$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/E8C9690FAC27EA3A350216F536D777F5F3E6DC0F.cer File: E8C9690FAC27EA3A350216F536D777F5F3E6DC0F.cer (raw, json) Hash identifier: P2eh8cJW4Rdo9h94sxh9k56/tOgLSpg5+Ea3Iioi6l8= Subject key identifier: E8:C9:69:0F:AC:27:EA:3A:35:02:16:F5:36:D7:77:F5:F3:E6:DC:0F Authority key identifier: D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC Certificate issuer: /CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC Certificate serial: 1537261A881FA93FCD2C32C8A35C72C7673B1260 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/E8C9690FAC27EA3A350216F536D777F5F3E6DC0F.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 14 Dec 2024 12:18:36 +0000 Certificate not after: Sat 13 Dec 2025 12:23:36 +0000 Subordinate resources: IP: 2a0b:4e07:3000::/36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Apr 2025 04:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:37:26:1a:88:1f:a9:3f:cd:2c:32:c8:a3:5c:72:c7:67:3b:12:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC Validity Not Before: Dec 14 12:18:36 2024 GMT Not After : Dec 13 12:23:36 2025 GMT Subject: CN=E8C9690FAC27EA3A350216F536D777F5F3E6DC0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:de:85:a7:a9:47:bd:34:a1:e6:34:69:5f:23: c3:ae:9e:db:79:8d:64:a4:a8:fd:47:8e:08:b1:a7: 8b:1e:4f:b8:96:96:13:9e:7f:1e:0e:8a:be:f5:55: 15:9a:6f:e8:f3:36:4a:7a:b9:fa:88:a5:78:0e:2f: 5e:d4:c2:98:b1:81:68:5c:0b:22:04:ea:a8:00:59: 8c:37:e4:42:b7:01:38:ec:51:72:7b:16:c7:7c:5a: 39:c8:23:16:48:11:5b:e6:c0:cd:c4:e9:aa:7c:92: 8f:73:ad:17:ca:e8:a3:76:b1:46:d2:ca:6c:5f:8e: 7a:74:ea:ff:56:c3:ff:70:c2:d5:95:b9:d3:d3:dd: 21:5b:38:0d:85:e7:22:9b:05:37:4b:7e:32:b1:fe: ab:1a:f2:6f:c3:76:da:44:4b:2a:4a:2c:b5:24:0f: 75:e6:9e:3f:da:3c:36:6b:1d:9f:04:ab:c8:f4:b4: 64:82:ba:31:34:a7:7e:7a:fd:ee:04:75:b9:c5:8c: d6:cd:5f:95:e1:1c:7b:d4:b9:28:96:ca:f2:9b:81: 91:79:ee:a2:0d:36:75:38:56:2c:5f:91:51:16:68: d5:75:76:62:50:44:4c:4e:a7:4c:36:c8:9f:64:4e: 95:49:ae:b0:4d:b5:aa:99:29:32:25:8f:8d:53:ba: 66:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E8:C9:69:0F:AC:27:EA:3A:35:02:16:F5:36:D7:77:F5:F3:E6:DC:0F X509v3 Authority Key Identifier: keyid:D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/E8C9690FAC27EA3A350216F536D777F5F3E6DC0F.