$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer File: 1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer (raw, json) Hash identifier: b+cCmbOUX9JsdswTaFhbfN/jG8FhMT5GYkjbAacSmt8= Subject key identifier: 13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 5F2F36B79C3C0436DCA5B43907C4AF572E0004A2 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 12 Jul 2024 14:57:18 +0000 Certificate not after: Fri 11 Jul 2025 15:02:18 +0000 Subordinate resources: IP: 2a0a:6044:a500::/40 IP: 2a0a:6044:bb00::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Sep 2024 13:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:2f:36:b7:9c:3c:04:36:dc:a5:b4:39:07:c4:af:57:2e:00:04:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Jul 12 14:57:18 2024 GMT Not After : Jul 11 15:02:18 2025 GMT Subject: CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d9:51:2c:c1:ed:01:4d:40:4d:df:58:fc:0e: d2:31:c2:7a:06:bd:1c:7e:b7:ca:2d:96:f1:15:86: b2:f6:c6:ae:31:c0:4e:0f:46:65:72:4e:f4:1f:1d: fb:45:09:cf:8b:25:71:c2:e9:d6:c1:c6:06:b6:9d: bf:df:89:27:81:fa:16:c4:06:81:b9:ee:19:c1:91: e9:5c:88:c4:ee:18:3c:a7:5d:9d:28:63:23:99:c2: c3:22:01:69:54:56:b9:14:bc:2f:ea:83:08:d2:66: 64:f5:bb:d9:f9:b8:08:be:3b:d6:b1:93:62:03:84: 18:85:f0:9d:8e:18:24:8f:8d:38:11:6f:ae:1b:0d: de:7f:98:f4:32:86:c5:fb:db:54:1d:4f:a6:16:1f: dd:db:04:c5:3b:a7:35:ac:b4:16:d0:92:ee:4a:8a: 98:23:b7:f5:81:e7:c0:14:7c:d6:b5:82:00:00:33: c8:8f:4d:d0:16:3a:07:ff:35:0b:14:53:53:33:52: a0:e5:3c:3a:f2:f8:8c:90:e7:80:dc:ff:68:a9:f3: 27:8c:c2:fb:1b:ae:25:1f:ba:4e:cb:40:63:c4:66: d0:07:1c:5d:e7:4e:8c:30:a8:0d:98:c7:47:ad:1c: e3:2a:2b:73:66:4b:29:11:37:ce:7b:70:ae:fd:9e: 47:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:a500::/40 2a0a:6044:bb00::/40 Signature Algorithm: sha256WithRSAEncryption 0d:63:b1:24:1f:a5:c9:bb:61:49:90:6c:01:e1:6f:2d:f5:ed: 43:97:05:69:47:70:9b:fa:f9:3f:45:88:7f:71:c2:28:9f:35: 7f:29:62:f5:13:db:90:62:1b:90:67:19:c2:b9:b0:d6:85:4a: 6d:2f:ec:f8:45:14:94:1b:05:11:ad:58:24:b6:7f:43:3e:8e: df:50:03:84:52:03:18:5a:f7:9e:96:34:2b:f7:e7:e9:c5:be: 60:82:0d:bd:56:48:b1:00:a7:28:f4:47:c8:95:fc:9f:ca:47: fa:8b:59:be:b7:6c:83:e3:1e:f2:75:42:e8:26:c4:a2:fc:59: a2:15:54:29:53:4e:38:de:3d:8d:87:9c:8d:13:40:6c:31:40: 0b:da:9c:1b:da:6a:af:bf:fc:fb:e3:a4:2c:ae:a2:9a:fb:9d: f1:1b:2d:ea:a7:d6:56:8d:e5:67:03:8e:1f:a2:9e:41:be:c5: d2:2e:93:0f:f0:0e:33:04:81:1d:05:d4:40:58:33:3b:c9:5a: 2b:01:7d:80:74:64:c0:01:ca:aa:9f:5f:b4:a3:0f:8d:16:ca: bd:f5:b8:f7:f2:98:8e:a8:5c:66:fb:fa:ec:d7:e1:b2:f3:fb: a6:02:ea:62:18:a9:79:35:42:3b:4f:ad:21:fe:5e:74:9f:d4: 20:25:81:20 -----BEGIN CERTIFICATE----- MIIGETCCBPmgAwIBAgIUXy82t5w8BDbcpbQ5B8SvVy4ABKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDA3MTIxNDU3MThaFw0yNTA3MTExNTAyMThaMDMxMTAvBgNV BAMTKDEzMDNCQjg4MDhGNzY2QjczRDU0NzNDRkE3Qjg4NEU5OEJDRkU5N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs2VEswe0BTUBN31j8DtIxwnoG vRx+t8otlvEVhrL2xq4xwE4PRmVyTvQfHftFCc+LJXHC6dbBxga2nb/fiSeB+hbE BoG57hnBkelciMTuGDynXZ0oYyOZwsMiAWlUVrkUvC/qgwjSZmT1u9n5uAi+O9ax k2IDhBiF8J2OGCSPjTgRb64bDd5/mPQyhsX721QdT6YWH93bBMU7pzWstBbQku5K ipgjt/WB58AUfNa1ggAAM8iPTdAWOgf/NQsUU1MzUqDlPDry+IyQ54Dc/2ip8yeM wvsbriUfuk7LQGPEZtAHHF3nTowwqA2Yx0etHOMqK3NmSykRN857cK79nkepAgMB AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQTA7uICPdmtz1U c8+nuITpi8/pfTAfBgNVHSMEGDAWgBRXqXRv5UPrPqDUSVNCRMk/yI+FAzAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC81N0E5NzQ2RkU1NDNFQjNFQTBENDQ5NTM0 MjQ0QzkzRkM4OEY4NTAzLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi81N0E5NzQ2RkU1NDNFQjNFQTBE NDQ5NTM0MjQ0QzkzRkM4OEY4NTAzLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFjOTEyLzEv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIv MS8xMzAzQkI4ODA4Rjc2NkI3M0Q1NDczQ0ZBN0I4ODRFOThCQ0ZFOTdELm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKQYIKwYBBQUH AQcBAf8EGjAYMBYEAgACMBADBgAqCmBEpQMGACoKYES7MA0GCSqGSIb3DQEBCwUA A4IBAQANY7EkH6XJu2FJkGwB4W8t9e1DlwVpR3Cb+vk/RYh/ccIonzV/KWL1E9uQ YhuQZxnCubDWhUptL+z4RRSUGwURrVgktn9DPo7fUAOEUgMYWveeljQr9+fpxb5g gg29VkixAKco9EfIlfyfykf6i1m+t2yD4x7ydULoJsSi/FmiFVQpU0443j2Nh5yN E0BsMUAL2pwb2mqvv/z746QsrqKa+53xGy3qp9ZWjeVnA44fop5BvsXSLpMP8A4z BIEdBdRAWDM7yVorAX2AdGTAAcqqn1+0ow+NFsq99bj38piOqFxm+/rs1+Gy8/um AupiGKl5NUI7T60h/l50n9QgJYEg -----END CERTIFICATE-----Generated at Fri Sep 20 00:00:19 2024 by rpki-client on console-ams.rpki-client.org