$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296.cer File: 5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296.cer (raw, json) Hash identifier: 9Twc7zaSWrY4p14w/JQ6qmJtoN46F3eiMpEba+IUQCs= Subject key identifier: 5F:ED:2A:FC:A7:C9:FB:DE:AC:83:52:7A:15:BE:54:7D:7B:63:C2:96 Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 3E5EDAC8F5A616631F6C6448142075995C5AA97B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sun 11 Aug 2024 10:33:44 +0000 Certificate not after: Sun 10 Aug 2025 10:38:44 +0000 Subordinate resources: IP: 2a0a:6044:b300::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Sep 2024 07:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:5e:da:c8:f5:a6:16:63:1f:6c:64:48:14:20:75:99:5c:5a:a9:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Aug 11 10:33:44 2024 GMT Not After : Aug 10 10:38:44 2025 GMT Subject: CN=5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d3:f7:8e:52:77:d0:37:03:6a:6d:dd:98:e5: 8c:33:9f:f8:78:5e:05:97:fc:ca:d9:2c:0c:0a:ff: a7:0a:cf:0a:d8:c9:00:1b:57:b3:88:aa:14:20:a9: c8:ef:b5:27:b8:c4:57:f1:b8:f3:8b:14:9e:d5:09: 8f:29:5e:77:15:bc:a0:0e:ec:f9:31:90:18:47:69: 50:6f:79:86:28:ef:f1:b0:98:84:93:d7:d5:ef:36: e1:d5:b0:42:41:d1:a2:6c:0a:5f:d5:e6:d5:7c:0b: f0:27:77:33:86:44:dc:86:c4:9d:e0:e0:69:e4:65: e7:2f:02:b7:fd:13:60:85:3b:1f:c9:4f:85:db:17: 9c:d2:2f:08:e6:22:93:6b:a2:4a:5e:2f:d7:20:a6: 37:fd:1d:9c:fb:91:43:65:ab:58:e1:19:0f:7e:b7: a4:fd:25:91:a7:a0:ea:67:b7:b0:bc:db:6f:cf:36: ae:e7:86:f2:ff:83:e5:b2:fd:50:1d:f8:ed:7e:ab: 02:14:48:58:de:1e:c3:f2:16:be:0f:bb:a1:c1:6d: 58:d1:5d:d8:51:69:7a:24:7e:cb:e5:f7:92:e8:6f: 1d:5e:a5:ca:e2:66:e0:c8:be:1d:8b:d1:e4:c2:02: 69:4c:c8:3d:f1:9a:0b:57:f8:fd:1a:f1:1f:5a:74: fb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5F:ED:2A:FC:A7:C9:FB:DE:AC:83:52:7A:15:BE:54:7D:7B:63:C2:96 X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:b300::/40 Signature Algorithm: sha256WithRSAEncryption 78:f4:0e:34:eb:55:b6:89:c1:2d:8c:c3:67:b9:9f:e1:57:7f: 02:be:13:21:79:25:c5:0c:c7:b6:aa:b7:c1:81:9a:aa:d0:5a: 22:ef:5f:33:96:2a:e3:2d:98:25:77:a7:82:82:64:57:82:5c: 00:5a:94:70:20:eb:b6:d3:8f:d8:73:02:49:91:7f:81:4e:69: 02:ff:d2:d8:f7:90:cf:67:e1:9c:d5:4d:af:84:f1:e4:c1:3e: fe:9e:fe:55:f1:fa:75:8b:15:d5:a2:19:c1:06:6f:56:5e:73: fc:0d:5e:cf:74:b1:88:87:27:f5:06:fa:3a:4b:e8:e8:f4:8d: 3c:9c:64:ba:07:b5:f5:75:a9:9d:d3:81:73:fa:c3:c3:85:49: 5a:c2:c2:74:45:2c:58:82:c9:41:62:74:b7:66:1d:d1:20:a3: c9:d4:6a:a2:4d:e6:13:3b:ed:2b:27:be:38:cf:91:05:59:eb: 0b:8f:16:fc:69:d4:c7:36:6a:1e:44:60:90:39:0a:1d:ed:ff: 88:b9:2e:27:b4:e0:3e:27:13:ac:26:0c:76:5d:d9:75:0e:1d: ab:16:8d:45:e8:1e:8a:fd:64:0b:22:ea:d1:60:bc:5c:ff:f2: 64:07:00:7d:a9:a1:24:5e:46:6f:5b:4d:a3:68:13:bc:91:d7: 29:d7:a2:3a -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgIUPl7ayPWmFmMfbGRIFCB1mVxaqXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDA4MTExMDMzNDRaFw0yNTA4MTAxMDM4NDRaMDMxMTAvBgNV BAMTKDVGRUQyQUZDQTdDOUZCREVBQzgzNTI3QTE1QkU1NDdEN0I2M0MyOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu0/eOUnfQNwNqbd2Y5Ywzn/h4 XgWX/MrZLAwK/6cKzwrYyQAbV7OIqhQgqcjvtSe4xFfxuPOLFJ7VCY8pXncVvKAO 7PkxkBhHaVBveYYo7/GwmIST19XvNuHVsEJB0aJsCl/V5tV8C/AndzOGRNyGxJ3g 4GnkZecvArf9E2CFOx/JT4XbF5zSLwjmIpNrokpeL9cgpjf9HZz7kUNlq1jhGQ9+ t6T9JZGnoOpnt7C822/PNq7nhvL/g+Wy/VAd+O1+qwIUSFjeHsPyFr4Pu6HBbVjR XdhRaXokfsvl95Lobx1epcriZuDIvh2L0eTCAmlMyD3xmgtX+P0a8R9adPvnAgMB AAGjggMTMIIDDzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRf7Sr8p8n73qyD UnoVvlR9e2PCljAfBgNVHSMEGDAWgBRXqXRv5UPrPqDUSVNCRMk/yI+FAzAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC81N0E5NzQ2RkU1NDNFQjNFQTBENDQ5NTM0 MjQ0QzkzRkM4OEY4NTAzLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi81N0E5NzQ2RkU1NDNFQjNFQTBE NDQ5NTM0MjQ0QzkzRkM4OEY4NTAzLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvYjBjNzVkZjktNWI5Mi00OGMwLWJiZGEtYTQzYmQxOWVmN2QzLzEv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9iMGM3NWRmOS01YjkyLTQ4YzAtYmJkYS1hNDNiZDE5ZWY3ZDMv MS81RkVEMkFGQ0E3QzlGQkRFQUM4MzUyN0ExNUJFNTQ3RDdCNjNDMjk2Lm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqCmBEszANBgkqhkiG9w0BAQsFAAOCAQEAePQO NOtVtonBLYzDZ7mf4Vd/Ar4TIXklxQzHtqq3wYGaqtBaIu9fM5Yq4y2YJXengoJk V4JcAFqUcCDrttOP2HMCSZF/gU5pAv/S2PeQz2fhnNVNr4Tx5ME+/p7+VfH6dYsV 1aIZwQZvVl5z/A1ez3SxiIcn9Qb6Okvo6PSNPJxkuge19XWpndOBc/rDw4VJWsLC dEUsWILJQWJ0t2Yd0SCjydRqok3mEzvtKye+OM+RBVnrC48W/GnUxzZqHkRgkDkK He3/iLkuJ7TgPicTrCYMdl3ZdQ4dqxaNRegeiv1kCyLq0WC8XP/yZAcAfamhJF5G b1tNo2gTvJHXKdeiOg== -----END CERTIFICATE-----Generated at Thu Sep 19 13:12:07 2024 by rpki-client on console-ams.rpki-client.org