$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer File: 488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer (raw, json) Hash identifier: xLZd6Tw+aSE0gLaDMGWgm7bmv6cqL1JTva2K0yhTCu4= Subject key identifier: 48:8B:D8:6A:FD:B1:BE:23:8E:1E:3E:AD:E8:5A:05:20:B2:AF:66:DF Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 42493EA003CCCFBEAE1FE18E069607B4D81BB739 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 20 Jul 2024 13:06:57 +0000 Certificate not after: Sat 19 Jul 2025 13:11:57 +0000 Subordinate resources: IP: 2a0a:6044:9000::/36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:49:3e:a0:03:cc:cf:be:ae:1f:e1:8e:06:96:07:b4:d8:1b:b7:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Jul 20 13:06:57 2024 GMT Not After : Jul 19 13:11:57 2025 GMT Subject: CN=488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e9:e1:be:a7:5d:f9:ef:45:c5:55:7d:e7:d4: 9f:69:71:27:0a:23:62:60:4e:b4:6a:b3:87:7b:82: b3:90:e4:d8:36:bd:de:ea:0e:55:ea:25:5d:19:66: 23:46:d9:e2:64:35:22:87:99:cf:da:b5:81:52:62: 3a:98:9c:1e:2c:3f:df:d4:6a:b4:87:1f:f0:e1:59: e9:3e:f2:a9:e8:da:bf:b9:e3:0f:81:cd:d2:76:91: 41:98:00:65:06:bc:0c:8d:63:27:65:e2:37:bf:16: 61:be:ae:8c:a8:a7:bb:98:08:4e:38:f9:cf:a3:1d: ae:93:46:eb:39:56:5f:7d:d4:9f:63:ad:a8:8a:9a: e0:d3:9f:60:7c:32:ec:b6:ff:31:77:f6:0f:ec:99: 1a:7d:ab:f8:86:5d:65:0d:51:ac:3f:ed:dd:93:8e: 78:f2:92:d3:ca:89:78:19:be:18:26:ed:9a:30:de: 65:10:36:10:49:60:bc:b3:e4:34:1b:34:56:ba:3d: 94:f0:bc:d8:b8:29:e7:58:ab:12:4e:45:ec:3d:6e: 7d:2b:43:98:12:eb:7f:fd:fa:aa:06:5f:13:72:67: 17:96:fa:4d:24:d3:cc:5c:7d:21:07:13:5c:86:cf: df:38:16:d9:e1:e9:34:33:b4:5d:e9:37:d7:9b:88: 4e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 48:8B:D8:6A:FD:B1:BE:23:8E:1E:3E:AD:E8:5A:05:20:B2:AF:66:DF X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:9000::/36 Signature Algorithm: sha256WithRSAEncryption 28:a5:cb:e3:a4:d1:ac:a6:c1:c6:7d:35:7a:2f:be:38:57:47: ce:5e:33:20:f9:82:e5:4c:bc:f9:a6:53:ee:c7:39:99:08:41: ee:74:1b:e9:cb:74:58:da:95:17:de:96:45:ec:8f:de:68:3f: cf:48:61:31:8f:d4:40:00:31:3d:f0:f4:fc:b4:2d:74:ac:e6: d7:53:7b:26:cd:9d:48:a7:5b:f6:f6:fd:c1:19:1a:b1:a0:73: 84:3d:f7:b4:7b:eb:20:d9:c2:e9:4c:db:07:02:87:19:30:ed: a9:b3:78:de:0a:a8:84:3b:08:3f:74:3b:38:34:7a:97:78:eb: d2:b1:55:c5:14:6a:26:72:c7:fe:7a:91:79:84:4e:36:63:4a: 04:65:8a:dd:bc:ae:07:51:7c:cd:f5:0c:69:e4:df:14:dc:3d: c6:7d:39:7e:b2:17:b1:df:4f:e2:57:87:d0:99:18:ea:7a:40: 32:86:02:ad:1e:b4:9d:55:9c:39:2d:3e:3b:f7:fe:f4:1c:a6: ff:12:47:f1:21:fa:a2:c7:1b:0b:5e:83:0f:09:22:1b:8e:7c: 9d:4a:b6:8a:6a:74:5b:db:e0:f4:35:bc:c7:09:d1:40:9a:79: c4:5b:d2:b2:d0:b1:ce:9c:8d:e1:d3:e1:0b:6d:c2:5d:10:b7: 21:53:f0:31 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgIUQkk+oAPMz76uH+GOBpYHtNgbtzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDA3MjAxMzA2NTdaFw0yNTA3MTkxMzExNTdaMDMxMTAvBgNV BAMTKDQ4OEJEODZBRkRCMUJFMjM4RTFFM0VBREU4NUEwNTIwQjJBRjY2REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL6eG+p13570XFVX3n1J9pcScK I2JgTrRqs4d7grOQ5Ng2vd7qDlXqJV0ZZiNG2eJkNSKHmc/atYFSYjqYnB4sP9/U arSHH/DhWek+8qno2r+54w+BzdJ2kUGYAGUGvAyNYydl4je/FmG+royop7uYCE44 +c+jHa6TRus5Vl991J9jraiKmuDTn2B8Muy2/zF39g/smRp9q/iGXWUNUaw/7d2T jnjyktPKiXgZvhgm7Zow3mUQNhBJYLyz5DQbNFa6PZTwvNi4KedYqxJORew9bn0r Q5gS63/9+qoGXxNyZxeW+k0k08xcfSEHE1yGz984Ftnh6TQztF3pN9ebiE6HAgMB AAGjggMTMIIDDzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRIi9hq/bG+I44e Pq3oWgUgsq9m3zAfBgNVHSMEGDAWgBRXqXRv5UPrPqDUSVNCRMk/yI+FAzAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC81N0E5NzQ2RkU1NDNFQjNFQTBENDQ5NTM0 MjQ0QzkzRkM4OEY4NTAzLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi81N0E5NzQ2RkU1NDNFQjNFQTBE NDQ5NTM0MjQ0QzkzRkM4OEY4NTAzLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvZWNiMzAzMjItOTRmNy00ZTYxLTg2OTEtNWMxYjYxMWIwYTk1LzEv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9lY2IzMDMyMi05NGY3LTRlNjEtODY5MS01YzFiNjExYjBhOTUv MS80ODhCRDg2QUZEQjFCRTIzOEUxRTNFQURFODVBMDUyMEIyQUY2NkRGLm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQqCmBEkDANBgkqhkiG9w0BAQsFAAOCAQEAKKXL 46TRrKbBxn01ei++OFdHzl4zIPmC5Uy8+aZT7sc5mQhB7nQb6ct0WNqVF96WReyP 3mg/z0hhMY/UQAAxPfD0/LQtdKzm11N7Js2dSKdb9vb9wRkasaBzhD33tHvrINnC 6UzbBwKHGTDtqbN43gqohDsIP3Q7ODR6l3jr0rFVxRRqJnLH/nqReYRONmNKBGWK 3byuB1F8zfUMaeTfFNw9xn05frIXsd9P4leH0JkY6npAMoYCrR60nVWcOS0+O/f+ 9Bym/xJH8SH6oscbC16DDwkiG458nUq2imp0W9vg9DW8xwnRQJp5xFvSstCxzpyN 4dPhC23CXRC3IVPwMQ== -----END CERTIFICATE-----Generated at Thu Nov 21 19:35:15 2024 by rpki-client on console-ams.rpki-client.org