$ rpki-client -vvf rpki.co/repo/August/11/CBB5E353173200C2D8D1B6B5C8FEC0579DBC6068.cer File: CBB5E353173200C2D8D1B6B5C8FEC0579DBC6068.cer (raw, json) Hash identifier: MOr+wS8JDcNH11dHaj5wAMw1nZhNcoGjGkb5+eloaT4= Subject key identifier: CB:B5:E3:53:17:32:00:C2:D8:D1:B6:B5:C8:FE:C0:57:9D:BC:60:68 Authority key identifier: CE:B3:22:59:0A:73:B7:47:56:EC:60:70:C8:C1:8D:C1:74:C7:48:23 Certificate issuer: /CN=dc24fd57e6a520437d18a5ffa755fb909679c172acfe3584fc Certificate serial: 4B20D648C209EFF77A758BF1487021EB82024645 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc1d4521-b619-4ca7-b66a-41b5dba13caa/dc24fd57e6a520437d18a5ffa755fb909679c172acfe3584fc.cer Manifest: rsync://rpki.co/repo/AS945/11/CBB5E353173200C2D8D1B6B5C8FEC0579DBC6068.mft caRepository: rsync://rpki.co/repo/AS945/11/ Notify URL: https://rrdp.rpki.co/rrdp/notification.xml Certificate not before: Mon 22 May 2023 21:44:06 +0000 Certificate not after: Mon 20 May 2024 21:49:06 +0000 Subordinate resources: AS: 13586 Validation: OK Signature path: rsync://rpki.co/repo/August/11/CEB322590A73B74756EC6070C8C18DC174C74823.crl rsync://rpki.co/repo/August/11/CEB322590A73B74756EC6070C8C18DC174C74823.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc1d4521-b619-4ca7-b66a-41b5dba13caa/dc24fd57e6a520437d18a5ffa755fb909679c172acfe3584fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc1d4521-b619-4ca7-b66a-41b5dba13caa/cc1d4521-b619-4ca7-b66a-41b5dba13caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc1d4521-b619-4ca7-b66a-41b5dba13caa/cc1d4521-b619-4ca7-b66a-41b5dba13caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc1d4521-b619-4ca7-b66a-41b5dba13caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Jul 2023 23:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:20:d6:48:c2:09:ef:f7:7a:75:8b:f1:48:70:21:eb:82:02:46:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc24fd57e6a520437d18a5ffa755fb909679c172acfe3584fc Validity Not Before: May 22 21:44:06 2023 GMT Not After : May 20 21:49:06 2024 GMT Subject: CN=CBB5E353173200C2D8D1B6B5C8FEC0579DBC6068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:db:0e:02:89:c9:3c:85:33:b2:d5:76:cc:a4: 68:79:60:b5:d1:e5:db:b3:cc:d8:b3:09:c3:ef:4c: d0:c4:2d:27:58:70:56:5d:c2:d9:6f:a7:09:f6:2d: d2:63:99:9e:31:1f:be:4d:0d:00:8d:20:83:02:bc: e6:74:ee:d1:a4:83:4b:4f:f2:31:3b:0b:5e:d9:4b: df:b1:c5:aa:ba:aa:f5:e6:d6:59:34:6c:4a:9f:6c: 42:48:c4:45:03:f6:13:a5:25:e0:7e:60:29:e7:6f: 0e:35:4b:6e:e3:ae:42:d9:af:58:cf:22:4a:05:78: e7:5f:6b:e2:23:6f:c8:f1:a8:63:95:c4:21:aa:89: 7b:e0:fc:4b:a2:b1:68:02:d4:70:82:96:eb:6f:ce: ab:05:e5:b8:b0:a3:62:f2:8a:31:4d:89:3b:46:ae: 22:df:1b:5c:88:8a:19:e9:b9:e9:52:3c:5b:fe:44: 4a:3b:da:41:65:c0:c4:d4:d6:58:b3:dc:e5:17:d1: f7:54:22:29:c4:ba:6f:28:95:f6:48:e1:af:5a:24: 59:a0:c4:b5:2d:74:3e:d2:7e:37:7b:0a:75:2d:bb: 13:fc:c1:67:d1:4e:1b:59:3a:cc:e1:e8:f4:47:d2: 32:26:58:eb:0c:74:5e:3f:55:06:8a:fa:4f:2f:46: 4b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CB:B5:E3:53:17:32:00:C2:D8:D1:B6:B5:C8:FE:C0:57:9D:BC:60:68 X509v3 Authority Key Identifier: keyid:CE:B3:22:59:0A:73:B7:47:56:EC:60:70:C8:C1:8D:C1:74:C7:48:23 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.co/repo/August/11/CEB322590A73B74756EC6070C8C18DC174C74823.