$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/362BBACF6433B5D7341F52AE03A397A596DCE5C6.cer File: 362BBACF6433B5D7341F52AE03A397A596DCE5C6.cer (raw, json) Hash identifier: GBMFp5VvdhcYog7eblzzVXnp80IRT6O9Mggh0LgDBZ4= Subject key identifier: 36:2B:BA:CF:64:33:B5:D7:34:1F:52:AE:03:A3:97:A5:96:DC:E5:C6 Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 1D9B900F612B9349FAFE1E83507A7AC5776816CE Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/3ae9d6ba-6910-47c9-9b2b-209548ef531a/1/362BBACF6433B5D7341F52AE03A397A596DCE5C6.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/3ae9d6ba-6910-47c9-9b2b-209548ef531a/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Mon 29 Jul 2024 08:12:07 +0000 Certificate not after: Mon 28 Jul 2025 08:17:07 +0000 Subordinate resources: IP: 2a0a:6044:bf00::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 03:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:9b:90:0f:61:2b:93:49:fa:fe:1e:83:50:7a:7a:c5:77:68:16:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Jul 29 08:12:07 2024 GMT Not After : Jul 28 08:17:07 2025 GMT Subject: CN=362BBACF6433B5D7341F52AE03A397A596DCE5C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0b:b9:9f:2f:b4:2e:fd:29:f3:e2:35:78:63: 7c:12:34:4a:97:5c:e2:a0:00:5c:99:69:bc:fd:80: e5:fa:d5:a1:a4:99:9d:63:cb:1a:f6:da:bd:1d:ca: e0:49:53:d6:c4:82:a4:6c:91:c8:85:64:6a:15:12: 8d:5d:04:39:c1:ab:ed:96:f3:65:65:db:61:74:5a: 79:d2:76:8f:cb:fa:f9:f0:89:a1:37:55:8f:fd:96: 27:0b:ef:0e:2d:09:ce:08:d0:01:c5:44:ee:41:14: 10:42:ef:39:6c:86:b1:91:02:ad:65:90:bb:24:2c: 3e:8d:ad:06:c1:b4:28:f6:98:a8:65:9f:91:ce:7f: a9:60:58:f1:34:ed:05:bb:03:82:7d:f8:85:1a:40: 3e:df:dd:2d:9c:55:0e:10:b9:11:a7:89:64:19:25: 2a:09:f2:39:6f:33:3e:41:e0:6c:66:eb:7e:66:92: 48:51:46:29:01:70:85:42:49:bf:e3:54:8d:88:50: 96:03:69:66:3b:20:0d:9d:55:18:3a:aa:cf:4e:04: 34:c6:f2:33:3c:01:21:44:ed:7e:ef:38:84:84:37: f3:4a:43:29:81:0f:9b:13:f8:38:a4:a3:4f:d0:83: 65:99:b4:3c:92:a4:dd:7e:78:95:fd:4b:db:9c:d7: 34:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 36:2B:BA:CF:64:33:B5:D7:34:1F:52:AE:03:A3:97:A5:96:DC:E5:C6 X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3ae9d6ba-6910-47c9-9b2b-209548ef531a/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3ae9d6ba-6910-47c9-9b2b-209548ef531a/1/362BBACF6433B5D7341F52AE03A397A596DCE5C6.