$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/20F72F3CC9DF8FB0CAAB1063442537DE31C203A3.cer File: 20F72F3CC9DF8FB0CAAB1063442537DE31C203A3.cer (raw, json) Hash identifier: cGtQ0umFWFafSBE1F3jasPTZfy0tbKnw0VFJmzX67m8= Subject key identifier: 20:F7:2F:3C:C9:DF:8F:B0:CA:AB:10:63:44:25:37:DE:31:C2:03:A3 Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 7C634A00F16A993647D3A07EFDC7CF3C5D4C62A4 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/c8a98346-6073-4789-bd98-b376750a1301/1/20F72F3CC9DF8FB0CAAB1063442537DE31C203A3.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/c8a98346-6073-4789-bd98-b376750a1301/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Feb 2024 14:40:29 +0000 Certificate not after: Thu 30 Jan 2025 14:45:29 +0000 Subordinate resources: IP: 2a0a:6044:7800::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 16 Jun 2024 05:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:63:4a:00:f1:6a:99:36:47:d3:a0:7e:fd:c7:cf:3c:5d:4c:62:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Feb 1 14:40:29 2024 GMT Not After : Jan 30 14:45:29 2025 GMT Subject: CN=20F72F3CC9DF8FB0CAAB1063442537DE31C203A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:69:b6:c9:b4:fb:46:85:60:87:9f:f8:91:4c: d3:ff:85:e3:d3:78:06:a7:69:75:72:f2:e9:36:2e: 12:24:69:68:3c:72:a4:be:79:c5:57:01:c2:ae:8d: 8f:47:83:f6:b4:4a:62:12:af:31:02:50:e0:e1:3b: 85:fd:a2:5e:69:02:b4:0c:59:86:b4:37:0c:10:2b: 42:20:74:b2:6a:e4:85:1e:50:00:c1:54:40:6f:09: e5:29:1d:40:93:8b:57:a2:6b:83:09:ca:90:39:c5: b6:90:c2:b1:9c:e2:c1:aa:6a:7e:90:16:cd:9d:06: 65:c3:28:71:01:20:b2:83:c6:cf:07:65:51:a2:e8: fb:07:fb:39:05:8f:a0:7a:9f:9a:49:4b:8f:04:08: 3b:36:80:df:0d:f6:a8:1f:5a:be:f0:4f:17:e6:91: de:96:3a:19:e9:d8:18:54:7f:84:72:b1:b2:49:63: b0:13:31:d2:c7:aa:17:f2:18:7f:40:0b:de:a0:67: 92:6e:44:f5:06:a3:13:f3:90:9d:6a:8c:db:b8:df: fa:e2:64:d5:6f:b9:a0:94:f0:7a:db:ee:38:21:da: 11:7f:90:24:7c:eb:cc:74:75:66:ea:ca:e3:af:7c: 4b:a4:a4:cf:a1:15:8b:14:d6:44:a6:63:78:29:82: d5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 20:F7:2F:3C:C9:DF:8F:B0:CA:AB:10:63:44:25:37:DE:31:C2:03:A3 X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/c8a98346-6073-4789-bd98-b376750a1301/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/c8a98346-6073-4789-bd98-b376750a1301/1/20F72F3CC9DF8FB0CAAB1063442537DE31C203A3.