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc1d4521-b619-4ca7-b66a-41b5dba13caa/dc24fd57e6a520437d18a5ffa755fb909679c172acfe3584fc.cer Subject Information Access: CA Repository - URI:rsync://rpki.co/repo/AS945/11/ RPKI Manifest - URI:rsync://rpki.co/repo/AS945/11/CBB5E353173200C2D8D1B6B5C8FEC0579DBC6068.mft RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 13586 Signature Algorithm: sha256WithRSAEncryption bc:24:ff:9f:8b:93:9d:32:e4:36:f9:df:13:98:35:d9:04:ae: 0a:c6:19:ee:be:0a:c2:cf:59:1d:91:f6:83:38:d0:87:05:03: 89:9d:3f:5f:73:ab:cd:1b:12:37:24:bc:04:96:b6:21:59:c9: 08:de:9d:ce:38:7f:b3:b4:f8:e0:cb:4d:56:45:9a:8f:30:6c: cb:64:d7:a8:0d:c1:1c:cc:09:af:23:38:ab:a3:a5:81:5f:93: 7d:ea:ab:31:57:13:0a:a0:3f:3a:30:ca:64:e7:60:36:1c:c6: 24:22:fd:b0:bf:d0:62:c9:4a:c7:bd:1e:b2:c5:66:f1:7e:53: 7f:23:37:f7:2b:d4:63:99:9a:40:ec:4e:0c:8c:c8:5d:27:0a: f0:64:c4:95:fe:d7:5b:f9:ab:26:d1:4a:a9:9d:ed:03:59:2a: 3a:df:70:30:13:5a:95:27:dd:46:4c:9d:ac:1e:64:b9:85:a5: db:86:26:47:48:db:05:77:5e:d4:e4:51:fa:6f:42:e1:2d:3a: 61:d6:bd:0c:47:00:0d:fd:7e:49:93:7b:ac:14:ce:58:23:8f: e0:8a:b9:e6:ba:8d:a8:03:23:b4:ea:87:bb:f2:42:a2:1d:b4: 07:af:54:03:c9:4d:5e:10:82:68:65:97:fb:b9:65:e7:c6:85: d9:b6:f6:ef -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgIUSyDWSMIJ7/d6dYvxSHAh64ICRkUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGMyNGZkNTdlNmE1MjA0MzdkMThhNWZmYTc1NWZiOTA5 Njc5YzE3MmFjZmUzNTg0ZmMwHhcNMjMwNTIyMjE0NDA2WhcNMjQwNTIwMjE0OTA2 WjAzMTEwLwYDVQQDEyhDQkI1RTM1MzE3MzIwMEMyRDhEMUI2QjVDOEZFQzA1NzlE QkM2MDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdsOAonJPIUz stV2zKRoeWC10eXbs8zYswnD70zQxC0nWHBWXcLZb6cJ9i3SY5meMR++TQ0AjSCD ArzmdO7RpINLT/IxOwte2UvfscWquqr15tZZNGxKn2xCSMRFA/YTpSXgfmAp528O NUtu465C2a9YzyJKBXjnX2viI2/I8ahjlcQhqol74PxLorFoAtRwgpbrb86rBeW4 sKNi8ooxTYk7Rq4i3xtciIoZ6bnpUjxb/kRKO9pBZcDE1NZYs9zlF9H3VCIpxLpv KJX2SOGvWiRZoMS1LXQ+0n43ewp1LbsT/MFn0U4bWTrM4ej0R9IyJljrDHReP1UG ivpPL0ZL8wIDAQABo4ICvTCCArkwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU y7XjUxcyAMLY0ba1yP7AV528YGgwHwYDVR0jBBgwFoAUzrMiWQpzt0dW7GBwyMGN wXTHSCMwDgYDVR0PAQH/BAQDAgEGMFwGA1UdHwRVMFMwUaBPoE2GS3JzeW5jOi8v cnBraS5jby9yZXBvL0F1Z3VzdC8xMS9DRUIzMjI1OTBBNzNCNzQ3NTZFQzYwNzBD OEMxOERDMTc0Qzc0ODIzLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUF BzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtp LXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMz Zi05NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2MxZDQ1MjEtYjYxOS00Y2E3 LWI2NmEtNDFiNWRiYTEzY2FhL2RjMjRmZDU3ZTZhNTIwNDM3ZDE4YTVmZmE3NTVm YjkwOTY3OWMxNzJhY2ZlMzU4NGZjLmNlcjCBzAYIKwYBBQUHAQsEgb8wgbwwKgYI KwYBBQUHMAWGHnJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzExLzBWBggrBgEF BQcwCoZKcnN5bmM6Ly9ycGtpLmNvL3JlcG8vQVM5NDUvMTEvQ0JCNUUzNTMxNzMy MDBDMkQ4RDFCNkI1QzhGRUMwNTc5REJDNjA2OC5tZnQwNgYIKwYBBQUHMA2GKmh0 dHBzOi8vcnJkcC5ycGtpLmNvL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAjUSMA0G CSqGSIb3DQEBCwUAA4IBAQC8JP+fi5OdMuQ2+d8TmDXZBK4KxhnuvgrCz1kdkfaD ONCHBQOJnT9fc6vNGxI3JLwElrYhWckI3p3OOH+ztPjgy01WRZqPMGzLZNeoDcEc zAmvIziro6WBX5N96qsxVxMKoD86MMpk52A2HMYkIv2wv9BiyUrHvR6yxWbxflN/ Izf3K9RjmZpA7E4MjMhdJwrwZMSV/tdb+asm0Uqpne0DWSo633AwE1qVJ91GTJ2s HmS5haXbhiZHSNsFd17U5FH6b0LhLTph1r0MRwAN/X5Jk3usFM5YI4/girnmuo2o AyO06oe78kKiHbQHr1QDyU1eEIJoZZf7uWXnxoXZtvbv -----END CERTIFICATE-----Generated at Wed Jul 19 22:43:23 2023 by rpki-client on console-fra.rpki-client.org