$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/3073BED8ADF785ABB31D49FB9E84FDB524550720.cer File: 3073BED8ADF785ABB31D49FB9E84FDB524550720.cer (raw, json) Hash identifier: c/calO8JIaWGmJUZVb8xDJoSaoDcIUHu5y4LhMkubV0= Subject key identifier: 30:73:BE:D8:AD:F7:85:AB:B3:1D:49:FB:9E:84:FD:B5:24:55:07:20 Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 11A7BE62FC6B35DB5D872B9472B6FFDD90752283 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Manifest: rsync://rpki.xa.wiki/repo/AXNETS-CA/1/3073BED8ADF785ABB31D49FB9E84FDB524550720.mft caRepository: rsync://rpki.xa.wiki/repo/AXNETS-CA/1/ Notify URL: https://rpki.xa.wiki/rrdp/notification.xml Certificate not before: Thu 19 Sep 2024 13:06:46 +0000 Certificate not after: Thu 18 Sep 2025 13:11:46 +0000 Subordinate resources: IP: 2a0a:6044:7a00::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 03:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:a7:be:62:fc:6b:35:db:5d:87:2b:94:72:b6:ff:dd:90:75:22:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Sep 19 13:06:46 2024 GMT Not After : Sep 18 13:11:46 2025 GMT Subject: CN=3073BED8ADF785ABB31D49FB9E84FDB524550720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:29:30:df:19:25:f1:e1:d7:b7:6e:42:ee:59: 34:09:07:4d:41:82:46:7c:5a:4d:ca:6f:ef:d4:00: a9:d1:d5:4e:49:a8:d9:35:37:a2:44:59:b2:d5:c0: dc:3b:20:4d:ed:58:01:4b:c9:56:39:68:05:71:a9: 07:62:57:2d:18:d3:ce:d6:67:b8:c2:65:f9:a0:76: 50:99:d5:f0:3b:2e:c9:a0:ee:93:a5:76:f8:49:4d: 7b:dc:d3:b2:f5:0d:a8:f5:1b:1a:b3:d4:2f:b1:19: a5:55:b5:48:6f:08:27:cf:6d:8c:23:14:a0:eb:ad: 38:ab:34:74:28:fb:ba:71:33:c7:9c:d4:c9:bd:fc: 05:b0:1b:4c:be:6d:f1:53:ff:89:d4:ab:2a:ca:fb: 28:b3:38:fb:8e:f2:a3:86:4f:56:65:35:0b:9b:b5: 70:b1:27:2a:74:00:5c:94:d0:24:92:92:54:89:da: d3:d7:aa:8c:52:01:f0:55:de:e0:b9:e4:a0:d1:97: 9a:bc:ea:c2:a6:4b:55:bd:2e:1d:e2:61:77:88:d1: b4:be:7e:e7:cb:7c:22:fe:4f:22:54:5f:51:58:04: f5:f2:aa:e4:9e:a6:0f:ac:e0:2c:5e:28:6a:a1:0c: 32:3c:65:0c:ee:73:48:b5:02:a6:42:2d:1a:79:8d: 80:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 30:73:BE:D8:AD:F7:85:AB:B3:1D:49:FB:9E:84:FD:B5:24:55:07:20 X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: CA Repository - URI:rsync://rpki.xa.wiki/repo/AXNETS-CA/1/ RPKI Manifest - URI:rsync://rpki.xa.wiki/repo/AXNETS-CA/1/3073BED8ADF785ABB31D49FB9E84FDB524550720.mft RPKI Notify - URI:https://rpki.xa.wiki/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:7a00::/40 Signature Algorithm: sha256WithRSAEncryption 02:ad:76:ed:fc:b9:6b:17:ab:e7:2e:4f:a7:f8:1b:60:3f:21: 30:a4:02:b9:ea:cc:77:99:20:c0:9b:0c:b1:4d:45:37:50:3b: 