$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.cer File: 27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.cer (raw, json) Hash identifier: /BD8ZDVHNjrpSq1u3IQlLBEzydeqmgkwr7gIGPwN0uM= Subject key identifier: 27:E0:DB:0E:84:DF:3D:BA:F7:75:52:43:E1:14:FD:BD:A5:24:FF:D4 Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 2D57641A47020548A155F8A25ABC911A2CACC877 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/2/27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Wed 07 Aug 2024 11:40:55 +0000 Certificate not after: Wed 06 Aug 2025 11:45:55 +0000 Subordinate resources: IP: 2a0a:6044:7e00::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Sep 2024 07:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:57:64:1a:47:02:05:48:a1:55:f8:a2:5a:bc:91:1a:2c:ac:c8:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Aug 7 11:40:55 2024 GMT Not After : Aug 6 11:45:55 2025 GMT Subject: CN=27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:18:97:7b:8a:a9:2f:1c:b4:a7:78:0d:43:b1: c1:9b:b0:22:76:ac:05:3a:9a:62:8a:c9:f6:b1:06: 80:aa:84:8d:04:b3:0a:c2:6c:d3:03:f9:c2:4c:3f: 0e:c6:a3:3b:4d:1b:ff:a7:e9:81:5d:06:2e:dd:26: 73:b0:9d:6f:6e:ec:23:f4:7c:23:fe:70:9b:52:c4: e5:1a:d2:a9:56:6a:74:28:12:9c:88:ed:bc:81:b6: 9f:8c:e3:ff:7f:11:bc:28:fd:ed:d4:10:f3:82:f8: fc:c8:22:01:ba:41:7b:c3:79:71:69:24:71:4e:85: 65:f5:f2:2d:2d:a3:9c:e2:3a:ca:65:63:aa:f2:d7: bd:22:1d:aa:83:60:78:df:4d:f0:fb:00:8d:d5:87: 93:5b:62:22:34:5b:57:d1:7e:d0:d9:69:6f:5b:43: 00:cd:12:8e:2f:59:fe:71:bc:b3:ac:51:ba:92:09: 99:7a:1f:1d:a4:c8:0b:b4:68:90:6a:31:b5:82:69: cb:98:6e:cd:cb:9d:4a:0a:9a:5a:f2:5f:9c:73:9a: b1:25:1b:15:5a:e4:e7:eb:8c:56:2d:27:1a:74:2e: 51:3e:9a:c7:27:02:42:4c:75:e8:6a:fd:a7:7c:85: 50:7a:6b:9f:d9:fb:09:ae:04:aa:70:83:b7:13:e6: 50:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 27:E0:DB:0E:84:DF:3D:BA:F7:75:52:43:E1:14:FD:BD:A5:24:FF:D4 X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/2/27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:7e00::/40 Signature Algorithm: sha256WithRSAEncryption 96:aa:4a:f6:7d:70:c8:5a:72:b5:35:2e:56:20:5f:36:ec:d0: cb:00:61:39:31:2e:8a:bc:9c:ae:36:7f:2a:a1:15:45:37:69: cb:a2:47:51:ed:61:9e:dd:f4:97:86:62:9f:d1:a0:01:41:c7: 8a:b2:2d:6a:0c:74:f7:e3:54:49:66:69:22:3a:d9:26:60:c5: 6b:84:cb:67:a5:0b:cc:2e:6e:a8:a8:4a:89:46:fd:66:0a:d0: d4:f0:31:2f:9e:6f:35:f6:24:f5:d5:d8:bd:3a:ed:c3:76:0b: 6b:2d:aa:19:f1:3b:95:81:97:c6:f2:7a:7b:55:af:a5:88:e6: 75:42:b8:d4:9b:c4:25:ce:46:42:81:f4:18:ef:7b:9d:94:10: 32:4a:b1:46:4e:0b:51:f0:01:d6:dc:78:bc:89:ac:aa:ae:9c: d1:4d:e8:e3:87:9d:e9:97:59:f5:d2:b3:56:20:64:cd:d6:c4: 7f:cd:65:b4:b8:19:3d:f7:3b:e7:1d:ab:aa:30:e1:05:e4:3d: 33:c4:43:0f:e3:f7:f8:70:77:68:cc:30:95:91:0a:bf:c6:a3: 10:83:40:ce:48:46:ff:7c:5c:c4:81:75:87:17:d8:e1:1d:06: a1:cf:cf:36:d2:75:1b:de:84:76:ea:ca:0c:81:ce:00:9b:c9: 89:04:af:60 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgIULVdkGkcCBUihVfiiWryRGiysyHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDA4MDcxMTQwNTVaFw0yNTA4MDYxMTQ1NTVaMDMxMTAvBgNV BAMTKDI3RTBEQjBFODRERjNEQkFGNzc1NTI0M0UxMTRGREJEQTUyNEZGRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5GJd7iqkvHLSneA1DscGbsCJ2 rAU6mmKKyfaxBoCqhI0EswrCbNMD+cJMPw7GoztNG/+n6YFdBi7dJnOwnW9u7CP0 fCP+cJtSxOUa0qlWanQoEpyI7byBtp+M4/9/Ebwo/e3UEPOC+PzIIgG6QXvDeXFp JHFOhWX18i0to5ziOsplY6ry170iHaqDYHjfTfD7AI3Vh5NbYiI0W1fRftDZaW9b QwDNEo4vWf5xvLOsUbqSCZl6Hx2kyAu0aJBqMbWCacuYbs3LnUoKmlryX5xzmrEl GxVa5OfrjFYtJxp0LlE+mscnAkJMdehq/ad8hVB6a5/Z+wmuBKpwg7cT5lCJAgMB AAGjggMTMIIDDzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQn4NsOhN89uvd1 UkPhFP29pST/1DAfBgNVHSMEGDAWgBRXqXRv5UPrPqDUSVNCRMk/yI+FAzAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC81N0E5NzQ2RkU1NDNFQjNFQTBENDQ5NTM0 MjQ0QzkzRkM4OEY4NTAzLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi81N0E5NzQ2RkU1NDNFQjNFQTBE NDQ5NTM0MjQ0QzkzRkM4OEY4NTAzLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvZmVjYmM0MDQtYWM0My00NDliLThjN2UtOGYxZTk5ZDlhYzQ5LzIv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9mZWNiYzQwNC1hYzQzLTQ0OWItOGM3ZS04ZjFlOTlkOWFjNDkv Mi8yN0UwREIwRTg0REYzREJBRjc3NTUyNDNFMTE0RkRCREE1MjRGRkQ0Lm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqCmBEfjANBgkqhkiG9w0BAQsFAAOCAQEAlqpK 9n1wyFpytTUuViBfNuzQywBhOTEuirycrjZ/KqEVRTdpy6JHUe1hnt30l4Zin9Gg AUHHirItagx09+NUSWZpIjrZJmDFa4TLZ6ULzC5uqKhKiUb9ZgrQ1PAxL55vNfYk 9dXYvTrtw3YLay2qGfE7lYGXxvJ6e1WvpYjmdUK41JvEJc5GQoH0GO97nZQQMkqx Rk4LUfAB1tx4vImsqq6c0U3o44ed6ZdZ9dKzViBkzdbEf81ltLgZPfc75x2rqjDh BeQ9M8RDD+P3+HB3aMwwlZEKv8ajEINAzkhG/3xcxIF1hxfY4R0Goc/PNtJ1G96E durKDIHOAJvJiQSvYA== -----END CERTIFICATE-----Generated at Thu Sep 19 21:35:24 2024 by rpki-client on console-fra.rpki-client.org