$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/2/59B3F040539A01CDC2A036F403A23CC53A672EB0.cer File: 59B3F040539A01CDC2A036F403A23CC53A672EB0.cer (raw, json) Hash identifier: yhgbdUsYDGmLS6Nx9lLWKNsQ+UqDWcu2bWVLv9APj3I= Subject key identifier: 59:B3:F0:40:53:9A:01:CD:C2:A0:36:F4:03:A2:3C:C5:3A:67:2E:B0 Authority key identifier: D1:81:D1:B4:12:22:38:85:ED:EE:B9:93:AD:F7:CD:F1:75:6C:44:2D Certificate issuer: /CN=D181D1B412223885EDEEB993ADF7CDF1756C442D Certificate serial: 0F11795F9C1A81943F2DDFC8BA0322A847FC81B0 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/D181D1B412223885EDEEB993ADF7CDF1756C442D.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/330c7f5c-faae-4354-b920-e20bd0425bb9/1/59B3F040539A01CDC2A036F403A23CC53A672EB0.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/330c7f5c-faae-4354-b920-e20bd0425bb9/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Wed 17 Jan 2024 02:03:11 +0000 Certificate not after: Wed 15 Jan 2025 02:08:11 +0000 Subordinate resources: IP: 2a06:9f81:3200::/48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/2/D181D1B412223885EDEEB993ADF7CDF1756C442D.crl rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/2/D181D1B412223885EDEEB993ADF7CDF1756C442D.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/D181D1B412223885EDEEB993ADF7CDF1756C442D.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 17:47:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:11:79:5f:9c:1a:81:94:3f:2d:df:c8:ba:03:22:a8:47:fc:81:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D181D1B412223885EDEEB993ADF7CDF1756C442D Validity Not Before: Jan 17 02:03:11 2024 GMT Not After : Jan 15 02:08:11 2025 GMT Subject: CN=59B3F040539A01CDC2A036F403A23CC53A672EB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:31:9b:d7:bc:86:73:2d:3f:b7:4e:8f:26:bd: d6:de:0a:18:e6:ca:c4:74:8b:94:2a:fa:bd:43:16: 53:bf:fe:d1:d1:51:cc:f2:b7:f6:e7:b8:df:9c:6e: 1b:04:d8:a2:00:e4:0a:be:e7:31:d2:9f:57:c6:a9: d8:2a:e1:3b:c7:85:2a:ec:c5:b2:27:eb:7f:c5:92: e9:37:04:ca:fc:fb:92:da:0a:a2:f3:2e:9d:41:46: e3:25:cb:00:97:3e:89:72:62:13:c4:73:9c:eb:c0: 88:ba:44:73:80:58:bc:8f:be:e0:5a:94:04:90:bf: 2f:ca:8c:9e:70:a3:2e:6d:55:9d:b2:8c:4a:08:29: af:47:0b:13:05:84:2a:83:1a:ae:df:87:a9:e4:52: 63:29:d8:3d:b6:d0:59:57:58:f6:bb:d3:04:cc:80: 03:90:e0:b3:12:de:8b:ef:5b:84:17:01:ad:f3:68: dd:05:1b:4b:ba:15:88:fb:02:97:90:9c:bc:48:ef: ec:ed:8b:bb:09:2c:c9:db:28:3f:fb:79:70:43:38: 19:9e:93:27:cb:e9:f7:9c:89:c2:c6:b9:71:26:0e: 02:c3:e1:7e:c0:99:a5:79:b0:34:e5:ce:b6:bc:55: 54:4b:c3:fb:52:d0:5c:97:72:d2:fe:f5:2b:9b:e2: e7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 59:B3:F0:40:53:9A:01:CD:C2:A0:36:F4:03:A2:3C:C5:3A:67:2E:B0 X509v3 Authority Key Identifier: keyid:D1:81:D1:B4:12:22:38:85:ED:EE:B9:93:AD:F7:CD:F1:75:6C:44:2D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/2/D181D1B412223885EDEEB993ADF7CDF1756C442D.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/D181D1B412223885EDEEB993ADF7CDF1756C442D.