$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1928ED08371113BCA6F090EFF11C55CDEEE83A31.cer File: 1928ED08371113BCA6F090EFF11C55CDEEE83A31.cer (raw, json) Hash identifier: kiJ0XpccTcyOoSEZnv5xkUqfN9mXk3rT5XiR96USf4o= Subject key identifier: 19:28:ED:08:37:11:13:BC:A6:F0:90:EF:F1:1C:55:CD:EE:E8:3A:31 Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 3F177FE774AF2494B8A2284277296C75E113F579 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/1/1928ED08371113BCA6F090EFF11C55CDEEE83A31.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 22 Aug 2024 23:25:16 +0000 Certificate not after: Thu 21 Aug 2025 23:30:16 +0000 Subordinate resources: IP: 2a0a:6044:7f00::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Sep 2024 07:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:17:7f:e7:74:af:24:94:b8:a2:28:42:77:29:6c:75:e1:13:f5:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Aug 22 23:25:16 2024 GMT Not After : Aug 21 23:30:16 2025 GMT Subject: CN=1928ED08371113BCA6F090EFF11C55CDEEE83A31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e9:3c:7e:11:af:b6:07:ca:f5:88:0a:5d:9e: 60:5a:05:aa:fa:c5:aa:ef:0f:a4:17:ed:54:cf:c3: dc:c9:28:52:2e:65:bd:ba:de:64:cb:52:36:88:e2: 4a:d5:96:95:27:90:61:a7:f9:ca:63:a9:f6:a7:49: 75:75:a4:c5:84:54:36:de:d8:72:42:fa:7b:67:0c: 83:e1:a0:88:2e:6d:3f:14:81:28:22:f6:98:92:be: 1e:2b:ed:20:ab:24:9d:7d:ad:f7:d9:5d:b3:57:81: 6a:ea:ca:65:32:50:22:df:67:1a:af:3d:7e:8c:d1: 31:72:cb:15:fd:e6:d4:8c:51:27:e1:ba:c6:4a:0a: 4b:a3:64:8e:c3:56:e1:ea:ef:19:c4:76:92:13:e6: 6d:1f:25:5d:5c:54:2f:ba:c4:f4:43:ee:ac:ae:b3: e5:35:6d:32:eb:f1:1b:c1:26:7b:4f:56:03:99:19: b9:f9:90:9a:4a:20:86:fe:69:ad:91:28:8f:94:47: c5:28:9a:5f:e0:6c:e6:2a:a0:68:5c:4f:b6:e8:ef: da:9c:bc:ad:69:cb:f3:2d:ea:70:54:d4:d9:5c:63: 92:aa:fc:59:e5:65:24:c2:b8:73:7d:3a:1e:f1:f4: 43:c6:b0:fe:a5:eb:db:c2:84:f9:0e:ac:f9:29:2a: 1c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:28:ED:08:37:11:13:BC:A6:F0:90:EF:F1:1C:55:CD:EE:E8:3A:31 X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/1/1928ED08371113BCA6F090EFF11C55CDEEE83A31.