$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BB5C68696BDEF6289D58B3C0958E37E0DA23930D.cer File: BB5C68696BDEF6289D58B3C0958E37E0DA23930D.cer (raw, json) Hash identifier: b2cPOUuzEG78EcM9oAKdjj107/tBXxZqpdIMYhxTg5A= Subject key identifier: BB:5C:68:69:6B:DE:F6:28:9D:58:B3:C0:95:8E:37:E0:DA:23:93:0D Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 27B329D494EE3874388147F8A9C020E78B351DD9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/BB5C68696BDEF6289D58B3C0958E37E0DA23930D.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 20 Jun 2024 20:19:21 +0000 Certificate not after: Thu 19 Jun 2025 20:24:21 +0000 Subordinate resources: IP: 2a0a:6044:ac70::/44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 03 Jul 2024 14:20:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:b3:29:d4:94:ee:38:74:38:81:47:f8:a9:c0:20:e7:8b:35:1d:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Jun 20 20:19:21 2024 GMT Not After : Jun 19 20:24:21 2025 GMT Subject: CN=BB5C68696BDEF6289D58B3C0958E37E0DA23930D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a0:25:d0:d1:a6:47:3d:82:7e:24:42:34:bf: 27:a3:6b:47:f3:79:27:b5:b2:30:43:da:54:ef:71: c5:cf:64:29:5b:8c:f2:5b:40:0e:fb:fa:9e:a1:1d: 65:4f:a0:02:51:f6:56:8a:e6:68:c9:56:0d:89:11: e3:6a:ef:71:aa:bc:5f:80:84:f8:04:36:b0:76:6f: f3:3e:3a:1f:01:e4:5f:98:08:65:7c:af:56:3f:ff: 14:59:a5:e2:be:8c:cd:2f:aa:27:02:8f:d5:3d:d0: af:f2:c3:bd:2f:7f:c7:60:cb:d1:e6:e4:11:79:89: 57:64:3d:4b:a9:94:85:4e:df:08:e8:a4:e6:1c:48: fd:74:29:b7:bf:dd:a2:2e:0e:8c:e6:bb:1d:47:79: 7a:c1:1d:44:b8:2c:1f:43:89:bb:fd:c0:e1:ab:29: 0f:2d:27:7f:72:ec:c9:35:17:fa:71:d1:f8:c4:58: 92:41:1b:b6:b3:b7:f4:af:e1:16:d1:c2:86:83:ee: 2f:e4:33:14:4c:c0:31:36:da:e4:e5:be:bc:53:b5: 1a:11:66:cb:43:77:ad:f3:f2:7e:f0:19:92:89:98: 23:b0:a7:3b:f7:01:35:4a:af:f3:42:c3:0a:1a:c8: 56:0e:c7:dd:7e:8c:a7:a8:ec:91:06:dd:66:79:07: 92:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BB:5C:68:69:6B:DE:F6:28:9D:58:B3:C0:95:8E:37:E0:DA:23:93:0D X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/BB5C68696BDEF6289D58B3C0958E37E0DA23930D.