$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/04FD5E4B6BE832540092C7FB3E83B144BC0238D2.cer File: 04FD5E4B6BE832540092C7FB3E83B144BC0238D2.cer (raw, json) Hash identifier: Lqzu0zRF4sVEDyob037u6i+wipBza8TEd8a+UjFFogw= Subject key identifier: 04:FD:5E:4B:6B:E8:32:54:00:92:C7:FB:3E:83:B1:44:BC:02:38:D2 Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 19A67ED6205165FA1F0C65336AD8142E8A17E826 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Manifest: rsync://rpki.cc/repo/AlbroHoldings/0/04FD5E4B6BE832540092C7FB3E83B144BC0238D2.mft caRepository: rsync://rpki.cc/repo/AlbroHoldings/0/ Notify URL: https://rpki.cc/rrdp/notification.xml Certificate not before: Wed 19 Mar 2025 00:41:08 +0000 Certificate not after: Wed 18 Mar 2026 00:46:08 +0000 Subordinate resources: IP: 2a07:54c1:c000::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 18:20:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:a6:7e:d6:20:51:65:fa:1f:0c:65:33:6a:d8:14:2e:8a:17:e8:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: Mar 19 00:41:08 2025 GMT Not After : Mar 18 00:46:08 2026 GMT Subject: CN=04FD5E4B6BE832540092C7FB3E83B144BC0238D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d5:a2:cc:70:f5:85:bc:39:19:0a:99:7c:1e: 4d:0f:1e:3e:2f:0b:d1:df:f0:e6:f6:46:9f:de:84: 79:85:9e:91:f2:3f:85:ed:97:e0:95:6b:ce:99:69: 31:c9:96:b3:76:0c:f6:ae:df:73:c3:e1:73:e8:4e: c7:87:41:fe:16:d7:21:7f:ef:f9:03:f5:7e:22:1b: 04:14:b0:2d:bd:40:3d:41:03:70:61:bf:b1:e6:93: ba:6d:34:3f:a6:ca:14:7a:3b:5e:c1:b8:bd:4e:a2: ce:3f:32:75:b5:a4:fb:03:54:f8:c2:00:d0:d7:30: f2:f4:6d:75:1e:bc:d9:4e:a2:c9:ad:e5:d9:2f:dc: 86:e8:10:f4:b5:48:90:bf:e2:c3:f6:06:6d:2b:4e: 5f:69:2f:b1:8f:b9:ed:5b:33:81:6f:2e:10:e9:6b: 59:62:3e:f2:8f:a1:00:cb:32:51:85:bd:ec:d2:ee: 4a:d0:10:6e:c0:36:36:c5:9a:25:76:02:c0:7e:cc: 27:10:c7:e2:2f:77:6f:7d:d5:af:23:56:a9:fd:c5: 7f:96:b1:52:f8:8a:3e:68:b5:89:94:44:e4:9d:9f: 67:d5:7f:9e:27:a0:4b:39:5a:8c:9f:75:04:d9:e7: 5e:64:ed:94:be:52:f5:6d:fd:15:0f:8d:27:39:e7: a5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 04:FD:5E:4B:6B:E8:32:54:00:92:C7:FB:3E:83:B1:44:BC:02:38:D2 X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: CA Repository - URI:rsync://rpki.cc/repo/AlbroHoldings/0/ RPKI Manifest - URI:rsync://rpki.cc/repo/AlbroHoldings/0/04FD5E4B6BE832540092C7FB3E83B144BC0238D2.mft RPKI Notify - URI:https://rpki.cc/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:c000::/40 Signature Algorithm: sha256WithRSAEncryption 58:10:a8:51:53:65:ad:95:a6:7d:77:0a:2e:90:ea:13:44:29: f5:82:92:e1:13:43:b5:a8:e9:73:59:0c:92:42:99:d0:b2:42: 