$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/9734125D9DE143331CAA39CA06CB928F0A7B5E53.cer File: 9734125D9DE143331CAA39CA06CB928F0A7B5E53.cer (raw, json) Hash identifier: jN0clo+vQjI0qdNr5cMrElqKBrIuktJRWEZGluyOXYs= Subject key identifier: 97:34:12:5D:9D:E1:43:33:1C:AA:39:CA:06:CB:92:8F:0A:7B:5E:53 Authority key identifier: D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC Certificate issuer: /CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC Certificate serial: 2AEA23250AEAFF8DE4E34E41BE21E483DE8EF4CC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/3/9734125D9DE143331CAA39CA06CB928F0A7B5E53.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/3/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 01 Oct 2024 13:01:23 +0000 Certificate not after: Tue 30 Sep 2025 13:06:23 +0000 Subordinate resources: IP: 2a0b:4e07:1000::/37 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Nov 2024 22:24:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:ea:23:25:0a:ea:ff:8d:e4:e3:4e:41:be:21:e4:83:de:8e:f4:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC Validity Not Before: Oct 1 13:01:23 2024 GMT Not After : Sep 30 13:06:23 2025 GMT Subject: CN=9734125D9DE143331CAA39CA06CB928F0A7B5E53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2f:88:d5:22:52:fe:be:15:20:a6:f4:c8:82: 74:35:a7:d7:33:3d:6e:ea:14:41:bd:bc:75:f6:65: 26:de:e0:41:72:07:13:a3:77:3e:55:26:3d:7d:e2: 8f:5a:31:6b:a4:41:cd:28:6f:8c:7f:64:ea:9e:3a: 42:16:b7:ce:75:05:36:f4:0d:d4:2f:97:76:db:e5: ad:5c:1e:f6:fb:f6:d5:a1:95:8f:7d:01:a6:a9:b2: fe:9b:3d:03:6c:42:d7:24:e2:f1:e5:02:c9:1e:45: c8:cd:2a:d0:7f:a5:7a:c7:c2:6f:22:55:35:11:ff: 0e:62:43:e9:e5:3e:62:c2:fb:f9:d8:23:0d:83:4b: 02:02:54:60:72:0b:4b:64:a4:11:2e:16:c1:8f:f6: c6:cb:bb:e2:87:a9:01:9f:99:4a:23:04:37:a1:08: e5:ae:c3:c5:94:5d:dc:a2:ad:5e:78:ee:bf:37:a9: 79:37:38:02:1a:4c:22:3b:22:37:45:08:bc:a1:31: d0:c0:ef:13:f7:3a:88:0f:7b:ec:57:96:89:2d:4b: bb:ce:00:e6:df:17:82:97:f6:10:ad:4f:e1:50:c7: b5:16:57:ad:0a:c2:33:ab:86:f0:f2:69:25:ed:db: 55:f4:7b:7f:c8:38:3a:06:75:6c:33:10:d1:b2:ed: 11:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 97:34:12:5D:9D:E1:43:33:1C:AA:39:CA:06:CB:92:8F:0A:7B:5E:53 X509v3 Authority Key Identifier: keyid:D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/3/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/3/9734125D9DE143331CAA39CA06CB928F0A7B5E53.