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:7f00::/40 Signature Algorithm: sha256WithRSAEncryption 7a:7c:f1:ed:95:03:d2:33:67:81:ac:4f:8b:ec:ca:75:0a:c4: e1:99:d9:00:96:75:06:ae:ab:61:49:d5:a7:96:77:b5:a9:0a: b2:66:b4:a5:22:0c:23:76:2f:4d:e9:47:57:95:05:5a:e5:dc: 69:4e:54:3b:7e:fd:1e:5c:a1:8d:99:cd:cc:d2:7a:e7:fb:1e: 2c:7b:1d:8c:0f:e2:21:cc:fc:9f:34:c3:16:bf:41:25:ff:a9: e5:08:e5:1c:bd:9c:52:16:e7:e0:93:c8:9e:d1:74:52:2b:59: 07:92:b4:7c:ba:b8:5b:4a:c7:6d:40:bb:4e:7b:53:b3:24:d7: 15:62:04:59:0a:10:45:1f:45:2c:28:2c:0a:c0:b5:be:ed:3b: 7a:de:a5:1b:a6:a3:eb:6e:e0:71:8a:05:cb:83:29:27:a4:db: 09:7d:5e:95:8f:3a:1e:45:62:cb:21:35:9a:c7:30:60:ff:ce: 59:a3:8c:a0:52:33:18:99:e1:39:9a:00:34:31:73:96:0f:79: f7:50:ea:bc:f8:74:cd:4c:ee:7c:80:b5:8d:1e:58:34:25:7e: 65:92:80:e7:d8:6c:0b:11:77:36:14:34:b7:eb:8a:a6:31:3a: 9e:fe:8e:b6:02:19:79:7c:c4:27:9c:03:5a:fa:5c:05:05:6a: c0:c7:e0:ff -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgIUPxd/53SvJJS4oihCdylsdeET9XkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDA4MjIyMzI1MTZaFw0yNTA4MjEyMzMwMTZaMDMxMTAvBgNV BAMTKDE5MjhFRDA4MzcxMTEzQkNBNkYwOTBFRkYxMUM1NUNERUVFODNBMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC76Tx+Ea+2B8r1iApdnmBaBar6 xarvD6QX7VTPw9zJKFIuZb263mTLUjaI4krVlpUnkGGn+cpjqfanSXV1pMWEVDbe 2HJC+ntnDIPhoIgubT8UgSgi9piSvh4r7SCrJJ19rffZXbNXgWrqymUyUCLfZxqv PX6M0TFyyxX95tSMUSfhusZKCkujZI7DVuHq7xnEdpIT5m0fJV1cVC+6xPRD7qyu s+U1bTLr8RvBJntPVgOZGbn5kJpKIIb+aa2RKI+UR8Uoml/gbOYqoGhcT7bo79qc vK1py/Mt6nBU1NlcY5Kq/FnlZSTCuHN9Oh7x9EPGsP6l69vChPkOrPkpKhxpAgMB AAGjggMTMIIDDzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQZKO0INxETvKbw kO/xHFXN7ug6MTAfBgNVHSMEGDAWgBRXqXRv5UPrPqDUSVNCRMk/yI+FAzAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC81N0E5NzQ2RkU1NDNFQjNFQTBENDQ5NTM0 MjQ0QzkzRkM4OEY4NTAzLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi81N0E5NzQ2RkU1NDNFQjNFQTBE NDQ5NTM0MjQ0QzkzRkM4OEY4NTAzLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvZDg4Yjg1NGUtMDkyYy00ZDc5LWFjMDYtYWYzODBiMDhkMTJiLzEv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9kODhiODU0ZS0wOTJjLTRkNzktYWMwNi1hZjM4MGIwOGQxMmIv MS8xOTI4RUQwODM3MTExM0JDQTZGMDkwRUZGMTFDNTVDREVFRTgzQTMxLm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqCmBEfzANBgkqhkiG9w0BAQsFAAOCAQEAenzx 7ZUD0jNngaxPi+zKdQrE4ZnZAJZ1Bq6rYUnVp5Z3takKsma0pSIMI3YvTelHV5UF WuXcaU5UO379HlyhjZnNzNJ65/seLHsdjA/iIcz8nzTDFr9BJf+p5QjlHL2cUhbn 4JPIntF0UitZB5K0fLq4W0rHbUC7TntTsyTXFWIEWQoQRR9FLCgsCsC1vu07et6l G6aj627gcYoFy4MpJ6TbCX1elY86HkViyyE1mscwYP/OWaOMoFIzGJnhOZoANDFz lg9591DqvPh0zUzufIC1jR5YNCV+ZZKA59hsCxF3NhQ0t+uKpjE6nv6OtgIZeXzE J5wDWvpcBQVqwMfg/w== -----END CERTIFICATE-----Generated at Thu Sep 19 17:01:31 2024 by rpki-client on console-ams.rpki-client.org