$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/BE8A7AC02556C14368364036D5427F53187B6D9D.cer File: BE8A7AC02556C14368364036D5427F53187B6D9D.cer (raw, json) Hash identifier: DgZZLJZ9Eml763gunc/aU0nCab1SiHrkxw0oRdopVbY= Subject key identifier: BE:8A:7A:C0:25:56:C1:43:68:36:40:36:D5:42:7F:53:18:7B:6D:9D Authority key identifier: 84:71:38:B5:40:18:30:B8:9B:52:40:3C:77:77:18:BB:40:B2:B6:B5 Certificate issuer: /CN=847138B5401830B89B52403C777718BB40B2B6B5 Certificate serial: 60B349F4E037C9B872BADABF48F3C94EC26832FB Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/1/BE8A7AC02556C14368364036D5427F53187B6D9D.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 22 Jun 2024 02:34:35 +0000 Certificate not after: Sat 21 Jun 2025 02:39:35 +0000 Subordinate resources: IP: 2a05:dfc5::/39 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 26 Nov 2024 16:12:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:b3:49:f4:e0:37:c9:b8:72:ba:da:bf:48:f3:c9:4e:c2:68:32:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847138B5401830B89B52403C777718BB40B2B6B5 Validity Not Before: Jun 22 02:34:35 2024 GMT Not After : Jun 21 02:39:35 2025 GMT Subject: CN=BE8A7AC02556C14368364036D5427F53187B6D9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3e:c4:61:47:26:33:d8:d6:31:e7:58:2a:73: 3b:28:c9:30:63:a2:51:82:ce:5e:3e:a4:20:81:b0: 42:4d:2d:9b:7e:71:e2:cf:d4:73:53:af:4a:c8:88: ea:fb:1f:86:a4:14:ba:9b:89:4c:02:ea:58:f4:a3: f7:98:8b:a2:4f:d3:de:4e:bb:e0:e4:09:b6:8d:24: 40:04:e3:56:cb:6d:0f:42:cf:78:c7:e9:3a:59:65: e6:61:8c:18:e3:e7:52:76:ba:27:c6:05:77:a0:d0: 74:44:4e:c1:81:53:73:83:6a:b0:c2:a7:b6:74:a9: 09:2a:a7:9b:f7:41:da:eb:ed:dd:18:2e:5f:63:6c: ba:1d:e5:8f:79:bb:53:91:1d:cb:5e:f2:4d:6e:ab: 3a:1c:f6:e7:85:eb:10:a3:f3:b5:ad:5b:6c:f4:0d: 3e:0a:6e:4d:60:28:5c:ea:fa:bd:fb:ff:1b:a1:b4: d2:01:d2:d2:f6:91:21:89:e2:fa:5e:e2:da:d0:aa: 32:5f:18:68:60:a0:ec:18:55:07:23:17:24:50:92: 20:0e:1f:e9:c8:c3:4a:be:54:ab:c2:34:90:e7:3a: e9:3e:6e:77:86:1a:f5:38:bf:b8:07:4f:65:af:b5: 3f:27:4b:56:99:dc:c8:64:d8:bc:0f:6a:30:92:60: 70:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BE:8A:7A:C0:25:56:C1:43:68:36:40:36:D5:42:7F:53:18:7B:6D:9D X509v3 Authority Key Identifier: keyid:84:71:38:B5:40:18:30:B8:9B:52:40:3C:77:77:18:BB:40:B2:B6:B5 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/1/BE8A7AC02556C14368364036D5427F53187B6D9D.