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:3000::/36 Signature Algorithm: sha256WithRSAEncryption 75:e8:e2:06:a7:22:92:23:10:17:ba:0a:be:88:0d:27:21:94: 89:5f:c6:a3:0b:38:a7:50:5c:12:b0:4a:f5:b7:23:ad:82:fa: b2:68:66:1a:8e:a7:7f:87:f6:82:e1:fc:8e:82:01:38:e8:5b: eb:36:dd:21:46:a3:64:eb:2a:49:52:96:8e:b2:51:c4:81:b2: 3a:3b:b6:30:f1:52:80:20:7b:c6:ab:45:23:2b:f8:57:a0:5d: 72:5e:9e:e7:81:1d:44:9b:29:7e:32:fb:59:ba:20:b3:82:41: 11:e9:a9:e5:68:f8:e0:35:35:15:12:45:fe:a9:cf:e1:97:f1: 25:5a:8b:ea:36:6b:9f:0f:eb:46:1a:3c:08:52:c0:d6:57:b3: 20:6e:f8:52:21:7c:b0:b5:36:34:d4:49:4f:53:40:92:a2:c0: 8a:50:86:6e:d9:3f:e6:6d:b3:97:c7:0b:84:6c:0a:1d:9f:f0: 0f:7d:1c:8e:5a:1b:88:6a:fc:5f:17:c5:e8:f8:3e:50:b1:55: 46:aa:a1:b3:19:a9:2e:b8:ff:bb:18:b5:db:cb:f4:9c:23:e2: 50:9d:b6:ce:52:70:08:b0:dc:f2:5d:d0:a4:34:0f:9d:24:72: 61:fa:9f:f0:70:17:8b:01:b5:3c:a8:c6:c5:20:24:33:63:e8: de:2d:65:1a -----BEGIN CERTIFICATE----- MIIGFDCCBPygAwIBAgIUFTcmGogfqT/NLDLIo1xyx2c7EmAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE4MjA3NDY2QUIwQTdEN0QxRUYzQzdDRDAyRTgwQkVE NTgzNDBCQzAeFw0yNDEyMTQxMjE4MzZaFw0yNTEyMTMxMjIzMzZaMDMxMTAvBgNV BAMTKEU4Qzk2OTBGQUMyN0VBM0EzNTAyMTZGNTM2RDc3N0Y1RjNFNkRDMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB3oWnqUe9NKHmNGlfI8Ountt5 jWSkqP1Hjgixp4seT7iWlhOefx4Oir71VRWab+jzNkp6ufqIpXgOL17UwpixgWhc CyIE6qgAWYw35EK3ATjsUXJ7Fsd8WjnIIxZIEVvmwM3E6ap8ko9zrRfK6KN2sUbS ymxfjnp06v9Ww/9wwtWVudPT3SFbOA2F5yKbBTdLfjKx/qsa8m/DdtpESypKLLUk D3Xmnj/aPDZrHZ8Eq8j0tGSCujE0p356/e4EdbnFjNbNX5XhHHvUuSiWyvKbgZF5 7qINNnU4VixfkVEWaNV1dmJQRExOp0w2yJ9kTpVJrrBNtaqZKTIlj41TumZTAgMB AAGjggMeMIIDGjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBToyWkPrCfqOjUC FvU213f18+bcDzAfBgNVHSMEGDAWgBTRggdGarCn19HvPHzQLoC+1YNAvDAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wYzcwNDAxYy03ZjQxLTRh NmItOTQzNC1jYzgwZGNhMDkzZTYvMi9EMTgyMDc0NjZBQjBBN0Q3RDFFRjNDN0NE MDJFODBCRUQ1ODM0MEJDLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4MTViYi8wL0QxODIwNzQ2 NkFCMEE3RDdEMUVGM0M3Q0QwMkU4MEJFRDU4MzQwQkMuY2VyMIIBPwYIKwYBBQUH AQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS8yZjBkNGI0ZS05Zjc0LTRkZjQtYmY1ZS0wOTI5 MDk2ZGJlMDQvMS8wgYsGCCsGAQUFBzAKhn9yc3luYzovL3JzeW5jLnBhYXMucnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5LzJmMGQ0YjRlLTlmNzQtNGRmNC1iZjVlLTA5 MjkwOTZkYmUwNC8xL0U4Qzk2OTBGQUMyN0VBM0EzNTAyMTZGNTM2RDc3N0Y1RjNF NkRDMEYubWZ0MDwGCCsGAQUFBzANhjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJp cGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoLTgcwMA0GCSqGSIb3DQEB CwUAA4IBAQB16OIGpyKSIxAXugq+iA0nIZSJX8ajCzinUFwSsEr1tyOtgvqyaGYa jqd/h/aC4fyOggE46FvrNt0hRqNk6ypJUpaOslHEgbI6O7Yw8VKAIHvGq0UjK/hX oF1yXp7ngR1Emyl+MvtZuiCzgkER6anlaPjgNTUVEkX+qc/hl/ElWovqNmufD+tG GjwIUsDWV7MgbvhSIXywtTY01ElPU0CSosCKUIZu2T/mbbOXxwuEbAodn/APfRyO WhuIavxfF8Xo+D5QsVVGqqGzGakuuP+7GLXby/ScI+JQnbbOUnAIsNzyXdCkNA+d JHJh+p/wcBeLAbU8qMbFICQzY+jeLWUa -----END CERTIFICATE-----Generated at Sat Apr 5 13:20:14 2025 by rpki-client