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:7800::/40 Signature Algorithm: sha256WithRSAEncryption 5e:6a:12:03:86:c1:10:54:f5:fa:77:d1:3b:a1:84:25:23:7c: b4:0a:af:0c:d7:03:62:46:e6:3b:d4:18:2e:f1:3a:fc:74:29: 29:2d:e7:eb:e1:0a:3b:20:8b:36:21:85:92:b5:2f:31:30:9c: 88:34:4f:7b:41:c7:db:6e:be:0e:1c:78:c9:bd:62:07:da:ac: ab:68:a4:06:27:0f:6a:ee:71:da:9c:40:45:8c:3b:bf:6c:a8: 0e:e8:0f:d1:a1:6a:8a:d2:51:5e:d7:2d:2c:44:3a:b8:d2:20: 54:ba:eb:18:a9:69:2b:52:80:6c:78:2c:88:a9:50:d2:7e:f9: c5:d2:ef:ff:53:66:65:1b:52:7b:58:a0:d4:5a:1e:58:c1:77: e7:08:3e:d7:6b:33:a7:cc:36:28:49:32:3b:b1:cb:d7:e9:d0: f2:aa:cf:d3:44:84:bf:f2:8f:a8:ab:bd:a0:53:67:0e:76:77: 97:18:59:d7:9d:57:36:2a:de:f2:37:92:40:18:35:24:69:32: f4:bb:2a:4c:b1:55:0a:41:0b:4b:0a:a6:40:28:46:f1:97:eb: b2:7c:e1:dd:96:75:b4:01:e3:c7:a7:83:23:d1:53:7e:6e:b0: 88:6a:aa:ac:91:b8:52:4f:bf:e9:b0:8d:5f:e6:c8:89:a0:41: ad:76:96:a7 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgIUfGNKAPFqmTZH06B+/cfPPF1MYqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDAyMDExNDQwMjlaFw0yNTAxMzAxNDQ1MjlaMDMxMTAvBgNV BAMTKDIwRjcyRjNDQzlERjhGQjBDQUFCMTA2MzQ0MjUzN0RFMzFDMjAzQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjabbJtPtGhWCHn/iRTNP/hePT eAanaXVy8uk2LhIkaWg8cqS+ecVXAcKujY9Hg/a0SmISrzECUODhO4X9ol5pArQM WYa0NwwQK0IgdLJq5IUeUADBVEBvCeUpHUCTi1eia4MJypA5xbaQwrGc4sGqan6Q Fs2dBmXDKHEBILKDxs8HZVGi6PsH+zkFj6B6n5pJS48ECDs2gN8N9qgfWr7wTxfm kd6WOhnp2BhUf4RysbJJY7ATMdLHqhfyGH9AC96gZ5JuRPUGoxPzkJ1qjNu43/ri ZNVvuaCU8Hrb7jgh2hF/kCR868x0dWbqyuOvfEukpM+hFYsU1kSmY3gpgtVpAgMB AAGjggMTMIIDDzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQg9y88yd+PsMqr EGNEJTfeMcIDozAfBgNVHSMEGDAWgBRXqXRv5UPrPqDUSVNCRMk/yI+FAzAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC81N0E5NzQ2RkU1NDNFQjNFQTBENDQ5NTM0 MjQ0QzkzRkM4OEY4NTAzLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi81N0E5NzQ2RkU1NDNFQjNFQTBE NDQ5NTM0MjQ0QzkzRkM4OEY4NTAzLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvYzhhOTgzNDYtNjA3My00Nzg5LWJkOTgtYjM3Njc1MGExMzAxLzEv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9jOGE5ODM0Ni02MDczLTQ3ODktYmQ5OC1iMzc2NzUwYTEzMDEv MS8yMEY3MkYzQ0M5REY4RkIwQ0FBQjEwNjM0NDI1MzdERTMxQzIwM0EzLm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqCmBEeDANBgkqhkiG9w0BAQsFAAOCAQEAXmoS A4bBEFT1+nfRO6GEJSN8tAqvDNcDYkbmO9QYLvE6/HQpKS3n6+EKOyCLNiGFkrUv MTCciDRPe0HH226+Dhx4yb1iB9qsq2ikBicPau5x2pxARYw7v2yoDugP0aFqitJR XtctLEQ6uNIgVLrrGKlpK1KAbHgsiKlQ0n75xdLv/1NmZRtSe1ig1FoeWMF35wg+ 12szp8w2KEkyO7HL1+nQ8qrP00SEv/KPqKu9oFNnDnZ3lxhZ151XNire8jeSQBg1 JGky9LsqTLFVCkELSwqmQChG8Zfrsnzh3ZZ1tAHjx6eDI9FTfm6wiGqqrJG4Uk+/ 6bCNX+bIiaBBrXaWpw== -----END CERTIFICATE-----Generated at Sat Jun 15 13:43:32 2024 by rpki-client on console-fra.rpki-client.org