$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer File: E19302BE91C9D4211CDF4AFF091055A173B3593B.cer (raw, json) Hash identifier: aePoVFpvOy6+8vRFJT6q8PhZW8J3Bp/CIbMVQO46XHA= Subject key identifier: E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 28A13A3A45C37B17E87474CCCDCEDD38B10585B0 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 05 Jul 2025 07:45:17 +0000 Certificate not after: Sat 04 Jul 2026 07:50:17 +0000 Subordinate resources: IP: 2a07:54c1:4200::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 22:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:a1:3a:3a:45:c3:7b:17:e8:74:74:cc:cd:ce:dd:38:b1:05:85:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 5 07:45:17 2025 GMT Not After : Jul 4 07:50:17 2026 GMT Subject: CN=E19302BE91C9D4211CDF4AFF091055A173B3593B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:67:19:f2:7a:2f:3a:b6:dd:9d:95:44:b0:7b: 52:5e:b0:29:98:bb:c1:d9:bb:cd:2f:07:89:65:df: e7:02:36:f1:8b:f7:89:56:e0:19:f8:36:42:ab:04: 98:e8:d9:2e:08:0d:96:e5:23:00:7c:7e:60:82:db: 0f:a7:c4:6d:8d:57:fc:a8:c4:5f:63:ad:ce:24:40: b5:b7:95:77:ec:3f:38:ca:a2:d1:d3:a1:86:a9:d6: 4d:63:c2:23:c6:49:64:8b:f0:68:c4:32:d3:96:a8: 14:cc:ba:8b:9d:51:8f:38:32:cf:59:e6:70:65:82: 59:06:2f:c0:eb:79:e0:c1:8b:1e:6c:eb:2d:d2:3d: e9:66:b6:61:c0:81:ed:eb:4f:2d:5d:04:e0:3c:62: 01:33:c1:89:a7:5e:a0:bd:b4:cd:6b:f8:81:56:87: 16:0b:29:ac:5b:94:7e:da:fa:73:7c:7a:f6:b3:54: 3f:1f:63:a2:77:7c:fd:84:bd:2a:bc:d4:69:28:66: 7f:21:c2:20:f8:ba:06:5b:ac:6f:9c:a9:2b:cd:35: d4:e5:fe:51:10:29:6b:b4:85:42:d8:1f:7c:aa:55: 47:75:b3:ce:77:a0:9d:c5:5f:cf:1d:a6:7e:65:ea: 05:e8:60:19:97:76:5b:c2:43:d8:be:67:31:c6:42: 98:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:4200::/40 Signature Algorithm: sha256WithRSAEncryption 60:5c:e5:a0:2b:dd:9b:ec:2e:57:96:1f:d1:c6:ed:a7:42:c8: 52:24:64:17:25:78:05:33:2d:c5:c6:7f:31:06:01:7b:d2:6a: 8e:7e:31:af:f3:a9:e4:bb:a5:dc:ab:24:3d:bd:3d:04:54:3f: ee:9b:88:e1:42:bb:a2:c5:74:15:ef:dd:37:98:b4:da:81:bb: 9c:d4:8b:0c:79:e8:db:7a:25:1c:92:6a:39:b6:aa:90:e9:70: a7:06:28:8f:80:08:c9:b4:49:71:e3:0e:d9:d1:5c:7b:22:38: f8:1a:17:ec:11:b1:e1:6a:69:1e:76:45:96:8e:1e:c7:78:0c: 25:f7:29:74:9b:92:f1:8a:fc:5b:8c:b6:12:a2:8d:c2:73:5b: dc:65:44:8f:c9:8e:dc:0f:da:ed:64:e1:42:64:6e:77:15:78: 06:87:4a:53:f6:a2:ac:4c:95:bc:11:48:e7:84:1c:02:c1:63: 41:e5:e2:66:c8:ad:c3:ad:47:d8:94:34:05:88:9c:ed:f0:95: 4a:5d:41:19:79:73:6c:f0:4a:0f:b2:30:de:f8:a4:7f:54:db: 05:56:6a:c5:93:9f:7f:46:c9:e2:fc:39:00:b7:8d:dc:00:e7: 47:88:53:d9:bc:0a:4d:80:56:22:fe:d8:16:e9:a7:76:02:0a: ce:6d:ca:f9 -----BEGIN CERTIFICATE----- MIIGDDCCBPSgAwIBAgIUKKE6OkXDexfodHTMzc7dOLEFhbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDUwNzQ1MTdaFw0yNjA3MDQwNzUwMTdaMDMxMTAvBgNV BAMTKEUxOTMwMkJFOTFDOUQ0MjExQ0RGNEFGRjA5MTA1NUExNzNCMzU5M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXZxnyei86tt2dlUSwe1JesCmY u8HZu80vB4ll3+cCNvGL94lW4Bn4NkKrBJjo2S4IDZblIwB8fmCC2w+nxG2NV/yo xF9jrc4kQLW3lXfsPzjKotHToYap1k1jwiPGSWSL8GjEMtOWqBTMuoudUY84Ms9Z 5nBlglkGL8DreeDBix5s6y3SPelmtmHAge3rTy1dBOA8YgEzwYmnXqC9tM1r+IFW hxYLKaxblH7a+nN8evazVD8fY6J3fP2EvSq81GkoZn8hwiD4ugZbrG+cqSvNNdTl /lEQKWu0hULYH3yqVUd1s853oJ3FX88dpn5l6gXoYBmXdlvCQ9i+ZzHGQpjVAgMB AAGjggMWMIIDEjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBThkwK+kcnUIRzf Sv8JEFWhc7NZOzAfBgNVHSMEGDAWgBRv92rEIYlP1czWMy+iqc8zAxLOqDAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC82RkY3NkFDNDIxODk0RkQ1Q0NENjMzMkZB MkE5Q0YzMzAzMTJDRUE4LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy82RkY3NkFDNDIxODk0RkQ1Q0NE NjMzMkZBMkE5Q0YzMzAzMTJDRUE4LmNlcjCCAUIGCCsGAQUFBwELBIIBNDCCATAw YAYIKwYBBQUHMAWGVHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1MGU4LzEw LzCBjQYIKwYBBQUHMAqGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBl OC8xMC9FMTkzMDJCRTkxQzlENDIxMUNERjRBRkYwOTEwNTVBMTczQjM1OTNCLm1m dDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9u b3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB BQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqB1TBQjANBgkqhkiG9w0BAQsFAAOCAQEA YFzloCvdm+wuV5Yf0cbtp0LIUiRkFyV4BTMtxcZ/MQYBe9Jqjn4xr/Op5Lul3Ksk Pb09BFQ/7puI4UK7osV0Fe/dN5i02oG7nNSLDHno23olHJJqObaqkOlwpwYoj4AI ybRJceMO2dFceyI4+BoX7BGx4WppHnZFlo4ex3gMJfcpdJuS8Yr8W4y2EqKNwnNb 3GVEj8mO3A/a7WThQmRudxV4BodKU/airEyVvBFI54QcAsFjQeXiZsitw61H2JQ0 BYic7fCVSl1BGXlzbPBKD7Iw3vikf1TbBVZqxZOff0bJ4vw5ALeN3ADnR4hT2bwK TYBWIv7YFumndgIKzm3K+Q== -----END CERTIFICATE-----Generated at Wed Jul 23 07:27:37 2025 by rpki-client