68:3f:20:2b:91:87:fc:d5:ce:4e:ce:65:20:a0:b3:bc:d9:ca: d4:f4:b3:5c:8f:a1:25:b5:76:63:1e:e0:43:ca:96:05:7e:30: d3:92:ed:d7:e9:99:85:d6:54:26:2b:cf:c9:c0:02:66:64:aa: 49:4d:29:5d:a6:df:d9:04:05:18:a7:f2:b1:a8:87:ee:e4:0c: e4:0e:91:c6:d0:61:08:fb:95:95:07:5d:88:9e:f4:de:4a:94: 07:5c:a0:fa:74:ee:64:94:6c:48:c4:2f:8c:03:3c:69:e4:2d: 60:7e:66:61:e9:3e:f4:2d:92:b7:4a:53:a1:e1:3a:ff:02:5f: 70:f2:8c:66:22:37:61:9a:14:75:53:cf:f9:03:f0:df:6e:64: e0:3a:4c:f6:fa:20:40:b4:32:c8:02:76:c0:2b:75:b6:48:88: 2c:72:45:e0:a5:e3:df:a5:2a:b8:8c:46:69:5c:cc:f2:d9:47: 98:85:e8:c6:2c:d8:4e:6a:c6:e1:df:5a:d8:2b:04:90:c3:5f: 90:e1:a6:d9:47:6b:77:98:80:f2:d6:37:a2:4e:6a:6c:7b:d3: bc:1f:49:8d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUGaZ+1iBRZfofDGUzatgULooX6CYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yNTAzMTkwMDQxMDhaFw0yNjAzMTgwMDQ2MDhaMDMxMTAvBgNV BAMTKDA0RkQ1RTRCNkJFODMyNTQwMDkyQzdGQjNFODNCMTQ0QkMwMjM4RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz1aLMcPWFvDkZCpl8Hk0PHj4v C9Hf8Ob2Rp/ehHmFnpHyP4Xtl+CVa86ZaTHJlrN2DPau33PD4XPoTseHQf4W1yF/ 7/kD9X4iGwQUsC29QD1BA3Bhv7Hmk7ptND+myhR6O17BuL1Oos4/MnW1pPsDVPjC ANDXMPL0bXUevNlOosmt5dkv3IboEPS1SJC/4sP2Bm0rTl9pL7GPue1bM4FvLhDp a1liPvKPoQDLMlGFvezS7krQEG7ANjbFmiV2AsB+zCcQx+Ivd2991a8jVqn9xX+W sVL4ij5otYmUROSdn2fVf54noEs5WoyfdQTZ515k7ZS+UvVt/RUPjSc556UzAgMB AAGjggKoMIICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQE/V5La+gyVACS x/s+g7FEvAI40jAfBgNVHSMEGDAWgBRB9lfPNWTyM7l39ArKXkvRDh4vjjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC80MUY2NTdDRjM1NjRGMjMzQjk3N0Y0MEFD QTVFNEJEMTBFMUUyRjhFLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi80MUY2NTdDRjM1NjRGMjMzQjk3 N0Y0MEFDQTVFNEJEMTBFMUUyRjhFLmNlcjCB1QYIKwYBBQUHAQsEgcgwgcUwMQYI KwYBBQUHMAWGJXJzeW5jOi8vcnBraS5jYy9yZXBvL0FsYnJvSG9sZGluZ3MvMC8w XQYIKwYBBQUHMAqGUXJzeW5jOi8vcnBraS5jYy9yZXBvL0FsYnJvSG9sZGluZ3Mv MC8wNEZENUU0QjZCRTgzMjU0MDA5MkM3RkIzRTgzQjE0NEJDMDIzOEQyLm1mdDAx BggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNjL3JyZHAvbm90aWZpY2F0aW9uLnht bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAKgdUwcAwDQYJKoZIhvcNAQELBQADggEBAFgQqFFTZa2Vpn13Ci6Q 6hNEKfWCkuETQ7Wo6XNZDJJCmdCyQmg/ICuRh/zVzk7OZSCgs7zZytT0s1yPoSW1 dmMe4EPKlgV+MNOS7dfpmYXWVCYrz8nAAmZkqklNKV2m39kEBRin8rGoh+7kDOQO kcbQYQj7lZUHXYie9N5KlAdcoPp07mSUbEjEL4wDPGnkLWB+ZmHpPvQtkrdKU6Hh Ov8CX3DyjGYiN2GaFHVTz/kD8N9uZOA6TPb6IEC0MsgCdsArdbZIiCxyReCl49+l KriMRmlczPLZR5iF6MYs2E5qxuHfWtgrBJDDX5DhptlHa3eYgPLWN6JOamx707wf SY0= -----END CERTIFICATE-----Generated at Wed Apr 30 08:14:19 2025 by rpki-client