$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/491E7C1B3D725A4C67A798CEC21F6A699D82853A.cer File: 491E7C1B3D725A4C67A798CEC21F6A699D82853A.cer (raw, json) Hash identifier: 3hCWy+mftBR83y6bEAb8fM/tBtqYxFt2uOB3nCnLNjs= Subject key identifier: 49:1E:7C:1B:3D:72:5A:4C:67:A7:98:CE:C2:1F:6A:69:9D:82:85:3A Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 5FCBE3963F4313E4994A2C7A471E835F42908394 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/74c1572c-e97c-4100-aeff-1373f4e9433a/1/491E7C1B3D725A4C67A798CEC21F6A699D82853A.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/74c1572c-e97c-4100-aeff-1373f4e9433a/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 07 Sep 2024 19:30:40 +0000 Certificate not after: Sat 06 Sep 2025 19:35:40 +0000 Subordinate resources: IP: 2a0a:6044:c110::/44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Sep 2024 07:48:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:cb:e3:96:3f:43:13:e4:99:4a:2c:7a:47:1e:83:5f:42:90:83:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Sep 7 19:30:40 2024 GMT Not After : Sep 6 19:35:40 2025 GMT Subject: CN=491E7C1B3D725A4C67A798CEC21F6A699D82853A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0c:d4:0a:97:93:f7:45:26:1d:f4:58:b4:e1: 3c:7a:9b:84:4e:8b:f9:bf:79:12:21:e3:5d:70:24: 3c:27:90:95:94:8b:e2:ea:de:22:91:15:ba:d3:00: f9:33:ed:1e:66:dd:8c:73:04:25:2e:9f:c4:44:a4: e9:b0:03:89:85:de:c6:7a:be:2d:f6:41:6e:36:da: 5e:9a:6f:4e:e7:95:ac:c4:ec:66:4b:77:3c:37:eb: 0d:8b:ac:bb:38:43:0c:2f:b9:f3:d1:b4:cc:e6:8f: 51:08:86:f7:c4:e2:67:8d:2a:42:f3:f2:86:cb:7d: 57:f1:ec:af:57:96:49:7a:ed:f8:71:f2:ec:ca:09: 6c:11:ce:5c:53:b5:8b:83:d1:c7:c1:c8:cd:77:78: 59:aa:78:df:24:a1:7e:30:50:12:03:78:0d:ae:0c: f4:22:82:83:15:64:5f:0e:8e:b8:4a:dc:c9:1a:f6: 3b:2e:8e:40:1e:b0:1e:07:2d:bd:b7:8a:72:94:2e: 9c:e5:ef:fe:30:bf:c8:23:54:6c:f9:59:44:4c:2a: 30:f3:ea:ab:a2:59:4a:b0:c2:61:07:01:44:de:d9: 59:1d:9d:2c:95:27:64:7d:84:3f:9a:b8:86:c4:c7: a0:7d:a1:3f:7b:ef:d9:99:86:71:f2:67:b1:52:87: 1c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 49:1E:7C:1B:3D:72:5A:4C:67:A7:98:CE:C2:1F:6A:69:9D:82:85:3A X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/74c1572c-e97c-4100-aeff-1373f4e9433a/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/74c1572c-e97c-4100-aeff-1373f4e9433a/1/491E7C1B3D725A4C67A798CEC21F6A699D82853A.