:d6:ab:9e:a6:a7: c1:13:e9:7b:9a:9a:f7:81:1a:58:57:fe:d9:37:6b: 05:7d:aa:b5:f2:c0:8a:4e:25:61:af:22:4c:d0:fc: 0c:06:01:f7:bf:db:1e:d9:34:61:17:71:a2:61:13: 62:d1:f5:62:16:33:70:90:f0:5f:65:92:1a:2f:0a: f9:fe:3c:87:51:28:e0:eb:6e:c4:96:dc:b8:62:7c: e2:d7:1a:92:98:6e:22:e6:29:e8:5e:3e:96:fd:5b: 36:b9:45:b4:72:44:43:4e:11:80:95:3d:d4:65:1e: c0:4f:b0:bf:70:61:c6:c2:76:29:f2:a2:91:42:65: fe:9e:31:76:4d:34:e2:9d:e9:fc:03:8b:32:df:eb: 37:0b:67:10:d0:27:b5:ad:0b:5b:b5:c9:8a:a0:2b: a8:70:f8:1a:87:38:a1:64:f7:97:75:85:7e:b0:81: be:61:31:b6:9e:3a:42:fa:4a:fd:e9:3d:51:10:4b: 28:d8:77:93:0f:a3:e6:d8:60:d1:fd:b7:d8:c3:f9: 24:29:8e:20:6a:2b:37:07:fb:e9:93:42:81:03:56: 52:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FA:8F:32:A0:B2:1D:D2:77:93:15:42:2B:5A:21:84:C6:49:E0:3C:0B X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:f000::/36 Signature Algorithm: sha256WithRSAEncryption 50:99:04:7e:79:35:e8:c9:14:dd:8f:93:8b:15:24:39:5c:18: 98:a3:86:c7:dd:34:c9:54:f4:de:9f:87:8f:36:69:e1:2c:58: b8:4f:4f:43:ea:f7:b9:75:60:73:c5:95:76:b6:8b:b9:00:47: 65:37:d3:6a:46:14:17:74:a8:78:2a:6b:88:a1:a3:a8:44:01: 7c:60:8a:0c:c7:24:ee:6e:2b:85:6a:66:b8:2e:02:07:e6:2a: b7:40:ce:d4:65:03:87:52:cb:b7:96:fe:35:f5:e8:8b:4d:b4: 9b:1e:1d:1f:98:6f:59:ab:8c:e5:59:e3:c0:f5:d6:aa:98:4f: 50:b9:4f:e6:e6:92:48:d4:dc:1f:f9:2e:da:f5:53:98:45:67: d1:6b:83:fc:d6:1d:a8:30:4f:94:87:91:7a:17:31:f4:46:4c: b0:0d:c8:10:38:67:84:de:7f:57:2d:61:1f:a2:f3:0b:fe:6f: aa:16:4b:d9:b4:91:1c:d4:e6:53:33:5c:36:1f:fb:a5:d4:f7: b4:f4:c4:7d:68:8c:ed:3c:57:ad:cf:a3:7d:32:cd:d4:40:a3: 7c:ed:a0:08:e3:35:0d:bf:fd:8f:60:4e:cc:f0:be:94:41:65: f7:2e:26:7d:37:6d:48:de:f6:6a:20:b5:38:f0:4e:ea:83:1c: 86:20:5f:29 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgIUC8Qn3POYgtgZFPubTM06LKYtexAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yNDA4MjAxNDE0NTVaFw0yNTA4MTkxNDE5NTVaMDMxMTAvBgNV BAMTKEZBOEYzMkEwQjIxREQyNzc5MzE1NDIyQjVBMjE4NEM2NDlFMDNDMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZVnbFJj6qr3bEC5TQ3OzE2osP eU/uAiPoDrF4mLQcDxayaAulp5LWq56mp8ET6XuamveBGlhX/tk3awV9qrXywIpO JWGvIkzQ/AwGAfe/2x7ZNGEXcaJhE2LR9WIWM3CQ8F9lkhovCvn+PIdRKODrbsSW 3LhifOLXGpKYbiLmKehePpb9Wza5RbRyRENOEYCVPdRlHsBPsL9wYcbCdinyopFC Zf6eMXZNNOKd6fwDizLf6zcLZxDQJ7WtC1u1yYqgK6hw+BqHOKFk95d1hX6wgb5h MbaeOkL6Sv3pPVEQSyjYd5MPo+bYYNH9t9jD+SQpjiBqKzcH++mTQoEDVlJvAgMB AAGjggMTMIIDDzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT6jzKgsh3Sd5MV QitaIYTGSeA8CzAfBgNVHSMEGDAWgBRB9lfPNWTyM7l39ArKXkvRDh4vjjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC80MUY2NTdDRjM1NjRGMjMzQjk3N0Y0MEFD QTVFNEJEMTBFMUUyRjhFLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi80MUY2NTdDRjM1NjRGMjMzQjk3 N0Y0MEFDQTVFNEJEMTBFMUUyRjhFLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFjMTFiLzEv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS83MTQ3NmQ2Mi05Y2ZhLTQ4NzEtYTJkOS1mYWRmNTc4MWMxMWIv MS9GQThGMzJBMEIyMUREMjc3OTMxNTQyMkI1QTIxODRDNjQ5RTAzQzBCLm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQqB1TB8DANBgkqhkiG9w0BAQsFAAOCAQEAUJkE fnk16MkU3Y+TixUkOVwYmKOGx900yVT03p+HjzZp4SxYuE9PQ+r3uXVgc8WVdraL uQBHZTfTakYUF3SoeCpriKGjqEQBfGCKDMck7m4rhWpmuC4CB+Yqt0DO1GUDh1LL t5b+NfXoi020mx4dH5hvWauM5VnjwPXWqphPULlP5uaSSNTcH/ku2vVTmEVn0WuD /NYdqDBPlIeRehcx9EZMsA3IEDhnhN5/Vy1hH6LzC/5vqhZL2bSRHNTmUzNcNh/7 pdT3tPTEfWiM7TxXrc+jfTLN1ECjfO2gCOM1Db/9j2BOzPC+lEFl9y4mfTdtSN72 aiC1OPBO6oMchiBfKQ== -----END CERTIFICATE-----Generated at Thu Nov 21 12:18:36 2024 by rpki-client on console-ams.rpki-client.org