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:bf00::/40 Signature Algorithm: sha256WithRSAEncryption 21:03:0f:fd:cc:a5:fd:e5:f1:95:17:40:ec:a2:da:01:06:82: a5:4e:0f:cf:b8:79:59:1a:ec:bd:6a:ce:53:1f:81:78:8c:c5: a1:06:4e:fb:45:e7:69:4b:f9:1a:88:d0:66:45:64:6e:64:31: 58:91:c6:ea:43:d1:f0:96:4d:c1:d2:aa:d8:bc:33:64:3d:e1: 91:f2:d3:1a:e5:6e:cf:03:df:ef:c2:e3:99:9f:4e:bf:ec:84: c8:80:60:f1:4a:2a:44:2e:23:ce:b6:4d:17:43:29:3a:1a:4b: 6a:66:d5:9d:2c:a1:65:9e:fc:f9:8c:18:51:ec:5a:7d:e1:30: 52:fe:a6:7d:35:13:79:26:77:2d:ea:c5:96:c4:6c:01:81:6a: e9:6a:df:ee:80:0e:d6:7b:5a:dd:02:75:e4:16:55:43:1a:0f: fc:95:76:73:29:79:91:79:40:6d:d0:1f:af:a3:2a:67:84:77: 10:d7:7a:5b:16:8a:8d:44:b4:5e:1f:66:f0:00:c9:fc:3d:75: 78:be:84:ea:5e:68:3c:a3:3b:a6:15:3f:2d:e5:e7:ae:94:36: 35:c4:e1:2c:14:5e:d7:cf:70:a5:5a:a9:6f:d2:32:21:bc:5f: 07:eb:cd:8b:63:ef:49:f0:cb:5f:2b:bc:57:75:d8:42:92:03: 2e:f5:5b:77 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgIUHZuQD2Erk0n6/h6DUHp6xXdoFs4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDA3MjkwODEyMDdaFw0yNTA3MjgwODE3MDdaMDMxMTAvBgNV BAMTKDM2MkJCQUNGNjQzM0I1RDczNDFGNTJBRTAzQTM5N0E1OTZEQ0U1QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVC7mfL7Qu/Snz4jV4Y3wSNEqX XOKgAFyZabz9gOX61aGkmZ1jyxr22r0dyuBJU9bEgqRskciFZGoVEo1dBDnBq+2W 82Vl22F0WnnSdo/L+vnwiaE3VY/9licL7w4tCc4I0AHFRO5BFBBC7zlshrGRAq1l kLskLD6NrQbBtCj2mKhln5HOf6lgWPE07QW7A4J9+IUaQD7f3S2cVQ4QuRGniWQZ JSoJ8jlvMz5B4Gxm635mkkhRRikBcIVCSb/jVI2IUJYDaWY7IA2dVRg6qs9OBDTG 8jM8ASFE7X7vOISEN/NKQymBD5sT+Diko0/Qg2WZtDySpN1+eJX9S9uc1zSzAgMB AAGjggMTMIIDDzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ2K7rPZDO11zQf Uq4Do5elltzlxjAfBgNVHSMEGDAWgBRXqXRv5UPrPqDUSVNCRMk/yI+FAzAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC81N0E5NzQ2RkU1NDNFQjNFQTBENDQ5NTM0 MjQ0QzkzRkM4OEY4NTAzLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi81N0E5NzQ2RkU1NDNFQjNFQTBE NDQ5NTM0MjQ0QzkzRkM4OEY4NTAzLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvM2FlOWQ2YmEtNjkxMC00N2M5LTliMmItMjA5NTQ4ZWY1MzFhLzEv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS8zYWU5ZDZiYS02OTEwLTQ3YzktOWIyYi0yMDk1NDhlZjUzMWEv MS8zNjJCQkFDRjY0MzNCNUQ3MzQxRjUyQUUwM0EzOTdBNTk2RENFNUM2Lm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqCmBEvzANBgkqhkiG9w0BAQsFAAOCAQEAIQMP /cyl/eXxlRdA7KLaAQaCpU4Pz7h5WRrsvWrOUx+BeIzFoQZO+0XnaUv5GojQZkVk bmQxWJHG6kPR8JZNwdKq2LwzZD3hkfLTGuVuzwPf78LjmZ9Ov+yEyIBg8UoqRC4j zrZNF0MpOhpLambVnSyhZZ78+YwYUexafeEwUv6mfTUTeSZ3LerFlsRsAYFq6Wrf 7oAO1nta3QJ15BZVQxoP/JV2cyl5kXlAbdAfr6MqZ4R3ENd6WxaKjUS0Xh9m8ADJ /D11eL6E6l5oPKM7phU/LeXnrpQ2NcThLBRe189wpVqpb9IyIbxfB+vNi2PvSfDL Xyu8V3XYQpIDLvVbdw== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:42 2024 by rpki-client on console-ams.rpki-client.org