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:c110::/44 Signature Algorithm: sha256WithRSAEncryption b4:bf:91:11:c8:7c:06:74:86:fd:0c:20:b4:07:de:c3:86:66: 29:63:41:01:ec:03:03:7f:db:c0:ec:b1:f0:43:d2:38:6a:6f: 05:4e:56:b3:c8:4d:9c:21:e9:6e:71:6b:62:58:a1:a0:9c:f7: d9:24:a9:f3:d5:8e:44:3f:39:27:c5:c2:55:7f:d1:8e:d3:9c: 3e:46:d4:16:eb:62:c4:ab:12:a5:11:c5:82:f2:6f:7b:f1:b5: f4:3a:42:5d:51:ea:ae:aa:b0:ed:09:4e:eb:38:f5:2b:c0:8c: 45:de:d1:bb:68:a3:ee:1b:0d:ec:a4:a2:db:4e:f6:0f:d8:e9: f7:22:91:28:89:70:3e:e3:a8:5f:d3:6b:c0:d9:6b:77:5d:39: e1:d5:a5:dc:c6:c6:ac:e8:94:a4:1b:a9:70:80:df:08:48:63: 36:3c:56:9e:81:2f:c0:3f:ff:19:d3:5f:ab:3f:87:0e:bf:c6: 82:8c:41:a3:d4:a1:e1:0a:3b:f3:72:97:ea:4b:53:ab:fd:14: 72:8d:8f:9d:42:9e:26:81:c2:84:45:0c:b0:3e:ae:46:7b:b8: a8:b6:b7:a1:2a:19:01:da:ef:44:fd:f7:f2:02:d9:e7:2b:3e: 47:07:df:c3:30:5d:7e:98:1b:c0:c5:07:39:92:75:2e:b9:f6: 75:c1:77:31 -----BEGIN CERTIFICATE----- MIIGCjCCBPKgAwIBAgIUX8vjlj9DE+SZSix6Rx6DX0KQg5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDA5MDcxOTMwNDBaFw0yNTA5MDYxOTM1NDBaMDMxMTAvBgNV BAMTKDQ5MUU3QzFCM0Q3MjVBNEM2N0E3OThDRUMyMUY2QTY5OUQ4Mjg1M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeDNQKl5P3RSYd9Fi04Tx6m4RO i/m/eRIh411wJDwnkJWUi+Lq3iKRFbrTAPkz7R5m3YxzBCUun8REpOmwA4mF3sZ6 vi32QW422l6ab07nlazE7GZLdzw36w2LrLs4QwwvufPRtMzmj1EIhvfE4meNKkLz 8obLfVfx7K9Xlkl67fhx8uzKCWwRzlxTtYuD0cfByM13eFmqeN8koX4wUBIDeA2u DPQigoMVZF8OjrhK3Mka9jsujkAesB4HLb23inKULpzl7/4wv8gjVGz5WURMKjDz 6quiWUqwwmEHAUTe2VkdnSyVJ2R9hD+auIbEx6B9oT9779mZhnHyZ7FShxzpAgMB AAGjggMUMIIDEDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRJHnwbPXJaTGen mM7CH2ppnYKFOjAfBgNVHSMEGDAWgBRXqXRv5UPrPqDUSVNCRMk/yI+FAzAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC81N0E5NzQ2RkU1NDNFQjNFQTBENDQ5NTM0 MjQ0QzkzRkM4OEY4NTAzLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi81N0E5NzQ2RkU1NDNFQjNFQTBE NDQ5NTM0MjQ0QzkzRkM4OEY4NTAzLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvNzRjMTU3MmMtZTk3Yy00MTAwLWFlZmYtMTM3M2Y0ZTk0MzNhLzEv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS83NGMxNTcyYy1lOTdjLTQxMDAtYWVmZi0xMzczZjRlOTQzM2Ev MS80OTFFN0MxQjNENzI1QTRDNjdBNzk4Q0VDMjFGNkE2OTlEODI4NTNBLm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwQqCmBEwRAwDQYJKoZIhvcNAQELBQADggEBALS/ kRHIfAZ0hv0MILQH3sOGZiljQQHsAwN/28DssfBD0jhqbwVOVrPITZwh6W5xa2JY oaCc99kkqfPVjkQ/OSfFwlV/0Y7TnD5G1BbrYsSrEqURxYLyb3vxtfQ6Ql1R6q6q sO0JTus49SvAjEXe0btoo+4bDeykottO9g/Y6fcikSiJcD7jqF/Ta8DZa3ddOeHV pdzGxqzolKQbqXCA3whIYzY8Vp6BL8A//xnTX6s/hw6/xoKMQaPUoeEKO/Nyl+pL U6v9FHKNj51CniaBwoRFDLA+rkZ7uKi2t6EqGQHa70T99/IC2ecrPkcH38MwXX6Y G8DFBzmSdS659nXBdzE= -----END CERTIFICATE-----Generated at Sat Sep 28 23:09:22 2024 by rpki-client on console-fra.rpki-client.org