$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/1BD68BB33CF4B2C0746A88537A13578C0074B4E6.cer File: 1BD68BB33CF4B2C0746A88537A13578C0074B4E6.cer (raw, json) Hash identifier: d/uxGdcOAvhrtOmU2YA5M30lY3cps8lqWFjI8/KrM/w= Subject key identifier: 1B:D6:8B:B3:3C:F4:B2:C0:74:6A:88:53:7A:13:57:8C:00:74:B4:E6 Authority key identifier: D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC Certificate issuer: /CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC Certificate serial: 1844CC09FAFF0477DC533167FEB302CEB791B564 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/1/1BD68BB33CF4B2C0746A88537A13578C0074B4E6.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 22 Feb 2025 16:30:57 +0000 Certificate not after: Sat 21 Feb 2026 16:35:57 +0000 Subordinate resources: IP: 2a0b:4e07:6000::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 12:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:44:cc:09:fa:ff:04:77:dc:53:31:67:fe:b3:02:ce:b7:91:b5:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC Validity Not Before: Feb 22 16:30:57 2025 GMT Not After : Feb 21 16:35:57 2026 GMT Subject: CN=1BD68BB33CF4B2C0746A88537A13578C0074B4E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6f:9c:7e:72:66:39:80:7e:ef:4a:e3:2b:d6: 0a:e8:0a:71:41:51:aa:10:4e:71:12:10:d0:ea:63: a6:ba:00:ea:07:26:3a:f2:2e:04:b6:7c:53:48:f6: ab:8b:a1:ae:f4:bb:96:32:df:07:f0:e2:a5:5b:8a: a6:1b:78:b0:f0:8b:c3:f9:a1:52:83:d2:89:b0:b8: e0:9a:71:d2:c5:ed:2d:b3:12:57:18:05:c6:2b:ed: 98:82:db:f1:12:89:91:88:c8:46:7b:cd:63:fc:95: af:70:36:07:56:a1:2a:06:65:3d:8f:73:0e:98:24: 56:e3:5b:21:6c:66:ac:3f:25:48:ee:11:b8:0c:1a: 20:0b:1e:19:db:5e:79:9b:ee:92:d8:7b:20:f1:8e: 8a:5d:9c:bd:9c:4e:d7:3c:e3:e1:d7:b5:53:71:94: ee:66:60:e5:6c:a5:05:bc:a6:b5:6d:7a:f7:25:f4: ef:bf:5d:06:4c:57:de:ca:84:88:4c:7d:91:ba:ea: d7:58:62:d0:78:e6:98:12:86:20:10:f7:c9:12:1d: bb:38:0a:fa:3c:84:8c:39:cd:93:4f:ce:16:e0:4b: ff:3f:49:58:c1:f4:97:e3:ed:df:91:4f:05:98:c7: 46:74:69:4a:7a:e9:10:50:96:8a:36:e0:53:80:53: 59:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1B:D6:8B:B3:3C:F4:B2:C0:74:6A:88:53:7A:13:57:8C:00:74:B4:E6 X509v3 Authority Key Identifier: keyid:D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/1/1BD68BB33CF4B2C0746A88537A13578C0074B4E6.