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:ac70::/44 Signature Algorithm: sha256WithRSAEncryption 03:5e:ef:c6:00:9a:26:a3:ae:ed:8b:da:ca:cd:89:d8:d3:d7: ab:cb:c0:1f:05:1a:62:1d:9f:92:b0:80:52:85:65:f9:bc:08: 71:49:84:03:25:68:5d:c0:dd:95:74:dd:f5:b9:2d:04:a4:e3: ea:6b:2d:e8:f1:21:57:83:8c:ae:27:b1:bc:4d:36:8c:5c:44: 8d:8c:b6:5d:51:56:e3:00:cb:ee:6d:18:a2:b4:44:9b:97:e4: 3e:5d:a5:4d:e6:50:1c:9a:37:0a:b1:2a:6e:d1:83:d4:ed:54: 35:c4:a0:7a:1c:ba:66:eb:a5:8e:57:57:94:1c:21:bb:e1:61: 76:ed:4b:42:91:fb:ca:5d:92:aa:ee:18:ae:c1:52:7d:2e:c2: 7b:8f:eb:7e:a1:91:ce:a9:ff:3e:34:d9:79:30:cd:a3:55:fc: 92:8a:42:5b:50:66:62:73:ed:76:1c:48:ac:bf:0d:60:2f:5f: 89:49:54:9f:d8:7f:00:45:02:1e:03:8b:df:71:ce:ac:da:6e: 12:92:41:7d:75:14:3e:e9:30:f7:e8:03:9a:74:d7:db:34:fd: fd:48:1f:a3:ab:ea:c3:80:02:7c:87:8b:09:95:f7:85:b8:cd: 49:5a:d4:78:0b:26:56:71:51:44:69:83:fa:5d:d5:32:fa:4d: 27:56:53:88 -----BEGIN CERTIFICATE----- MIIGCjCCBPKgAwIBAgIUJ7Mp1JTuOHQ4gUf4qcAg54s1HdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDA2MjAyMDE5MjFaFw0yNTA2MTkyMDI0MjFaMDMxMTAvBgNV BAMTKEJCNUM2ODY5NkJERUY2Mjg5RDU4QjNDMDk1OEUzN0UwREEyMzkzMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNoCXQ0aZHPYJ+JEI0vyeja0fz eSe1sjBD2lTvccXPZClbjPJbQA77+p6hHWVPoAJR9laK5mjJVg2JEeNq73GqvF+A hPgENrB2b/M+Oh8B5F+YCGV8r1Y//xRZpeK+jM0vqicCj9U90K/yw70vf8dgy9Hm 5BF5iVdkPUuplIVO3wjopOYcSP10Kbe/3aIuDozmux1HeXrBHUS4LB9Dibv9wOGr KQ8tJ39y7Mk1F/px0fjEWJJBG7azt/Sv4RbRwoaD7i/kMxRMwDE22uTlvrxTtRoR ZstDd63z8n7wGZKJmCOwpzv3ATVKr/NCwwoayFYOx91+jKeo7JEG3WZ5B5KDAgMB AAGjggMUMIIDEDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS7XGhpa972KJ1Y s8CVjjfg2iOTDTAfBgNVHSMEGDAWgBRXqXRv5UPrPqDUSVNCRMk/yI+FAzAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC81N0E5NzQ2RkU1NDNFQjNFQTBENDQ5NTM0 MjQ0QzkzRkM4OEY4NTAzLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi81N0E5NzQ2RkU1NDNFQjNFQTBE NDQ5NTM0MjQ0QzkzRkM4OEY4NTAzLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvN2Y1ZDJhMWItY2FjYy00ZTIyLThhZjItOWYyMGE5MzI5YmNiLzEv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS83ZjVkMmExYi1jYWNjLTRlMjItOGFmMi05ZjIwYTkzMjliY2Iv MS9CQjVDNjg2OTZCREVGNjI4OUQ1OEIzQzA5NThFMzdFMERBMjM5MzBELm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwQqCmBErHAwDQYJKoZIhvcNAQELBQADggEBAANe 78YAmiajru2L2srNidjT16vLwB8FGmIdn5KwgFKFZfm8CHFJhAMlaF3A3ZV03fW5 LQSk4+prLejxIVeDjK4nsbxNNoxcRI2Mtl1RVuMAy+5tGKK0RJuX5D5dpU3mUBya NwqxKm7Rg9TtVDXEoHocumbrpY5XV5QcIbvhYXbtS0KR+8pdkqruGK7BUn0uwnuP 636hkc6p/z402XkwzaNV/JKKQltQZmJz7XYcSKy/DWAvX4lJVJ/YfwBFAh4Di99x zqzabhKSQX11FD7pMPfoA5p019s0/f1IH6Or6sOAAnyHiwmV94W4zUla1HgLJlZx UURpg/pd1TL6TSdWU4g= -----END CERTIFICATE-----Generated at Tue Jul 2 21:48:39 2024 by rpki-client on console-ams.rpki-client.org