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/330c7f5c-faae-4354-b920-e20bd0425bb9/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/330c7f5c-faae-4354-b920-e20bd0425bb9/1/59B3F040539A01CDC2A036F403A23CC53A672EB0.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:3200::/48 Signature Algorithm: sha256WithRSAEncryption 83:52:7c:78:1d:f4:aa:89:6e:9e:4e:df:4c:37:ae:56:dc:c5: 93:b0:39:f9:01:59:07:54:11:ad:c0:c2:4a:ee:aa:bb:82:34: 2d:e9:da:32:46:09:74:40:5e:a9:6c:2a:09:ba:d9:f3:40:67: c4:87:79:b7:d3:c8:f5:16:75:3d:ea:d8:d1:8f:a9:b6:1d:4a: 7d:c6:72:31:46:e3:a8:da:0a:5f:e7:34:a5:c1:97:76:2e:8c: dc:18:5b:86:ac:8c:14:a8:0c:cb:c3:13:10:34:0a:21:94:d8: d8:43:1b:55:df:ef:be:12:9f:40:8e:70:af:da:e5:f8:dc:7c: a0:1b:48:08:0c:83:8f:18:96:cf:c9:76:67:f2:ee:9a:95:12: 90:6b:21:54:55:14:30:e5:dd:3f:f0:93:4a:61:74:6a:46:9b: 95:28:3d:34:6e:a2:af:57:e6:e8:7f:9c:ee:0c:d3:72:cf:d8: 3e:51:bc:2a:8a:89:fe:f5:7c:56:d7:74:2b:f0:81:85:1b:96: a5:16:f9:7d:ef:66:48:91:c7:01:e7:63:ea:6c:1d:7f:93:23: 45:26:e6:b2:11:f1:0f:08:3b:00:3c:bd:83:0e:52:b7:b4:0e: 49:63:ee:40:8d:d5:7a:6d:ec:6c:71:ea:a8:d3:9c:db:a1:18: 56:fc:8a:51 -----BEGIN CERTIFICATE----- MIIF4DCCBMigAwIBAgIUDxF5X5wagZQ/Ld/IugMiqEf8gbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE4MUQxQjQxMjIyMzg4NUVERUVCOTkzQURGN0NERjE3 NTZDNDQyRDAeFw0yNDAxMTcwMjAzMTFaFw0yNTAxMTUwMjA4MTFaMDMxMTAvBgNV BAMTKDU5QjNGMDQwNTM5QTAxQ0RDMkEwMzZGNDAzQTIzQ0M1M0E2NzJFQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOMZvXvIZzLT+3To8mvdbeChjm ysR0i5Qq+r1DFlO//tHRUczyt/bnuN+cbhsE2KIA5Aq+5zHSn1fGqdgq4TvHhSrs xbIn63/Fkuk3BMr8+5LaCqLzLp1BRuMlywCXPolyYhPEc5zrwIi6RHOAWLyPvuBa lASQvy/KjJ5woy5tVZ2yjEoIKa9HCxMFhCqDGq7fh6nkUmMp2D220FlXWPa70wTM gAOQ4LMS3ovvW4QXAa3zaN0FG0u6FYj7ApeQnLxI7+zti7sJLMnbKD/7eXBDOBme kyfL6fecicLGuXEmDgLD4X7AmaV5sDTlzra8VVRLw/tS0FyXctL+9Sub4uc/AgMB AAGjggLqMIIC5jAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRZs/BAU5oBzcKg NvQDojzFOmcusDAfBgNVHSMEGDAWgBTRgdG0EiI4he3uuZOt983xdWxELTAOBgNV HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZThiYWE1NzljMDE4Y2RjZjJjODM1 NGI1Mi8yL0QxODFEMUI0MTIyMjM4ODVFREVFQjk5M0FERjdDREYxNzU2QzQ0MkQu Y3JsMHoGCCsGAQUFBwEBBG4wbDBqBggrBgEFBQcwAoZecnN5bmM6Ly9jbG91ZGll LXJlcG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvMC9EMTgxRDFCNDEyMjIz ODg1RURFRUI5OTNBREY3Q0RGMTc1NkM0NDJELmNlcjCCAT8GCCsGAQUFBwELBIIB MTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzMwYzdmNWMtZmFhZS00MzU0LWI5MjAtZTIwYmQwNDI1 YmI5LzEvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS8zMzBjN2Y1Yy1mYWFlLTQzNTQtYjkyMC1lMjBiZDA0 MjViYjkvMS81OUIzRjA0MDUzOUEwMUNEQzJBMDM2RjQwM0EyM0NDNTNBNjcyRUIw Lm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBp+BMgAwDQYJKoZIhvcNAQELBQAD ggEBAINSfHgd9KqJbp5O30w3rlbcxZOwOfkBWQdUEa3AwkruqruCNC3p2jJGCXRA XqlsKgm62fNAZ8SHebfTyPUWdT3q2NGPqbYdSn3GcjFG46jaCl/nNKXBl3YujNwY W4asjBSoDMvDExA0CiGU2NhDG1Xf774Sn0COcK/a5fjcfKAbSAgMg48Yls/Jdmfy 7pqVEpBrIVRVFDDl3T/wk0phdGpGm5UoPTRuoq9X5uh/nO4M03LP2D5RvCqKif71 fFbXdCvwgYUblqUW+X3vZkiRxwHnY+psHX+TI0Um5rIR8Q8IOwA8vYMOUre0Dklj 7kCN1Xpt7Gxx6qjTnNuhGFb8ilE= -----END CERTIFICATE-----Generated at Fri Nov 22 03:52:49 2024 by rpki-client on console-fra.rpki-client.org