$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/E42882C5C372E03CCD5EA87BB1B6FFEF1FF1BFF5.cer File: E42882C5C372E03CCD5EA87BB1B6FFEF1FF1BFF5.cer (raw, json) Hash identifier: ZgkUmwBAN+BgyVFg/7xrYnbw3kS/Mk8fXnbXdBLqa28= Subject key identifier: E4:28:82:C5:C3:72:E0:3C:CD:5E:A8:7B:B1:B6:FF:EF:1F:F1:BF:F5 Authority key identifier: 44:C4:C9:13:D5:8F:5E:F8:47:99:62:41:E9:69:B6:0A:1E:3F:13:89 Certificate issuer: /CN=44C4C913D58F5EF847996241E969B60A1E3F1389 Certificate serial: 543140D1412E8B7EDA1538B39F6716E307763B99 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer Manifest: rsync://rpki-repo.as207960.net/repo/q-test-ca/0/E42882C5C372E03CCD5EA87BB1B6FFEF1FF1BFF5.mft caRepository: rsync://rpki-repo.as207960.net/repo/q-test-ca/0/ Notify URL: https://rpki.as207960.net/rrdp/notification.xml Certificate not before: Mon 12 Aug 2024 09:22:20 +0000 Certificate not after: Mon 11 Aug 2025 09:27:20 +0000 Subordinate resources: IP: 2a11:f2c0:fe00::/40 Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Sep 2024 03:04:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:31:40:d1:41:2e:8b:7e:da:15:38:b3:9f:67:16:e3:07:76:3b:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44C4C913D58F5EF847996241E969B60A1E3F1389 Validity Not Before: Aug 12 09:22:20 2024 GMT Not After : Aug 11 09:27:20 2025 GMT Subject: CN=E42882C5C372E03CCD5EA87BB1B6FFEF1FF1BFF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:96:a1:c7:c9:dc:81:5d:ce:80:58:c2:1a:6f: d7:32:12:e5:ed:aa:09:79:77:1d:99:e8:14:68:f4: 2f:70:c0:e5:c8:b1:b3:49:ec:3f:66:1a:34:3b:b0: 56:18:c5:e1:94:58:37:1a:12:7c:73:46:b0:3a:cc: 49:5e:20:cd:78:2f:31:68:e9:eb:04:bd:aa:7c:cc: 7f:e5:e3:f6:3b:3e:25:a1:68:58:48:42:2a:19:b8: 4f:19:b4:ab:14:3b:43:04:11:34:cb:90:6c:c4:66: f2:ee:da:4c:7e:33:c0:6b:54:9b:9a:f3:83:16:e3: 56:58:1f:05:4c:eb:99:c1:c6:34:4a:02:dc:3c:8f: a7:27:ec:49:5e:92:2a:73:6a:40:e5:7a:cf:48:3c: be:5d:40:99:9d:2e:4c:c6:cf:24:a1:19:74:91:06: 71:af:65:f4:bb:34:b5:21:88:da:b2:94:28:a4:2b: 83:98:b0:12:b1:ef:e0:86:56:36:e0:0e:89:74:47: de:85:09:3e:7a:3c:da:b7:1b:f7:25:ca:ad:6e:0e: 72:35:94:2b:85:a4:e0:ed:5b:1c:b6:75:09:39:7d: 21:09:23:be:95:df:ea:dc:87:32:de:5b:3a:38:8c: ad:61:e3:aa:06:13:f9:9c:3a:42:e9:ce:d1:4e:66: b1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E4:28:82:C5:C3:72:E0:3C:CD:5E:A8:7B:B1:B6:FF:EF:1F:F1:BF:F5 X509v3 Authority Key Identifier: keyid:44:C4:C9:13:D5:8F:5E:F8:47:99:62:41:E9:69:B6:0A:1E:3F:13:89 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.as207960.net/repo/q-test-ca/0/ RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/q-test-ca/0/E42882C5C372E03CCD5EA87BB1B6FFEF1FF1BFF5.mft RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:f2c0:fe00::/40 Signature Algorithm: sha256WithRSAEncryption 9e:60:40:de:c3:fb:6a:32:50:6d:f4:87:e5:c1:de:fa:71:51: 18:58:82:17:b3:8a:ff:f5:d8:16:a4:b6:5e:04:05:7c:4d:09: 