$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer File: B6366F3DD14AC5399103961C30642E6779892C6C.cer (raw, json) Hash identifier: KJ+mUmQkTHZcaMAkHgWgw97MS6tbU88ojRJj22G/mvw= Subject key identifier: B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C Authority key identifier: 20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59 Certificate issuer: /CN=20595BDBAD09C7D604202305854D1DF14F190959 Certificate serial: 36682ADF8BEDCC81183C90D489715D9C02CA5D7B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 20 Sep 2024 16:21:10 +0000 Certificate not after: Fri 19 Sep 2025 16:26:10 +0000 Subordinate resources: IP: 2a06:1283:8000::/36 IP: 2a06:1283:c110::/44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Sep 2024 07:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:68:2a:df:8b:ed:cc:81:18:3c:90:d4:89:71:5d:9c:02:ca:5d:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20595BDBAD09C7D604202305854D1DF14F190959 Validity Not Before: Sep 20 16:21:10 2024 GMT Not After : Sep 19 16:26:10 2025 GMT Subject: CN=B6366F3DD14AC5399103961C30642E6779892C6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a7:56:3d:88:05:b9:d3:7c:c4:b8:ae:0c:54: 2a:53:5c:51:24:b7:a1:4e:0a:dd:cf:2b:1a:de:a1: 66:fd:eb:82:69:25:31:b1:65:ea:74:40:e5:93:e5: d1:cb:50:02:81:ad:ce:ef:43:1a:13:c7:0a:57:3d: 1f:ed:24:ce:c2:db:b5:6c:87:70:68:bc:45:e4:49: 4d:e4:9b:2e:24:28:1f:f2:96:7f:18:78:bb:3d:d7: e6:ff:d6:98:e0:48:62:e2:60:43:56:06:dc:ed:10: b7:6e:fa:c9:02:a7:7f:c4:21:8b:c0:ae:f1:e5:64: f7:48:a5:ec:82:c3:59:e9:1c:9e:cf:a0:95:ba:56: b7:21:c0:36:e0:5c:5e:f1:3b:42:7a:e8:1e:2a:17: 44:1d:b6:0b:5d:82:3e:78:5e:e7:50:5f:ee:63:87: ea:41:b2:d3:24:93:58:44:6e:29:4a:0d:42:f2:a7: 07:30:ed:9c:6d:e7:3b:3d:90:2f:c0:9f:11:9b:ec: dc:3a:42:cf:bf:6a:82:13:70:82:fc:95:ea:75:ca: 05:ac:3e:12:12:fd:dc:f4:5e:0a:d4:8c:0d:c7:f7: 86:2e:2d:c8:6c:e6:1a:36:f7:c6:01:96:84:11:a9: ba:b1:17:b2:63:3b:4c:96:1b:b9:e7:b3:99:a0:a5: f1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C X509v3 Authority Key Identifier: keyid:20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8000::/36 2a06:1283:c110::/44 Signature Algorithm: sha256WithRSAEncryption be:60:d8:3d:6e:0a:cd:a6:16:c1:2d:2d:4d:4b:4e:14:a6:8f: a4:15:4b:d5:8d:4b:d7:90:42:36:8f:b4:a2:31:75:09:8a:5e: 58:92:44:9a:9e:4f:87:12:1f:ef:8a:4a:3a:52:c0:84:02:0e: 9c:f6:83:da:3f:98:ee:c2:06:f3:a1:1b:fa:af:10:f8:d7:d3: 