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc5::/39 Signature Algorithm: sha256WithRSAEncryption 4f:09:02:9e:27:94:db:c2:28:d1:b6:9e:44:2d:6d:51:f7:ca: 3b:16:8f:a5:6e:fa:45:5e:aa:25:a9:1c:1c:ed:93:c4:33:ab: 58:f8:ff:85:8b:c1:90:4f:4e:34:63:3f:54:3d:a5:e0:80:a6: 85:86:43:94:56:ce:06:f7:a3:7c:aa:d4:f2:e2:d3:8a:a9:f8: 2f:23:e1:e5:73:34:6c:e6:36:2e:a8:f6:99:d9:9c:0e:f0:53: 93:49:46:ac:46:c7:e4:a1:fa:ec:ee:13:47:69:19:a9:89:62: b6:3c:d1:4d:29:b0:07:87:7d:a0:e1:1c:ef:55:38:a5:6a:75: 64:4c:6a:ca:e0:84:82:46:52:de:86:0c:bc:82:84:b7:f0:40: b1:3b:ee:9e:b3:39:a2:e6:e5:2e:a5:42:5b:74:1a:c0:71:e8: 35:83:bc:32:0a:00:5a:1d:7c:9e:21:24:e8:ee:98:d6:db:b5: 07:0a:c1:ae:9e:46:9c:2f:61:e0:cc:e2:f9:39:bb:7f:12:d5: ce:b9:26:eb:c9:a4:c4:c9:f0:d8:22:21:90:e9:18:0c:e8:c4: 67:72:1a:7c:64:cd:33:61:0c:4f:d6:22:a4:56:a9:72:2e:8e: 1d:2a:bc:7c:04:0a:20:7a:81:3c:62:be:c4:04:a3:e3:f0:77: 6e:85:5a:74 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgIUYLNJ9OA3ybhyutq/SPPJTsJoMvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ3MTM4QjU0MDE4MzBCODlCNTI0MDNDNzc3NzE4QkI0 MEIyQjZCNTAeFw0yNDA2MjIwMjM0MzVaFw0yNTA2MjEwMjM5MzVaMDMxMTAvBgNV BAMTKEJFOEE3QUMwMjU1NkMxNDM2ODM2NDAzNkQ1NDI3RjUzMTg3QjZEOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuPsRhRyYz2NYx51gqczsoyTBj olGCzl4+pCCBsEJNLZt+ceLP1HNTr0rIiOr7H4akFLqbiUwC6lj0o/eYi6JP095O u+DkCbaNJEAE41bLbQ9Cz3jH6TpZZeZhjBjj51J2uifGBXeg0HRETsGBU3ODarDC p7Z0qQkqp5v3Qdrr7d0YLl9jbLod5Y95u1ORHcte8k1uqzoc9ueF6xCj87WtW2z0 DT4Kbk1gKFzq+r37/xuhtNIB0tL2kSGJ4vpe4trQqjJfGGhgoOwYVQcjFyRQkiAO H+nIw0q+VKvCNJDnOuk+bneGGvU4v7gHT2WvtT8nS1aZ3Mhk2LwPajCSYHA5AgMB AAGjggMTMIIDDzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS+inrAJVbBQ2g2 QDbVQn9TGHttnTAfBgNVHSMEGDAWgBSEcTi1QBgwuJtSQDx3dxi7QLK2tTAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03Mjc4LTQ2 Y2YtYWJkMS05OWNkMWZkMmJlNGUvNC84NDcxMzhCNTQwMTgzMEI4OUI1MjQwM0M3 Nzc3MThCQjQwQjJCNkI1LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi84NDcxMzhCNTQwMTgzMEI4OUI1 MjQwM0M3Nzc3MThCQjQwQjJCNkI1LmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvNjBiZThmN2ItZDQ0Yy00Y2EyLWJlYjMtMmRkNDFiYWVlODM3LzEv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS82MGJlOGY3Yi1kNDRjLTRjYTItYmViMy0yZGQ0MWJhZWU4Mzcv MS9CRThBN0FDMDI1NTZDMTQzNjgzNjQwMzZENTQyN0Y1MzE4N0I2RDlELm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgEqBd/FADANBgkqhkiG9w0BAQsFAAOCAQEATwkC nieU28Io0baeRC1tUffKOxaPpW76RV6qJakcHO2TxDOrWPj/hYvBkE9ONGM/VD2l 4ICmhYZDlFbOBvejfKrU8uLTiqn4LyPh5XM0bOY2Lqj2mdmcDvBTk0lGrEbH5KH6 7O4TR2kZqYlitjzRTSmwB4d9oOEc71U4pWp1ZExqyuCEgkZS3oYMvIKEt/BAsTvu nrM5oublLqVCW3QawHHoNYO8MgoAWh18niEk6O6Y1tu1BwrBrp5GnC9h4Mzi+Tm7 fxLVzrkm68mkxMnw2CIhkOkYDOjEZ3IafGTNM2EMT9YipFapci6OHSq8fAQKIHqB PGK+xASj4/B3boVadA== -----END CERTIFICATE-----Generated at Tue Nov 26 01:04:13 2024 by rpki-client on console-ams.rpki-client.org