8a:ce:bd:7d:fc:37:98:fb:4f:dd:69:cb:45:f2:93:c6:93:58: 2b:5c:09:fb:22:58:f2:08:a7:9b:51:04:28:46:a2:51:32:42: fb:90:90:df:eb:ed:3a:13:0d:66:e1:86:00:17:8e:89:39:00: 16:df:50:4f:52:8b:90:99:8d:57:09:1b:2f:92:3b:b4:72:9d: 40:0b:e0:73:b4:b9:46:d2:6f:34:74:92:c3:16:7b:68:d5:1c: 85:f4:75:82:fa:bd:0e:fd:2d:33:cd:93:ac:b1:d4:e9:44:dc: 0d:d6:2d:5e:e8:b3:f2:91:d8:fb:57:65:04:66:d0:c7:cb:65: 82:29:ae:ae:11:5c:93:c7:34:da:0e:20:ec:fc:0f:cf:66:2e: 51:10:37:35:c3:fa:61:da:34:74:40:d4:07:0e:84:c6:bf:a5: 31:68:71:71:d8:f9:09:e1:7b:be:6f:80:bf:be:26:da:34:e4: d9:65:aa:3e:cd:00:3f:a9:eb:7f:53:2c:44:a4:71:39:e9:79: 69:e4:0a:85:e7:b9:54:0b:f8:96:18:83:8d:80:68:ff:ef:64: f0:58:64:da -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgIUEae+YvxrNdtdhyuUcrb/3ZB1IoMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDA5MTkxMzA2NDZaFw0yNTA5MTgxMzExNDZaMDMxMTAvBgNV BAMTKDMwNzNCRUQ4QURGNzg1QUJCMzFENDlGQjlFODRGREI1MjQ1NTA3MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0KTDfGSXx4de3bkLuWTQJB01B gkZ8Wk3Kb+/UAKnR1U5JqNk1N6JEWbLVwNw7IE3tWAFLyVY5aAVxqQdiVy0Y087W Z7jCZfmgdlCZ1fA7Lsmg7pOldvhJTXvc07L1Daj1Gxqz1C+xGaVVtUhvCCfPbYwj FKDrrTirNHQo+7pxM8ec1Mm9/AWwG0y+bfFT/4nUqyrK+yizOPuO8qOGT1ZlNQub tXCxJyp0AFyU0CSSklSJ2tPXqoxSAfBV3uC55KDRl5q86sKmS1W9Lh3iYXeI0bS+ fufLfCL+TyJUX1FYBPXyquSepg+s4CxeKGqhDDI8ZQzuc0i1AqZCLRp5jYDVAgMB AAGjggKvMIICqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQwc77YrfeFq7Md SfuehP21JFUHIDAfBgNVHSMEGDAWgBRXqXRv5UPrPqDUSVNCRMk/yI+FAzAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC81N0E5NzQ2RkU1NDNFQjNFQTBENDQ5NTM0 MjQ0QzkzRkM4OEY4NTAzLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi81N0E5NzQ2RkU1NDNFQjNFQTBE NDQ5NTM0MjQ0QzkzRkM4OEY4NTAzLmNlcjCB3AYIKwYBBQUHAQsEgc8wgcwwMgYI KwYBBQUHMAWGJnJzeW5jOi8vcnBraS54YS53aWtpL3JlcG8vQVhORVRTLUNBLzEv MF4GCCsGAQUFBzAKhlJyc3luYzovL3Jwa2kueGEud2lraS9yZXBvL0FYTkVUUy1D QS8xLzMwNzNCRUQ4QURGNzg1QUJCMzFENDlGQjlFODRGREI1MjQ1NTA3MjAubWZ0 MDYGCCsGAQUFBzANhipodHRwczovL3Jwa2kueGEud2lraS9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB /wQSMBAwDgQCAAIwCAMGACoKYER6MA0GCSqGSIb3DQEBCwUAA4IBAQACrXbt/Llr F6vnLk+n+BtgPyEwpAK56sx3mSDAmwyxTUU3UDuKzr19/DeY+0/dactF8pPGk1gr XAn7IljyCKebUQQoRqJRMkL7kJDf6+06Ew1m4YYAF46JOQAW31BPUouQmY1XCRsv kju0cp1AC+BztLlG0m80dJLDFnto1RyF9HWC+r0O/S0zzZOssdTpRNwN1i1e6LPy kdj7V2UEZtDHy2WCKa6uEVyTxzTaDiDs/A/PZi5REDc1w/ph2jR0QNQHDoTGv6Ux aHFx2PkJ4Xu+b4C/vibaNOTZZao+zQA/qet/UyxEpHE56Xlp5AqF57lUC/iWGION gGj/72TwWGTa -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:42 2024 by rpki-client on console-ams.rpki-client.org