$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.cer File: 1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.cer (raw, json) Hash identifier: yioRfxeojsiB0PF2vOWWSvdQ7JcA3BgzF1GAj6FNGkI= Subject key identifier: 1D:A3:1F:62:E9:7F:E6:A2:A3:8D:8F:39:84:FE:D6:E3:13:D1:BC:40 Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 5D6AF32471C7FA31F2C99E0546F2980D60815552 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 06 Sep 2024 22:08:27 +0000 Certificate not after: Fri 05 Sep 2025 22:13:27 +0000 Subordinate resources: IP: 2a09:54c6:e000::/36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Sep 2024 07:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:6a:f3:24:71:c7:fa:31:f2:c9:9e:05:46:f2:98:0d:60:81:55:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Sep 6 22:08:27 2024 GMT Not After : Sep 5 22:13:27 2025 GMT Subject: CN=1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ad:aa:b4:41:3b:dd:95:61:36:db:ef:ed:da: f3:fd:79:cc:cc:52:08:b0:17:02:77:32:31:d3:f1: 82:dd:f2:f8:69:74:f1:df:4f:ed:22:48:2e:18:76: f8:af:e5:24:af:ee:3d:8f:01:a1:de:80:7d:4b:21: 25:a5:7b:72:bf:54:34:cd:e0:24:34:e3:e9:0a:7b: d2:2c:a8:37:9d:3e:af:8d:9f:0b:a0:6c:d3:62:91: 47:e5:79:e2:66:8a:b0:67:0d:12:6f:60:25:bc:2b: d9:85:e7:b5:f1:c7:f6:82:8f:ca:59:4a:5d:46:df: 24:e8:a1:5e:86:60:54:93:90:39:ad:39:30:6e:2e: 49:69:0b:0d:80:73:ae:b8:ec:d2:91:76:2c:53:dd: 09:e6:4f:07:7f:3b:ec:a8:fb:66:29:94:dc:f4:f9: 85:81:e5:ba:b8:98:67:44:6d:aa:de:9a:22:83:90: 23:7d:68:7c:4b:46:d4:e4:a4:21:62:c6:e3:6f:ec: 4b:df:42:a3:a9:c6:79:67:85:38:39:c5:3c:66:62: 04:c2:9b:7b:48:2a:69:65:e0:61:b8:8c:3d:7c:1f: 08:23:c5:6b:a1:dc:e7:ce:6e:0f:fd:c7:f3:63:32: 9c:4f:15:54:94:c9:54:f4:e2:4a:81:5a:9a:32:4a: 66:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1D:A3:1F:62:E9:7F:E6:A2:A3:8D:8F:39:84:FE:D6:E3:13:D1:BC:40 X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c6:e000::/36 Signature Algorithm: sha256WithRSAEncryption 2f:a6:39:a7:91:e2:ea:1f:34:12:fb:63:41:2f:eb:43:1a:35: ab:b1:5c:81:61:19:e7:9c:44:96:80:0a:8d:01:a3:99:92:ee: db:e0:bf:a6:b5:43:55:4d:e3:c3:e1:f2:c5:4c:52:85:d6:c5: 93:92:1d:2b:b8:e0:05:89:94:36:17:d1:93:0b:1f:1d:bf:da: 5a:0b:90:58:63:db:b4:c5:81:a8:21:56:e6:5b:95:a9:9d:58: d2:64:de:30:f9:ef:9d:52:bf:7d:ec:86:7c:1b:86:78:10:3a: a7:1d:52:a3:01:3f:9e:b9:14:1e:94:04:8d:e2:36:25:62:65: f8:30:3d:02:46:9c:ae:10:b2:5e:02:c9:2e:61:1d:08:ec:01: c4:aa:fe:b2:05:94:23:98:fc:c3:02:c5:8e:a4:13:28:c9:12: 12:a2:09:ec:14:99:2d:3d:7a:48:32:e5:83:68:8c:36:99:15: 21:cf:11:bc:1a:a2:56:99:56:5e:70:10:d1:63:89:88:52:c3: 4d:55:1c:44:8c:d3:dd:ad:b1:dc:e1:1c:b9:ef:c8:ff:0a:a7: 6a:dc:2f:4d:58:26:e9:2a:93:20:4c:2e:41:09:51:4a:3d:18: 4d:bf:5b:63:09:d3:b0:33:d0:dd:4c:c4:74:83:1e:21:be:d2: 03:74:90:0f -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgIUXWrzJHHH+jHyyZ4FRvKYDWCBVVIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDA5MDYyMjA4MjdaFw0yNTA5MDUyMjEzMjdaMDMxMTAvBgNV BAMTKDFEQTMxRjYyRTk3RkU2QTJBMzhEOEYzOTg0RkVENkUzMTNEMUJDNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrraq0QTvdlWE22+/t2vP9eczM UgiwFwJ3MjHT8YLd8vhpdPHfT+0iSC4Ydviv5SSv7j2PAaHegH1LISWle3K/VDTN 4CQ04+kKe9IsqDedPq+NnwugbNNikUfleeJmirBnDRJvYCW8K9mF57Xxx/aCj8pZ Sl1G3yTooV6GYFSTkDmtOTBuLklpCw2Ac6647NKRdixT3QnmTwd/O+yo+2YplNz0 +YWB5bq4mGdEbaremiKDkCN9aHxLRtTkpCFixuNv7EvfQqOpxnlnhTg5xTxmYgTC m3tIKmll4GG4jD18HwgjxWuh3OfObg/9x/NjMpxPFVSUyVT04kqBWpoySmbDAgMB AAGjggMTMIIDDzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQdox9i6X/moqON jzmE/tbjE9G8QDAfBgNVHSMEGDAWgBRXqXRv5UPrPqDUSVNCRMk/yI+FAzAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC81N0E5NzQ2RkU1NDNFQjNFQTBENDQ5NTM0 MjQ0QzkzRkM4OEY4NTAzLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi81N0E5NzQ2RkU1NDNFQjNFQTBE NDQ5NTM0MjQ0QzkzRkM4OEY4NTAzLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvOTU2NjQ0M2ItZGZmNC00ZDEzLWJiODEtNzJjODYzMGQ2ZGY2LzEv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS85NTY2NDQzYi1kZmY0LTRkMTMtYmI4MS03MmM4NjMwZDZkZjYv MS8xREEzMUY2MkU5N0ZFNkEyQTM4RDhGMzk4NEZFRDZFMzEzRDFCQzQwLm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQqCVTG4DANBgkqhkiG9w0BAQsFAAOCAQEAL6Y5 p5Hi6h80EvtjQS/rQxo1q7FcgWEZ55xEloAKjQGjmZLu2+C/prVDVU3jw+HyxUxS hdbFk5IdK7jgBYmUNhfRkwsfHb/aWguQWGPbtMWBqCFW5luVqZ1Y0mTeMPnvnVK/ feyGfBuGeBA6px1SowE/nrkUHpQEjeI2JWJl+DA9AkacrhCyXgLJLmEdCOwBxKr+ sgWUI5j8wwLFjqQTKMkSEqIJ7BSZLT16SDLlg2iMNpkVIc8RvBqiVplWXnAQ0WOJ iFLDTVUcRIzT3a2x3OEcue/I/wqnatwvTVgm6SqTIEwuQQlRSj0YTb9bYwnTsDPQ 3UzEdIMeIb7SA3SQDw== -----END CERTIFICATE-----Generated at Thu Sep 19 21:35:24 2024 by rpki-client on console-fra.rpki-client.org