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:6000::/40 Signature Algorithm: sha256WithRSAEncryption 96:be:9d:4a:3c:e4:44:2d:2b:77:fa:99:f4:90:b6:c1:b3:8f: 0b:79:53:3e:21:f0:d9:93:3e:82:d3:4b:df:72:c4:ae:94:a4: 34:2a:5a:64:fd:c4:b9:0a:d7:bc:57:a9:05:11:ec:11:4b:e2: c3:88:05:e9:a8:99:86:72:c7:04:41:c1:b1:23:2e:47:ca:18: 8a:54:f3:e0:71:64:b8:71:64:59:a3:bf:e7:ca:e3:83:ee:4f: a6:3b:23:38:83:43:89:78:e5:d3:f2:34:14:84:63:a1:bb:7e: bb:50:3e:ef:7e:bd:41:f4:50:ca:65:c2:36:60:5c:d0:67:82: c3:27:f1:18:81:2b:18:e8:1a:c1:79:f8:1e:27:62:34:76:36: c8:c3:57:82:3f:55:62:ca:b1:37:ee:68:03:80:26:1f:8e:d3: 24:02:35:d9:fe:49:a0:6d:26:57:97:8e:bf:65:be:b1:7d:ee: 09:a8:78:be:c8:78:75:dd:b8:12:e5:6a:48:2a:0a:1c:69:f5: 9a:9e:ea:3f:a6:63:97:e4:9a:0b:e3:fb:43:26:59:76:8e:34: d7:65:c9:a0:d3:30:0b:19:a9:5b:61:0c:4a:0a:91:36:98:a6: 87:9d:c9:a5:59:b4:68:a4:28:4f:80:b0:3b:25:14:58:85:8b: 6c:41:81:10 -----BEGIN CERTIFICATE----- MIIGFDCCBPygAwIBAgIUGETMCfr/BHfcUzFn/rMCzreRtWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE4MjA3NDY2QUIwQTdEN0QxRUYzQzdDRDAyRTgwQkVE NTgzNDBCQzAeFw0yNTAyMjIxNjMwNTdaFw0yNjAyMjExNjM1NTdaMDMxMTAvBgNV BAMTKDFCRDY4QkIzM0NGNEIyQzA3NDZBODg1MzdBMTM1NzhDMDA3NEI0RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0b5x+cmY5gH7vSuMr1groCnFB UaoQTnESENDqY6a6AOoHJjryLgS2fFNI9quLoa70u5Yy3wfw4qVbiqYbeLDwi8P5 oVKD0omwuOCacdLF7S2zElcYBcYr7ZiC2/ESiZGIyEZ7zWP8la9wNgdWoSoGZT2P cw6YJFbjWyFsZqw/JUjuEbgMGiALHhnbXnmb7pLYeyDxjopdnL2cTtc84+HXtVNx lO5mYOVspQW8prVtevcl9O+/XQZMV97KhIhMfZG66tdYYtB45pgShiAQ98kSHbs4 Cvo8hIw5zZNPzhbgS/8/SVjB9Jfj7d+RTwWYx0Z0aUp66RBQloo24FOAU1lnAgMB AAGjggMeMIIDGjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQb1ouzPPSywHRq iFN6E1eMAHS05jAfBgNVHSMEGDAWgBTRggdGarCn19HvPHzQLoC+1YNAvDAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wYzcwNDAxYy03ZjQxLTRh NmItOTQzNC1jYzgwZGNhMDkzZTYvMi9EMTgyMDc0NjZBQjBBN0Q3RDFFRjNDN0NE MDJFODBCRUQ1ODM0MEJDLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4MTViYi8wL0QxODIwNzQ2 NkFCMEE3RDdEMUVGM0M3Q0QwMkU4MEJFRDU4MzQwQkMuY2VyMIIBPwYIKwYBBQUH AQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1lYWQ1LTQ5NTQtYWQ4NC02NTgw Y2QyYTljNTAvMS8wgYsGCCsGAQUFBzAKhn9yc3luYzovL3JzeW5jLnBhYXMucnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L2JlYWQyZGNmLWVhZDUtNDk1NC1hZDg0LTY1 ODBjZDJhOWM1MC8xLzFCRDY4QkIzM0NGNEIyQzA3NDZBODg1MzdBMTM1NzhDMDA3 NEI0RTYubWZ0MDwGCCsGAQUFBzANhjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJp cGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoLTgdgMA0GCSqGSIb3DQEB CwUAA4IBAQCWvp1KPORELSt3+pn0kLbBs48LeVM+IfDZkz6C00vfcsSulKQ0Klpk /cS5Cte8V6kFEewRS+LDiAXpqJmGcscEQcGxIy5HyhiKVPPgcWS4cWRZo7/nyuOD 7k+mOyM4g0OJeOXT8jQUhGOhu367UD7vfr1B9FDKZcI2YFzQZ4LDJ/EYgSsY6BrB efgeJ2I0djbIw1eCP1ViyrE37mgDgCYfjtMkAjXZ/kmgbSZXl46/Zb6xfe4JqHi+ yHh13bgS5WpIKgocafWanuo/pmOX5JoL4/tDJll2jjTXZcmg0zALGalbYQxKCpE2 mKaHncmlWbRopChPgLA7JRRYhYtsQYEQ -----END CERTIFICATE-----Generated at Sat Apr 5 03:58:38 2025 by rpki-client