14:aa:2c:d8:1a:b3:b6:e4:63:0b:5c:c5:dd:05:1a:bb:e0:db: 96:50:b5:34:f3:5a:f3:e6:3f:ac:2a:d5:6b:0a:1b:9f:c5:8a: f1:ad:b1:a7:bf:ee:76:b5:6c:c1:b9:04:2a:84:09:18:a1:44: 2d:9d:a4:0f:e3:f3:ba:cb:c5:f9:88:ad:66:db:96:d4:5b:5f: e5:8b:6f:88:18:d7:d4:fc:5a:bd:b2:ee:41:5c:ba:13:d6:65: f0:97:2a:cc:7e:c1:81:6f:ce:28:70:94:f2:0f:c3:27:9c:15: 6a:31:a9:56:a8:16:fe:e2:f4:8b:51:27:50:34:aa:b4:69:89: 8b:0c:c4:31:2e:f5:54:56:d4:10:95:a3:03:f0:c0:f2:55:48: 54:4d:e8:0d:96:96:54:e8:2a:65:be:11:28:a1:53:71:9f:86: ce:bd:49:27:b4:4f:74:c5:76:4f:e4:82:cb:41:23:0a:32:1e: 99:ce:86:aa -----BEGIN CERTIFICATE----- MIIGEjCCBPqgAwIBAgIUNmgq34vtzIEYPJDUiXFdnALKXXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA1OTVCREJBRDA5QzdENjA0MjAyMzA1ODU0RDFERjE0 RjE5MDk1OTAeFw0yNDA5MjAxNjIxMTBaFw0yNTA5MTkxNjI2MTBaMDMxMTAvBgNV BAMTKEI2MzY2RjNERDE0QUM1Mzk5MTAzOTYxQzMwNjQyRTY3Nzk4OTJDNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvp1Y9iAW503zEuK4MVCpTXFEk t6FOCt3PKxreoWb964JpJTGxZep0QOWT5dHLUAKBrc7vQxoTxwpXPR/tJM7C27Vs h3BovEXkSU3kmy4kKB/yln8YeLs91+b/1pjgSGLiYENWBtztELdu+skCp3/EIYvA rvHlZPdIpeyCw1npHJ7PoJW6VrchwDbgXF7xO0J66B4qF0Qdtgtdgj54XudQX+5j h+pBstMkk1hEbilKDULypwcw7Zxt5zs9kC/AnxGb7Nw6Qs+/aoITcIL8lep1ygWs PhIS/dz0XgrUjA3H94YuLchs5ho298YBloQRqbqxF7JjO0yWG7nns5mgpfE5AgMB AAGjggMcMIIDGDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS2Nm890UrFOZED lhwwZC5neYksbDAfBgNVHSMEGDAWgBQgWVvbrQnH1gQgIwWFTR3xTxkJWTAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvMS8yMDU5NUJEQkFEMDlDN0Q2MDQyMDIzMDU4 NTREMURGMTRGMTkwOTU5LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi8yMDU5NUJEQkFEMDlDN0Q2MDQy MDIzMDU4NTREMURGMTRGMTkwOTU5LmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4MDhiLzIv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIv Mi9CNjM2NkYzREQxNEFDNTM5OTEwMzk2MUMzMDY0MkU2Nzc5ODkyQzZDLm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKgYIKwYBBQUH AQcBAf8EGzAZMBcEAgACMBEDBgQqBhKDgAMHBCoGEoPBEDANBgkqhkiG9w0BAQsF AAOCAQEAvmDYPW4KzaYWwS0tTUtOFKaPpBVL1Y1L15BCNo+0ojF1CYpeWJJEmp5P hxIf74pKOlLAhAIOnPaD2j+Y7sIG86Eb+q8Q+NfTFKos2BqztuRjC1zF3QUau+Db llC1NPNa8+Y/rCrVawobn8WK8a2xp7/udrVswbkEKoQJGKFELZ2kD+PzusvF+Yit ZtuW1Ftf5YtviBjX1PxavbLuQVy6E9Zl8JcqzH7BgW/OKHCU8g/DJ5wVajGpVqgW /uL0i1EnUDSqtGmJiwzEMS71VFbUEJWjA/DA8lVIVE3oDZaWVOgqZb4RKKFTcZ+G zr1JJ7RPdMV2T+SCy0EjCjIemc6Gqg== -----END CERTIFICATE-----Generated at Sat Sep 28 16:24:42 2024 by rpki-client on console-fra.rpki-client.org