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:1000::/37 Signature Algorithm: sha256WithRSAEncryption 6c:ae:ea:7c:c1:35:22:34:8a:ce:82:c3:7d:07:f3:e6:8b:87: ab:cb:a1:c2:e3:da:32:4b:12:d7:40:d8:18:a6:e7:e7:2b:d3: b9:db:39:c0:d4:3e:a9:5c:31:f9:60:09:a6:9a:f0:75:e8:e0: a3:ae:62:32:ec:f3:d0:be:eb:dd:45:2f:95:00:85:cd:31:0a: 1a:fd:08:9e:6d:fa:4c:60:94:09:82:18:e1:c2:88:19:f1:2e: 9a:77:41:43:96:16:92:af:39:bc:97:3d:8c:ca:70:f9:7e:3e: 66:b2:13:93:41:98:a7:86:ca:9f:cf:11:dc:2c:ec:b5:d1:73: 38:b9:23:e9:b3:ea:c1:9a:45:b1:f4:f2:d6:5f:c3:38:4c:a2: 5d:d6:8e:a0:80:77:eb:bf:3f:db:b4:53:70:c8:e0:93:f8:13: ee:c3:92:52:04:4e:21:bb:a5:fd:f3:2e:9b:c1:a2:d6:48:ee: 2e:ef:3d:92:9f:f0:77:fe:e3:df:5a:3a:a9:8b:8a:78:7d:7c: 5e:79:62:50:53:cb:da:8c:60:46:93:11:ab:78:ac:68:d1:e4: 0c:88:eb:86:7c:c0:83:ad:f0:48:b8:66:95:db:f5:a3:07:07: 59:f9:9d:9f:76:75:34:6a:c4:e3:f4:56:d4:08:2f:ac:27:da: b2:4b:d5:88 -----BEGIN CERTIFICATE----- MIIGFDCCBPygAwIBAgIUKuojJQrq/43k405BviHkg96O9MwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE4MjA3NDY2QUIwQTdEN0QxRUYzQzdDRDAyRTgwQkVE NTgzNDBCQzAeFw0yNDEwMDExMzAxMjNaFw0yNTA5MzAxMzA2MjNaMDMxMTAvBgNV BAMTKDk3MzQxMjVEOURFMTQzMzMxQ0FBMzlDQTA2Q0I5MjhGMEE3QjVFNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCL4jVIlL+vhUgpvTIgnQ1p9cz PW7qFEG9vHX2ZSbe4EFyBxOjdz5VJj194o9aMWukQc0ob4x/ZOqeOkIWt851BTb0 DdQvl3bb5a1cHvb79tWhlY99Aaapsv6bPQNsQtck4vHlAskeRcjNKtB/pXrHwm8i VTUR/w5iQ+nlPmLC+/nYIw2DSwICVGByC0tkpBEuFsGP9sbLu+KHqQGfmUojBDeh COWuw8WUXdyirV547r83qXk3OAIaTCI7IjdFCLyhMdDA7xP3OogPe+xXloktS7vO AObfF4KX9hCtT+FQx7UWV60KwjOrhvDyaSXt21X0e3/IODoGdWwzENGy7RHVAgMB AAGjggMeMIIDGjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSXNBJdneFDMxyq OcoGy5KPCnteUzAfBgNVHSMEGDAWgBTRggdGarCn19HvPHzQLoC+1YNAvDAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wYzcwNDAxYy03ZjQxLTRh NmItOTQzNC1jYzgwZGNhMDkzZTYvMi9EMTgyMDc0NjZBQjBBN0Q3RDFFRjNDN0NE MDJFODBCRUQ1ODM0MEJDLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4MTViYi8wL0QxODIwNzQ2 NkFCMEE3RDdEMUVGM0M3Q0QwMkU4MEJFRDU4MzQwQkMuY2VyMIIBPwYIKwYBBQUH AQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS82YmU0M2Q5ZS1lNDQwLTQ3YWUtYTdiYy0xOWI3 OTkzY2NmMTQvMy8wgYsGCCsGAQUFBzAKhn9yc3luYzovL3JzeW5jLnBhYXMucnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5LzZiZTQzZDllLWU0NDAtNDdhZS1hN2JjLTE5 Yjc5OTNjY2YxNC8zLzk3MzQxMjVEOURFMTQzMzMxQ0FBMzlDQTA2Q0I5MjhGMEE3 QjVFNTMubWZ0MDwGCCsGAQUFBzANhjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJp cGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAyoLTgcQMA0GCSqGSIb3DQEB CwUAA4IBAQBsrup8wTUiNIrOgsN9B/Pmi4ery6HC49oySxLXQNgYpufnK9O52znA 1D6pXDH5YAmmmvB16OCjrmIy7PPQvuvdRS+VAIXNMQoa/QiebfpMYJQJghjhwogZ 8S6ad0FDlhaSrzm8lz2MynD5fj5mshOTQZinhsqfzxHcLOy10XM4uSPps+rBmkWx 9PLWX8M4TKJd1o6ggHfrvz/btFNwyOCT+BPuw5JSBE4hu6X98y6bwaLWSO4u7z2S n/B3/uPfWjqpi4p4fXxeeWJQU8vajGBGkxGreKxo0eQMiOuGfMCDrfBIuGaV2/Wj BwdZ+Z2fdnU0asTj9FbUCC+sJ9qyS9WI -----END CERTIFICATE-----Generated at Sun Nov 24 08:05:56 2024 by rpki-client on console-fra.rpki-client.org