40:ab:b2:f5:9a:c6:83:e7:b6:82:57:43:17:8b:10:cf:b1:ea: 90:35:8a:cb:2d:59:af:7c:ce:aa:e5:10:60:e1:63:af:e9:f6: e3:9b:ab:ec:4b:a4:ac:52:45:3a:f3:34:40:94:e7:fc:1d:e6: 4f:25:64:f3:a9:24:2c:9c:87:67:b0:15:5e:fc:1a:c7:b8:4d: 29:cb:06:7e:65:dc:ac:8f:82:37:88:9a:c2:83:e5:4b:c2:c4: 34:c4:88:1b:9d:66:59:7b:ac:0f:45:b7:8e:1e:66:f9:18:28: a4:f1:da:40:d7:3f:44:b9:77:c2:c0:c6:dc:d7:2c:c2:86:15: f6:a4:05:be:bd:87:2c:43:0d:e0:ba:c4:9a:c3:dd:5a:4b:c5: 88:65:7d:0a:28:ff:51:22:8c:64:a6:91:10:99:a9:7c:ad:d1: 7a:c0:12:dd:08:e6:7a:b2:85:a8:92:d3:2d:3a:ff:89:7f:f2: 0c:f3:1d:33:6d:78:15:c2:2e:44:d6:a1:b3:1f:15:1d:51:83: db:da:fd:1a:3e:88:40:60:9a:b4:a5:a3:76:f8:da:5c:fa:93: 0a:bf:ba:4a -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgIUVDFA0UEui37aFTizn2cW4wd2O5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDRDNEM5MTNENThGNUVGODQ3OTk2MjQxRTk2OUI2MEEx RTNGMTM4OTAeFw0yNDA4MTIwOTIyMjBaFw0yNTA4MTEwOTI3MjBaMDMxMTAvBgNV BAMTKEU0Mjg4MkM1QzM3MkUwM0NDRDVFQTg3QkIxQjZGRkVGMUZGMUJGRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVlqHHydyBXc6AWMIab9cyEuXt qgl5dx2Z6BRo9C9wwOXIsbNJ7D9mGjQ7sFYYxeGUWDcaEnxzRrA6zEleIM14LzFo 6esEvap8zH/l4/Y7PiWhaFhIQioZuE8ZtKsUO0MEETTLkGzEZvLu2kx+M8BrVJua 84MW41ZYHwVM65nBxjRKAtw8j6cn7ElekipzakDles9IPL5dQJmdLkzGzyShGXSR BnGvZfS7NLUhiNqylCikK4OYsBKx7+CGVjbgDol0R96FCT56PNq3G/clyq1uDnI1 lCuFpODtWxy2dQk5fSEJI76V3+rchzLeWzo4jK1h46oGE/mcOkLpztFOZrEnAgMB AAGjggLNMIICyTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTkKILFw3LgPM1e qHuxtv/vH/G/9TAfBgNVHSMEGDAWgBRExMkT1Y9e+EeZYkHpabYKHj8TiTAOBgNV HQ8BAf8EBAMCAQYwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcnBraS1y ZXBvLmFzMjA3OTYwLm5ldC9yZXBvL3Jwa2lfY2FfZDBmMmRiOTlmZTFkNGIzNmI5 MzAxYzgyMTIyMGZlM2EvMC80NEM0QzkxM0Q1OEY1RUY4NDc5OTYyNDFFOTY5QjYw QTFFM0YxMzg5LmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9y c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2RkZTgz N2ZiLTYzOTAtNDFiNS04MmEwLWYwZDAyYzAzYTJjNi83LzQ0QzRDOTEzRDU4RjVF Rjg0Nzk5NjI0MUU5NjlCNjBBMUUzRjEzODkuY2VyMIH1BggrBgEFBQcBCwSB6DCB 5TA8BggrBgEFBQcwBYYwcnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3Jl cG8vcS10ZXN0LWNhLzAvMGgGCCsGAQUFBzAKhlxyc3luYzovL3Jwa2ktcmVwby5h czIwNzk2MC5uZXQvcmVwby9xLXRlc3QtY2EvMC9FNDI4ODJDNUMzNzJFMDNDQ0Q1 RUE4N0JCMUI2RkZFRjFGRjFCRkY1Lm1mdDA7BggrBgEFBQcwDYYvaHR0cHM6Ly9y cGtpLmFzMjA3OTYwLm5ldC9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoR 8sD+MA0GCSqGSIb3DQEBCwUAA4IBAQCeYEDew/tqMlBt9Iflwd76cVEYWIIXs4r/ 9dgWpLZeBAV8TQlAq7L1msaD57aCV0MXixDPseqQNYrLLVmvfM6q5RBg4WOv6fbj m6vsS6SsUkU68zRAlOf8HeZPJWTzqSQsnIdnsBVe/BrHuE0pywZ+Zdysj4I3iJrC g+VLwsQ0xIgbnWZZe6wPRbeOHmb5GCik8dpA1z9EuXfCwMbc1yzChhX2pAW+vYcs Qw3gusSaw91aS8WIZX0KKP9RIoxkppEQmal8rdF6wBLdCOZ6soWoktMtOv+Jf/IM 8x0zbXgVwi5E1qGzHxUdUYPb2v0aPohAYJq0paN2+Npc+pMKv7pK -----END CERTIFICATE-----Generated at Thu Sep 19 18:20:17 2024 by rpki-client on console-ams.rpki-client.org